| Category | Package | Started | Completed | Duration | Options | Logs | ||||
|---|---|---|---|---|---|---|---|---|---|---|
| URL | edge | 2026-05-29 05:08:00 | 2026-05-29 05:11:52 | 232s |
|
|||||
| Reports | JSON | |||||||||
interactive=1
nohuman=yes
vnc_port=5910
2026-05-28 20:55:31,039 [root] INFO: Date set to: 20260529T05:08:06, timeout set to: 200
2026-05-29 05:08:06,015 [root] DEBUG: Starting analyzer from: C:\lpw_albt
2026-05-29 05:08:06,017 [root] DEBUG: Storing results at: C:\zDtLzmEP
2026-05-29 05:08:06,017 [root] DEBUG: Pipe server name: \\.\PIPE\IMxzQK
2026-05-29 05:08:06,017 [root] DEBUG: Python path: C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64
2026-05-29 05:08:06,017 [root] INFO: analysis running as an admin
2026-05-29 05:08:06,017 [root] INFO: analysis package specified: "edge"
2026-05-29 05:08:06,017 [root] DEBUG: importing analysis package module: "modules.packages.edge"...
2026-05-29 05:08:06,027 [root] DEBUG: imported analysis package "edge"
2026-05-29 05:08:06,031 [root] DEBUG: initializing analysis package "edge"...
2026-05-29 05:08:06,031 [root] DEBUG: New location of moved file: a
2026-05-29 05:08:06,032 [root] INFO: Analyzer: Package modules.packages.edge does not specify a dll option
2026-05-29 05:08:06,032 [root] INFO: Analyzer: Package modules.packages.edge does not specify a dll_64 option
2026-05-29 05:08:06,032 [root] INFO: Analyzer: Package modules.packages.edge does not specify a loader option
2026-05-29 05:08:06,032 [root] INFO: Analyzer: Package modules.packages.edge does not specify a loader_64 option
2026-05-29 05:08:06,100 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser"
2026-05-29 05:08:06,154 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig"
2026-05-29 05:08:06,176 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise"
2026-05-29 05:08:06,187 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human"
2026-05-29 05:08:06,214 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'
2026-05-29 05:08:06,215 [lib.api.screenshot] ERROR: No module named 'PIL'
2026-05-29 05:08:06,217 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots"
2026-05-29 05:08:06,219 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump"
2026-05-29 05:08:06,219 [root] DEBUG: Initialized auxiliary module "Browser"
2026-05-29 05:08:06,219 [root] DEBUG: attempting to configure 'Browser' from data
2026-05-29 05:08:06,220 [root] DEBUG: module Browser does not support data configuration, ignoring
2026-05-29 05:08:06,220 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"...
2026-05-29 05:08:06,220 [root] DEBUG: Started auxiliary module modules.auxiliary.browser
2026-05-29 05:08:06,220 [root] DEBUG: Initialized auxiliary module "DigiSig"
2026-05-29 05:08:06,221 [root] DEBUG: attempting to configure 'DigiSig' from data
2026-05-29 05:08:06,221 [root] DEBUG: module DigiSig does not support data configuration, ignoring
2026-05-29 05:08:06,221 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"...
2026-05-29 05:08:06,221 [modules.auxiliary.digisig] DEBUG: Skipping authenticode validation, analysis is not a file
2026-05-29 05:08:06,222 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig
2026-05-29 05:08:06,222 [root] DEBUG: Initialized auxiliary module "Disguise"
2026-05-29 05:08:06,222 [root] DEBUG: attempting to configure 'Disguise' from data
2026-05-29 05:08:06,223 [root] DEBUG: module Disguise does not support data configuration, ignoring
2026-05-29 05:08:06,223 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"...
2026-05-29 05:08:06,235 [modules.auxiliary.disguise] INFO: Launched background process notepad.exe hidden (PID: 8316)
2026-05-29 05:08:06,236 [modules.auxiliary.disguise] INFO: Disguising GUID to bbb2e3fe-8250-4191-b9a0-25fa3f6af8d7
2026-05-29 05:08:06,236 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise
2026-05-29 05:08:06,236 [root] DEBUG: Initialized auxiliary module "Human"
2026-05-29 05:08:06,236 [root] DEBUG: attempting to configure 'Human' from data
2026-05-29 05:08:06,237 [root] DEBUG: module Human does not support data configuration, ignoring
2026-05-29 05:08:06,237 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"...
2026-05-29 05:08:06,237 [root] DEBUG: Started auxiliary module modules.auxiliary.human
2026-05-29 05:08:06,237 [root] DEBUG: Initialized auxiliary module "Screenshots"
2026-05-29 05:08:06,238 [root] DEBUG: attempting to configure 'Screenshots' from data
2026-05-29 05:08:06,238 [root] DEBUG: module Screenshots does not support data configuration, ignoring
2026-05-29 05:08:06,238 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"...
2026-05-29 05:08:06,238 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled
2026-05-29 05:08:06,238 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots
2026-05-29 05:08:06,238 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets"
2026-05-29 05:08:06,239 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data
2026-05-29 05:08:06,239 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring
2026-05-29 05:08:06,239 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"...
2026-05-29 05:08:06,240 [modules.auxiliary.tlsdump] WARNING: Unable to find lsass.exe process
2026-05-29 05:08:06,240 [root] DEBUG: Started auxiliary module modules.auxiliary.tlsdump
2026-05-29 05:08:06,241 [root] INFO: Interactive mode enabled - injecting into explorer shell
2026-05-29 05:08:06,410 [lib.api.process] INFO: Monitor config for process 4484: C:\lpw_albt\dll\4484.ini
2026-05-29 05:08:06,414 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:06,417 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:06,459 [root] DEBUG: Loader: Injecting process 4484 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:06,638 [root] DEBUG: 4484: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:06,641 [root] DEBUG: 4484: Disabling sleep skipping.
2026-05-29 05:08:06,642 [root] DEBUG: 4484: Interactive desktop enabled.
2026-05-29 05:08:06,643 [root] DEBUG: 4484: Dropped file limit defaulting to 100.
2026-05-29 05:08:06,644 [root] DEBUG: 4484: Interactive desktop - injecting Explorer Shell
2026-05-29 05:08:06,651 [root] DEBUG: 4484: YaraInit: Compiled 44 rule files
2026-05-29 05:08:06,653 [root] DEBUG: 4484: YaraInit: Compiled rules saved to file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:06,681 [root] DEBUG: 4484: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:06,682 [root] DEBUG: 4484: YaraScan: Scanning 0x00007FF79BC10000, size 0x545316
2026-05-29 05:08:06,753 [root] DEBUG: 4484: Monitor initialised: 64-bit capemon loaded in process 4484 at 0x00007FFF17B00000, thread 3508, image base 0x00007FF79BC10000, stack from 0x0000000009051000-0x0000000009060000
2026-05-29 05:08:06,754 [root] DEBUG: 4484: Commandline: C:\Windows\Explorer.EXE
2026-05-29 05:08:06,780 [root] DEBUG: 4484: Hooked 69 out of 69 functions
2026-05-29 05:08:06,810 [root] DEBUG: 4484: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:06,817 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:08:06,818 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:06,819 [lib.api.process] INFO: Injected into 64-bit <Process 4484 explorer.exe>
2026-05-29 05:08:07,259 [root] DEBUG: 4484: caller_dispatch: Added region at 0x00007FF79BC10000 to tracked regions list (ntdll::NtCreateFile returns to 0x00007FF79BD27BE7, thread 4696).
2026-05-29 05:08:07,260 [root] DEBUG: 4484: YaraScan: Scanning 0x00007FF79BC10000, size 0x545316
2026-05-29 05:08:07,296 [root] DEBUG: 4484: ProcessImageBase: Main module image at 0x00007FF79BC10000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:09,476 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D370000: C:\Windows\system32\twext (0x33000 bytes).
2026-05-29 05:08:09,545 [lib.api.process] INFO: Monitor config for process 4484: C:\lpw_albt\dll\4484.ini
2026-05-29 05:08:09,546 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:09,636 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:09,642 [root] DEBUG: Loader: Injecting process 4484 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:09,643 [root] DEBUG: 4484: caller_dispatch: Added region at 0x00000000077C0000 to tracked regions list (ntdll::LdrLoadDll returns to 0x00000000077C0042, thread 5348).
2026-05-29 05:08:09,644 [root] DEBUG: 4484: DumpPEsInRange: Scanning range 0x00000000077C0000 - 0x00000000077C0133.
2026-05-29 05:08:09,644 [root] DEBUG: 4484: ScanForDisguisedPE: Size too small: 0x133 bytes
2026-05-29 05:08:09,660 [lib.common.results] INFO: Uploading file C:\zDtLzmEP\CAPE\4484_2640498929552026 to CAPE\fa5d111e170b95c81edb70885f19928146216b4748dde223f73c5bd6a58a4420; Size is 307; Max size: 100000000
2026-05-29 05:08:09,683 [root] DEBUG: 4484: DumpMemory: Payload successfully created: C:\zDtLzmEP\CAPE\4484_2640498929552026 (size 307 bytes)
2026-05-29 05:08:09,684 [root] DEBUG: 4484: DumpRegion: Dumped entire allocation from 0x00000000077C0000, size 4096 bytes.
2026-05-29 05:08:09,684 [root] DEBUG: 4484: ProcessTrackedRegion: Dumped region at 0x00000000077C0000.
2026-05-29 05:08:09,685 [root] DEBUG: 4484: YaraScan: Scanning 0x00000000077C0000, size 0x133
2026-05-29 05:08:09,685 [root] DEBUG: 4484: Monitor config - unrecognised key host-ip.
2026-05-29 05:08:09,687 [root] DEBUG: 4484: Monitor config - unrecognised key host-port.
2026-05-29 05:08:09,689 [root] DEBUG: 4484: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:09,690 [root] DEBUG: 4484: Dropped file limit defaulting to 100.
2026-05-29 05:08:09,712 [root] DEBUG: 4484: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:09,775 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:09,776 [root] DEBUG: 4484: set_hooks: Unable to hook LockResource
2026-05-29 05:08:09,817 [root] DEBUG: 4484: Hooked 627 out of 628 functions
2026-05-29 05:08:09,847 [root] INFO: Loaded monitor into process with pid 4484
2026-05-29 05:08:09,863 [root] DEBUG: Error 317 (0x13d) - InjectDllViaThread: RtlCreateUserThread injection failed: The system cannot find message text for message number 0x%1 in the message file for %2.
2026-05-29 05:08:09,864 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:11,558 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D370000: C:\Windows\system32\twext (0x33000 bytes).
2026-05-29 05:08:11,560 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D370000: C:\Windows\system32\twext (0x33000 bytes).
2026-05-29 05:08:11,857 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3BBD0000: C:\Windows\SYSTEM32\MsftEdit (0x34d000 bytes).
2026-05-29 05:08:11,858 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3BBD0000: C:\Windows\SYSTEM32\MsftEdit (0x34d000 bytes).
2026-05-29 05:08:11,923 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Program Files\Common Files\microsoft shared\ink\tiptsf (0xa9000 bytes).
2026-05-29 05:08:11,924 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Program Files\Common Files\microsoft shared\ink\tiptsf (0xa9000 bytes).
2026-05-29 05:08:11,977 [root] DEBUG: 4484: DLL loaded at 0x0000000012AE0000: C:\Windows\system32\UIRibbon (0x3ec000 bytes).
2026-05-29 05:08:11,978 [root] DEBUG: 4484: DLL loaded at 0x0000000012AE0000: C:\Windows\system32\UIRibbon (0x3ec000 bytes).
2026-05-29 05:08:12,100 [lib.api.process] INFO: Monitor config for process 832: C:\lpw_albt\dll\832.ini
2026-05-29 05:08:12,101 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:12,102 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:12,107 [root] DEBUG: Loader: Injecting process 832 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,109 [root] DEBUG: 832: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:12,111 [root] DEBUG: 832: Disabling sleep skipping.
2026-05-29 05:08:12,112 [root] DEBUG: 832: Interactive desktop enabled.
2026-05-29 05:08:12,112 [root] DEBUG: 832: Dropped file limit defaulting to 100.
2026-05-29 05:08:12,127 [root] DEBUG: 832: Services hook set enabled
2026-05-29 05:08:12,130 [root] DEBUG: 832: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:12,146 [root] DEBUG: 832: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:12,147 [root] DEBUG: 832: Monitor initialised: 64-bit capemon loaded in process 832 at 0x00007FFF17B00000, thread 8756, image base 0x00007FF7BF220000, stack from 0x000000CCA7CF4000-0x000000CCA7D00000
2026-05-29 05:08:12,147 [root] DEBUG: 832: Commandline: C:\Windows\system32\svchost.exe -k DcomLaunch -p
2026-05-29 05:08:12,160 [root] DEBUG: 832: Hooked 69 out of 69 functions
2026-05-29 05:08:12,161 [root] INFO: Loaded monitor into process with pid 832
2026-05-29 05:08:12,162 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:08:12,163 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,164 [lib.api.process] INFO: Injected into 64-bit <Process 832 svchost.exe>
2026-05-29 05:08:12,315 [root] DEBUG: 4484: api-rate-cap: LdrpCallInitRoutine hook disabled due to rate
2026-05-29 05:08:12,472 [root] INFO: Announced starting service "b'Winmgmt'"
2026-05-29 05:08:12,473 [lib.api.process] INFO: Monitor config for process 676: C:\lpw_albt\dll\676.ini
2026-05-29 05:08:12,474 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:12,474 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:12,482 [root] DEBUG: Loader: Injecting process 676 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,484 [root] DEBUG: Loader: Copied config file C:\lpw_albt\dll\676.ini to system path C:\676.ini
2026-05-29 05:08:12,512 [root] DEBUG: Loader: Unable to open process, launched: PPLinject64.exe 676 C:\lpw_albt\dll\uwEeDg.dll
2026-05-29 05:08:12,513 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,515 [lib.api.process] INFO: Injected into 64-bit <Process 676 services.exe>
2026-05-29 05:08:12,726 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
2026-05-29 05:08:12,734 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db
2026-05-29 05:08:12,746 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 8476: C:\Windows\system32\DllHost.exe, ImageBase: 0x00007FF6706B0000
2026-05-29 05:08:12,747 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 8476
2026-05-29 05:08:12,747 [lib.api.process] INFO: Monitor config for process 8476: C:\lpw_albt\dll\8476.ini
2026-05-29 05:08:12,750 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:12,784 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:12,795 [root] DEBUG: Loader: Injecting process 8476 (thread 3984) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,796 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:12,797 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,798 [lib.api.process] INFO: Injected into 64-bit <Process 8476 dllhost.exe>
2026-05-29 05:08:12,799 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 8476
2026-05-29 05:08:12,799 [lib.api.process] INFO: Monitor config for process 8476: C:\lpw_albt\dll\8476.ini
2026-05-29 05:08:12,800 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:12,824 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:12,828 [root] DEBUG: Loader: Injecting process 8476 (thread 3984) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,829 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:12,829 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:12,831 [lib.api.process] INFO: Injected into 64-bit <Process 8476 dllhost.exe>
2026-05-29 05:08:12,848 [root] DEBUG: 8476: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:12,849 [root] DEBUG: 8476: Interactive desktop enabled.
2026-05-29 05:08:12,849 [root] DEBUG: 8476: Dropped file limit defaulting to 100.
2026-05-29 05:08:12,874 [root] DEBUG: 8476: Disabling sleep skipping.
2026-05-29 05:08:12,877 [root] DEBUG: 8476: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:12,912 [root] DEBUG: 8476: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:12,913 [root] DEBUG: 8476: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:08:12,914 [root] DEBUG: 8476: Monitor initialised: 64-bit capemon loaded in process 8476 at 0x00007FFF17B00000, thread 3984, image base 0x00007FF6706B0000, stack from 0x0000003A572F4000-0x0000003A57300000
2026-05-29 05:08:12,915 [root] DEBUG: 8476: Commandline: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
2026-05-29 05:08:12,924 [root] DEBUG: 8476: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:12,947 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:12,947 [root] DEBUG: 8476: set_hooks: Unable to hook LockResource
2026-05-29 05:08:12,952 [root] DEBUG: 8476: Hooked 627 out of 628 functions
2026-05-29 05:08:12,953 [root] DEBUG: 8476: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:12,958 [root] DEBUG: 8476: RestoreHeaders: Restored original import table.
2026-05-29 05:08:12,959 [root] INFO: Loaded monitor into process with pid 8476
2026-05-29 05:08:12,960 [root] DEBUG: 8476: caller_dispatch: Added region at 0x00007FF6706B0000 to tracked regions list (ntdll::NtAllocateVirtualMemory returns to 0x00007FF6706B12F2, thread 3984).
2026-05-29 05:08:12,960 [root] DEBUG: 8476: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:08:12,961 [root] DEBUG: 8476: ProcessImageBase: Main module image at 0x00007FF6706B0000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:12,964 [root] DEBUG: 8476: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:12,964 [root] DEBUG: 8476: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:12,967 [root] DEBUG: 8476: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:13,019 [root] DEBUG: 8476: DLL loaded at 0x00007FFF54FC0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-29 05:08:13,054 [root] DEBUG: 8476: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:13,055 [root] DEBUG: 8476: DLL loaded at 0x00007FFF432B0000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-29 05:08:13,062 [root] DEBUG: 8476: DLL loaded at 0x00007FFF52860000: C:\Windows\system32\propsys (0xf6000 bytes).
2026-05-29 05:08:13,100 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
2026-05-29 05:08:13,897 [root] INFO: Restarting WMI Service
2026-05-29 05:08:14,350 [root] DEBUG: 4484: api-rate-cap: SystemParametersInfoW hook disabled due to rate
2026-05-29 05:08:14,669 [root] DEBUG: 4484: api-cap: GetSystemMetrics hook disabled due to count: 5000
2026-05-29 05:08:15,209 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 11980, handle 0x1f28: C:\Windows\System32\services.exe
2026-05-29 05:08:15,580 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 12120: C:\Windows\system32\wbem\wmiprvse.exe, ImageBase: 0x00007FF7BB740000
2026-05-29 05:08:15,582 [root] INFO: Announced 64-bit process name: WmiPrvSE.exe pid: 12120
2026-05-29 05:08:15,583 [lib.api.process] INFO: Monitor config for process 12120: C:\lpw_albt\dll\12120.ini
2026-05-29 05:08:15,584 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:15,826 [root] DEBUG: 676: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:15,827 [root] DEBUG: 676: Disabling sleep skipping.
2026-05-29 05:08:15,828 [root] DEBUG: 676: Interactive desktop enabled.
2026-05-29 05:08:15,828 [root] DEBUG: 676: Dropped file limit defaulting to 100.
2026-05-29 05:08:15,831 [root] DEBUG: 676: Services hook set enabled
2026-05-29 05:08:15,844 [root] DEBUG: 676: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:15,844 [root] DEBUG: 676: Monitor initialised: 64-bit capemon loaded in process 676 at 0x00007FFF16C10000, thread 12156, image base 0x00007FF7839A0000, stack from 0x000000F2EFE72000-0x000000F2EFE80000
2026-05-29 05:08:15,845 [root] DEBUG: 676: Commandline: C:\Windows\system32\services.exe
2026-05-29 05:08:15,862 [root] DEBUG: 676: Hooked 69 out of 69 functions
2026-05-29 05:08:15,865 [root] INFO: Loaded monitor into process with pid 676
2026-05-29 05:08:15,970 [root] DEBUG: package modules.packages.edge does not support configure, ignoring
2026-05-29 05:08:15,972 [root] WARNING: configuration error for package modules.packages.edge: error importing data.packages.edge: No module named 'data.packages'
2026-05-29 05:08:15,973 [lib.core.compound] INFO: C:\Users\admin\AppData\Local\Temp already exists, skipping creation
2026-05-29 05:08:15,977 [lib.api.process] INFO: Successfully executed process from path "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" with arguments ""a"" with pid 12232
2026-05-29 05:08:15,979 [lib.api.process] INFO: Monitor config for process 12232: C:\lpw_albt\dll\12232.ini
2026-05-29 05:08:15,981 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:15,982 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:15,994 [root] DEBUG: Loader: Injecting process 12232 (thread 12236) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:15,994 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:15,996 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:15,997 [lib.api.process] INFO: Injected into 64-bit <Process 12232 msedge.exe>
2026-05-29 05:08:16,000 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:16,004 [root] DEBUG: Loader: Injecting process 12120 (thread 12124) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:16,005 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:16,005 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:16,006 [lib.api.process] INFO: Injected into 64-bit <Process 12120 WmiPrvSE.exe>
2026-05-29 05:08:16,008 [root] INFO: Announced 64-bit process name: WmiPrvSE.exe pid: 12120
2026-05-29 05:08:16,008 [lib.api.process] INFO: Monitor config for process 12120: C:\lpw_albt\dll\12120.ini
2026-05-29 05:08:16,008 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:16,096 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:16,100 [root] DEBUG: Loader: Injecting process 12120 (thread 12124) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:16,101 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:16,101 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:16,103 [lib.api.process] INFO: Injected into 64-bit <Process 12120 WmiPrvSE.exe>
2026-05-29 05:08:16,121 [root] DEBUG: 12120: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:16,121 [root] DEBUG: 12120: Interactive desktop enabled.
2026-05-29 05:08:16,122 [root] DEBUG: 12120: Dropped file limit defaulting to 100.
2026-05-29 05:08:16,123 [root] DEBUG: 12120: Disabling sleep skipping.
2026-05-29 05:08:16,124 [root] DEBUG: 12120: Services hook set enabled
2026-05-29 05:08:16,127 [root] DEBUG: 12120: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:16,139 [root] DEBUG: 12120: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:16,140 [root] DEBUG: 12120: Monitor initialised: 64-bit capemon loaded in process 12120 at 0x00007FFF17B00000, thread 12124, image base 0x00007FF7BB740000, stack from 0x000000EAEF300000-0x000000EAEF310000
2026-05-29 05:08:16,141 [root] DEBUG: 12120: Commandline: C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
2026-05-29 05:08:16,164 [root] DEBUG: 12120: Hooked 69 out of 69 functions
2026-05-29 05:08:16,175 [root] DEBUG: 12120: RestoreHeaders: Restored original import table.
2026-05-29 05:08:16,175 [root] INFO: Loaded monitor into process with pid 12120
2026-05-29 05:08:16,193 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:16,194 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:16,216 [root] DEBUG: 12120: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:16,220 [lib.api.process] INFO: Monitor config for process 10232: C:\lpw_albt\dll\10232.ini
2026-05-29 05:08:16,221 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:16,222 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:16,228 [root] DEBUG: Loader: Injecting process 10232 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:16,232 [root] DEBUG: 10232: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:16,233 [root] DEBUG: 10232: Disabling sleep skipping.
2026-05-29 05:08:16,233 [root] DEBUG: 10232: Interactive desktop enabled.
2026-05-29 05:08:16,234 [root] DEBUG: 10232: Dropped file limit defaulting to 100.
2026-05-29 05:08:16,235 [root] DEBUG: 10232: Services hook set enabled
2026-05-29 05:08:16,237 [root] DEBUG: 10232: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:16,252 [root] DEBUG: 10232: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:16,252 [root] DEBUG: 10232: Monitor initialised: 64-bit capemon loaded in process 10232 at 0x00007FFF17B00000, thread 11996, image base 0x00007FF7BF220000, stack from 0x000000A65A2F4000-0x000000A65A300000
2026-05-29 05:08:16,253 [root] DEBUG: 10232: Commandline: C:\Windows\system32\svchost.exe -k netsvcs -p
2026-05-29 05:08:16,266 [root] DEBUG: 10232: Hooked 69 out of 69 functions
2026-05-29 05:08:16,267 [root] INFO: Loaded monitor into process with pid 10232
2026-05-29 05:08:16,267 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:08:16,268 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:16,269 [lib.api.process] INFO: Injected into 64-bit <Process 10232 svchost.exe>
2026-05-29 05:08:16,899 [root] DEBUG: 4484: api-cap: RegOpenKeyExW hook disabled due to count: 5000
2026-05-29 05:08:16,902 [root] DEBUG: 4484: OpenProcessHandler: Image base for process 5128 (handle 0x498): 0x00007FF6FFE40000.
2026-05-29 05:08:16,905 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 5128, handle 0x498: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:16,922 [root] DEBUG: Error 5 (0x5) - OpenProcessHandler: Error obtaining target process name: Access is denied.
2026-05-29 05:08:16,922 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 8044, handle 0x1a20: Error obtaining target process name
2026-05-29 05:08:16,923 [root] DEBUG: Error 5 (0x5) - OpenProcessHandler: Error obtaining target process name: Access is denied.
2026-05-29 05:08:16,924 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 6136, handle 0x490: Error obtaining target process name
2026-05-29 05:08:16,925 [root] DEBUG: Error 5 (0x5) - OpenProcessHandler: Error obtaining target process name: Access is denied.
2026-05-29 05:08:16,926 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 5624, handle 0x1f0c: Error obtaining target process name
2026-05-29 05:08:16,927 [root] DEBUG: Error 5 (0x5) - OpenProcessHandler: Error obtaining target process name: Access is denied.
2026-05-29 05:08:16,927 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 6400, handle 0x1050: Error obtaining target process name
2026-05-29 05:08:16,997 [root] DEBUG: 4484: api-cap: NtClose hook disabled due to count: 5000
2026-05-29 05:08:17,000 [root] DEBUG: 4484: api-cap: NtClose hook disabled due to count: 5001
2026-05-29 05:08:17,002 [root] DEBUG: 4484: api-cap: NtClose hook disabled due to count: 5002
2026-05-29 05:08:17,090 [root] DEBUG: 4484: api-cap: RegQueryValueExW hook disabled due to count: 5000
2026-05-29 05:08:18,012 [lib.api.process] INFO: Successfully resumed process with pid 12232
2026-05-29 05:08:18,084 [root] DEBUG: 12232: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:18,085 [root] DEBUG: 12232: Interactive desktop enabled.
2026-05-29 05:08:18,086 [root] DEBUG: 12232: Dropped file limit defaulting to 100.
2026-05-29 05:08:18,093 [root] DEBUG: 12232: Edge-specific hook-set enabled.
2026-05-29 05:08:18,095 [root] DEBUG: 12232: Disabling sleep skipping.
2026-05-29 05:08:18,096 [root] DEBUG: 12232: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:18,107 [root] DEBUG: 12232: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:18,108 [root] DEBUG: 12232: Monitor initialised: 64-bit capemon loaded in process 12232 at 0x00007FFF17B00000, thread 12236, image base 0x00007FF64C440000, stack from 0x000000DC0FDF4000-0x000000DC0FE00000
2026-05-29 05:08:18,108 [root] DEBUG: 12232: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "a"
2026-05-29 05:08:18,120 [root] DEBUG: 12232: Hooked 2 out of 2 functions
2026-05-29 05:08:18,159 [root] DEBUG: 12232: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:18,171 [root] DEBUG: 12232: RestoreHeaders: Restored original import table.
2026-05-29 05:08:18,172 [root] INFO: Loaded monitor into process with pid 12232
2026-05-29 05:08:18,174 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-29 05:08:18,179 [root] DEBUG: 12232: DLL loaded at 0x00007FFF43500000: C:\Windows\SYSTEM32\version (0xa000 bytes).
2026-05-29 05:08:18,181 [root] DEBUG: 12232: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:18,183 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\Wldp (0x2d000 bytes).
2026-05-29 05:08:18,184 [root] DEBUG: 12232: DLL loaded at 0x00007FFF55710000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-29 05:08:18,185 [root] DEBUG: 12232: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\SHCORE (0xad000 bytes).
2026-05-29 05:08:18,186 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:08:18,289 [root] DEBUG: 12120: DLL loaded at 0x00007FFF3FD20000: C:\Windows\system32\wbem\wbemprox (0x11000 bytes).
2026-05-29 05:08:18,296 [root] DEBUG: 12232: DLL loaded at 0x00007FFF453C0000: C:\Windows\SYSTEM32\WINMM (0x27000 bytes).
2026-05-29 05:08:18,301 [root] DEBUG: 12232: DLL loaded at 0x00007FFEFE540000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge (0x136be000 bytes).
2026-05-29 05:08:18,305 [root] DEBUG: 12232: DLL loaded at 0x00007FFF45010000: C:\Windows\SYSTEM32\KBDUS (0x9000 bytes).
2026-05-29 05:08:18,306 [root] DEBUG: 12120: DLL loaded at 0x00007FFF3F950000: C:\Windows\system32\wbem\wbemsvc (0x14000 bytes).
2026-05-29 05:08:18,311 [root] DEBUG: 12232: DLL loaded at 0x00007FFF54FC0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-29 05:08:18,318 [root] DEBUG: 12232: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:18,319 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 13132: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:18,319 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13132
2026-05-29 05:08:18,320 [root] DEBUG: 12232: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:18,320 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13132
2026-05-29 05:08:18,321 [root] DEBUG: 12232: DLL loaded at 0x00007FFF18700000: C:\Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings (0x16000 bytes).
2026-05-29 05:08:18,323 [root] DEBUG: 12232: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:18,323 [root] DEBUG: 12232: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:18,327 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4D250000: C:\Windows\system32\wbem\wmiutils (0x28000 bytes).
2026-05-29 05:08:18,328 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57520000: C:\Windows\SYSTEM32\USERENV (0x2e000 bytes).
2026-05-29 05:08:18,329 [root] DEBUG: 12232: DLL loaded at 0x00007FFF55EC0000: C:\Windows\SYSTEM32\gpapi (0x23000 bytes).
2026-05-29 05:08:18,331 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 13132, handle 0x10cc: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:18,332 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56750000: C:\Windows\SYSTEM32\wkscli (0x19000 bytes).
2026-05-29 05:08:18,335 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56A30000: C:\Windows\SYSTEM32\netutils (0xc000 bytes).
2026-05-29 05:08:18,337 [root] DEBUG: 12232: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:18,337 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3F980000: C:\Windows\SYSTEM32\MDMRegistration (0x68000 bytes).
2026-05-29 05:08:18,341 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:18,342 [root] DEBUG: 12120: DLL loaded at 0x00007FFF13200000: C:\Windows\SYSTEM32\framedynos (0x52000 bytes).
2026-05-29 05:08:18,343 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:18,343 [root] DEBUG: 12120: DLL loaded at 0x00007FFF16540000: C:\Windows\system32\wbem\cimwin32 (0x20c000 bytes).
2026-05-29 05:08:18,344 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-29 05:08:18,344 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57010000: C:\Windows\SYSTEM32\ncrypt (0x27000 bytes).
2026-05-29 05:08:18,344 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57470000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-29 05:08:18,345 [root] DEBUG: 12232: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:18,345 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\tbs (0x1b000 bytes).
2026-05-29 05:08:18,346 [root] DEBUG: 12232: DLL loaded at 0x00007FFF15300000: C:\Windows\SYSTEM32\DMCmnUtils (0x7c000 bytes).
2026-05-29 05:08:18,346 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3FB20000: C:\Windows\SYSTEM32\omadmapi (0x3a000 bytes).
2026-05-29 05:08:18,347 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57470000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-29 05:08:18,349 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56FD0000: C:\Windows\SYSTEM32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:18,354 [root] DEBUG: 12232: DLL loaded at 0x00007FFF43550000: C:\Windows\SYSTEM32\netapi32 (0x19000 bytes).
2026-05-29 05:08:18,357 [root] DEBUG: 12232: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:18,357 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\cryptsp (0x18000 bytes).
2026-05-29 05:08:18,358 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52F20000: C:\Windows\SYSTEM32\DSREG (0x141000 bytes).
2026-05-29 05:08:18,359 [root] DEBUG: 12120: DLL loaded at 0x00007FFF52B00000: C:\Windows\SYSTEM32\wtsapi32 (0x14000 bytes).
2026-05-29 05:08:18,360 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57360000: C:\Windows\SYSTEM32\WINSTA (0x5b000 bytes).
2026-05-29 05:08:18,361 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57560000: C:\Windows\SYSTEM32\profapi (0x25000 bytes).
2026-05-29 05:08:18,364 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:08:18,365 [root] DEBUG: 12120: DLL loaded at 0x00007FFF572F0000: C:\Windows\SYSTEM32\DEVOBJ (0x33000 bytes).
2026-05-29 05:08:18,367 [root] DEBUG: 12120: DLL loaded at 0x000002E403AE0000: C:\Windows\SYSTEM32\WMI (0x3000 bytes).
2026-05-29 05:08:18,368 [root] DEBUG: 12120: DLL loaded at 0x00007FFF520C0000: C:\Windows\SYSTEM32\wmiclnt (0x11000 bytes).
2026-05-29 05:08:18,369 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4D2E0000: C:\Windows\System32\AssignedAccessRuntime (0x14000 bytes).
2026-05-29 05:08:18,369 [root] DEBUG: 12120: DLL loaded at 0x00007FFF43550000: C:\Windows\SYSTEM32\NETAPI32 (0x19000 bytes).
2026-05-29 05:08:18,370 [root] DEBUG: 12232: DLL loaded at 0x00007FFF58380000: C:\Windows\System32\MSCTF (0x114000 bytes).
2026-05-29 05:08:18,371 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\SYSTEM32\SAMCLI (0x19000 bytes).
2026-05-29 05:08:18,372 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 12232, handle 0x10bc: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:18,373 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4D3D0000: C:\Windows\System32\SystemSettings.DataModel (0x74000 bytes).
2026-05-29 05:08:18,373 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4D670000: C:\Windows\SYSTEM32\SRVCLI (0x28000 bytes).
2026-05-29 05:08:18,374 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:18,374 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56A30000: C:\Windows\SYSTEM32\NETUTILS (0xc000 bytes).
2026-05-29 05:08:18,374 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57470000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-29 05:08:18,375 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56B10000: C:\Windows\SYSTEM32\LOGONCLI (0x43000 bytes).
2026-05-29 05:08:18,377 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4F210000: C:\Windows\SYSTEM32\SCHEDCLI (0xc000 bytes).
2026-05-29 05:08:18,377 [root] DEBUG: 12232: DLL loaded at 0x00007FFF49A90000: C:\Windows\SYSTEM32\DWrite (0x27f000 bytes).
2026-05-29 05:08:18,378 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56750000: C:\Windows\SYSTEM32\WKSCLI (0x19000 bytes).
2026-05-29 05:08:18,379 [root] DEBUG: 12120: DLL loaded at 0x00007FFF52850000: C:\Windows\SYSTEM32\DSROLE (0xa000 bytes).
2026-05-29 05:08:18,385 [root] DEBUG: 12232: DLL loaded at 0x00007FFF50870000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-29 05:08:18,389 [root] DEBUG: 12232: DLL loaded at 0x00007FFF44D50000: C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.3636_none_60b6a03d71f818d5\COMCTL32 (0x29a000 bytes).
2026-05-29 05:08:18,391 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57350000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-29 05:08:18,395 [root] DEBUG: 12232: DLL loaded at 0x00007FFF569F0000: C:\Windows\SYSTEM32\IPHLPAPI (0x3b000 bytes).
2026-05-29 05:08:18,396 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52960000: C:\Windows\system32\NLAapi (0x1d000 bytes).
2026-05-29 05:08:18,399 [root] DEBUG: 12232: DLL loaded at 0x00007FFF58B20000: C:\Windows\System32\NSI (0x8000 bytes).
2026-05-29 05:08:18,401 [root] DEBUG: 12232: DLL loaded at 0x00007FFF515C0000: C:\Windows\SYSTEM32\dhcpcsvc6 (0x17000 bytes).
2026-05-29 05:08:18,403 [root] DEBUG: 12232: DLL loaded at 0x00007FFF515A0000: C:\Windows\SYSTEM32\dhcpcsvc (0x1d000 bytes).
2026-05-29 05:08:18,406 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56A40000: C:\Windows\SYSTEM32\DNSAPI (0xca000 bytes).
2026-05-29 05:08:18,414 [root] DEBUG: 12232: DLL loaded at 0x00007FFF54850000: C:\Windows\System32\CoreMessaging (0xf2000 bytes).
2026-05-29 05:08:18,415 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52DC0000: C:\Windows\SYSTEM32\wintypes (0x155000 bytes).
2026-05-29 05:08:18,416 [root] DEBUG: 12232: DLL loaded at 0x00007FFF54170000: C:\Windows\System32\CoreUIComponents (0x35b000 bytes).
2026-05-29 05:08:18,416 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4B680000: C:\Windows\SYSTEM32\textinputframework (0xf9000 bytes).
2026-05-29 05:08:18,417 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\CFGMGR32 (0x4e000 bytes).
2026-05-29 05:08:18,420 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4B070000: C:\Windows\System32\StructuredQuery (0xa6000 bytes).
2026-05-29 05:08:18,425 [root] DEBUG: 12232: DLL loaded at 0x00007FFF517C0000: C:\Windows\System32\twinapi.appcore (0x203000 bytes).
2026-05-29 05:08:18,429 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52860000: C:\Windows\SYSTEM32\PROPSYS (0xf6000 bytes).
2026-05-29 05:08:18,431 [root] DEBUG: 12232: DLL loaded at 0x00007FFF45580000: C:\Windows\system32\twinapi (0xa9000 bytes).
2026-05-29 05:08:18,435 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52420000: C:\Windows\SYSTEM32\wevtapi (0x65000 bytes).
2026-05-29 05:08:18,437 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4CBF0000: C:\Windows\System32\Windows.StateRepositoryPS (0x146000 bytes).
2026-05-29 05:08:18,441 [root] DEBUG: 12232: DLL loaded at 0x00007FFF51A60000: C:\Windows\System32\WindowManagementAPI (0xa1000 bytes).
2026-05-29 05:08:18,442 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4AF10000: C:\Windows\System32\InputHost (0x152000 bytes).
2026-05-29 05:08:18,443 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4BFB0000: C:\Windows\System32\Windows.UI (0x141000 bytes).
2026-05-29 05:08:18,447 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52B00000: C:\Windows\SYSTEM32\WTSAPI32 (0x14000 bytes).
2026-05-29 05:08:18,453 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57360000: C:\Windows\SYSTEM32\WINSTA (0x5b000 bytes).
2026-05-29 05:08:18,462 [root] DEBUG: 12232: DLL loaded at 0x00007FFF515E0000: C:\Windows\SYSTEM32\ColorAdapterClient (0x11000 bytes).
2026-05-29 05:08:18,463 [root] DEBUG: 12232: DLL loaded at 0x00007FFF51600000: C:\Windows\SYSTEM32\mscms (0xae000 bytes).
2026-05-29 05:08:18,483 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4CD70000: C:\Windows\system32\Windows.Storage.Search (0xc6000 bytes).
2026-05-29 05:08:18,486 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52560000: C:\Windows\SYSTEM32\WINHTTP (0x10a000 bytes).
2026-05-29 05:08:18,491 [root] DEBUG: 12232: DLL loaded at 0x00007FFF15610000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\oneauth (0x5c4000 bytes).
2026-05-29 05:08:18,494 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 13704: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:18,495 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13704
2026-05-29 05:08:18,499 [root] DEBUG: 12232: DLL loaded at 0x00007FFF49D10000: C:\Windows\System32\Windows.UI.Immersive (0x139000 bytes).
2026-05-29 05:08:18,499 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13704
2026-05-29 05:08:18,501 [root] DEBUG: 12232: caller_dispatch: Added region at 0x00007FF64C440000 to tracked regions list (kernel32::CreateProcessInternalW returns to 0x00007FF64C537D66, thread 13632).
2026-05-29 05:08:18,503 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4CD40000: C:\Windows\system32\mssprxy (0x28000 bytes).
2026-05-29 05:08:18,505 [root] INFO: Announced starting service "b'MicrosoftEdgeElevationService'"
2026-05-29 05:08:18,505 [root] DEBUG: 12232: DLL loaded at 0x00007FFF48330000: C:\Windows\SYSTEM32\Secur32 (0xc000 bytes).
2026-05-29 05:08:18,509 [root] DEBUG: 12232: ProcessImageBase: Main module image at 0x00007FF64C440000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:18,578 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 13760: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:18,579 [root] DEBUG: 12232: DLL loaded at 0x00007FFF43590000: C:\Windows\SYSTEM32\LINKINFO (0xd000 bytes).
2026-05-29 05:08:18,580 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 13800: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:18,580 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13760
2026-05-29 05:08:18,580 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13800
2026-05-29 05:08:18,581 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13760
2026-05-29 05:08:18,581 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 13800
2026-05-29 05:08:18,617 [root] DEBUG: 12232: DLL loaded at 0x00007FFF55EF0000: C:\Windows\system32\dxgi (0xf3000 bytes).
2026-05-29 05:08:18,618 [root] DEBUG: 12232: DLL loaded at 0x00007FFF53070000: C:\Windows\system32\d3d11 (0x263000 bytes).
2026-05-29 05:08:18,619 [root] DEBUG: 12232: DLL loaded at 0x00007FFF538A0000: C:\Windows\system32\dcomp (0x1e3000 bytes).
2026-05-29 05:08:18,620 [root] DEBUG: 12232: DLL loaded at 0x00007FFF43630000: C:\Windows\system32\dataexchange (0x3e000 bytes).
2026-05-29 05:08:18,627 [root] DEBUG: 12232: DLL loaded at 0x00007FFF47AB0000: C:\Windows\SYSTEM32\edputil (0x24000 bytes).
2026-05-29 05:08:18,636 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4D6A0000: C:\Windows\System32\iertutil (0x2bc000 bytes).
2026-05-29 05:08:18,637 [root] DEBUG: 12232: DLL loaded at 0x00007FFF47980000: C:\Windows\System32\Windows.Web (0xc3000 bytes).
2026-05-29 05:08:18,647 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3FC60000: C:\Windows\System32\Windows.System.Profile.RetailInfo (0x28000 bytes).
2026-05-29 05:08:18,682 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 14056: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:18,684 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 14084: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:18,685 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 14056
2026-05-29 05:08:18,685 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 14084
2026-05-29 05:08:18,686 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 14056
2026-05-29 05:08:18,686 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 14084
2026-05-29 05:08:18,703 [root] DEBUG: 12232: DLL loaded at 0x00007FFF43990000: C:\Windows\SYSTEM32\OLEACC (0x66000 bytes).
2026-05-29 05:08:18,713 [root] DEBUG: 12232: DLL loaded at 0x00007FFF488B0000: C:\Windows\system32\directmanipulation (0x9d000 bytes).
2026-05-29 05:08:18,739 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3EA70000: C:\Windows\System32\Windows.Security.Authentication.OnlineId (0xf4000 bytes).
2026-05-29 05:08:18,745 [root] DEBUG: 12232: DLL loaded at 0x00007FFF43550000: C:\Windows\SYSTEM32\netapi32 (0x19000 bytes).
2026-05-29 05:08:18,759 [root] DEBUG: 12232: DLL loaded at 0x00007FFF55220000: C:\Windows\SYSTEM32\dwmapi (0x2f000 bytes).
2026-05-29 05:08:18,795 [root] DEBUG: 12232: DLL loaded at 0x00007FFF42BF0000: C:\Windows\SYSTEM32\VCRUNTIME140 (0x1e000 bytes).
2026-05-29 05:08:18,800 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4CFA0000: C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions (0x17000 bytes).
2026-05-29 05:08:18,801 [root] DEBUG: 12232: DLL loaded at 0x00007FFF187B0000: C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains (0x9e000 bytes).
2026-05-29 05:08:18,806 [root] DEBUG: 12232: DLL loaded at 0x00007FFF456D0000: C:\Windows\System32\Windows.Security.Authentication.Web.Core (0x11d000 bytes).
2026-05-29 05:08:18,811 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:18,818 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-29 05:08:18,820 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56630000: C:\Windows\system32\rsaenh (0x34000 bytes).
2026-05-29 05:08:18,826 [root] DEBUG: 12232: DLL loaded at 0x00007FFF48780000: C:\Windows\System32\OneCoreCommonProxyStub (0x7f000 bytes).
2026-05-29 05:08:18,837 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3E730000: C:\Windows\System32\vaultcli (0x51000 bytes).
2026-05-29 05:08:18,853 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3FB20000: C:\Windows\System32\aadWamExtension (0x36000 bytes).
2026-05-29 05:08:18,891 [root] DEBUG: 12232: DLL loaded at 0x00007FFF17F50000: C:\Windows\System32\MicrosoftAccountWAMExtension (0x8c000 bytes).
2026-05-29 05:08:18,943 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 14400: C:\Windows\system32\BackgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:18,944 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14400
2026-05-29 05:08:18,944 [lib.api.process] INFO: Monitor config for process 14400: C:\lpw_albt\dll\14400.ini
2026-05-29 05:08:18,945 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:18,946 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:18,953 [root] DEBUG: Loader: Injecting process 14400 (thread 14404) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:18,954 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:18,954 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:18,955 [lib.api.process] INFO: Injected into 64-bit <Process 14400 backgroundTaskHost.exe>
2026-05-29 05:08:18,957 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14400
2026-05-29 05:08:18,957 [lib.api.process] INFO: Monitor config for process 14400: C:\lpw_albt\dll\14400.ini
2026-05-29 05:08:18,957 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:18,960 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:18,968 [root] DEBUG: Loader: Injecting process 14400 (thread 14404) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:18,968 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:18,969 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:18,971 [lib.api.process] INFO: Injected into 64-bit <Process 14400 backgroundTaskHost.exe>
2026-05-29 05:08:18,972 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14400
2026-05-29 05:08:18,972 [lib.api.process] INFO: Monitor config for process 14400: C:\lpw_albt\dll\14400.ini
2026-05-29 05:08:18,973 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:18,973 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:18,977 [root] DEBUG: Loader: Injecting process 14400 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:18,978 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 14404, handle 0x120
2026-05-29 05:08:18,978 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:18,978 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:18,980 [lib.api.process] INFO: Injected into 64-bit <Process 14400 backgroundTaskHost.exe>
2026-05-29 05:08:18,989 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 14568: C:\Windows\system32\BackgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:18,992 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14568
2026-05-29 05:08:18,992 [lib.api.process] INFO: Monitor config for process 14568: C:\lpw_albt\dll\14568.ini
2026-05-29 05:08:18,993 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:18,995 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:19,000 [root] DEBUG: Loader: Injecting process 14568 (thread 14572) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,001 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:19,002 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,004 [lib.api.process] INFO: Injected into 64-bit <Process 14568 backgroundTaskHost.exe>
2026-05-29 05:08:19,005 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14568
2026-05-29 05:08:19,006 [lib.api.process] INFO: Monitor config for process 14568: C:\lpw_albt\dll\14568.ini
2026-05-29 05:08:19,006 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:19,007 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:19,011 [root] DEBUG: Loader: Injecting process 14568 (thread 14572) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,012 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:19,012 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,014 [lib.api.process] INFO: Injected into 64-bit <Process 14568 backgroundTaskHost.exe>
2026-05-29 05:08:19,049 [root] INFO: Process with pid 14568 has terminated
2026-05-29 05:08:19,514 [root] DEBUG: 676: DLL loaded at 0x00007FFF56FA0000: C:\Windows\system32\Wldp (0x2d000 bytes).
2026-05-29 05:08:19,516 [root] DEBUG: 676: DLL loaded at 0x00007FFF55710000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-29 05:08:19,518 [root] DEBUG: 676: DLL loaded at 0x00007FFF58070000: C:\Windows\system32\SHCORE (0xad000 bytes).
2026-05-29 05:08:19,519 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 14732: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\elevation_service.exe, ImageBase: 0x00007FF607A60000
2026-05-29 05:08:19,521 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 14732
2026-05-29 05:08:19,521 [lib.api.process] INFO: Monitor config for process 14732: C:\lpw_albt\dll\14732.ini
2026-05-29 05:08:19,522 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:19,624 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:19,625 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:19,626 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:19,626 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:19,626 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:19,626 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:19,626 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:19,627 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:19,632 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:19,638 [root] DEBUG: Loader: Injecting process 14732 (thread 14736) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,639 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:19,639 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,641 [lib.api.process] INFO: Injected into 64-bit <Process 14732 elevation_service.exe>
2026-05-29 05:08:19,643 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 14732
2026-05-29 05:08:19,645 [lib.api.process] INFO: Monitor config for process 14732: C:\lpw_albt\dll\14732.ini
2026-05-29 05:08:19,645 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:19,704 [root] INFO: Process with pid 8476 has terminated
2026-05-29 05:08:19,705 [root] DEBUG: 8476: NtTerminateProcess hook: Attempting to dump process 8476
2026-05-29 05:08:19,707 [root] DEBUG: 8476: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:08:19,742 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:19,742 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:19,743 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:19,743 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:19,743 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:19,743 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:19,743 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:19,744 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:19,747 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:19,754 [root] DEBUG: Loader: Injecting process 14732 (thread 14736) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,755 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:19,755 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,757 [lib.api.process] INFO: Injected into 64-bit <Process 14732 elevation_service.exe>
2026-05-29 05:08:19,758 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 14732
2026-05-29 05:08:19,758 [lib.api.process] INFO: Monitor config for process 14732: C:\lpw_albt\dll\14732.ini
2026-05-29 05:08:19,758 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:19,865 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:19,865 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:19,866 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:19,866 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:19,867 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:19,867 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:19,867 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:19,867 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:19,869 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:19,875 [root] DEBUG: Loader: Injecting process 14732 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,875 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 14736, handle 0xfc
2026-05-29 05:08:19,876 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:19,877 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:19,878 [lib.api.process] INFO: Injected into 64-bit <Process 14732 elevation_service.exe>
2026-05-29 05:08:19,886 [root] DEBUG: 14732: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:19,888 [root] DEBUG: 14732: Interactive desktop enabled.
2026-05-29 05:08:19,889 [root] DEBUG: 14732: Dropped file limit defaulting to 100.
2026-05-29 05:08:19,897 [root] DEBUG: 14732: Disabling sleep skipping.
2026-05-29 05:08:19,898 [root] DEBUG: 14732: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:19,911 [root] DEBUG: 14732: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:19,912 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,053 [root] DEBUG: 14732: Monitor initialised: 64-bit capemon loaded in process 14732 at 0x00007FFF17B00000, thread 14736, image base 0x00007FF607A60000, stack from 0x00000017A16F4000-0x00000017A1700000
2026-05-29 05:08:20,055 [root] DEBUG: 14732: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\elevation_service.exe"
2026-05-29 05:08:20,070 [root] DEBUG: 14732: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:20,092 [root] DEBUG: 12120: DLL loaded at 0x00007FFF48330000: C:\Windows\System32\Secur32 (0xc000 bytes).
2026-05-29 05:08:20,097 [root] DEBUG: 12120: DLL loaded at 0x00007FFF1C370000: C:\Windows\System32\dskquota (0x25000 bytes).
2026-05-29 05:08:20,099 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:20,100 [root] DEBUG: 14732: set_hooks: Unable to hook LockResource
2026-05-29 05:08:20,110 [root] DEBUG: 14732: Hooked 627 out of 628 functions
2026-05-29 05:08:20,126 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57520000: C:\Windows\SYSTEM32\USERENV (0x2e000 bytes).
2026-05-29 05:08:20,127 [root] DEBUG: 12120: DLL loaded at 0x00007FFF18770000: C:\Windows\system32\wbem\vdswmi (0x40000 bytes).
2026-05-29 05:08:20,132 [root] DEBUG: 14732: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:20,139 [root] DEBUG: 14732: RestoreHeaders: Restored original import table.
2026-05-29 05:08:20,141 [root] INFO: Loaded monitor into process with pid 14732
2026-05-29 05:08:20,149 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,174 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,199 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,223 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,234 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56140000: C:\Windows\System32\sppc (0x25000 bytes).
2026-05-29 05:08:20,235 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56170000: C:\Windows\System32\SLC (0x29000 bytes).
2026-05-29 05:08:20,235 [root] DEBUG: 12120: DLL loaded at 0x00007FFF162D0000: C:\Windows\System32\WinSCard (0x43000 bytes).
2026-05-29 05:08:20,236 [root] DEBUG: 12120: DLL loaded at 0x00007FFF52560000: C:\Windows\System32\WINHTTP (0x10a000 bytes).
2026-05-29 05:08:20,237 [root] DEBUG: 12120: DLL loaded at 0x00007FFF16320000: C:\Windows\System32\sppcext (0x99000 bytes).
2026-05-29 05:08:20,239 [root] DEBUG: 12120: DLL loaded at 0x00007FFF17F20000: C:\Windows\System32\sppwmi (0x29000 bytes).
2026-05-29 05:08:20,241 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-29 05:08:20,241 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56630000: C:\Windows\system32\rsaenh (0x34000 bytes).
2026-05-29 05:08:20,247 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,271 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,293 [root] DEBUG: 14732: caller_dispatch: Scanning calling region at 0x00007FF607A60000...
2026-05-29 05:08:20,298 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,299 [root] DEBUG: 14732: caller_dispatch: Added region at 0x00007FF607A60000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x00007FF607B9B9D6, thread 14736).
2026-05-29 05:08:20,303 [root] DEBUG: 14732: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:20,324 [root] DEBUG: 14732: ProcessImageBase: Main module image at 0x00007FF607A60000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:20,325 [root] DEBUG: 14732: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-29 05:08:20,329 [root] DEBUG: 14732: ProcessImageBase: Main module image at 0x00007FF607A60000 unmodified (entropy change 8.307255e-06)
2026-05-29 05:08:20,331 [root] DEBUG: 12232: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:20,334 [root] DEBUG: 12232: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:20,335 [root] DEBUG: 14732: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:20,344 [root] DEBUG: 14732: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:20,353 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4D1F0000: C:\Windows\System32\miutils (0x60000 bytes).
2026-05-29 05:08:20,353 [root] DEBUG: 14732: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:20,353 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4D030000: C:\Windows\System32\mi (0x23000 bytes).
2026-05-29 05:08:20,354 [root] DEBUG: 12120: DLL loaded at 0x00007FFF47900000: C:\Windows\System32\FLTLIB (0xb000 bytes).
2026-05-29 05:08:20,355 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4C2A0000: C:\Windows\System32\VirtDisk (0x13000 bytes).
2026-05-29 05:08:20,355 [root] DEBUG: 12120: DLL loaded at 0x00007FFF12F30000: C:\Windows\System32\storagewmi (0x2a6000 bytes).
2026-05-29 05:08:20,358 [root] DEBUG: 12120: DLL loaded at 0x00007FFF16070000: C:\Windows\system32\wmitomi (0x3a000 bytes).
2026-05-29 05:08:20,370 [root] DEBUG: 14732: DLL loaded at 0x00007FFF573C0000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-29 05:08:20,371 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57350000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-29 05:08:20,371 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4CFC0000: C:\Windows\system32\wmidcom (0x31000 bytes).
2026-05-29 05:08:20,375 [root] DEBUG: 12232: DLL loaded at 0x00007FFF573C0000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-29 05:08:20,380 [root] INFO: Announced starting service "b'smphost'"
2026-05-29 05:08:20,425 [root] DEBUG: 14732: DLL loaded at 0x00007FFF57350000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-29 05:08:20,432 [root] DEBUG: 14732: NtTerminateProcess hook: Attempting to dump process 14732
2026-05-29 05:08:20,434 [root] DEBUG: 12232: DLL loaded at 0x00007FFF52490000: C:\Windows\SYSTEM32\usermgrcli (0x16000 bytes).
2026-05-29 05:08:20,436 [root] DEBUG: 12232: DLL loaded at 0x00007FFF409A0000: C:\Windows\System32\Windows.Internal.UI.Shell.WindowTabManager (0x6d000 bytes).
2026-05-29 05:08:20,437 [root] DEBUG: 14732: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:08:20,454 [root] DEBUG: 14732: caller_dispatch: Added region at 0x00007FFF56FD0000 to tracked regions list (ntdll::NtClose returns to 0x00007FFF56FD419B, thread 14736).
2026-05-29 05:08:20,455 [root] DEBUG: 14732: caller_dispatch: Scanning calling region at 0x00007FFF56FD0000...
2026-05-29 05:08:20,471 [root] INFO: Process with pid 14732 has terminated
2026-05-29 05:08:21,066 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 15732: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:21,067 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 15732
2026-05-29 05:08:21,068 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 15732
2026-05-29 05:08:21,391 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 15816: C:\Windows\System32\svchost.exe, ImageBase: 0x00007FF7BF220000
2026-05-29 05:08:21,395 [root] INFO: Announced 64-bit process name: svchost.exe pid: 15816
2026-05-29 05:08:21,397 [lib.api.process] INFO: Monitor config for process 15816: C:\lpw_albt\dll\15816.ini
2026-05-29 05:08:21,398 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:21,400 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:21,405 [root] DEBUG: Loader: Injecting process 15816 (thread 15820) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:21,406 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:21,407 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:21,409 [lib.api.process] INFO: Injected into 64-bit <Process 15816 svchost.exe>
2026-05-29 05:08:21,410 [root] INFO: Announced 64-bit process name: svchost.exe pid: 15816
2026-05-29 05:08:21,411 [lib.api.process] INFO: Monitor config for process 15816: C:\lpw_albt\dll\15816.ini
2026-05-29 05:08:21,411 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:21,413 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:21,419 [root] DEBUG: Loader: Injecting process 15816 (thread 15820) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:21,421 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:21,422 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:21,424 [lib.api.process] INFO: Injected into 64-bit <Process 15816 svchost.exe>
2026-05-29 05:08:21,428 [root] INFO: Announced 64-bit process name: svchost.exe pid: 15816
2026-05-29 05:08:21,428 [lib.api.process] INFO: Monitor config for process 15816: C:\lpw_albt\dll\15816.ini
2026-05-29 05:08:21,429 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:21,430 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:21,437 [root] DEBUG: Loader: Injecting process 15816 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:21,439 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 15820, handle 0x68
2026-05-29 05:08:21,440 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:21,440 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:21,443 [lib.api.process] INFO: Injected into 64-bit <Process 15816 svchost.exe>
2026-05-29 05:08:21,455 [root] DEBUG: 15816: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:21,458 [root] DEBUG: 15816: Interactive desktop enabled.
2026-05-29 05:08:21,458 [root] DEBUG: 15816: Dropped file limit defaulting to 100.
2026-05-29 05:08:21,459 [root] DEBUG: 15816: parent_has_path: unable to open parent process 676
2026-05-29 05:08:21,461 [root] DEBUG: 15816: Disabling sleep skipping.
2026-05-29 05:08:21,462 [root] DEBUG: 15816: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:21,475 [root] DEBUG: 15816: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:21,476 [root] DEBUG: 15816: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:21,477 [root] DEBUG: 15816: Monitor initialised: 64-bit capemon loaded in process 15816 at 0x00007FFF17B00000, thread 15820, image base 0x00007FF7BF220000, stack from 0x00000046D1554000-0x00000046D1560000
2026-05-29 05:08:21,477 [root] DEBUG: 15816: Commandline: C:\Windows\System32\svchost.exe -k smphost
2026-05-29 05:08:21,492 [root] DEBUG: 15816: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:21,515 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:21,516 [root] DEBUG: 15816: set_hooks: Unable to hook LockResource
2026-05-29 05:08:21,520 [root] DEBUG: 15816: Hooked 627 out of 628 functions
2026-05-29 05:08:21,522 [root] DEBUG: 15816: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:21,527 [root] DEBUG: 15816: RestoreHeaders: Restored original import table.
2026-05-29 05:08:21,528 [root] INFO: Loaded monitor into process with pid 15816
2026-05-29 05:08:21,530 [root] DEBUG: 15816: caller_dispatch: Added region at 0x00007FF7BF220000 to tracked regions list (kernel32::GetCommandLineW returns to 0x00007FF7BF2250EA, thread 15820).
2026-05-29 05:08:21,530 [root] DEBUG: 15816: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:21,531 [root] DEBUG: 15816: ProcessImageBase: Main module image at 0x00007FF7BF220000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:21,552 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4D1F0000: c:\windows\system32\miutils (0x60000 bytes).
2026-05-29 05:08:21,553 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4D030000: c:\windows\system32\mi (0x23000 bytes).
2026-05-29 05:08:21,553 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4D000000: c:\windows\system32\smphost (0xb000 bytes).
2026-05-29 05:08:21,554 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\WLDP (0x2d000 bytes).
2026-05-29 05:08:21,571 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3FB00000: C:\Windows\SYSTEM32\SXSHARED (0x11000 bytes).
2026-05-29 05:08:21,573 [root] DEBUG: 15816: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:08:21,574 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4D670000: C:\Windows\SYSTEM32\srvcli (0x28000 bytes).
2026-05-29 05:08:21,575 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56A30000: C:\Windows\SYSTEM32\netutils (0xc000 bytes).
2026-05-29 05:08:21,575 [root] DEBUG: 15816: DLL loaded at 0x00007FFF520C0000: C:\Windows\SYSTEM32\WMICLNT (0x11000 bytes).
2026-05-29 05:08:21,576 [root] DEBUG: 15816: DLL loaded at 0x00007FFF572F0000: C:\Windows\SYSTEM32\DEVOBJ (0x33000 bytes).
2026-05-29 05:08:21,576 [root] DEBUG: 15816: DLL loaded at 0x00007FFF52420000: C:\Windows\SYSTEM32\wevtapi (0x65000 bytes).
2026-05-29 05:08:21,577 [root] DEBUG: 15816: DLL loaded at 0x00007FFF47900000: C:\Windows\SYSTEM32\FLTLIB (0xb000 bytes).
2026-05-29 05:08:21,578 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4C2A0000: C:\Windows\SYSTEM32\VirtDisk (0x13000 bytes).
2026-05-29 05:08:21,579 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56A40000: C:\Windows\SYSTEM32\DNSAPI (0xca000 bytes).
2026-05-29 05:08:21,581 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4B470000: C:\Windows\SYSTEM32\CLUSAPI (0x10a000 bytes).
2026-05-29 05:08:21,582 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4B5C0000: C:\Windows\SYSTEM32\RESUTILS (0x9c000 bytes).
2026-05-29 05:08:21,583 [root] DEBUG: 15816: DLL loaded at 0x00007FFF12CE0000: C:\Windows\SYSTEM32\bcd (0x22000 bytes).
2026-05-29 05:08:21,583 [root] DEBUG: 15816: DLL loaded at 0x00007FFEFB530000: C:\Windows\SYSTEM32\mispace (0x30b000 bytes).
2026-05-29 05:08:21,585 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3FD40000: C:\Windows\System32\ShellCommonCommonProxyStub (0xe4000 bytes).
2026-05-29 05:08:21,585 [root] DEBUG: 15816: DLL loaded at 0x00007FFF569F0000: C:\Windows\SYSTEM32\IPHLPAPI (0x3b000 bytes).
2026-05-29 05:08:21,586 [root] DEBUG: 15816: DLL loaded at 0x00007FFF58B20000: C:\Windows\System32\NSI (0x8000 bytes).
2026-05-29 05:08:21,613 [root] DEBUG: 15816: DLL loaded at 0x00007FFF57350000: C:\Windows\System32\DPAPI (0xa000 bytes).
2026-05-29 05:08:21,614 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4CFC0000: C:\Windows\system32\wmidcom (0x31000 bytes).
2026-05-29 05:08:21,616 [root] DEBUG: 15816: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:21,617 [root] DEBUG: 15816: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:21,621 [root] DEBUG: 15816: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:21,626 [root] DEBUG: 15816: DLL loaded at 0x00007FFF16070000: C:\Windows\system32\wmitomi (0x3a000 bytes).
2026-05-29 05:08:21,646 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4DE90000: C:\Windows\SYSTEM32\wbemcomn (0x90000 bytes).
2026-05-29 05:08:21,647 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3F9F0000: C:\Windows\system32\wbem\FastProx (0x10b000 bytes).
2026-05-29 05:08:21,647 [root] DEBUG: 15816: DLL loaded at 0x00007FFF153C0000: C:\Windows\system32\wbem\wmidcprv (0x35000 bytes).
2026-05-29 05:08:21,650 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3FD20000: C:\Windows\system32\wbem\wbemprox (0x11000 bytes).
2026-05-29 05:08:21,659 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3F950000: C:\Windows\system32\wbem\wbemsvc (0x14000 bytes).
2026-05-29 05:08:21,676 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3F880000: C:\Windows\SYSTEM32\amsi (0x1f000 bytes).
2026-05-29 05:08:21,678 [root] DEBUG: 15816: DLL loaded at 0x00007FFF57520000: C:\Windows\SYSTEM32\USERENV (0x2e000 bytes).
2026-05-29 05:08:21,680 [root] DEBUG: 15816: DLL loaded at 0x00007FFF57560000: C:\Windows\SYSTEM32\profapi (0x25000 bytes).
2026-05-29 05:08:21,688 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3F830000: C:\Program Files\Windows Defender\MpOav (0x44000 bytes).
2026-05-29 05:08:21,693 [root] DEBUG: 15816: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\version (0xa000 bytes).
2026-05-29 05:08:21,696 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4D250000: C:\Windows\system32\wbem\wmiutils (0x28000 bytes).
2026-05-29 05:08:22,234 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56750000: C:\Windows\SYSTEM32\wkscli (0x19000 bytes).
2026-05-29 05:08:22,270 [root] DEBUG: 15816: DLL loaded at 0x00007FFF434D0000: C:\Windows\System32\cscapi (0x12000 bytes).
2026-05-29 05:08:22,313 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 15048: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:22,316 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 15048
2026-05-29 05:08:22,317 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 15048
2026-05-29 05:08:22,350 [root] DEBUG: 15816: DLL loaded at 0x00007FFF17200000: C:\Windows\SYSTEM32\ulib (0x30000 bytes).
2026-05-29 05:08:22,351 [root] DEBUG: 15816: DLL loaded at 0x00007FFF15380000: C:\Windows\SYSTEM32\IfsUtil (0x3a000 bytes).
2026-05-29 05:08:22,353 [root] DEBUG: 15816: DLL loaded at 0x00007FFF3F970000: C:\Windows\SYSTEM32\FMIFS (0x12000 bytes).
2026-05-29 05:08:22,735 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:08:22,736 [root] DEBUG: 15816: DLL loaded at 0x00007FFF43550000: C:\Windows\SYSTEM32\NETAPI32 (0x19000 bytes).
2026-05-29 05:08:22,737 [root] DEBUG: 15816: DLL loaded at 0x00007FFF52850000: C:\Windows\SYSTEM32\DSROLE (0xa000 bytes).
2026-05-29 05:08:22,739 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-29 05:08:22,739 [root] DEBUG: 15816: DLL loaded at 0x00007FFF4D280000: C:\Windows\SYSTEM32\sscore (0x11000 bytes).
2026-05-29 05:08:22,740 [root] DEBUG: 15816: DLL loaded at 0x00007FFF162A0000: C:\Windows\SYSTEM32\NTDSAPI (0x2a000 bytes).
2026-05-29 05:08:22,740 [root] DEBUG: 15816: DLL loaded at 0x00007FFF58800000: C:\Windows\System32\WLDAP32 (0x56000 bytes).
2026-05-29 05:08:22,740 [root] DEBUG: 15816: DLL loaded at 0x00007FFF56B10000: C:\Windows\SYSTEM32\LOGONCLI (0x43000 bytes).
2026-05-29 05:08:22,741 [root] DEBUG: 15816: DLL loaded at 0x00007FFF15100000: C:\Windows\SYSTEM32\wsp_fs (0x1f2000 bytes).
2026-05-29 05:08:23,046 [root] DEBUG: 15816: DLL loaded at 0x00007FFF55FF0000: C:\Windows\SYSTEM32\tdh (0x11b000 bytes).
2026-05-29 05:08:23,048 [root] DEBUG: 15816: DLL loaded at 0x00007FFF13450000: C:\Windows\SYSTEM32\wsp_sr (0xee000 bytes).
2026-05-29 05:08:23,244 [root] DEBUG: 15816: DLL loaded at 0x00007FFF12430000: C:\Windows\SYSTEM32\wsp_health (0x1b2000 bytes).
2026-05-29 05:08:23,577 [root] INFO: Announced starting service "b'smphost'"
2026-05-29 05:08:24,588 [root] DEBUG: 12120: Successfully installed hook on COM Object function WbemLocator_ConnectServer
2026-05-29 05:08:24,595 [root] DEBUG: 12232: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\SETUPAPI (0x46e000 bytes).
2026-05-29 05:08:24,597 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 16852: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:24,599 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 16860: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:24,599 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 16852
2026-05-29 05:08:24,600 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 16860
2026-05-29 05:08:24,600 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 16852
2026-05-29 05:08:24,601 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 16860
2026-05-29 05:08:24,614 [root] DEBUG: 12232: DLL loaded at 0x00007FFEFB140000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\telclient (0x3ed000 bytes).
2026-05-29 05:08:24,645 [root] DEBUG: 12232: DLL loaded at 0x00007FFEFAAE0000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\oneds (0x33f000 bytes).
2026-05-29 05:08:24,649 [root] DEBUG: 12232: DLL loaded at 0x00007FFF54B30000: C:\Windows\System32\netprofm (0x3f000 bytes).
2026-05-29 05:08:24,650 [root] DEBUG: 12232: DLL loaded at 0x00007FFF572F0000: C:\Windows\SYSTEM32\DEVOBJ (0x33000 bytes).
2026-05-29 05:08:24,652 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:24,653 [root] DEBUG: 12232: DLL loaded at 0x00007FFF15BE0000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\ffmpeg (0x467000 bytes).
2026-05-29 05:08:24,654 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4F560000: C:\Windows\System32\npmproxy (0x10000 bytes).
2026-05-29 05:08:24,662 [root] DEBUG: 15816: Successfully installed hook on COM Object function WbemLocator_ConnectServer
2026-05-29 05:08:24,663 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56250000: C:\Windows\System32\FirewallAPI (0x96000 bytes).
2026-05-29 05:08:24,664 [root] DEBUG: 12232: DLL loaded at 0x00007FFF561E0000: C:\Windows\System32\fwbase (0x36000 bytes).
2026-05-29 05:08:24,676 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56A40000: C:\Windows\System32\DNSAPI (0xca000 bytes).
2026-05-29 05:08:24,676 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4B470000: C:\Windows\SYSTEM32\clusapi (0x10a000 bytes).
2026-05-29 05:08:24,677 [root] DEBUG: 12120: DLL loaded at 0x00007FFF569F0000: C:\Windows\SYSTEM32\IPHLPAPI (0x3b000 bytes).
2026-05-29 05:08:24,678 [root] DEBUG: 12120: DLL loaded at 0x00007FFF58B20000: C:\Windows\System32\NSI (0x8000 bytes).
2026-05-29 05:08:24,679 [root] DEBUG: 12120: DLL loaded at 0x00007FFF434D0000: C:\Windows\SYSTEM32\cscapi (0x12000 bytes).
2026-05-29 05:08:24,708 [root] DEBUG: 12232: DLL loaded at 0x00007FFF12EB0000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\microsoft_shell_integration (0x78000 bytes).
2026-05-29 05:08:24,712 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:24,713 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:24,715 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:24,716 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:24,718 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:24,719 [root] DEBUG: 12232: DLL loaded at 0x00007FFF3F8A0000: C:\Windows\system32\TenantRestrictionsPlugin (0x1b000 bytes).
2026-05-29 05:08:24,719 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:24,722 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:24,724 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:24,725 [root] DEBUG: 12232: DLL loaded at 0x00007FFF55410000: C:\Windows\System32\RMCLIENT (0x2a000 bytes).
2026-05-29 05:08:24,725 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:24,726 [root] DEBUG: 12232: DLL loaded at 0x00007FFF523E0000: C:\Windows\System32\XmlLite (0x36000 bytes).
2026-05-29 05:08:24,727 [root] DEBUG: 12232: DLL loaded at 0x00007FFF40FB0000: C:\Windows\System32\wpnapps (0x15b000 bytes).
2026-05-29 05:08:24,727 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:24,728 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:24,751 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 17256: C:\Windows\system32\wbem\wmiprvse.exe, ImageBase: 0x00007FF7BB740000
2026-05-29 05:08:24,752 [root] INFO: Announced 64-bit process name: WmiPrvSE.exe pid: 17256
2026-05-29 05:08:24,755 [lib.api.process] INFO: Monitor config for process 17256: C:\lpw_albt\dll\17256.ini
2026-05-29 05:08:24,757 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:24,923 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 17284: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe, ImageBase: 0x00007FF741320000
2026-05-29 05:08:24,924 [root] INFO: Announced 64-bit process name: identity_helper.exe pid: 17284
2026-05-29 05:08:24,924 [lib.api.process] INFO: Monitor config for process 17284: C:\lpw_albt\dll\17284.ini
2026-05-29 05:08:24,925 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:25,149 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:25,155 [root] DEBUG: 12232: DLL loaded at 0x00007FFF457F0000: C:\Windows\System32\Windows.ApplicationModel (0xe9000 bytes).
2026-05-29 05:08:25,157 [root] DEBUG: Loader: Injecting process 17256 (thread 17260) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,157 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4F740000: C:\Windows\System32\AppXDeploymentClient (0x102000 bytes).
2026-05-29 05:08:25,161 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:25,162 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4F950000: C:\Windows\system32\wlanapi (0x74000 bytes).
2026-05-29 05:08:25,162 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,164 [lib.api.process] INFO: Injected into 64-bit <Process 17256 WmiPrvSE.exe>
2026-05-29 05:08:25,166 [root] INFO: Announced 64-bit process name: WmiPrvSE.exe pid: 17256
2026-05-29 05:08:25,166 [lib.api.process] INFO: Monitor config for process 17256: C:\lpw_albt\dll\17256.ini
2026-05-29 05:08:25,172 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:25,201 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:25,201 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:25,202 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:25,202 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:25,203 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:25,203 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:25,203 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:25,203 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:25,207 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:25,211 [root] DEBUG: Loader: Injecting process 17284 (thread 17288) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,212 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:25,212 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,214 [lib.api.process] INFO: Injected into 64-bit <Process 17284 identity_helper.exe>
2026-05-29 05:08:25,228 [root] DEBUG: 12232: DLL loaded at 0x00007FFF501A0000: C:\Windows\SYSTEM32\capauthz (0x51000 bytes).
2026-05-29 05:08:25,238 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4CBD0000: C:\Windows\SYSTEM32\windows.staterepositorycore (0x11000 bytes).
2026-05-29 05:08:25,240 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 17396: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe, ImageBase: 0x00007FF741320000
2026-05-29 05:08:25,241 [root] INFO: Announced 64-bit process name: identity_helper.exe pid: 17396
2026-05-29 05:08:25,241 [lib.api.process] INFO: Monitor config for process 17396: C:\lpw_albt\dll\17396.ini
2026-05-29 05:08:25,242 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:25,441 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:25,446 [root] DEBUG: Loader: Injecting process 17256 (thread 17260) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,447 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:25,447 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,448 [lib.api.process] INFO: Injected into 64-bit <Process 17256 WmiPrvSE.exe>
2026-05-29 05:08:25,453 [root] DEBUG: 12232: DLL loaded at 0x00007FFF57010000: C:\Windows\SYSTEM32\ncrypt (0x27000 bytes).
2026-05-29 05:08:25,454 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56FD0000: C:\Windows\SYSTEM32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:25,455 [root] DEBUG: 17256: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:25,456 [root] DEBUG: 17256: Interactive desktop enabled.
2026-05-29 05:08:25,457 [root] DEBUG: 17256: Dropped file limit defaulting to 100.
2026-05-29 05:08:25,458 [root] DEBUG: 17256: Disabling sleep skipping.
2026-05-29 05:08:25,459 [root] DEBUG: 17256: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:25,468 [root] DEBUG: 12232: DLL loaded at 0x00007FFF50370000: C:\Windows\system32\PCPKsp (0x118000 bytes).
2026-05-29 05:08:25,471 [root] DEBUG: 17256: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:25,472 [root] DEBUG: 17256: YaraScan: Scanning 0x00007FF7BB740000, size 0x7dcfe
2026-05-29 05:08:25,473 [root] DEBUG: 12232: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:25,474 [root] DEBUG: 12232: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\tbs (0x1b000 bytes).
2026-05-29 05:08:25,475 [root] DEBUG: 17256: Monitor initialised: 64-bit capemon loaded in process 17256 at 0x00007FFF17B00000, thread 17260, image base 0x00007FF7BB740000, stack from 0x0000001E8EB40000-0x0000001E8EB50000
2026-05-29 05:08:25,476 [root] DEBUG: 17256: Commandline: C:\Windows\system32\wbem\wmiprvse.exe -Embedding
2026-05-29 05:08:25,476 [root] DEBUG: 12232: DLL loaded at 0x00007FFF45050000: C:\Windows\system32\ncryptprov (0x5a000 bytes).
2026-05-29 05:08:25,487 [root] DEBUG: 17256: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:25,489 [root] DEBUG: 12232: DLL loaded at 0x00007FFF56D00000: C:\Windows\system32\mswsock (0x6a000 bytes).
2026-05-29 05:08:25,509 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:25,509 [root] DEBUG: 17256: set_hooks: Unable to hook LockResource
2026-05-29 05:08:25,514 [root] DEBUG: 17256: Hooked 627 out of 628 functions
2026-05-29 05:08:25,517 [root] DEBUG: 17256: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:25,522 [root] DEBUG: 17256: RestoreHeaders: Restored original import table.
2026-05-29 05:08:25,523 [root] INFO: Loaded monitor into process with pid 17256
2026-05-29 05:08:25,524 [root] DEBUG: 17256: caller_dispatch: Added region at 0x00007FF7BB740000 to tracked regions list (kernel32::SetUnhandledExceptionFilter returns to 0x00007FF7BB752CD1, thread 17260).
2026-05-29 05:08:25,524 [root] DEBUG: 17256: YaraScan: Scanning 0x00007FF7BB740000, size 0x7dcfe
2026-05-29 05:08:25,534 [root] DEBUG: 17256: ProcessImageBase: Main module image at 0x00007FF7BB740000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:25,542 [root] DEBUG: 17256: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:25,544 [root] DEBUG: 17256: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:25,549 [root] DEBUG: 17256: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:25,553 [root] DEBUG: 17256: DLL loaded at 0x00007FFF3FD20000: C:\Windows\system32\wbem\wbemprox (0x11000 bytes).
2026-05-29 05:08:25,561 [root] DEBUG: 17256: DLL loaded at 0x00007FFF3F950000: C:\Windows\system32\wbem\wbemsvc (0x14000 bytes).
2026-05-29 05:08:25,589 [root] DEBUG: 17256: DLL loaded at 0x00007FFF4D250000: C:\Windows\system32\wbem\wmiutils (0x28000 bytes).
2026-05-29 05:08:25,605 [root] DEBUG: 17256: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:25,608 [root] DEBUG: 17256: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:08:25,609 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:25,609 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:25,609 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:25,609 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:25,609 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:25,609 [root] DEBUG: 17256: DLL loaded at 0x00007FFF3EFA0000: C:\Windows\system32\umpowmi (0x1b000 bytes).
2026-05-29 05:08:25,610 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:25,610 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:25,610 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:25,611 [root] DEBUG: 17256: DLL loaded at 0x00007FFF57470000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-29 05:08:25,621 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:25,628 [root] DEBUG: Loader: Injecting process 17396 (thread 17400) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,629 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:25,630 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,631 [lib.api.process] INFO: Injected into 64-bit <Process 17396 identity_helper.exe>
2026-05-29 05:08:25,633 [root] INFO: Announced 64-bit process name: identity_helper.exe pid: 17396
2026-05-29 05:08:25,634 [lib.api.process] INFO: Monitor config for process 17396: C:\lpw_albt\dll\17396.ini
2026-05-29 05:08:25,634 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:25,668 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 17672: C:\Windows\system32\wbem\wmiprvse.exe, ImageBase: 0x00007FF7BB740000
2026-05-29 05:08:25,669 [root] INFO: Announced 64-bit process name: WmiPrvSE.exe pid: 17672
2026-05-29 05:08:25,670 [lib.api.process] INFO: Monitor config for process 17672: C:\lpw_albt\dll\17672.ini
2026-05-29 05:08:25,671 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:25,836 [root] DEBUG: 4484: OpenProcessHandler: Image base for process 12232 (handle 0x2748): 0x00007FF64C440000.
2026-05-29 05:08:25,919 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:25,920 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:25,921 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:25,921 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:25,921 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:25,921 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:25,922 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:25,922 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:25,925 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:25,930 [root] DEBUG: Loader: Injecting process 17396 (thread 17400) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,931 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:25,932 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,934 [lib.api.process] INFO: Injected into 64-bit <Process 17396 identity_helper.exe>
2026-05-29 05:08:25,954 [root] DEBUG: 17396: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:25,955 [root] DEBUG: 17396: Interactive desktop enabled.
2026-05-29 05:08:25,956 [root] DEBUG: 17396: Dropped file limit defaulting to 100.
2026-05-29 05:08:25,969 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:25,975 [root] DEBUG: Loader: Injecting process 17672 (thread 17676) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,975 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:25,976 [root] DEBUG: 17396: Disabling sleep skipping.
2026-05-29 05:08:25,976 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:25,977 [root] DEBUG: 17396: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:25,979 [lib.api.process] INFO: Injected into 64-bit <Process 17672 WmiPrvSE.exe>
2026-05-29 05:08:25,989 [root] INFO: Announced 64-bit process name: WmiPrvSE.exe pid: 17672
2026-05-29 05:08:25,990 [lib.api.process] INFO: Monitor config for process 17672: C:\lpw_albt\dll\17672.ini
2026-05-29 05:08:25,990 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:26,001 [root] DEBUG: 17396: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:26,003 [root] DEBUG: 17396: YaraScan: Scanning 0x00007FF741320000, size 0x28b4d8
2026-05-29 05:08:26,025 [root] DEBUG: 17396: Monitor initialised: 64-bit capemon loaded in process 17396 at 0x00007FFF17B00000, thread 17400, image base 0x00007FF741320000, stack from 0x00000056EB954000-0x00000056EB960000
2026-05-29 05:08:26,026 [root] DEBUG: 17396: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=windows_package_identity --skip-read-main-dll --metrics-shmem-handle=3864,i,7708259641726008507,1098860568551113656,524288 --field-trial-handle=2388,i,3336204223471599718,16469644603789287764,262144 --variations-seed-version --pseudonymization-salt-handle=2400,i,12018524928290551792,7927467987272636
2026-05-29 05:08:26,027 [root] DEBUG: 17396: add_all_dlls_to_dll_ranges: skipping C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge_elf.dll
2026-05-29 05:08:26,048 [root] DEBUG: 17396: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:26,071 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:26,074 [root] DEBUG: 17396: set_hooks: Unable to hook LockResource
2026-05-29 05:08:26,080 [root] DEBUG: 17396: Hooked 627 out of 628 functions
2026-05-29 05:08:26,100 [root] DEBUG: 17396: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:26,106 [root] DEBUG: 17396: RestoreHeaders: Restored original import table.
2026-05-29 05:08:26,107 [root] INFO: Loaded monitor into process with pid 17396
2026-05-29 05:08:26,108 [root] DEBUG: 17396: YaraScan: Scanning 0x00007FFF16750000, size 0x4b9994
2026-05-29 05:08:26,269 [root] DEBUG: 4484: api-cap: NtQueryInformationToken hook disabled due to count: 5000
2026-05-29 05:08:26,271 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:26,278 [root] DEBUG: Loader: Injecting process 17672 (thread 17676) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,280 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:26,281 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,282 [lib.api.process] INFO: Injected into 64-bit <Process 17672 WmiPrvSE.exe>
2026-05-29 05:08:26,288 [root] DEBUG: 17672: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:26,288 [root] DEBUG: 17672: Interactive desktop enabled.
2026-05-29 05:08:26,289 [root] DEBUG: 17672: Dropped file limit defaulting to 100.
2026-05-29 05:08:26,291 [root] DEBUG: 17672: Disabling sleep skipping.
2026-05-29 05:08:26,293 [root] DEBUG: 17672: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:26,293 [root] DEBUG: 4484: api-cap: RegCloseKey hook disabled due to count: 5000
2026-05-29 05:08:26,305 [root] DEBUG: 17672: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:26,305 [root] DEBUG: 17672: YaraScan: Scanning 0x00007FF7BB740000, size 0x7dcfe
2026-05-29 05:08:26,313 [root] DEBUG: 17672: Monitor initialised: 64-bit capemon loaded in process 17672 at 0x00007FFF17B00000, thread 17676, image base 0x00007FF7BB740000, stack from 0x000000BCD41A0000-0x000000BCD41B0000
2026-05-29 05:08:26,314 [root] DEBUG: 17672: Commandline: C:\Windows\system32\wbem\wmiprvse.exe -Embedding
2026-05-29 05:08:26,329 [root] DEBUG: 17672: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:26,341 [root] DEBUG: 12232: CreateProcessHandler: Injection info set for new process 18000: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:08:26,342 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 18000
2026-05-29 05:08:26,343 [root] DEBUG: 12232: ProcessMessage: Skipping monitoring process 18000
2026-05-29 05:08:26,352 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:26,354 [root] DEBUG: 17672: set_hooks: Unable to hook LockResource
2026-05-29 05:08:26,363 [root] DEBUG: 17672: Hooked 627 out of 628 functions
2026-05-29 05:08:26,367 [root] DEBUG: 17672: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:26,374 [root] DEBUG: 17672: RestoreHeaders: Restored original import table.
2026-05-29 05:08:26,375 [root] INFO: Loaded monitor into process with pid 17672
2026-05-29 05:08:26,381 [root] DEBUG: 17672: caller_dispatch: Added region at 0x00007FF7BB740000 to tracked regions list (kernel32::SetUnhandledExceptionFilter returns to 0x00007FF7BB752CD1, thread 17676).
2026-05-29 05:08:26,389 [root] DEBUG: 17672: YaraScan: Scanning 0x00007FF7BB740000, size 0x7dcfe
2026-05-29 05:08:26,395 [root] DEBUG: 17672: ProcessImageBase: Main module image at 0x00007FF7BB740000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:26,400 [root] DEBUG: 17672: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:26,403 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 18072, handle 0x2790: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:26,405 [root] DEBUG: 17672: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:26,406 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 18000, handle 0x2790: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:26,410 [root] DEBUG: 17672: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:26,414 [root] DEBUG: 17672: DLL loaded at 0x00007FFF3FD20000: C:\Windows\system32\wbem\wbemprox (0x11000 bytes).
2026-05-29 05:08:26,425 [root] DEBUG: 17672: DLL loaded at 0x00007FFF3F950000: C:\Windows\system32\wbem\wbemsvc (0x14000 bytes).
2026-05-29 05:08:26,518 [root] INFO: Announced starting service "b'MicrosoftEdgeElevationService'"
2026-05-29 05:08:26,544 [root] DEBUG: 17672: DLL loaded at 0x00007FFF4D250000: C:\Windows\system32\wbem\wmiutils (0x28000 bytes).
2026-05-29 05:08:26,568 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 14412, handle 0x24ac: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe
2026-05-29 05:08:26,586 [root] DEBUG: 17672: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:08:26,587 [root] DEBUG: 17672: DLL loaded at 0x00007FFF3FBE0000: C:\Windows\system32\wbem\esscli (0x7d000 bytes).
2026-05-29 05:08:26,587 [root] DEBUG: 17672: DLL loaded at 0x00007FFF150C0000: C:\Windows\system32\wbem\wmiprov (0x3d000 bytes).
2026-05-29 05:08:26,595 [root] DEBUG: 17672: Successfully installed hook on COM Object function WbemLocator_ConnectServer
2026-05-29 05:08:26,599 [root] DEBUG: 17672: DLL loaded at 0x00007FFF520C0000: C:\Windows\SYSTEM32\WMICLNT (0x11000 bytes).
2026-05-29 05:08:26,601 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 13880: C:\Windows\system32\BackgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:26,602 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 13880
2026-05-29 05:08:26,603 [lib.api.process] INFO: Monitor config for process 13880: C:\lpw_albt\dll\13880.ini
2026-05-29 05:08:26,606 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:26,609 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:26,615 [root] DEBUG: Loader: Injecting process 13880 (thread 14304) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,616 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:26,616 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,618 [lib.api.process] INFO: Injected into 64-bit <Process 13880 backgroundTaskHost.exe>
2026-05-29 05:08:26,619 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 13880
2026-05-29 05:08:26,620 [lib.api.process] INFO: Monitor config for process 13880: C:\lpw_albt\dll\13880.ini
2026-05-29 05:08:26,620 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:26,623 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:26,629 [root] DEBUG: Loader: Injecting process 13880 (thread 14304) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,629 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:26,630 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,631 [lib.api.process] INFO: Injected into 64-bit <Process 13880 backgroundTaskHost.exe>
2026-05-29 05:08:26,632 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 13880
2026-05-29 05:08:26,633 [lib.api.process] INFO: Monitor config for process 13880: C:\lpw_albt\dll\13880.ini
2026-05-29 05:08:26,634 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:26,638 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:26,644 [root] DEBUG: Loader: Injecting process 13880 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,645 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 14304, handle 0x120
2026-05-29 05:08:26,645 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:26,646 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,648 [lib.api.process] INFO: Injected into 64-bit <Process 13880 backgroundTaskHost.exe>
2026-05-29 05:08:26,654 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 14004: C:\Windows\system32\BackgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:26,655 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14004
2026-05-29 05:08:26,655 [lib.api.process] INFO: Monitor config for process 14004: C:\lpw_albt\dll\14004.ini
2026-05-29 05:08:26,672 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:26,675 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:26,680 [root] DEBUG: Loader: Injecting process 14004 (thread 14244) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,683 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:26,685 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,690 [lib.api.process] INFO: Injected into 64-bit <Process 14004 backgroundTaskHost.exe>
2026-05-29 05:08:26,692 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 14004
2026-05-29 05:08:26,692 [lib.api.process] INFO: Monitor config for process 14004: C:\lpw_albt\dll\14004.ini
2026-05-29 05:08:26,702 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:26,707 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:26,713 [root] DEBUG: Loader: Injecting process 14004 (thread 14244) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,714 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:26,717 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:26,719 [lib.api.process] INFO: Injected into 64-bit <Process 14004 backgroundTaskHost.exe>
2026-05-29 05:08:26,720 [root] INFO: Process with pid 14004 has terminated
2026-05-29 05:08:27,048 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4C4E0000: C:\Windows\system32\REGAPI (0x3b000 bytes).
2026-05-29 05:08:27,049 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57010000: C:\Windows\system32\ncrypt (0x27000 bytes).
2026-05-29 05:08:27,050 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4F130000: C:\Windows\system32\DSPARSE (0xc000 bytes).
2026-05-29 05:08:27,051 [root] DEBUG: 12120: DLL loaded at 0x00007FFF12E50000: C:\Windows\system32\tscfgwmi (0x4a000 bytes).
2026-05-29 05:08:27,051 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56FD0000: C:\Windows\system32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:27,054 [root] DEBUG: 12120: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:27,055 [root] DEBUG: 12120: DLL loaded at 0x00007FFF3F8A0000: C:\Windows\system32\cfgbkend (0x18000 bytes).
2026-05-29 05:08:27,065 [root] DEBUG: 12120: DLL loaded at 0x00007FFF515C0000: C:\Windows\SYSTEM32\dhcpcsvc6 (0x17000 bytes).
2026-05-29 05:08:27,067 [root] DEBUG: 12120: DLL loaded at 0x00007FFF515A0000: C:\Windows\SYSTEM32\dhcpcsvc (0x1d000 bytes).
2026-05-29 05:08:27,071 [root] DEBUG: 12120: DLL loaded at 0x00007FFF56D00000: C:\Windows\system32\mswsock (0x6a000 bytes).
2026-05-29 05:08:27,072 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4F200000: C:\Windows\System32\rasadhlp (0xa000 bytes).
2026-05-29 05:08:27,079 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4EE90000: C:\Windows\System32\fwpuclnt (0x80000 bytes).
2026-05-29 05:08:27,110 [root] INFO: Process with pid 12232 appears to have terminated
2026-05-29 05:08:27,111 [root] INFO: Process with pid 17396 appears to have terminated
2026-05-29 05:08:27,529 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 13980: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\elevation_service.exe, ImageBase: 0x00007FF607A60000
2026-05-29 05:08:27,531 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 13980
2026-05-29 05:08:27,533 [lib.api.process] INFO: Monitor config for process 13980: C:\lpw_albt\dll\13980.ini
2026-05-29 05:08:27,534 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:27,617 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:27,619 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,620 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,621 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,623 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:27,624 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,625 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,627 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,628 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,629 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,630 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,643 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:27,645 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,646 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,648 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,649 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:27,650 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,651 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,654 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,656 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,657 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,658 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,665 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:27,666 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,668 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,670 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,671 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:27,672 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,673 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,674 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:27,676 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:27,677 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:27,679 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:28,003 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:28,004 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:28,004 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:28,005 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:28,005 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:28,005 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:28,006 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:28,006 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:28,012 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:28,039 [root] DEBUG: Loader: Injecting process 13980 (thread 13880) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:28,040 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:28,041 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:28,043 [lib.api.process] INFO: Injected into 64-bit <Process 13980 elevation_service.exe>
2026-05-29 05:08:28,046 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 13980
2026-05-29 05:08:28,047 [lib.api.process] INFO: Monitor config for process 13980: C:\lpw_albt\dll\13980.ini
2026-05-29 05:08:28,048 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:28,638 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:28,639 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:28,640 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:28,640 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:28,640 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:28,641 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:28,641 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:28,641 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:28,649 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:28,657 [root] DEBUG: Loader: Injecting process 13980 (thread 13880) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:28,658 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:28,658 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:28,660 [lib.api.process] INFO: Injected into 64-bit <Process 13980 elevation_service.exe>
2026-05-29 05:08:28,661 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 13980
2026-05-29 05:08:28,661 [lib.api.process] INFO: Monitor config for process 13980: C:\lpw_albt\dll\13980.ini
2026-05-29 05:08:28,662 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:29,153 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:29,154 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140.dll
2026-05-29 05:08:29,155 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140.dll
2026-05-29 05:08:29,155 [lib.api.process] INFO: Potential dll side-loading detected in local directory: concrt140.dll
2026-05-29 05:08:29,156 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-29 05:08:29,156 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vccorlib140.dll
2026-05-29 05:08:29,156 [lib.api.process] INFO: Potential dll side-loading detected in local directory: vcruntime140_1.dll
2026-05-29 05:08:29,157 [lib.api.process] INFO: Potential dll side-loading detected in local directory: msvcp140_codecvt_ids.dll
2026-05-29 05:08:29,165 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:29,172 [root] DEBUG: Loader: Injecting process 13980 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:29,173 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 13880, handle 0xe8
2026-05-29 05:08:29,174 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:29,175 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:29,176 [lib.api.process] INFO: Injected into 64-bit <Process 13980 elevation_service.exe>
2026-05-29 05:08:29,187 [root] DEBUG: 13980: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:29,188 [root] DEBUG: 13980: Interactive desktop enabled.
2026-05-29 05:08:29,189 [root] DEBUG: 13980: Dropped file limit defaulting to 100.
2026-05-29 05:08:29,193 [root] DEBUG: 13980: Disabling sleep skipping.
2026-05-29 05:08:29,194 [root] DEBUG: 13980: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:29,206 [root] DEBUG: 13980: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:29,207 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,228 [root] DEBUG: 13980: Monitor initialised: 64-bit capemon loaded in process 13980 at 0x00007FFF17B00000, thread 13880, image base 0x00007FF607A60000, stack from 0x0000000BA2EF4000-0x0000000BA2F00000
2026-05-29 05:08:29,233 [root] DEBUG: 13980: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\elevation_service.exe"
2026-05-29 05:08:29,250 [root] DEBUG: 13980: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:29,273 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:29,274 [root] DEBUG: 13980: set_hooks: Unable to hook LockResource
2026-05-29 05:08:29,281 [root] DEBUG: 13980: Hooked 627 out of 628 functions
2026-05-29 05:08:29,304 [root] DEBUG: 13980: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:29,311 [root] DEBUG: 13980: RestoreHeaders: Restored original import table.
2026-05-29 05:08:29,313 [root] INFO: Loaded monitor into process with pid 13980
2026-05-29 05:08:29,315 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,317 [root] DEBUG: 12120: DLL loaded at 0x00007FFF474B0000: C:\Windows\System32\perfos (0xf000 bytes).
2026-05-29 05:08:29,344 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,368 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,392 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,414 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,436 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,460 [root] DEBUG: 13980: caller_dispatch: Scanning calling region at 0x00007FF607A60000...
2026-05-29 05:08:29,461 [root] DEBUG: 13980: caller_dispatch: Added region at 0x00007FF607A60000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x00007FF607B9B9D6, thread 13880).
2026-05-29 05:08:29,461 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,462 [root] DEBUG: 13980: YaraScan: Scanning 0x00007FF607A60000, size 0x3bf4c0
2026-05-29 05:08:29,487 [root] DEBUG: 13980: ProcessImageBase: Main module image at 0x00007FF607A60000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:29,488 [root] DEBUG: 13980: ProcessImageBase: Main module image at 0x00007FF607A60000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:29,489 [root] DEBUG: 13980: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-29 05:08:29,495 [root] DEBUG: 13980: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:29,503 [root] DEBUG: 13980: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:29,514 [root] DEBUG: 13980: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:29,533 [root] DEBUG: 13980: DLL loaded at 0x00007FFF573C0000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-29 05:08:29,577 [root] DEBUG: 13980: DLL loaded at 0x00007FFF57350000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-29 05:08:29,586 [root] DEBUG: 13980: NtTerminateProcess hook: Attempting to dump process 13980
2026-05-29 05:08:29,589 [root] DEBUG: 13980: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:08:29,596 [root] DEBUG: 13980: caller_dispatch: Added region at 0x00007FFF56FD0000 to tracked regions list (ntdll::NtClose returns to 0x00007FFF56FD419B, thread 13880).
2026-05-29 05:08:29,597 [root] DEBUG: 13980: caller_dispatch: Scanning calling region at 0x00007FFF56FD0000...
2026-05-29 05:08:29,603 [root] INFO: Process with pid 13980 has terminated
2026-05-29 05:08:30,369 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 18888, handle 0x2790: C:\Windows\System32\rundll32.exe
2026-05-29 05:08:31,888 [root] DEBUG: 4484: CreateProcessHandler: Injection info set for new process 19212: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:31,890 [root] INFO: Announced 64-bit process name: chrome.exe pid: 19212
2026-05-29 05:08:31,892 [lib.api.process] INFO: Monitor config for process 19212: C:\lpw_albt\dll\19212.ini
2026-05-29 05:08:31,894 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:31,900 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:31,905 [root] DEBUG: Loader: Injecting process 19212 (thread 19216) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:31,907 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:31,909 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:31,911 [lib.api.process] INFO: Injected into 64-bit <Process 19212 chrome.exe>
2026-05-29 05:08:31,913 [root] INFO: Announced 64-bit process name: chrome.exe pid: 19212
2026-05-29 05:08:31,914 [lib.api.process] INFO: Monitor config for process 19212: C:\lpw_albt\dll\19212.ini
2026-05-29 05:08:31,915 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:31,917 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:31,922 [root] DEBUG: Loader: Injecting process 19212 (thread 19216) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:31,923 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:31,924 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:31,925 [lib.api.process] INFO: Injected into 64-bit <Process 19212 chrome.exe>
2026-05-29 05:08:31,936 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47720000: C:\Windows\SYSTEM32\MPR (0x1d000 bytes).
2026-05-29 05:08:31,937 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47720000: C:\Windows\SYSTEM32\MPR (0x1d000 bytes).
2026-05-29 05:08:31,939 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3D4A0000: C:\Windows\SYSTEM32\pcacli (0x16000 bytes).
2026-05-29 05:08:31,940 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3D4A0000: C:\Windows\SYSTEM32\pcacli (0x16000 bytes).
2026-05-29 05:08:31,942 [root] DEBUG: 4484: DLL loaded at 0x00007FFF453F0000: C:\Windows\System32\sfc_os (0x12000 bytes).
2026-05-29 05:08:31,943 [root] DEBUG: 4484: DLL loaded at 0x00007FFF453F0000: C:\Windows\System32\sfc_os (0x12000 bytes).
2026-05-29 05:08:31,965 [root] DEBUG: 19212: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:31,967 [root] DEBUG: 19212: Interactive desktop enabled.
2026-05-29 05:08:31,968 [root] DEBUG: 19212: Dropped file limit defaulting to 100.
2026-05-29 05:08:31,977 [root] DEBUG: 19212: Chrome-specific hook-set enabled.
2026-05-29 05:08:31,979 [root] DEBUG: 19212: Disabling sleep skipping.
2026-05-29 05:08:31,980 [root] DEBUG: 19212: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:31,993 [root] DEBUG: 19212: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:31,994 [root] DEBUG: 19212: Monitor initialised: 64-bit capemon loaded in process 19212 at 0x00007FFF17B00000, thread 19216, image base 0x00007FF63CBD0000, stack from 0x000000D46A5F4000-0x000000D46A600000
2026-05-29 05:08:31,994 [root] DEBUG: 19212: Commandline: "C:\Program Files\Google\Chrome\Application\chrome.exe"
2026-05-29 05:08:32,006 [root] DEBUG: 19212: Hooked 2 out of 2 functions
2026-05-29 05:08:32,037 [root] DEBUG: 19212: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:32,044 [root] DEBUG: 19212: RestoreHeaders: Restored original import table.
2026-05-29 05:08:32,045 [root] INFO: Loaded monitor into process with pid 19212
2026-05-29 05:08:32,047 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-29 05:08:32,084 [root] DEBUG: 19212: InstrumentationCallback: Added region at 0x00007FFEFA690014 (base 0x00007FFEFA3E0000) to tracked regions list (thread 19216).
2026-05-29 05:08:32,086 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,088 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56770000: C:\Windows\system32\ntmarta (0x33000 bytes).
2026-05-29 05:08:32,091 [root] DEBUG: 19212: caller_dispatch: Added region at 0x00007FF63CBD0000 to tracked regions list (kernel32::CreateProcessInternalW returns to 0x00007FF63CC072AF, thread 19216).
2026-05-29 05:08:32,095 [root] DEBUG: 19212: ProcessImageBase: Main module image at 0x00007FF63CBD0000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:32,100 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268462e+00 (from 6.268295e+00)
2026-05-29 05:08:32,100 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,106 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268462e+00 (from 6.268295e+00)
2026-05-29 05:08:32,107 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,109 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\Wldp (0x2d000 bytes).
2026-05-29 05:08:32,110 [root] DEBUG: 19212: DLL loaded at 0x00007FFF55710000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-29 05:08:32,115 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268462e+00 (from 6.268295e+00)
2026-05-29 05:08:32,116 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,117 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 19444: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:32,117 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 19444
2026-05-29 05:08:32,122 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268462e+00 (from 6.268295e+00)
2026-05-29 05:08:32,123 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,123 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 19444
2026-05-29 05:08:32,138 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 19444, handle 0x1a40: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:32,179 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,181 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,393 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268694e+00 (from 6.268295e+00)
2026-05-29 05:08:32,394 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,405 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,406 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,411 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268695e+00 (from 6.268295e+00)
2026-05-29 05:08:32,412 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,416 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,418 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,419 [root] DEBUG: 19212: DLL loaded at 0x00007FFF453C0000: C:\Windows\SYSTEM32\WINMM (0x27000 bytes).
2026-05-29 05:08:32,419 [root] DEBUG: 19212: DLL loaded at 0x00007FFF49A90000: C:\Windows\SYSTEM32\DWrite (0x27f000 bytes).
2026-05-29 05:08:32,420 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57350000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-29 05:08:32,421 [root] DEBUG: 19212: DLL loaded at 0x00007FFEE9400000: C:\Program Files\Google\Chrome\Application\148.0.7778.217\chrome (0x10fdc000 bytes).
2026-05-29 05:08:32,435 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268695e+00 (from 6.268295e+00)
2026-05-29 05:08:32,436 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,441 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,442 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,443 [root] DEBUG: 19212: DLL loaded at 0x00007FFF45010000: C:\Windows\SYSTEM32\KBDUS (0x9000 bytes).
2026-05-29 05:08:32,450 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,451 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,456 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,456 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,457 [root] DEBUG: 19212: DLL loaded at 0x00007FFF54FC0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-29 05:08:32,471 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,472 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,476 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57520000: C:\Windows\SYSTEM32\USERENV (0x2e000 bytes).
2026-05-29 05:08:32,481 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,483 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,483 [root] DEBUG: 19212: DLL loaded at 0x00007FFF55EC0000: C:\Windows\SYSTEM32\gpapi (0x23000 bytes).
2026-05-29 05:08:32,492 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,494 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,497 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56750000: C:\Windows\SYSTEM32\wkscli (0x19000 bytes).
2026-05-29 05:08:32,506 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,507 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,508 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56A30000: C:\Windows\SYSTEM32\netutils (0xc000 bytes).
2026-05-29 05:08:32,529 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,530 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,538 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268696e+00 (from 6.268295e+00)
2026-05-29 05:08:32,538 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,539 [root] DEBUG: 19212: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\netapi32 (0x19000 bytes).
2026-05-29 05:08:32,544 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,545 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,551 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268697e+00 (from 6.268295e+00)
2026-05-29 05:08:32,553 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,558 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268683e+00 (from 6.268295e+00)
2026-05-29 05:08:32,559 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,560 [root] DEBUG: 19212: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:32,561 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\cryptsp (0x18000 bytes).
2026-05-29 05:08:32,561 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52F20000: C:\Windows\SYSTEM32\DSREG (0x141000 bytes).
2026-05-29 05:08:32,567 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268685e+00 (from 6.268295e+00)
2026-05-29 05:08:32,568 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,569 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57560000: C:\Windows\SYSTEM32\profapi (0x25000 bytes).
2026-05-29 05:08:32,582 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,583 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,589 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,590 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,596 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,597 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,602 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,602 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,609 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,610 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,610 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,611 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,612 [root] DEBUG: 19212: DLL loaded at 0x00007FFF58380000: C:\Windows\System32\MSCTF (0x114000 bytes).
2026-05-29 05:08:32,613 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,614 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,617 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268683e+00 (from 6.268295e+00)
2026-05-29 05:08:32,618 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,619 [root] DEBUG: 19212: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:32,624 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,625 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,626 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:32,630 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,631 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,632 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57470000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-29 05:08:32,637 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,638 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,639 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,640 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,642 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268685e+00 (from 6.268295e+00)
2026-05-29 05:08:32,644 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,645 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268685e+00 (from 6.268295e+00)
2026-05-29 05:08:32,646 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,646 [root] DEBUG: 19212: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:32,649 [root] DEBUG: 19212: DLL loaded at 0x00007FFF12A20000: C:\Windows\SYSTEM32\MDMRegistration (0x68000 bytes).
2026-05-29 05:08:32,650 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268686e+00 (from 6.268295e+00)
2026-05-29 05:08:32,653 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,656 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,657 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,657 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,658 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,663 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,664 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,669 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,670 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,675 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268686e+00 (from 6.268295e+00)
2026-05-29 05:08:32,676 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,680 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,681 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,686 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,687 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,688 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-29 05:08:32,690 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57010000: C:\Windows\SYSTEM32\ncrypt (0x27000 bytes).
2026-05-29 05:08:32,690 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 19788: C:\Windows\system32\svchost.exe, ImageBase: 0x00007FF7BF220000
2026-05-29 05:08:32,691 [root] DEBUG: 19212: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:32,693 [root] INFO: Announced 64-bit process name: svchost.exe pid: 19788
2026-05-29 05:08:32,693 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\tbs (0x1b000 bytes).
2026-05-29 05:08:32,694 [lib.api.process] INFO: Monitor config for process 19788: C:\lpw_albt\dll\19788.ini
2026-05-29 05:08:32,695 [root] DEBUG: 19212: DLL loaded at 0x00007FFF15300000: C:\Windows\SYSTEM32\DMCmnUtils (0x7c000 bytes).
2026-05-29 05:08:32,696 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:32,696 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3F990000: C:\Windows\SYSTEM32\omadmapi (0x3a000 bytes).
2026-05-29 05:08:32,699 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:32,702 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268687e+00 (from 6.268295e+00)
2026-05-29 05:08:32,703 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,704 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56FD0000: C:\Windows\SYSTEM32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:32,704 [root] DEBUG: Loader: Injecting process 19788 (thread 19792) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:32,705 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:32,706 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:32,707 [lib.api.process] INFO: Injected into 64-bit <Process 19788 svchost.exe>
2026-05-29 05:08:32,708 [root] INFO: Announced 64-bit process name: svchost.exe pid: 19788
2026-05-29 05:08:32,711 [lib.api.process] INFO: Monitor config for process 19788: C:\lpw_albt\dll\19788.ini
2026-05-29 05:08:32,711 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:32,713 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268686e+00 (from 6.268295e+00)
2026-05-29 05:08:32,715 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,715 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:32,716 [root] DEBUG: 19212: DLL loaded at 0x00007FFF44D50000: C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.3636_none_60b6a03d71f818d5\COMCTL32 (0x29a000 bytes).
2026-05-29 05:08:32,721 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268683e+00 (from 6.268295e+00)
2026-05-29 05:08:32,721 [root] DEBUG: Loader: Injecting process 19788 (thread 19792) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:32,722 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,724 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:32,725 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:32,726 [lib.api.process] INFO: Injected into 64-bit <Process 19788 svchost.exe>
2026-05-29 05:08:32,728 [root] INFO: Announced 64-bit process name: svchost.exe pid: 19788
2026-05-29 05:08:32,729 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268683e+00 (from 6.268295e+00)
2026-05-29 05:08:32,729 [lib.api.process] INFO: Monitor config for process 19788: C:\lpw_albt\dll\19788.ini
2026-05-29 05:08:32,731 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:32,732 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,734 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:32,736 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268681e+00 (from 6.268295e+00)
2026-05-29 05:08:32,737 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,738 [root] DEBUG: 19212: DLL loaded at 0x00007FFF569F0000: C:\Windows\SYSTEM32\IPHLPAPI (0x3b000 bytes).
2026-05-29 05:08:32,739 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52960000: C:\Windows\system32\NLAapi (0x1d000 bytes).
2026-05-29 05:08:32,740 [root] DEBUG: Loader: Injecting process 19788 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:32,741 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 19792, handle 0x120
2026-05-29 05:08:32,742 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:32,743 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:32,744 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268683e+00 (from 6.268295e+00)
2026-05-29 05:08:32,744 [lib.api.process] INFO: Injected into 64-bit <Process 19788 svchost.exe>
2026-05-29 05:08:32,746 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,748 [root] DEBUG: 19212: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\netapi32 (0x19000 bytes).
2026-05-29 05:08:32,752 [root] DEBUG: 19788: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:32,753 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268683e+00 (from 6.268295e+00)
2026-05-29 05:08:32,754 [root] DEBUG: 19788: Interactive desktop enabled.
2026-05-29 05:08:32,755 [root] DEBUG: 19788: Dropped file limit defaulting to 100.
2026-05-29 05:08:32,756 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,757 [root] DEBUG: 19212: DLL loaded at 0x00007FFF58B20000: C:\Windows\System32\NSI (0x8000 bytes).
2026-05-29 05:08:32,758 [root] DEBUG: 19788: Disabling sleep skipping.
2026-05-29 05:08:32,759 [root] DEBUG: 19788: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:32,764 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268684e+00 (from 6.268295e+00)
2026-05-29 05:08:32,764 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,765 [root] DEBUG: 19212: DLL loaded at 0x00007FFF515C0000: C:\Windows\SYSTEM32\dhcpcsvc6 (0x17000 bytes).
2026-05-29 05:08:32,770 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,771 [root] DEBUG: 19788: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:32,772 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,773 [root] DEBUG: 19788: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:32,774 [root] DEBUG: 19212: DLL loaded at 0x00007FFF515A0000: C:\Windows\SYSTEM32\dhcpcsvc (0x1d000 bytes).
2026-05-29 05:08:32,774 [root] DEBUG: 19788: Monitor initialised: 64-bit capemon loaded in process 19788 at 0x00007FFF17B00000, thread 19792, image base 0x00007FF7BF220000, stack from 0x00000083076A4000-0x00000083076B0000
2026-05-29 05:08:32,775 [root] DEBUG: 19788: Commandline: C:\Windows\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc
2026-05-29 05:08:32,787 [root] DEBUG: 19788: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:32,808 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:32,809 [root] DEBUG: 19788: set_hooks: Unable to hook LockResource
2026-05-29 05:08:32,814 [root] DEBUG: 19788: Hooked 627 out of 628 functions
2026-05-29 05:08:32,815 [root] DEBUG: 19788: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:32,820 [root] DEBUG: 19788: RestoreHeaders: Restored original import table.
2026-05-29 05:08:32,820 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,821 [root] INFO: Loaded monitor into process with pid 19788
2026-05-29 05:08:32,822 [root] DEBUG: 19788: caller_dispatch: Added region at 0x00007FF7BF220000 to tracked regions list (kernel32::GetCommandLineW returns to 0x00007FF7BF2250EA, thread 19792).
2026-05-29 05:08:32,823 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,824 [root] DEBUG: 19788: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:32,825 [root] DEBUG: 19212: DLL loaded at 0x00007FFF48330000: C:\Windows\SYSTEM32\Secur32 (0xc000 bytes).
2026-05-29 05:08:32,825 [root] DEBUG: 19788: ProcessImageBase: Main module image at 0x00007FF7BF220000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:32,829 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,830 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,830 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56A40000: C:\Windows\SYSTEM32\DNSAPI (0xca000 bytes).
2026-05-29 05:08:32,831 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:32,832 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57010000: c:\windows\system32\ncrypt (0x27000 bytes).
2026-05-29 05:08:32,835 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57560000: c:\windows\system32\profapi (0x25000 bytes).
2026-05-29 05:08:32,836 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268691e+00 (from 6.268295e+00)
2026-05-29 05:08:32,836 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57470000: c:\windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:08:32,837 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,841 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:32,841 [root] DEBUG: 19788: DLL loaded at 0x00007FFF129B0000: c:\windows\system32\wbiosrvc (0xde000 bytes).
2026-05-29 05:08:32,842 [root] DEBUG: 19788: DLL loaded at 0x00007FFF56FD0000: c:\windows\system32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:32,843 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268691e+00 (from 6.268295e+00)
2026-05-29 05:08:32,843 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57130000: C:\Windows\System32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:32,845 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,848 [root] DEBUG: 19788: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\WLDP (0x2d000 bytes).
2026-05-29 05:08:32,849 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268691e+00 (from 6.268295e+00)
2026-05-29 05:08:32,850 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,856 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,857 [root] DEBUG: 19788: DLL loaded at 0x00007FFF47940000: C:\Windows\SYSTEM32\winbio (0x31000 bytes).
2026-05-29 05:08:32,858 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,859 [root] DEBUG: 19788: DLL loaded at 0x00007FFF3FC60000: C:\Windows\SYSTEM32\winbioext (0xf000 bytes).
2026-05-29 05:08:32,862 [root] DEBUG: 19788: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:32,863 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,863 [root] DEBUG: 19788: DLL loaded at 0x00007FFF4FA10000: c:\windows\system32\tbs (0x1b000 bytes).
2026-05-29 05:08:32,864 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,866 [root] DEBUG: 19212: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:32,872 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268689e+00 (from 6.268295e+00)
2026-05-29 05:08:32,873 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:08:32,873 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,874 [root] DEBUG: 19788: DLL loaded at 0x00007FFF572F0000: c:\windows\system32\DEVOBJ (0x33000 bytes).
2026-05-29 05:08:32,875 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:32,879 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268689e+00 (from 6.268295e+00)
2026-05-29 05:08:32,881 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,887 [root] DEBUG: 19788: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\SETUPAPI (0x46e000 bytes).
2026-05-29 05:08:32,888 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268689e+00 (from 6.268295e+00)
2026-05-29 05:08:32,889 [root] DEBUG: 19788: DLL loaded at 0x00007FFF4F490000: C:\Windows\system32\DEVRTL (0x14000 bytes).
2026-05-29 05:08:32,890 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,891 [root] DEBUG: 19788: DLL loaded at 0x00007FFF3FC90000: C:\Windows\system32\NEWDEV (0x53000 bytes).
2026-05-29 05:08:32,891 [root] DEBUG: 19788: DLL loaded at 0x00007FFF11F50000: C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\FACEBOOTSTRAPADAPTER (0xa2000 bytes).
2026-05-29 05:08:32,895 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,896 [root] DEBUG: 19788: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:32,897 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,899 [root] DEBUG: 19788: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:32,903 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,903 [root] DEBUG: 19788: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:32,904 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,905 [root] DEBUG: 19788: DLL loaded at 0x00007FFF48630000: C:\Windows\System32\Windows.Devices.Enumeration (0x87000 bytes).
2026-05-29 05:08:32,909 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,909 [root] DEBUG: 19788: DLL loaded at 0x00007FFF52860000: C:\Windows\System32\PROPSYS (0xf6000 bytes).
2026-05-29 05:08:32,910 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,911 [root] DEBUG: 19212: DLL loaded at 0x00007FFF54850000: C:\Windows\System32\CoreMessaging (0xf2000 bytes).
2026-05-29 05:08:32,912 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52DC0000: C:\Windows\SYSTEM32\wintypes (0x155000 bytes).
2026-05-29 05:08:32,913 [root] DEBUG: 19212: DLL loaded at 0x00007FFF54170000: C:\Windows\System32\CoreUIComponents (0x35b000 bytes).
2026-05-29 05:08:32,914 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4B680000: C:\Windows\SYSTEM32\textinputframework (0xf9000 bytes).
2026-05-29 05:08:32,922 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268689e+00 (from 6.268295e+00)
2026-05-29 05:08:32,923 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,924 [root] DEBUG: 19212: DLL loaded at 0x00007FFF517C0000: C:\Windows\System32\twinapi.appcore (0x203000 bytes).
2026-05-29 05:08:32,930 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268691e+00 (from 6.268295e+00)
2026-05-29 05:08:32,931 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,931 [root] DEBUG: 19212: DLL loaded at 0x00007FFF45580000: C:\Windows\system32\twinapi (0xa9000 bytes).
2026-05-29 05:08:32,938 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268691e+00 (from 6.268295e+00)
2026-05-29 05:08:32,938 [root] DEBUG: 19788: DLL loaded at 0x00007FFF4B070000: C:\Windows\System32\StructuredQuery (0xa6000 bytes).
2026-05-29 05:08:32,939 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,946 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,946 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,952 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,954 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,959 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,960 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,963 [root] DEBUG: 19788: DLL loaded at 0x00007FFF48420000: C:\Windows\System32\MSWB7 (0x46000 bytes).
2026-05-29 05:08:32,967 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268688e+00 (from 6.268295e+00)
2026-05-29 05:08:32,968 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,971 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52420000: C:\Windows\SYSTEM32\wevtapi (0x65000 bytes).
2026-05-29 05:08:32,978 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,980 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,990 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,992 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:32,998 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268690e+00 (from 6.268295e+00)
2026-05-29 05:08:32,998 [root] DEBUG: 19788: DLL loaded at 0x00007FFF48210000: C:\Windows\System32\DevDispItemProvider (0x20000 bytes).
2026-05-29 05:08:33,000 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,004 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,006 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,010 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268704e+00 (from 6.268295e+00)
2026-05-29 05:08:33,012 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,014 [root] DEBUG: 19212: DLL loaded at 0x00007FFF51A60000: C:\Windows\System32\WindowManagementAPI (0xa1000 bytes).
2026-05-29 05:08:33,014 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52860000: C:\Windows\System32\PROPSYS (0xf6000 bytes).
2026-05-29 05:08:33,015 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4AF10000: C:\Windows\System32\InputHost (0x152000 bytes).
2026-05-29 05:08:33,016 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4BFB0000: C:\Windows\System32\Windows.UI (0x141000 bytes).
2026-05-29 05:08:33,026 [root] DEBUG: 19788: DLL loaded at 0x00007FFF1EF30000: C:\Windows\System32\Windows.Media (0x726000 bytes).
2026-05-29 05:08:33,028 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,029 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,029 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,029 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,030 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52B00000: C:\Windows\SYSTEM32\WTSAPI32 (0x14000 bytes).
2026-05-29 05:08:33,034 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268704e+00 (from 6.268295e+00)
2026-05-29 05:08:33,037 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,038 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268704e+00 (from 6.268295e+00)
2026-05-29 05:08:33,038 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,044 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,045 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,046 [root] DEBUG: 19212: DLL loaded at 0x00007FFF515E0000: C:\Windows\SYSTEM32\ColorAdapterClient (0x11000 bytes).
2026-05-29 05:08:33,047 [root] DEBUG: 19212: DLL loaded at 0x00007FFF51600000: C:\Windows\SYSTEM32\mscms (0xae000 bytes).
2026-05-29 05:08:33,056 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,056 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,057 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,058 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,059 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,059 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,060 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57360000: C:\Windows\SYSTEM32\WINSTA (0x5b000 bytes).
2026-05-29 05:08:33,063 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,066 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,067 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,067 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,068 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,069 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,072 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 20664: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:33,074 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,075 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,075 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 20664
2026-05-29 05:08:33,076 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,077 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,077 [root] DEBUG: 19788: DLL loaded at 0x00007FFF3BA10000: C:\Windows\system32\MFPlat (0x1bb000 bytes).
2026-05-29 05:08:33,080 [root] DEBUG: 19788: DLL loaded at 0x00007FFEFACA0000: C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\NUIVOICEWBSADAPTERS (0x93000 bytes).
2026-05-29 05:08:33,081 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,083 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,084 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,085 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,085 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,085 [root] DEBUG: 19788: DLL loaded at 0x00007FFF3B9D0000: C:\Windows\system32\RTWorkQ (0x34000 bytes).
2026-05-29 05:08:33,086 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,087 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 20664
2026-05-29 05:08:33,088 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:08:33,092 [root] DEBUG: 19788: DLL loaded at 0x00007FFF17580000: C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\WINBIOSTORAGEADAPTER (0x1f000 bytes).
2026-05-29 05:08:33,093 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,094 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,094 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,094 [root] DEBUG: 19212: DLL loaded at 0x00007FFF572F0000: C:\Windows\System32\DEVOBJ (0x33000 bytes).
2026-05-29 05:08:33,097 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,098 [root] DEBUG: 19212: DLL loaded at 0x00007FFF50520000: C:\Windows\System32\MMDevApi (0x85000 bytes).
2026-05-29 05:08:33,099 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268705e+00 (from 6.268295e+00)
2026-05-29 05:08:33,098 [root] DEBUG: 19788: DLL loaded at 0x00007FFF57350000: C:\Windows\system32\DPAPI (0xa000 bytes).
2026-05-29 05:08:33,102 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,107 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:33,108 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:33,109 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,109 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,114 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 20836: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:33,119 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:33,120 [root] INFO: Announced starting service "b'GoogleChromeElevationService'"
2026-05-29 05:08:33,122 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,122 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 20836
2026-05-29 05:08:33,123 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52560000: C:\Windows\SYSTEM32\WINHTTP (0x10a000 bytes).
2026-05-29 05:08:33,125 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:33,127 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,132 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:33,133 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,134 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 20836
2026-05-29 05:08:33,141 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,142 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,144 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,145 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,146 [root] DEBUG: 19212: DLL loaded at 0x00007FFF49D10000: C:\Windows\System32\Windows.UI.Immersive (0x139000 bytes).
2026-05-29 05:08:33,155 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:33,157 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,163 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:33,164 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,168 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 20948: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:33,169 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 20948
2026-05-29 05:08:33,169 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:33,170 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,171 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:33,174 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,177 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:33,179 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,180 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,181 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 20948
2026-05-29 05:08:33,197 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,201 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,203 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,203 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,205 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,205 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,206 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,221 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,223 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,223 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,224 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,225 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268720e+00 (from 6.268295e+00)
2026-05-29 05:08:33,226 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,226 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,227 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,229 [root] DEBUG: 19212: DLL loaded at 0x00007FFF55410000: C:\Windows\System32\RMCLIENT (0x2a000 bytes).
2026-05-29 05:08:33,232 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,233 [root] DEBUG: 19212: DLL loaded at 0x00007FFF523E0000: C:\Windows\System32\XmlLite (0x36000 bytes).
2026-05-29 05:08:33,233 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,234 [root] DEBUG: 19212: DLL loaded at 0x00007FFF40FB0000: C:\Windows\System32\wpnapps (0x15b000 bytes).
2026-05-29 05:08:33,235 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,235 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,250 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,255 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,259 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,265 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,266 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,273 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,275 [root] DEBUG: 19212: DLL loaded at 0x00007FFF52490000: C:\Windows\SYSTEM32\usermgrcli (0x16000 bytes).
2026-05-29 05:08:33,292 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,295 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,295 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,296 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268748e+00 (from 6.268295e+00)
2026-05-29 05:08:33,297 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,298 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,306 [root] DEBUG: 19212: DLL loaded at 0x00007FFF19960000: C:\Windows\System32\CryptoWinRT (0x61000 bytes).
2026-05-29 05:08:33,310 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268752e+00 (from 6.268295e+00)
2026-05-29 05:08:33,311 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268752e+00 (from 6.268295e+00)
2026-05-29 05:08:33,312 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,312 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,314 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,315 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,317 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,320 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,320 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,321 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56250000: C:\Windows\System32\FirewallAPI (0x96000 bytes).
2026-05-29 05:08:33,321 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,322 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,324 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,326 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,327 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,331 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,332 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,333 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,334 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,335 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,338 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,341 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,341 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,342 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,344 [root] DEBUG: 19212: DLL loaded at 0x00007FFF50870000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-29 05:08:33,347 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,348 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,351 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,352 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,353 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,354 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,359 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,360 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,360 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,361 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,363 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,364 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,368 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,369 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57010000: C:\Windows\System32\ncrypt (0x27000 bytes).
2026-05-29 05:08:33,369 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,372 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,372 [root] DEBUG: 19212: DLL loaded at 0x00007FFF51040000: C:\Windows\System32\cryptngc (0x77000 bytes).
2026-05-29 05:08:33,373 [root] INFO: Announced starting service "b'WaaSMedicSvc'"
2026-05-29 05:08:33,373 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,375 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,376 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,377 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,378 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,378 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,379 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56FD0000: C:\Windows\System32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:33,379 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,380 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,381 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,385 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,386 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,387 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,388 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,391 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,394 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,398 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,399 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,404 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,404 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,405 [root] DEBUG: 19212: DLL loaded at 0x00007FFF55EF0000: C:\Windows\system32\dxgi (0xf3000 bytes).
2026-05-29 05:08:33,406 [root] DEBUG: 19212: DLL loaded at 0x00007FFF53070000: C:\Windows\system32\d3d11 (0x263000 bytes).
2026-05-29 05:08:33,407 [root] DEBUG: 19212: DLL loaded at 0x00007FFF538A0000: C:\Windows\system32\dcomp (0x1e3000 bytes).
2026-05-29 05:08:33,407 [root] DEBUG: 19212: DLL loaded at 0x00007FFF43630000: C:\Windows\system32\dataexchange (0x3e000 bytes).
2026-05-29 05:08:33,412 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,413 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,414 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,414 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,416 [root] DEBUG: 19212: DLL loaded at 0x00007FFF19930000: C:\Windows\system32\ngcksp (0x27000 bytes).
2026-05-29 05:08:33,419 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,420 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,421 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,422 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,424 [root] DEBUG: 19212: DLL loaded at 0x00007FFF43590000: C:\Windows\SYSTEM32\LINKINFO (0xd000 bytes).
2026-05-29 05:08:33,425 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268749e+00 (from 6.268295e+00)
2026-05-29 05:08:33,426 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,430 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,431 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,436 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,437 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,441 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,442 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,450 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 21628: C:\Windows\system32\svchost.exe, ImageBase: 0x00007FF7BF220000
2026-05-29 05:08:33,451 [root] INFO: Announced 64-bit process name: svchost.exe pid: 21628
2026-05-29 05:08:33,452 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,452 [lib.api.process] INFO: Monitor config for process 21628: C:\lpw_albt\dll\21628.ini
2026-05-29 05:08:33,453 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,456 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:33,461 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:33,468 [root] DEBUG: Loader: Injecting process 21628 (thread 21632) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:33,469 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,469 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:33,470 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,470 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:33,471 [lib.api.process] INFO: Injected into 64-bit <Process 21628 svchost.exe>
2026-05-29 05:08:33,472 [root] INFO: Announced 64-bit process name: svchost.exe pid: 21628
2026-05-29 05:08:33,473 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,473 [lib.api.process] INFO: Monitor config for process 21628: C:\lpw_albt\dll\21628.ini
2026-05-29 05:08:33,474 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,474 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:33,475 [root] DEBUG: 19212: DLL loaded at 0x00007FFF1EF30000: C:\Windows\System32\Windows.Media (0x726000 bytes).
2026-05-29 05:08:33,478 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:33,480 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,481 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,484 [root] DEBUG: Loader: Injecting process 21628 (thread 21632) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:33,486 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:33,487 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:33,489 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,489 [lib.api.process] INFO: Injected into 64-bit <Process 21628 svchost.exe>
2026-05-29 05:08:33,489 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,491 [root] INFO: Announced 64-bit process name: svchost.exe pid: 21628
2026-05-29 05:08:33,491 [lib.api.process] INFO: Monitor config for process 21628: C:\lpw_albt\dll\21628.ini
2026-05-29 05:08:33,492 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:33,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,495 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:33,497 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,499 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 21776: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:33,500 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,500 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 21776
2026-05-29 05:08:33,501 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,504 [root] DEBUG: Loader: Injecting process 21628 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:33,505 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 21632, handle 0xec
2026-05-29 05:08:33,505 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,506 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:33,507 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,507 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:33,508 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 21776
2026-05-29 05:08:33,508 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,509 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,509 [lib.api.process] INFO: Injected into 64-bit <Process 21628 svchost.exe>
2026-05-29 05:08:33,513 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,517 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,518 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,518 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,518 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,519 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,519 [root] DEBUG: 21628: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:33,520 [root] DEBUG: 21628: Interactive desktop enabled.
2026-05-29 05:08:33,521 [root] DEBUG: 21628: Dropped file limit defaulting to 100.
2026-05-29 05:08:33,524 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,525 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,525 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,526 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,529 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,529 [root] DEBUG: 19212: DLL loaded at 0x00007FFF43990000: C:\Windows\SYSTEM32\OLEACC (0x66000 bytes).
2026-05-29 05:08:33,530 [root] DEBUG: 21628: Disabling sleep skipping.
2026-05-29 05:08:33,531 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,532 [root] DEBUG: 21628: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:33,533 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 21948: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:33,538 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 21948
2026-05-29 05:08:33,539 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,542 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,543 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,544 [root] DEBUG: 21628: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:33,544 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,545 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,545 [root] DEBUG: 21628: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:33,546 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,552 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,553 [root] DEBUG: 21628: Monitor initialised: 64-bit capemon loaded in process 21628 at 0x00007FFF17B00000, thread 21632, image base 0x00007FF7BF220000, stack from 0x000000A3055E4000-0x000000A3055F0000
2026-05-29 05:08:33,554 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 21948
2026-05-29 05:08:33,554 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,554 [root] DEBUG: 21628: Commandline: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
2026-05-29 05:08:33,556 [root] DEBUG: 19212: DLL loaded at 0x00007FFF488B0000: C:\Windows\system32\directmanipulation (0x9d000 bytes).
2026-05-29 05:08:33,556 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,559 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,560 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,562 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,568 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,569 [root] DEBUG: 21628: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:33,570 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,570 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,571 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,571 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,572 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,613 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,628 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,629 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:33,630 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,631 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,631 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,632 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,632 [root] DEBUG: 19212: DLL loaded at 0x00007FFF55220000: C:\Windows\SYSTEM32\dwmapi (0x2f000 bytes).
2026-05-29 05:08:33,633 [root] DEBUG: 21628: set_hooks: Unable to hook LockResource
2026-05-29 05:08:33,633 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268753e+00 (from 6.268295e+00)
2026-05-29 05:08:33,634 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,642 [root] DEBUG: 21628: Hooked 627 out of 628 functions
2026-05-29 05:08:33,643 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,643 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,645 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,645 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,646 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,647 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,650 [root] DEBUG: 21628: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:33,651 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,652 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,654 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,655 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,656 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,656 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,663 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 22256: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:33,668 [root] DEBUG: 21628: RestoreHeaders: Restored original import table.
2026-05-29 05:08:33,670 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,675 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 22256
2026-05-29 05:08:33,676 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,677 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,677 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,678 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,678 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,682 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,689 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,691 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,692 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,691 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,693 [root] INFO: Loaded monitor into process with pid 21628
2026-05-29 05:08:33,694 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,695 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,695 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4F950000: C:\Windows\system32\wlanapi (0x74000 bytes).
2026-05-29 05:08:33,696 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,697 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,701 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 22256
2026-05-29 05:08:33,702 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,702 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,703 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,706 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,706 [root] DEBUG: 21628: caller_dispatch: Added region at 0x00007FF7BF220000 to tracked regions list (kernel32::GetCommandLineW returns to 0x00007FF7BF2250EA, thread 21632).
2026-05-29 05:08:33,706 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,712 [root] DEBUG: 21628: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:33,712 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,713 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,714 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,714 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,715 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,720 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,724 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,728 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,736 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,736 [root] DEBUG: 21628: ProcessImageBase: Main module image at 0x00007FF7BF220000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:33,737 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,746 [root] DEBUG: 21628: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:33,747 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,747 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,748 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,752 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,752 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,753 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,758 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,760 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,761 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,761 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,762 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:33,765 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,765 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:33,770 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:33,771 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,772 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,773 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,773 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,776 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,777 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,777 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,778 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,779 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,779 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,780 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,780 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,781 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,783 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,783 [root] DEBUG: 21628: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:33,784 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,785 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,785 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,785 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,787 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,788 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,788 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,789 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-29 05:08:33,790 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,795 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,795 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,795 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,796 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,799 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,800 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,800 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,801 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,800 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,803 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56630000: C:\Windows\system32\rsaenh (0x34000 bytes).
2026-05-29 05:08:33,808 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,810 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,811 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,811 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,813 [root] DEBUG: 21628: DLL loaded at 0x00007FFF563D0000: c:\windows\system32\AUTHZ (0x4f000 bytes).
2026-05-29 05:08:33,814 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,815 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,815 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57010000: c:\windows\system32\ncrypt (0x27000 bytes).
2026-05-29 05:08:33,823 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,825 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,828 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,830 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,831 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,834 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,835 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,836 [root] DEBUG: 21628: DLL loaded at 0x00007FFF56A30000: c:\windows\system32\netutils (0xc000 bytes).
2026-05-29 05:08:33,836 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,837 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:08:33,837 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,838 [root] DEBUG: 21628: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:08:33,839 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57560000: c:\windows\system32\profapi (0x25000 bytes).
2026-05-29 05:08:33,840 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,841 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:08:33,842 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,843 [root] DEBUG: 21628: DLL loaded at 0x00007FFF572F0000: c:\windows\system32\DEVOBJ (0x33000 bytes).
2026-05-29 05:08:33,844 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,844 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,844 [root] DEBUG: 21628: DLL loaded at 0x00007FFEFABB0000: c:\windows\system32\ngcsvc (0xed000 bytes).
2026-05-29 05:08:33,846 [root] DEBUG: 21628: DLL loaded at 0x00007FFF56FD0000: c:\windows\system32\NTASN1 (0x3b000 bytes).
2026-05-29 05:08:33,846 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,848 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57470000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-29 05:08:33,849 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,849 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,850 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,853 [root] DEBUG: 21628: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\WLDP (0x2d000 bytes).
2026-05-29 05:08:33,853 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,854 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,855 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,856 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,859 [root] DEBUG: 21628: DLL loaded at 0x00007FFF52490000: C:\Windows\SYSTEM32\usermgrcli (0x16000 bytes).
2026-05-29 05:08:33,860 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,861 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,862 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,864 [root] DEBUG: 21628: DLL loaded at 0x00007FFF52B00000: C:\Windows\SYSTEM32\wtsapi32 (0x14000 bytes).
2026-05-29 05:08:33,865 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,865 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,866 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,871 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,872 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,874 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,875 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,876 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,877 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,878 [root] DEBUG: 21628: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:33,879 [root] DEBUG: 21628: DLL loaded at 0x00007FFF4FA10000: c:\windows\system32\tbs (0x1b000 bytes).
2026-05-29 05:08:33,882 [root] DEBUG: 21628: DLL loaded at 0x00007FFF57360000: C:\Windows\SYSTEM32\winsta (0x5b000 bytes).
2026-05-29 05:08:33,882 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,883 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,888 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,889 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,893 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,895 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,899 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,900 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,904 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,905 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,910 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,912 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,916 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,917 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,921 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,926 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,927 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,932 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,933 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,937 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,938 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,942 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,943 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,947 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,948 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,952 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,953 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,957 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,958 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,963 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,963 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,968 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,969 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,973 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,974 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,978 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,978 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,987 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,988 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:33,994 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:33,995 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,001 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,001 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,002 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,002 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,003 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,004 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,005 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,005 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,007 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,010 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,011 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,011 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,012 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,013 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,013 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,014 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,014 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,021 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,021 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,022 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,026 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,027 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,032 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,033 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,033 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,034 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,039 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,040 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,045 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,045 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,049 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,050 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,056 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,056 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,060 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,061 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,065 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,066 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,072 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,073 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,078 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,079 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,084 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,085 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,091 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,094 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,099 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,101 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,106 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,107 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,113 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,113 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,117 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,118 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,122 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,123 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,125 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 23296: C:\Program Files\Google\Chrome\Application\148.0.7778.217\elevation_service.exe, ImageBase: 0x00007FF677C70000
2026-05-29 05:08:34,126 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 23296
2026-05-29 05:08:34,127 [lib.api.process] INFO: Monitor config for process 23296: C:\lpw_albt\dll\23296.ini
2026-05-29 05:08:34,127 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,128 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,128 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,132 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,135 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,136 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,136 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,141 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,142 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,142 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,143 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,143 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,144 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,151 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 23364: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:34,152 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,153 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,154 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,155 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 23364
2026-05-29 05:08:34,155 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,156 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,159 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,159 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,160 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,162 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,167 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,170 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 23364
2026-05-29 05:08:34,170 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,171 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,172 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,176 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,178 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,178 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,178 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,179 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,179 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,184 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 23460: C:\Windows\system32\backgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:34,185 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,186 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,187 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,187 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,188 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,188 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,189 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,190 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,194 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 23460
2026-05-29 05:08:34,195 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,195 [lib.api.process] INFO: Monitor config for process 23460: C:\lpw_albt\dll\23460.ini
2026-05-29 05:08:34,196 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,197 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,198 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,199 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,200 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,200 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,207 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,210 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,211 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,215 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,215 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,218 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,219 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,221 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,222 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,224 [root] DEBUG: Loader: Injecting process 23460 (thread 23464) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,225 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,225 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,227 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,227 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,233 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,235 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:34,235 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,236 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,237 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,238 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,239 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,238 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,240 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,241 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,243 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,243 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,246 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,247 [lib.api.process] INFO: Injected into 64-bit <Process 23460 backgroundTaskHost.exe>
2026-05-29 05:08:34,248 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,247 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,250 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,250 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 23460
2026-05-29 05:08:34,251 [lib.api.process] INFO: Monitor config for process 23460: C:\lpw_albt\dll\23460.ini
2026-05-29 05:08:34,251 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,253 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,255 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,255 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,256 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,258 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,260 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,263 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,264 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,267 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,269 [root] DEBUG: Loader: Injecting process 23460 (thread 23464) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,269 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,270 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,271 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,271 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,272 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,273 [lib.api.process] INFO: Injected into 64-bit <Process 23460 backgroundTaskHost.exe>
2026-05-29 05:08:34,274 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,277 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 23460
2026-05-29 05:08:34,278 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,279 [lib.api.process] INFO: Monitor config for process 23460: C:\lpw_albt\dll\23460.ini
2026-05-29 05:08:34,279 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,280 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,284 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,285 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,286 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,290 [root] DEBUG: Loader: Injecting process 23460 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,292 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 23464, handle 0xfc
2026-05-29 05:08:34,294 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,295 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,297 [lib.api.process] INFO: Injected into 64-bit <Process 23460 backgroundTaskHost.exe>
2026-05-29 05:08:34,309 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 23880: C:\Windows\system32\backgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:34,310 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 23880
2026-05-29 05:08:34,312 [lib.api.process] INFO: Monitor config for process 23880: C:\lpw_albt\dll\23880.ini
2026-05-29 05:08:34,313 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,317 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,318 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,319 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,325 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,325 [root] DEBUG: Loader: Injecting process 23880 (thread 23884) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,326 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,327 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:34,328 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,330 [lib.api.process] INFO: Injected into 64-bit <Process 23880 backgroundTaskHost.exe>
2026-05-29 05:08:34,331 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 23880
2026-05-29 05:08:34,332 [lib.api.process] INFO: Monitor config for process 23880: C:\lpw_albt\dll\23880.ini
2026-05-29 05:08:34,341 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,345 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,350 [root] DEBUG: Loader: Injecting process 23880 (thread 23884) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,351 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,351 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,353 [lib.api.process] INFO: Injected into 64-bit <Process 23880 backgroundTaskHost.exe>
2026-05-29 05:08:34,354 [root] INFO: Process with pid 23880 has terminated
2026-05-29 05:08:34,359 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 24000: C:\Windows\system32\backgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:34,361 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 24000
2026-05-29 05:08:34,361 [lib.api.process] INFO: Monitor config for process 24000: C:\lpw_albt\dll\24000.ini
2026-05-29 05:08:34,363 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,365 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,370 [root] DEBUG: Loader: Injecting process 24000 (thread 24004) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,371 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,372 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:34,373 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,373 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,376 [lib.api.process] INFO: Injected into 64-bit <Process 24000 backgroundTaskHost.exe>
2026-05-29 05:08:34,376 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 24056: C:\Windows\system32\svchost.exe, ImageBase: 0x00007FF7BF220000
2026-05-29 05:08:34,377 [lib.api.process] WARNING: OpenThread(THREAD_ALL_ACCESS, ...) failed for thread 24060
2026-05-29 05:08:34,378 [root] INFO: Announced 64-bit process name: svchost.exe pid: 24056
2026-05-29 05:08:34,378 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 24000
2026-05-29 05:08:34,379 [lib.api.process] INFO: Monitor config for process 24000: C:\lpw_albt\dll\24000.ini
2026-05-29 05:08:34,379 [lib.api.process] INFO: Monitor config for process 24056: C:\lpw_albt\dll\24056.ini
2026-05-29 05:08:34,380 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,383 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,385 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,385 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,390 [root] DEBUG: Loader: Injecting process 24056 (thread 24060) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,391 [root] DEBUG: Loader: Copied config file C:\lpw_albt\dll\24056.ini to system path C:\24056.ini
2026-05-29 05:08:34,393 [root] DEBUG: Loader: Unable to open process, launched: PPLinject64.exe 24056 C:\lpw_albt\dll\uwEeDg.dll
2026-05-29 05:08:34,394 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,395 [root] DEBUG: Loader: Injecting process 24000 (thread 24004) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,396 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,396 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,399 [lib.api.process] INFO: Injected into 64-bit <Process 24056 svchost.exe>
2026-05-29 05:08:34,399 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,400 [lib.api.process] INFO: Injected into 64-bit <Process 24000 backgroundTaskHost.exe>
2026-05-29 05:08:34,401 [lib.api.process] WARNING: OpenThread(THREAD_ALL_ACCESS, ...) failed for thread 24060
2026-05-29 05:08:34,401 [root] INFO: Announced 64-bit process name: svchost.exe pid: 24056
2026-05-29 05:08:34,402 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,404 [lib.api.process] INFO: Monitor config for process 24056: C:\lpw_albt\dll\24056.ini
2026-05-29 05:08:34,405 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,405 [root] INFO: Process with pid 24000 has terminated
2026-05-29 05:08:34,409 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,409 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,411 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,413 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 24216: C:\Windows\system32\backgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:08:34,418 [root] DEBUG: Loader: Injecting process 24056 (thread 24060) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,422 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 24216
2026-05-29 05:08:34,422 [root] DEBUG: Loader: Copied config file C:\lpw_albt\dll\24056.ini to system path C:\24056.ini
2026-05-29 05:08:34,423 [lib.api.process] INFO: Monitor config for process 24216: C:\lpw_albt\dll\24216.ini
2026-05-29 05:08:34,426 [root] DEBUG: Loader: Unable to open process, launched: PPLinject64.exe 24056 C:\lpw_albt\dll\uwEeDg.dll
2026-05-29 05:08:34,426 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,427 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,429 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,430 [lib.api.process] INFO: Injected into 64-bit <Process 24056 svchost.exe>
2026-05-29 05:08:34,432 [root] INFO: Announced 64-bit process name: svchost.exe pid: 24056
2026-05-29 05:08:34,432 [lib.api.process] INFO: Monitor config for process 24056: C:\lpw_albt\dll\24056.ini
2026-05-29 05:08:34,433 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,435 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,439 [root] DEBUG: Loader: Injecting process 24216 (thread 24220) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,441 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:34,442 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,443 [root] DEBUG: Loader: Injecting process 24056 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,448 [lib.api.process] INFO: Injected into 64-bit <Process 24216 backgroundTaskHost.exe>
2026-05-29 05:08:34,450 [root] DEBUG: Loader: Copied config file C:\lpw_albt\dll\24056.ini to system path C:\24056.ini
2026-05-29 05:08:34,451 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,453 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 24216
2026-05-29 05:08:34,453 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,454 [lib.api.process] INFO: Monitor config for process 24216: C:\lpw_albt\dll\24216.ini
2026-05-29 05:08:34,455 [root] DEBUG: Loader: Unable to open process, launched: PPLinject64.exe 24056 C:\lpw_albt\dll\uwEeDg.dll
2026-05-29 05:08:34,455 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,455 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,457 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 24440: C:\Windows\System32\svchost.exe, ImageBase: 0x00007FF7BF220000
2026-05-29 05:08:34,458 [lib.api.process] INFO: Injected into 64-bit <Process 24056 svchost.exe>
2026-05-29 05:08:34,459 [root] INFO: Announced 64-bit process name: svchost.exe pid: 24440
2026-05-29 05:08:34,460 [lib.api.process] INFO: Monitor config for process 24440: C:\lpw_albt\dll\24440.ini
2026-05-29 05:08:34,461 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,463 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,468 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,469 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,471 [root] DEBUG: Loader: Injecting process 24216 (thread 24220) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,472 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,473 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,474 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,476 [lib.api.process] INFO: Injected into 64-bit <Process 24216 backgroundTaskHost.exe>
2026-05-29 05:08:34,478 [root] DEBUG: Loader: Injecting process 24440 (thread 24444) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,478 [root] INFO: Process with pid 24216 has terminated
2026-05-29 05:08:34,479 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:34,480 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,482 [lib.api.process] INFO: Injected into 64-bit <Process 24440 svchost.exe>
2026-05-29 05:08:34,483 [root] INFO: Announced 64-bit process name: svchost.exe pid: 24440
2026-05-29 05:08:34,484 [lib.api.process] INFO: Monitor config for process 24440: C:\lpw_albt\dll\24440.ini
2026-05-29 05:08:34,485 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,488 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,488 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,490 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,496 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,497 [root] DEBUG: Loader: Injecting process 24440 (thread 24444) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,498 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,498 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,500 [lib.api.process] INFO: Injected into 64-bit <Process 24440 svchost.exe>
2026-05-29 05:08:34,502 [root] INFO: Announced 64-bit process name: svchost.exe pid: 24440
2026-05-29 05:08:34,503 [lib.api.process] INFO: Monitor config for process 24440: C:\lpw_albt\dll\24440.ini
2026-05-29 05:08:34,504 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,505 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,505 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,509 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,511 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,512 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,513 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,514 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,518 [root] DEBUG: Loader: Injecting process 24440 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,519 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 24444, handle 0x124
2026-05-29 05:08:34,520 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:34,521 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,521 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,522 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,522 [lib.api.process] INFO: Injected into 64-bit <Process 24440 svchost.exe>
2026-05-29 05:08:34,528 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,529 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,534 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,534 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,537 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,538 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,539 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,540 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,542 [root] DEBUG: 24440: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:34,542 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,543 [root] DEBUG: 24440: Interactive desktop enabled.
2026-05-29 05:08:34,543 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,544 [root] DEBUG: 24440: Dropped file limit defaulting to 100.
2026-05-29 05:08:34,546 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,550 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,551 [root] DEBUG: 24440: Disabling sleep skipping.
2026-05-29 05:08:34,553 [root] DEBUG: 24440: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:34,559 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,560 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,566 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,568 [root] DEBUG: 24440: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:34,568 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,569 [root] DEBUG: 24440: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:34,570 [root] DEBUG: 24440: Monitor initialised: 64-bit capemon loaded in process 24440 at 0x00007FFF17B00000, thread 24444, image base 0x00007FF7BF220000, stack from 0x000000F61DBF4000-0x000000F61DC00000
2026-05-29 05:08:34,571 [root] DEBUG: 24440: Commandline: C:\Windows\System32\svchost.exe -k WerSvcGroup
2026-05-29 05:08:34,577 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,577 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,578 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,580 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,586 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,586 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,588 [root] DEBUG: 24440: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:34,594 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,595 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,600 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,604 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,604 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,605 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,608 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:34,610 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:34,611 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:34,612 [root] DEBUG: 24440: set_hooks: Unable to hook LockResource
2026-05-29 05:08:34,617 [root] DEBUG: 24440: Hooked 627 out of 628 functions
2026-05-29 05:08:34,618 [root] DEBUG: 24440: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:34,625 [root] DEBUG: 24440: RestoreHeaders: Restored original import table.
2026-05-29 05:08:34,627 [root] INFO: Loaded monitor into process with pid 24440
2026-05-29 05:08:34,628 [root] DEBUG: 24440: caller_dispatch: Added region at 0x00007FF7BF220000 to tracked regions list (kernel32::GetCommandLineW returns to 0x00007FF7BF2250EA, thread 24444).
2026-05-29 05:08:34,629 [root] DEBUG: 24440: YaraScan: Scanning 0x00007FF7BF220000, size 0xf06a
2026-05-29 05:08:34,631 [root] DEBUG: 24440: ProcessImageBase: Main module image at 0x00007FF7BF220000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:34,655 [root] DEBUG: 24440: DLL loaded at 0x00007FFF523E0000: c:\windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:08:34,656 [root] DEBUG: 24440: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:34,656 [root] DEBUG: 24440: DLL loaded at 0x00007FFF3E0F0000: c:\windows\system32\WindowsPerformanceRecorderControl (0x12d000 bytes).
2026-05-29 05:08:34,658 [root] DEBUG: 24440: DLL loaded at 0x00007FFF12970000: c:\windows\system32\WerEtw (0x3f000 bytes).
2026-05-29 05:08:34,659 [root] DEBUG: 24440: DLL loaded at 0x00007FFF12C20000: c:\windows\system32\wersvc (0x45000 bytes).
2026-05-29 05:08:34,670 [root] DEBUG: 24440: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\WLDP (0x2d000 bytes).
2026-05-29 05:08:34,675 [root] DEBUG: 24440: DLL loaded at 0x00007FFF55330000: C:\Windows\System32\wer (0xde000 bytes).
2026-05-29 05:08:34,689 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,690 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,696 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,697 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,701 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,702 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,706 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:34,710 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:34,714 [root] DEBUG: 24440: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:08:34,724 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,725 [root] DEBUG: Loader: Injecting process 23296 (thread 23300) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,726 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,727 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:34,728 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:34,733 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,734 [lib.api.process] INFO: Injected into 64-bit <Process 23296 elevation_service.exe>
2026-05-29 05:08:34,735 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,738 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 23296
2026-05-29 05:08:34,739 [lib.api.process] INFO: Monitor config for process 23296: C:\lpw_albt\dll\23296.ini
2026-05-29 05:08:34,740 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:34,741 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,742 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,754 [root] DEBUG: 24440: OpenProcessHandler: Injection info created for process 24124, handle 0x230: C:\lpw_albt\bin\PPLinject64.exe
2026-05-29 05:08:34,754 [root] DEBUG: 24440: OpenProcessHandler: Image base for process 24124 (handle 0x230): 0x00007FF6D9290000.
2026-05-29 05:08:34,761 [root] DEBUG: 24440: DLL loaded at 0x00007FFF55710000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-29 05:08:34,763 [root] DEBUG: 24440: CreateProcessHandler: Injection info set for new process 23908: C:\Windows\system32\WerFault.exe, ImageBase: 0x00007FF60DEA0000
2026-05-29 05:08:34,764 [root] DEBUG: 24440: ProcessMessage: Skipping monitoring process 23908
2026-05-29 05:08:34,766 [root] DEBUG: 24440: ProcessMessage: Skipping monitoring process 23908
2026-05-29 05:08:34,831 [root] DEBUG: 24440: DLL loaded at 0x00007FFF47530000: c:\windows\system32\dbghelp (0x1e4000 bytes).
2026-05-29 05:08:34,832 [root] DEBUG: 24440: DLL loaded at 0x00007FFF474F0000: c:\windows\system32\dbgcore (0x34000 bytes).
2026-05-29 05:08:34,833 [root] DEBUG: 24440: DLL loaded at 0x00007FFF46350000: c:\windows\system32\faultrep (0x7b000 bytes).
2026-05-29 05:08:34,841 [root] DEBUG: 24440: DLL loaded at 0x00007FFF55330000: c:\windows\system32\wer (0xde000 bytes).
2026-05-29 05:08:34,847 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,848 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,852 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,853 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,857 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,858 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,873 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,874 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,877 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:34,878 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,878 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,880 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,880 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,881 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,883 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:34,884 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:34,884 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,886 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:34,886 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,887 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,888 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,889 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,891 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,898 [root] DEBUG: 24440: DLL loaded at 0x00007FFF57520000: c:\windows\system32\USERENV (0x2e000 bytes).
2026-05-29 05:08:34,899 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:34,900 [root] DEBUG: 24440: DLL loaded at 0x00007FFF57560000: c:\windows\system32\profapi (0x25000 bytes).
2026-05-29 05:08:34,901 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,903 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,904 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,905 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:34,906 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,907 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,908 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,909 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,910 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,911 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,916 [root] DEBUG: 24440: CreateProcessHandler: Injection info set for new process 24776: C:\Windows\system32\WerFault.exe, ImageBase: 0x00007FF60DEA0000
2026-05-29 05:08:34,920 [root] DEBUG: 24440: ProcessMessage: Skipping monitoring process 24776
2026-05-29 05:08:34,922 [root] DEBUG: 24440: ProcessMessage: Skipping monitoring process 24776
2026-05-29 05:08:34,926 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:34,927 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,928 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,929 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,930 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 24776, handle 0x29b0: C:\Windows\System32\WerFault.exe
2026-05-29 05:08:34,931 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:34,933 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,935 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,937 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:34,938 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:34,940 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:34,941 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:35,006 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,007 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,016 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,017 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,046 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,048 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,052 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,053 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,058 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,059 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,062 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:35,063 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:35,065 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,066 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,067 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:35,068 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:35,071 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,071 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:35,072 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,073 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:35,077 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,078 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,083 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,083 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,090 [root] INFO: Error dumping file from path "C:\ProgramData\Microsoft\Windows\WER\Temp\WER1FBE.tmp": [Errno 13] Permission denied: 'C:\\ProgramData\\Microsoft\\Windows\\WER\\Temp\\WER1FBE.tmp'
2026-05-29 05:08:35,090 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,092 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,094 [root] INFO: Error dumping file from path "C:\ProgramData\Microsoft\Windows\WER\Temp\WER1FBE.tmp": [Errno 13] Permission denied: 'C:\\ProgramData\\Microsoft\\Windows\\WER\\Temp\\WER1FBE.tmp'
2026-05-29 05:08:35,096 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,097 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,123 [root] DEBUG: 24440: api-rate-cap: NtWriteFile hook disabled due to rate
2026-05-29 05:08:35,143 [root] INFO: Added new file to list with pid 24440 and path C:\ProgramData\Microsoft\Windows\WER\Temp\WER1FBE.tmp.csv
2026-05-29 05:08:35,149 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:35,149 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:35,154 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:35,156 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:35,157 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,158 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,160 [root] DEBUG: 24440: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:08:35,162 [root] DEBUG: 24440: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:08:35,163 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,164 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,170 [root] INFO: Error dumping file from path "C:\ProgramData\Microsoft\Windows\WER\Temp\WER201D.tmp": [Errno 13] Permission denied: 'C:\\ProgramData\\Microsoft\\Windows\\WER\\Temp\\WER201D.tmp'
2026-05-29 05:08:35,170 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,171 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,172 [root] INFO: Error dumping file from path "C:\ProgramData\Microsoft\Windows\WER\Temp\WER201D.tmp": [Errno 13] Permission denied: 'C:\\ProgramData\\Microsoft\\Windows\\WER\\Temp\\WER201D.tmp'
2026-05-29 05:08:35,175 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,177 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,178 [root] INFO: Added new file to list with pid 24440 and path C:\ProgramData\Microsoft\Windows\WER\Temp\WER201D.tmp.txt
2026-05-29 05:08:35,181 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,182 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,188 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,190 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,194 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,195 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,200 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,282 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,283 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,287 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,290 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,295 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,296 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,303 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,304 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,306 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:35,310 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:35,314 [root] DEBUG: Loader: Injecting process 23296 (thread 23300) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:35,315 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:35,316 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:35,317 [lib.api.process] INFO: Injected into 64-bit <Process 23296 elevation_service.exe>
2026-05-29 05:08:35,319 [root] INFO: Announced 64-bit process name: elevation_service.exe pid: 23296
2026-05-29 05:08:35,319 [lib.api.process] INFO: Monitor config for process 23296: C:\lpw_albt\dll\23296.ini
2026-05-29 05:08:35,320 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:35,627 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,628 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,633 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,634 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,641 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,642 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,646 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,647 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,649 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 25276: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:35,659 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 25276
2026-05-29 05:08:35,660 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,660 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,661 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,662 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,663 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,664 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,665 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 25276
2026-05-29 05:08:35,666 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,667 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,670 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,671 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,676 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,676 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,680 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,681 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,682 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,683 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,715 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,716 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,724 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,724 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,737 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,737 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,740 [root] DEBUG: 19212: DLL loaded at 0x00007FFF41D40000: C:\Windows\SYSTEM32\pdh (0x49000 bytes).
2026-05-29 05:08:35,743 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,745 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,752 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,753 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,753 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,754 [root] DEBUG: 19212: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\SETUPAPI (0x46e000 bytes).
2026-05-29 05:08:35,756 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,759 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,760 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,761 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,761 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,762 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,763 [root] DEBUG: 19212: DLL loaded at 0x00007FFF54B30000: C:\Windows\System32\netprofm (0x3f000 bytes).
2026-05-29 05:08:35,766 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,768 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,769 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,769 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,770 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,774 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,775 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,777 [root] DEBUG: 19212: DLL loaded at 0x00007FFF47420000: C:\Windows\System32\Windows.FileExplorer.Common (0x61000 bytes).
2026-05-29 05:08:35,779 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268751e+00 (from 6.268295e+00)
2026-05-29 05:08:35,780 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,783 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,784 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,785 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,786 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,787 [root] DEBUG: 19212: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:35,793 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,795 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,797 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,797 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4F560000: C:\Windows\System32\npmproxy (0x10000 bytes).
2026-05-29 05:08:35,798 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,799 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,800 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,802 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,803 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,804 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,805 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,806 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4D6A0000: C:\Windows\System32\iertutil (0x2bc000 bytes).
2026-05-29 05:08:35,807 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,809 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,811 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,812 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,815 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,817 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,817 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,818 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,819 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,820 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,822 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,824 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,827 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,828 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,829 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,830 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,831 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,831 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,835 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,836 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,837 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,839 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,840 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,841 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,842 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,843 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,847 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,848 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,849 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268750e+00 (from 6.268295e+00)
2026-05-29 05:08:35,850 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,854 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,856 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,857 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,857 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,859 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,859 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,861 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,862 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,867 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,868 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,868 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,870 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,871 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,872 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,873 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,874 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,879 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,880 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,881 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,882 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,882 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,886 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,887 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,888 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,889 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,890 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,894 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,894 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,895 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,896 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,897 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,899 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,900 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,902 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,905 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,906 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,907 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,908 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,913 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,914 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,916 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,916 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,917 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,919 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,919 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,921 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,923 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,924 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,926 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,926 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,928 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,929 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,929 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,930 [root] DEBUG: 19212: DLL loaded at 0x00007FFEE5BE0000: C:\Program Files\Google\Chrome\Application\148.0.7778.217\optimization_guide_internal (0x11e2000 bytes).
2026-05-29 05:08:35,931 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,932 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,933 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,938 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,940 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,941 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,941 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,945 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,948 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,948 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,948 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,950 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,951 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,954 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,954 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 25912: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:35,955 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 25912
2026-05-29 05:08:35,955 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,959 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,959 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,960 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,961 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,962 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,963 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,964 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 25912
2026-05-29 05:08:35,965 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,966 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,971 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,972 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,974 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,973 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,975 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,977 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,977 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,980 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,983 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,984 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,985 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,990 [root] DEBUG: 19212: DLL loaded at 0x00007FFF56D00000: C:\Windows\system32\mswsock (0x6a000 bytes).
2026-05-29 05:08:35,993 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:35,995 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:35,996 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,000 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,001 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,002 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,002 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,006 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,006 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,007 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,009 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,012 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,014 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,019 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,021 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,022 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,023 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,025 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,027 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,032 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,032 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,033 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,034 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,037 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,039 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,043 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,044 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,044 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,045 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,048 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,048 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,052 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,053 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,055 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,058 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,059 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,060 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,061 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,064 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-29 05:08:36,065 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,067 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,068 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,070 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,071 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:08:36,071 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,072 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,077 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,078 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,079 [root] DEBUG: Loader: Injecting process 23296 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:36,079 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 23300, handle 0x124
2026-05-29 05:08:36,080 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,081 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:36,082 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:08:36,082 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,083 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,083 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,084 [lib.api.process] INFO: Injected into 64-bit <Process 23296 elevation_service.exe>
2026-05-29 05:08:36,091 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,092 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,092 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,093 [root] DEBUG: 23296: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:36,095 [root] DEBUG: 23296: Interactive desktop enabled.
2026-05-29 05:08:36,095 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,096 [root] DEBUG: 23296: Dropped file limit defaulting to 100.
2026-05-29 05:08:36,097 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,097 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,103 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,104 [root] DEBUG: 23296: Disabling sleep skipping.
2026-05-29 05:08:36,104 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,105 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,106 [root] DEBUG: 23296: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:36,107 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,108 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,109 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,113 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,114 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,117 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,118 [root] DEBUG: 23296: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:08:36,119 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,120 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,120 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,122 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,125 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,125 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,129 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,133 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,134 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,136 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,137 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,137 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,138 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,140 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,142 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,142 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,144 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,145 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,146 [root] DEBUG: 23296: Monitor initialised: 64-bit capemon loaded in process 23296 at 0x00007FFF17B00000, thread 23300, image base 0x00007FF677C70000, stack from 0x0000005AD40F4000-0x0000005AD4100000
2026-05-29 05:08:36,148 [root] DEBUG: 23296: Commandline: "C:\Program Files\Google\Chrome\Application\148.0.7778.217\elevation_service.exe"
2026-05-29 05:08:36,149 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,153 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,154 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,155 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,156 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,159 [root] DEBUG: 19212: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:36,161 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,164 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,165 [root] DEBUG: 23296: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:08:36,166 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,166 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4FA10000: C:\Windows\system32\tbs (0x1b000 bytes).
2026-05-29 05:08:36,168 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,168 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,173 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,173 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,174 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,175 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,179 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,180 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,181 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,182 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,182 [root] DEBUG: 19212: DLL loaded at 0x00007FFF50370000: C:\Windows\system32\PCPKsp (0x118000 bytes).
2026-05-29 05:08:36,186 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,187 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,188 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,190 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,190 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:08:36,191 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,192 [root] DEBUG: 23296: set_hooks: Unable to hook LockResource
2026-05-29 05:08:36,193 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,197 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,197 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,198 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,199 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,199 [root] DEBUG: 23296: Hooked 627 out of 628 functions
2026-05-29 05:08:36,200 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,201 [root] DEBUG: 19212: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:08:36,202 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,204 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\tbs (0x1b000 bytes).
2026-05-29 05:08:36,204 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,209 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,213 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,215 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,215 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,219 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,220 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,221 [root] DEBUG: 23296: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:36,225 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,225 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,226 [root] DEBUG: 23296: RestoreHeaders: Restored original import table.
2026-05-29 05:08:36,227 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,227 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,228 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,229 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,231 [root] DEBUG: 19212: DLL loaded at 0x00007FFF45050000: C:\Windows\system32\ncryptprov (0x5a000 bytes).
2026-05-29 05:08:36,231 [root] INFO: Loaded monitor into process with pid 23296
2026-05-29 05:08:36,232 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,234 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,235 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,236 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,237 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,238 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,239 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,243 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,244 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,249 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,251 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,252 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,252 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,253 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,255 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,257 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,257 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,258 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,263 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,264 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,265 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,266 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,270 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,271 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,275 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,276 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,280 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,280 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,281 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,281 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,282 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,284 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,285 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,288 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,289 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,290 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,291 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,296 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,298 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,299 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,303 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,304 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,305 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,305 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,306 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,307 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,310 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,311 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,315 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,316 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,320 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,320 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,321 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,322 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,326 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,327 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,330 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,332 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,333 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,334 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,335 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,339 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,340 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,345 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,345 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,346 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,347 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,349 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,350 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,354 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,356 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,357 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,360 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,360 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,365 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,367 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,368 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,368 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,373 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,373 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,378 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,379 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,380 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,380 [root] DEBUG: 23296: caller_dispatch: Scanning calling region at 0x00007FF677C70000...
2026-05-29 05:08:36,382 [root] DEBUG: 23296: caller_dispatch: Added region at 0x00007FF677C70000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x00007FF677E2DF76, thread 23300).
2026-05-29 05:08:36,383 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,383 [root] DEBUG: 23296: YaraScan: Scanning 0x00007FF677C70000, size 0x3cffe0
2026-05-29 05:08:36,385 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,388 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,395 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,396 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,401 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,407 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,409 [root] DEBUG: 23296: ProcessImageBase: Main module image at 0x00007FF677C70000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:36,411 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,412 [root] DEBUG: 23296: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-29 05:08:36,413 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,413 [root] DEBUG: 23296: ProcessImageBase: Main module image at 0x00007FF677C70000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:36,414 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,415 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,417 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,418 [root] DEBUG: 23296: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:08:36,422 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,422 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,425 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,426 [root] DEBUG: 23296: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:08:36,430 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,430 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,431 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,433 [root] DEBUG: 23296: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:08:36,437 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,437 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,442 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,443 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,445 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,449 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,451 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,451 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,452 [root] DEBUG: 23296: DLL loaded at 0x00007FFF573C0000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-29 05:08:36,461 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,462 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,463 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,464 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,465 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,466 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,467 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,468 [root] DEBUG: 19212: DLL loaded at 0x00007FFF573C0000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-29 05:08:36,469 [root] DEBUG: 19212: DLL loaded at 0x00007FFF573C0000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-29 05:08:36,470 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,470 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,474 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,475 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,480 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,481 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,482 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,483 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,484 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,487 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,487 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,489 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,489 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,490 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,496 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,497 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,498 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,500 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,501 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,505 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,506 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,507 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,508 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,511 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,511 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,515 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,516 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,520 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,521 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,521 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,522 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,522 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,524 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,527 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,528 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,532 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,533 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,534 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,534 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,535 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,537 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,537 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,538 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,543 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,543 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,545 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,546 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,549 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,551 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,552 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,553 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,555 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,557 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,561 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,563 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,562 [root] DEBUG: 23296: DLL loaded at 0x00007FFF57350000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-29 05:08:36,563 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,565 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,566 [root] DEBUG: 23296: DLL loaded at 0x00007FFF57560000: C:\Windows\SYSTEM32\profapi (0x25000 bytes).
2026-05-29 05:08:36,567 [root] DEBUG: 23296: DLL loaded at 0x00007FFF45050000: C:\Windows\system32\ncryptprov (0x5a000 bytes).
2026-05-29 05:08:36,570 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,570 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,572 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,578 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,579 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,579 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,580 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,580 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,581 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,582 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,582 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,583 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,584 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,585 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,585 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,586 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3E560000: C:\Windows\System32\CapabilityAccessManagerClient (0x3f000 bytes).
2026-05-29 05:08:36,590 [root] DEBUG: 23296: NtTerminateProcess hook: Attempting to dump process 23296
2026-05-29 05:08:36,590 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,591 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,592 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,592 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,595 [root] DEBUG: 23296: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:08:36,596 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,605 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,606 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,607 [root] DEBUG: 23296: caller_dispatch: Added region at 0x00007FFF56FD0000 to tracked regions list (ntdll::NtClose returns to 0x00007FFF56FD419B, thread 23300).
2026-05-29 05:08:36,608 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,610 [root] DEBUG: 23296: caller_dispatch: Scanning calling region at 0x00007FFF56FD0000...
2026-05-29 05:08:36,615 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,615 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,616 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,616 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,617 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,618 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4F6E0000: C:\Windows\System32\usermgrproxy (0x54000 bytes).
2026-05-29 05:08:36,621 [root] INFO: Process with pid 23296 has terminated
2026-05-29 05:08:36,621 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,625 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,631 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,632 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,633 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,634 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,637 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,638 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,639 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,640 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,641 [root] DEBUG: 19212: DLL loaded at 0x00007FFF42E10000: C:\Windows\system32\explorerframe (0x244000 bytes).
2026-05-29 05:08:36,642 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,644 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,645 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,647 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,648 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,650 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,651 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,653 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,654 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,655 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,663 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,664 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,665 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,666 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,668 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,670 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,671 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,672 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,673 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,674 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,679 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,681 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,682 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,683 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,686 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,689 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,690 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,692 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,694 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,695 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,696 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,697 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,703 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,704 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,705 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,705 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,709 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,710 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,715 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,715 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x
2026-05-29 05:08:36,716 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,717 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,720 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,721 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,726 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,727 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,727 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,728 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,733 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,734 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,739 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,740 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,741 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,742 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,746 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,747 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,752 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,752 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,754 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,754 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,756 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,757 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,759 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,759 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,764 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,765 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,767 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,769 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,771 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,772 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,776 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,777 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,778 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,779 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,784 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,785 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,787 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,788 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,790 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,791 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,795 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,796 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,797 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,798 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,803 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,804 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,805 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,807 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,815 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,816 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,819 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,819 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,823 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,826 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,830 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,831 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,833 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,834 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,838 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,839 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,842 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,844 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,846 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,847 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,854 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,855 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,856 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,858 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,859 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,860 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,862 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,863 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,864 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,865 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,866 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,867 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,869 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,870 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,871 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,873 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,874 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,875 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,878 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,879 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,882 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,882 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,883 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,884 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,888 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,890 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,891 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,892 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,893 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,898 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,899 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,899 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,902 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,903 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,907 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,907 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,908 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,908 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,911 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,915 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,916 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,918 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,922 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,923 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,923 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,924 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,927 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,929 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,931 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,933 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,937 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,938 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,940 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,941 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,943 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,944 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,952 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,953 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,954 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,955 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,960 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,961 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,964 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,965 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,965 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,967 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,971 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,974 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,978 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,979 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,981 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,981 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,982 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,983 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,986 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,986 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,991 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,992 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,993 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,994 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:36,998 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:36,999 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,001 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,002 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,004 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,005 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,010 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,010 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,011 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,013 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,015 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,016 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,021 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,022 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,023 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,023 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,024 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,025 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,027 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,028 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,028 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,029 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,033 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,034 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,035 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,036 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,037 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,040 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,041 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,042 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,042 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,043 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,044 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,046 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,048 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,048 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,050 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,051 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,053 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,054 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,054 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,061 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,062 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,063 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,063 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,064 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,065 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,071 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,073 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,075 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,076 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,077 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,077 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,079 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,080 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,085 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,085 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,090 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,092 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,093 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,094 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,096 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,098 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,102 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,103 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,105 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,108 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,109 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,110 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,115 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,116 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,116 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,118 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,120 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,121 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,126 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,127 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,128 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,129 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,132 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,133 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,138 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,139 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,140 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,141 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,144 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,145 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,149 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,150 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,150 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,151 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,155 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,156 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,161 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,162 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,164 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,165 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,166 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,170 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,171 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,175 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,176 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,178 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,179 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,184 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,186 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,188 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,189 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,192 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,192 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,196 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,197 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,198 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,199 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,202 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,204 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,208 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,209 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,209 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,211 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,213 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,214 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,218 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,219 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,220 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,220 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,225 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,227 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,229 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,231 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,233 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,234 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,237 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,237 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,241 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,242 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,243 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,244 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,249 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,249 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,250 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,250 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,255 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,255 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,256 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,257 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,260 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,261 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,266 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,267 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,271 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,272 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,276 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,277 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,283 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,284 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,291 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,294 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,299 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,299 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,304 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,305 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,310 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,311 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,315 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,316 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,321 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,323 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,329 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,330 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,334 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,335 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,340 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,341 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,346 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,346 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,352 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,354 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,358 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,359 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,364 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,364 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,369 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,369 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,374 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,375 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,380 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,380 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,385 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,386 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,391 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,391 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,396 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,397 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,402 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,402 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,407 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,407 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,413 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,413 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,417 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,418 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,423 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,423 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,427 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,428 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,433 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,434 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,438 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,439 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,444 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,445 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,452 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,454 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,457 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,458 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,460 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,462 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,463 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,466 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,467 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,470 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,476 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,477 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,483 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,485 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,489 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,490 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,492 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,493 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,496 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,497 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,498 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,502 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,504 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,509 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,511 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,515 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,517 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,522 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,522 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,523 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,524 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,527 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,528 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,529 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,530 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,535 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,536 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,538 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,539 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,542 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,542 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,544 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,546 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,547 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,548 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,553 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,553 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,558 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,560 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,563 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,563 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,564 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,565 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,568 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,569 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,570 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,571 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,577 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,578 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,580 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,582 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,583 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,583 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,587 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,587 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,591 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,592 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,596 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,597 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,598 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,599 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,604 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,606 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,607 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,607 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,611 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,613 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,618 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,619 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,623 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,624 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,624 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,625 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,629 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,629 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,630 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,631 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,636 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,637 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,639 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,639 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,643 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,643 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,645 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,645 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,650 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,652 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,657 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,657 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,658 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,659 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,663 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,664 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,665 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,666 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,668 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,669 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,674 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,674 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,677 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,678 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,679 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,680 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,683 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,683 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,684 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,685 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,690 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,691 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,695 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,695 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,696 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,698 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,699 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,700 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,705 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,706 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,710 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,711 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,712 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,713 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,717 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,718 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,718 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,719 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,724 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,725 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,729 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,731 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,733 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,734 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,735 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,736 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,739 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,739 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,740 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,742 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,746 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,748 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,752 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,753 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,754 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,754 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,759 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,759 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,760 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,761 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,765 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,767 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,771 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,773 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,777 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,778 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,784 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,785 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,790 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,792 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,799 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,800 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,801 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,802 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,806 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,806 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,807 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,808 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,811 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,812 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,816 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,817 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,818 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,818 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,821 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,822 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,825 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,826 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,826 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,829 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,834 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,835 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,838 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,839 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,840 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,844 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,846 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,846 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,850 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,852 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,856 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,857 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,858 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,859 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,861 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,862 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,863 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,863 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,867 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,869 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,873 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,875 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,876 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,876 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,879 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,880 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,882 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,883 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,888 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,889 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,892 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,893 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,894 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,896 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,898 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,899 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,904 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,905 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,909 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,910 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,912 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,913 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,915 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,916 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,920 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,926 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,927 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,932 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,933 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,938 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,939 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,944 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,944 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,949 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,951 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,954 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,956 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,956 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,957 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,962 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,962 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,963 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,964 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,965 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 30088: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:37,966 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 30088
2026-05-29 05:08:37,970 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,970 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,972 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,972 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,973 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 30088
2026-05-29 05:08:37,974 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,983 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,984 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,984 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,985 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,988 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,989 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,990 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,991 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,992 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,993 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,994 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:37,999 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:37,999 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,000 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,001 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,005 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,006 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,011 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,012 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,017 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,018 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,018 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,020 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,023 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,027 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,028 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,028 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,032 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,033 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,038 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,039 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,044 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,046 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,051 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,055 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,057 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,059 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,059 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,061 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,062 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,063 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,064 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,067 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,068 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,073 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,074 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,078 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,079 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,083 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,084 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,089 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,090 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,091 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,092 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,095 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,097 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,097 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,098 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,099 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,100 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,102 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,103 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,105 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,107 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,107 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,108 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,113 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,113 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,118 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,119 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,121 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,122 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,124 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,126 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,126 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,128 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,132 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,139 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,142 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,144 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,145 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,146 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,148 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,149 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,150 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,151 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,156 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,157 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,161 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,163 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,169 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,170 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,174 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,175 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,179 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,180 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,185 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,186 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,190 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,191 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,195 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,196 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,201 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,204 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,205 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,206 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,207 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,210 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,210 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,211 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,212 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,216 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,217 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,222 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,222 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,223 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,223 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,227 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,228 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,229 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,229 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,233 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,234 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,237 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,238 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,238 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,239 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,242 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,243 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,243 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,247 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,251 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,252 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,253 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,254 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,256 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,257 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,258 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,258 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,261 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,263 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,267 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,268 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,272 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,273 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,273 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,273 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,279 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,279 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,280 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,280 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,285 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,285 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,287 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,289 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,290 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,290 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,293 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,296 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,296 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,297 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,302 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,302 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,307 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,307 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,308 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,309 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,312 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,313 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,314 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,315 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,319 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,320 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,324 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,325 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,330 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,331 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,335 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,337 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,342 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,343 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,344 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,345 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,349 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,350 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,355 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,356 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,362 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,362 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,367 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,368 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,372 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,373 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,377 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,378 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,383 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,384 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,385 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,386 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,389 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,389 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,393 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,395 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,399 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,400 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,405 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,406 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,410 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,411 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,416 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,417 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,421 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,422 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,426 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,428 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,433 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,433 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,447 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,452 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,457 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,457 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,465 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,467 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,473 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,473 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,477 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,478 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,483 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,484 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,488 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,489 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,496 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,501 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,502 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,507 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,508 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,513 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,514 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,518 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,519 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,523 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,524 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,528 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,529 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,533 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,534 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,539 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,539 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,543 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,544 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,549 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,550 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,552 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,553 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,555 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,556 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,559 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,560 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,560 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,561 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,564 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,565 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,566 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,566 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,572 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,573 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,577 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,578 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,582 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,583 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,587 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,588 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,592 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,593 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,597 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,598 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,602 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,604 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,608 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,609 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,613 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,614 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,618 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,619 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,624 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,624 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,629 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,630 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,637 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,637 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,642 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,643 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,648 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,648 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,653 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,654 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,658 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,659 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,663 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,664 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,670 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,670 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,675 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,676 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,681 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,682 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,687 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,687 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,692 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,693 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,697 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,698 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,699 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,700 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,704 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,705 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,706 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,706 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,711 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,711 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,718 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,720 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,724 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,725 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,730 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,730 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,735 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,736 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,740 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,741 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,745 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,747 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,751 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,751 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,755 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,756 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,763 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,764 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,768 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,770 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,776 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,777 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,781 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,782 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,790 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,791 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,795 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,796 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,801 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,802 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,809 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,810 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,815 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,816 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,820 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,821 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,825 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,826 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,830 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,831 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,835 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,836 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,840 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,841 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,846 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,846 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,851 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,852 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,856 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,857 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,862 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,864 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,868 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,869 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,875 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,876 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,880 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,880 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,885 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,886 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,890 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,890 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,895 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,896 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,900 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,901 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,906 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,907 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,911 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,912 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,918 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,919 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,923 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,924 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,928 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,929 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,933 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,935 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,940 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,941 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,945 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,946 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,950 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,951 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,956 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,956 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,961 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,962 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,966 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,967 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,971 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,972 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,976 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,977 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,981 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,982 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,986 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,987 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,992 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,993 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,997 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:38,998 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:38,999 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,000 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,003 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,004 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,005 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,006 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,008 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 31996: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:39,011 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 31996
2026-05-29 05:08:39,016 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,017 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,018 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,019 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,019 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,020 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,021 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,022 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,022 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 31996
2026-05-29 05:08:39,023 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,024 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,025 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,027 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,028 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,030 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,031 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,031 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,032 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,033 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,036 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,038 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,039 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,040 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,045 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,046 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,051 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,056 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,057 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,061 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,062 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,066 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,067 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,069 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,070 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,071 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,074 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,078 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,079 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,080 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,081 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,081 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,082 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,085 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,086 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,086 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,087 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,097 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 32244: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:39,101 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,101 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,102 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 32244
2026-05-29 05:08:39,103 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,104 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,104 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,105 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,107 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,108 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,110 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,111 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 32244
2026-05-29 05:08:39,112 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,113 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,113 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,117 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,118 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,118 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,119 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,123 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,125 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,125 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,127 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,132 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,133 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,137 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,138 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,143 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,144 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,148 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,149 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,154 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,155 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,156 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,157 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,160 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,162 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,163 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,165 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,165 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,170 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,171 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,176 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,177 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,181 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,182 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,187 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,188 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,193 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,193 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,198 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,199 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,203 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,204 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,209 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,210 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,215 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,217 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,222 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,223 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,227 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,228 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,232 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,233 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,241 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,242 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,246 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,248 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,253 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,254 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,259 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,260 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,264 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,266 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,270 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,271 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,277 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,278 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,282 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,283 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,287 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,289 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,293 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,294 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,298 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,299 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,306 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,306 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,310 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,312 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,316 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,317 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,323 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,324 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,330 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,330 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,335 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,337 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,342 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,343 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,347 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,348 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,353 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,354 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,360 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,360 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,365 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,366 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,370 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,371 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,375 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,376 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,380 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,381 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,382 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,383 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,388 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,389 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,390 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,390 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,395 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,396 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,396 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,398 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,402 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,403 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,403 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,404 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,408 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,408 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,413 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,413 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,419 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,420 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,424 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,425 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,430 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,431 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,435 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,435 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,442 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,443 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,447 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,448 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,456 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,457 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,457 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,458 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,462 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,462 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,464 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,464 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,467 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,467 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,472 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,472 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,479 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,480 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,485 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,486 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,490 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,491 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,496 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,500 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,500 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,505 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,505 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,510 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,511 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,515 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,516 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,521 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,521 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,526 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,527 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,532 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,532 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,537 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,539 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,543 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,545 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,550 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,551 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,555 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,556 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,562 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,563 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,569 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,569 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,575 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,576 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,580 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,581 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,585 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,586 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,590 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,591 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,594 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,595 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,596 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,597 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,602 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,603 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,608 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,609 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,613 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,614 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,620 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,622 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,623 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,624 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,627 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,628 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,629 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,629 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,636 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,637 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,642 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,643 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,649 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,651 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,656 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,657 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,662 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,663 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,669 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,674 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,679 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,680 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,686 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,687 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,697 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,698 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,704 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,707 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,708 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,708 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,714 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,715 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,720 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,721 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,725 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,726 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,732 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,734 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,738 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,740 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,744 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,745 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,749 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,752 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,758 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,759 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,763 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,764 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,768 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,769 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,774 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,775 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,780 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,781 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,784 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,784 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,786 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,788 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,793 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,794 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,795 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,795 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,800 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,802 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,802 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,803 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,809 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,810 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,811 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,813 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,816 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,817 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,818 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,819 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,821 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,822 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,827 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,828 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,828 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,831 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,832 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,833 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,834 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,838 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,840 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,842 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,848 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,849 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,854 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,854 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,858 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,858 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,860 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,863 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,867 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,868 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,874 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,875 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,877 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,877 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,884 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,885 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,892 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,894 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,900 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,901 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,908 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,909 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,914 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,915 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,920 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,927 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,928 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,935 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,940 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,947 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,948 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,950 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,951 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,953 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,955 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,961 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,963 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,967 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,969 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,970 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,972 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,978 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,978 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,979 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,981 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,985 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,987 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,989 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,990 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,992 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:39,993 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:39,997 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,002 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,002 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,006 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,010 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,011 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,022 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,023 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,024 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,025 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,030 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,031 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,032 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,032 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,036 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,037 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,038 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,038 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,043 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,045 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,045 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,046 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,050 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,052 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,053 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,058 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,059 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,060 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,062 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,065 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,066 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,067 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,070 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,072 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,073 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,078 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,079 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,084 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,086 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,093 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,095 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,096 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,097 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,101 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,102 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,107 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,108 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,115 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,117 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,122 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,123 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,124 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,125 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,129 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,130 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,134 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,135 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,136 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,137 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,141 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,143 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,144 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,145 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,148 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,149 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,153 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,155 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,157 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,158 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,161 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,166 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,167 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,172 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,172 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,177 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,178 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,183 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,185 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,194 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,195 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,200 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,202 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,206 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,207 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,215 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,216 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,217 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,218 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,222 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,223 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,224 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,225 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,229 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,230 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,232 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,233 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,235 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,237 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,241 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,242 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,247 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,248 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,248 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,250 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,253 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,254 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,254 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,255 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,259 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,259 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,260 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,261 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,264 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,265 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,268 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,270 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,270 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,271 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,274 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,275 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,278 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,279 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,280 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,281 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,285 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,286 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,287 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,288 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,290 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,291 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,296 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,298 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,302 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,303 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,308 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,309 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,314 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,315 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,319 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,320 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,324 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,326 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,330 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,331 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,335 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,337 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,341 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,342 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,343 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,345 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,353 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,353 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,356 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,358 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,363 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,364 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,365 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,366 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,369 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,371 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,376 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,377 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,382 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,382 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,387 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,388 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,392 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,393 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,399 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,400 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,400 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,401 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,404 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,405 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,406 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,407 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,410 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,411 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,416 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,417 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,422 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,422 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,428 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,429 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,433 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,434 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,436 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,437 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,439 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,441 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,442 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,443 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,449 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,449 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,450 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,451 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,455 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,456 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,457 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,458 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,462 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,463 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,467 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,468 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,469 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,469 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,472 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,473 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,475 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,476 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,478 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,480 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,482 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,484 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,486 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,487 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,489 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,490 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,491 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,492 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,494 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,495 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,497 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,498 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,499 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,501 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,502 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,503 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,505 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,507 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,509 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,510 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,511 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,514 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,516 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,517 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,519 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,519 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,522 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,523 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,527 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,528 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,529 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,530 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,533 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,534 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,537 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,538 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,539 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,539 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,544 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,545 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,549 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,550 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,554 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,555 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,559 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,560 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,564 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,565 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,566 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,566 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,570 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,572 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,576 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,577 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,581 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,582 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,586 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,587 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,592 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,593 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,597 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,598 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,600 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,601 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,604 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,605 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,606 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,606 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,609 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,609 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,611 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,611 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,614 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,615 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,616 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,617 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,621 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,622 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,623 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,623 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,630 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,633 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,638 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,640 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,646 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,647 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,651 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,652 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,657 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,657 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,663 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,664 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,669 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,670 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,675 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,677 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,681 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,682 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,686 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,687 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,691 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,692 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,696 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,697 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,702 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,703 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,707 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,709 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,713 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,714 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,718 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,719 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,721 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,722 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,725 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,726 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,728 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,729 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,731 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,732 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,737 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,738 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,743 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,744 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,749 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,750 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,754 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,755 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,760 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,762 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,766 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,767 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,771 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,772 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,776 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,777 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,780 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,781 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,782 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,783 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,787 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,788 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,792 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,793 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,793 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,794 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,799 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,803 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,803 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,803 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,808 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,808 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,813 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,814 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,819 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,822 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,831 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,845 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,845 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,846 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,847 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,847 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,851 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,853 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,856 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,856 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,858 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,858 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,863 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,864 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,864 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,866 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,874 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 35108: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:40,875 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,875 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 35108
2026-05-29 05:08:40,876 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,876 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,878 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,880 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,881 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,882 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,883 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,883 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 35108
2026-05-29 05:08:40,883 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,887 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,891 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,892 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,892 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,894 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,895 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,895 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,901 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,903 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,904 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,905 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,906 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,907 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,914 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,917 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,921 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,925 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,930 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,937 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,938 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,938 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,939 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,940 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,941 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,943 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,944 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,949 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,950 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,955 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,956 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,961 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,962 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,967 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,968 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,972 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,973 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,977 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,978 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,984 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,985 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,989 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:40,991 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:40,994 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,000 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,002 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,003 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,007 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,008 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,012 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,015 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,016 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,020 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,024 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,027 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,028 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,029 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,031 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,031 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,034 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,039 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,044 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,045 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,050 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,050 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,051 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,055 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,057 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,058 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,059 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,064 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,065 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,069 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,070 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,075 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,076 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,082 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,083 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,088 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,089 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,094 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,096 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,100 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,101 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,106 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,107 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,112 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,112 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,116 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,117 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,122 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,123 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,129 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,130 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,135 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,138 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,142 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,143 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,148 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,149 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,154 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,155 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,160 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,165 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,166 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,170 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,171 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,178 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,179 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,183 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,184 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,189 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,190 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,194 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,195 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,199 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,200 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,204 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,205 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,210 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,211 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,216 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,216 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,221 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,222 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,226 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,227 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,231 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,232 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,237 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,237 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,242 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,244 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,248 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,249 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,254 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,255 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,259 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,259 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,263 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,264 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,269 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,270 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,275 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,276 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,282 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,283 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,287 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,288 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,293 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,293 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,298 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,299 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,303 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,304 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,309 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,310 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,314 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,315 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,319 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,320 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,324 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,326 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,329 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,330 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,331 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,332 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,336 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,337 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,338 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,338 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,344 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,345 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,346 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,346 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,350 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,352 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,356 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,357 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,361 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,362 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,366 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,367 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,373 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,374 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,376 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,377 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,378 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,379 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,382 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,383 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,387 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,387 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,389 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,390 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,393 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,394 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,395 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,396 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,399 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,400 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,404 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,405 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,410 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,411 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,412 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,413 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,416 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,417 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,422 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,423 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,424 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,425 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,429 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,430 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,431 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,431 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,435 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,436 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,437 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,437 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,441 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,442 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,443 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,444 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,447 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,448 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,464 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,465 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,469 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,470 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,475 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,476 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,480 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,482 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,486 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,487 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,492 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,493 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,497 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,498 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,503 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,504 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,508 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,512 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,513 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,513 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,517 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,518 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,522 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,523 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,528 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,529 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,534 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,535 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,540 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,541 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,546 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,547 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,551 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,552 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,556 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,558 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,558 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,560 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,563 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,565 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,569 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,570 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,575 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,577 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,582 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,583 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,588 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,589 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,594 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,595 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,600 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,601 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,605 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,606 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,611 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,613 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,617 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,618 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,622 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,623 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,627 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,628 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,632 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,633 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,637 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,639 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,643 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,643 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,648 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,649 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,654 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,655 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,655 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,656 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,659 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,661 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,665 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,666 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,671 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,672 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,676 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,677 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,681 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,682 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,687 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,688 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,692 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,693 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,698 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,699 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,701 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,702 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,707 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,708 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,713 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,715 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,720 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,721 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,726 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,727 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,732 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,733 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,738 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,740 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,745 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,747 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,751 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,752 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,758 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,759 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,763 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,764 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,769 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,769 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,773 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,774 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,778 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,779 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,784 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,784 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,789 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,789 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,794 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,795 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,799 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,800 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,804 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,805 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,811 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,811 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,816 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,817 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,821 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,822 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,827 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,827 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,833 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,833 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,837 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,838 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,843 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,843 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,847 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,848 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,853 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,853 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,855 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,856 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,858 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,859 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,863 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,864 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,868 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,869 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,873 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,875 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,879 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,880 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,885 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,887 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,891 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,891 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,896 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,896 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,900 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,901 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,906 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,907 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,911 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,912 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,916 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,917 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,918 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,918 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,922 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,923 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,927 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,929 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,933 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,934 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,939 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,939 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,944 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,944 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,948 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,949 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,953 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,954 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,959 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,959 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,965 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,967 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,971 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,972 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,976 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,977 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,981 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,983 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,987 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,988 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,992 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,993 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:41,998 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:41,999 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,003 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,004 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,004 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,006 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,008 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,008 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,013 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,014 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,018 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,019 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,023 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,024 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,027 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,028 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,029 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,030 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,034 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,035 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,039 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,040 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,045 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,045 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,051 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,052 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,056 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,058 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,062 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,063 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,067 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,068 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,072 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,073 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,078 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,082 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,086 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,087 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,092 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,092 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,097 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,098 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,102 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,103 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,107 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,108 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,112 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,113 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,117 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,118 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,123 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,124 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,128 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,129 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,133 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,134 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,138 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,139 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,144 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,144 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,150 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,151 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,157 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,157 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,162 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,163 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,167 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,167 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,172 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,173 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,178 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,178 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,183 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,184 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,188 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,189 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,193 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,194 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,199 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,205 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,206 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,210 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,211 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,219 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,220 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,227 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,228 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,235 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,237 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,241 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,242 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,247 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,248 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,252 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,253 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,258 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,259 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,263 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,264 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,269 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,269 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,275 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,275 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,280 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,281 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,285 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,285 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,312 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,313 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,317 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,318 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,323 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,324 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,328 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,329 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,354 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268719e+00 (from 6.268295e+00)
2026-05-29 05:08:42,355 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,356 [root] DEBUG: 19212: DLL loaded at 0x00007FFF474B0000: C:\Windows\System32\perfos (0xf000 bytes).
2026-05-29 05:08:42,491 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,492 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,776 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,776 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,798 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,799 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,842 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,844 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,849 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 37628: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:42,850 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,850 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 37628
2026-05-29 05:08:42,852 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,855 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 37652: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:42,865 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,873 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 37652
2026-05-29 05:08:42,873 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,880 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 37628
2026-05-29 05:08:42,881 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,882 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,883 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 37652
2026-05-29 05:08:42,889 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,892 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,897 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,897 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,906 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,910 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,915 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,921 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,926 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,927 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:42,957 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:42,965 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:43,283 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:43,284 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:43,471 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:43,473 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:43,474 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:43,475 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:44,001 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:44,002 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:44,006 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:44,007 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:44,496 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:44,497 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:44,903 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:44,903 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:45,118 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:45,120 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,121 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,123 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,124 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:45,126 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,127 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,128 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,129 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,130 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,132 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,139 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:45,140 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,142 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,143 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,145 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:45,146 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,147 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,149 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,150 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,150 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,152 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,158 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:45,159 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,160 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,161 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,162 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:45,163 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,164 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,165 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:45,167 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:45,169 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:45,170 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:48,329 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,330 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:48,334 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,335 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:48,438 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,439 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:48,444 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,445 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:48,449 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,450 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:48,454 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,456 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:48,460 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:48,461 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,043 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,044 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,161 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,371 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,371 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,631 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,631 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,659 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,660 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,750 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,751 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:49,967 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:49,967 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,110 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,111 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,200 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,351 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,352 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,379 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,380 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,385 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,386 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,390 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,391 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,395 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,396 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,401 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,402 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,407 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,408 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,413 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,414 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,417 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,418 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,423 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,423 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,551 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,552 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,602 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,603 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,630 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,633 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,648 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,649 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,654 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,656 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,660 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,663 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,667 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,668 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,672 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,673 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,677 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,677 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,681 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,682 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,687 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,687 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,742 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,744 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,749 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,750 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,981 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,982 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:50,994 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:50,995 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,000 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,001 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,005 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,006 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,084 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,086 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,091 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,092 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,106 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,107 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,112 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,113 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,120 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,120 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,122 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,123 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,128 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,129 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,139 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,139 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,144 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,145 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,145 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,146 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,163 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,163 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,168 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,169 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,171 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,172 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,186 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,187 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,193 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,194 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,205 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,206 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,211 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,212 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,217 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,218 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,222 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,223 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,227 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,228 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,247 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,248 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,277 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,279 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,284 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,285 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,314 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,315 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,319 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,320 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,325 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,326 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,347 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,348 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,352 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,352 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,372 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,373 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,392 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,392 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,398 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,399 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,406 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,407 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,413 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,414 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,445 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,448 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,640 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,641 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:51,733 [root] INFO: Announced starting service "b'GoogleUpdaterService149.0.7814.0'"
2026-05-29 05:08:51,925 [root] INFO: Announced starting service "b'edgeupdate'"
2026-05-29 05:08:51,935 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:51,936 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:52,168 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:52,169 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:52,322 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:52,323 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:52,398 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:52,399 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:52,512 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:52,513 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:52,720 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:52,721 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:52,740 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 39076: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x0000000000540000
2026-05-29 05:08:52,741 [root] INFO: Announced 32-bit process name: updater.exe pid: 39076
2026-05-29 05:08:52,742 [lib.api.process] INFO: Monitor config for process 39076: C:\lpw_albt\dll\39076.ini
2026-05-29 05:08:52,743 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:52,747 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:52,815 [root] DEBUG: Loader: Injecting process 39076 (thread 39080) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,824 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:52,825 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,841 [lib.api.process] INFO: Injected into 32-bit <Process 39076 updater.exe>
2026-05-29 05:08:52,842 [root] INFO: Announced 32-bit process name: updater.exe pid: 39076
2026-05-29 05:08:52,843 [lib.api.process] INFO: Monitor config for process 39076: C:\lpw_albt\dll\39076.ini
2026-05-29 05:08:52,843 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:52,846 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:52,852 [root] DEBUG: Loader: Injecting process 39076 (thread 39080) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,852 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:52,853 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,854 [lib.api.process] INFO: Injected into 32-bit <Process 39076 updater.exe>
2026-05-29 05:08:52,856 [root] INFO: Announced 32-bit process name: updater.exe pid: 39076
2026-05-29 05:08:52,856 [lib.api.process] INFO: Monitor config for process 39076: C:\lpw_albt\dll\39076.ini
2026-05-29 05:08:52,857 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:52,860 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:52,866 [root] DEBUG: Loader: Injecting process 39076 with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,867 [root] DEBUG: InjectDll: No thread ID supplied, GetProcessInitialThreadId failed, falling back to thread injection.
2026-05-29 05:08:52,934 [root] DEBUG: 39076: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:52,935 [root] DEBUG: 39076: Interactive desktop enabled.
2026-05-29 05:08:52,936 [root] DEBUG: 39076: Dropped file limit defaulting to 100.
2026-05-29 05:08:52,943 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 39224: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe, ImageBase: 0x0000000000150000
2026-05-29 05:08:52,946 [root] INFO: Announced 32-bit process name: MicrosoftEdgeUpdate.exe pid: 39224
2026-05-29 05:08:52,948 [lib.api.process] INFO: Monitor config for process 39224: C:\lpw_albt\dll\39224.ini
2026-05-29 05:08:52,952 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:52,958 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:52,964 [root] DEBUG: Loader: Injecting process 39224 (thread 39228) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,974 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:52,974 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,975 [lib.api.process] INFO: Injected into 32-bit <Process 39224 MicrosoftEdgeUpdate.exe>
2026-05-29 05:08:52,977 [root] INFO: Announced 32-bit process name: MicrosoftEdgeUpdate.exe pid: 39224
2026-05-29 05:08:52,978 [lib.api.process] INFO: Monitor config for process 39224: C:\lpw_albt\dll\39224.ini
2026-05-29 05:08:52,978 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:52,982 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:52,988 [root] DEBUG: Loader: Injecting process 39224 (thread 39228) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,990 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:52,991 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:52,992 [lib.api.process] INFO: Injected into 32-bit <Process 39224 MicrosoftEdgeUpdate.exe>
2026-05-29 05:08:52,994 [root] INFO: Announced 32-bit process name: MicrosoftEdgeUpdate.exe pid: 39224
2026-05-29 05:08:52,995 [lib.api.process] INFO: Monitor config for process 39224: C:\lpw_albt\dll\39224.ini
2026-05-29 05:08:52,995 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:52,999 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:53,005 [root] DEBUG: Loader: Injecting process 39224 with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:53,006 [root] DEBUG: InjectDll: No thread ID supplied, GetProcessInitialThreadId failed, falling back to thread injection.
2026-05-29 05:08:53,113 [root] DEBUG: 39076: Disabling sleep skipping.
2026-05-29 05:08:53,128 [root] DEBUG: 39224: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:53,128 [root] DEBUG: 39224: Interactive desktop enabled.
2026-05-29 05:08:53,130 [root] DEBUG: 39224: Dropped file limit defaulting to 100.
2026-05-29 05:08:53,173 [root] DEBUG: 39224: Disabling sleep skipping.
2026-05-29 05:08:53,177 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:53,178 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,179 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,180 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,181 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:53,182 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,183 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,184 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,185 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,186 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,187 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,193 [root] DEBUG: 39224: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:53,194 [root] DEBUG: 39076: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:53,194 [root] DEBUG: 39224: YaraScan: Scanning 0x00150000, size 0x34220
2026-05-29 05:08:53,195 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:53,196 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,196 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,198 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,198 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,200 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:53,201 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,202 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,203 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,204 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,205 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,206 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,213 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:53,213 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,214 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,215 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,216 [root] DEBUG: 12120: DLL loaded at 0x00007FFF55EF0000: C:\Windows\SYSTEM32\dxgi (0xf3000 bytes).
2026-05-29 05:08:53,217 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,218 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,220 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,221 [root] DEBUG: 12120: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:08:53,222 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:08:53,223 [root] DEBUG: 12120: DLL loaded at 0x00007FFF57130000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-29 05:08:53,227 [root] DEBUG: 39224: Monitor initialised: 32-bit capemon loaded in process 39224 at 0x6ab90000, thread 39348, image base 0x150000, stack from 0x2c34000-0x2c40000
2026-05-29 05:08:53,228 [root] DEBUG: 39224: Commandline: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
2026-05-29 05:08:53,515 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:53,516 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:53,604 [root] DEBUG: 39224: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:53,611 [root] DEBUG: 39076: Monitor initialised: 32-bit capemon loaded in process 39076 at 0x6ab90000, thread 39196, image base 0x540000, stack from 0x54a5000-0x54b0000
2026-05-29 05:08:53,612 [root] DEBUG: 39076: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --system --windows-service --service=update
2026-05-29 05:08:53,620 [root] DEBUG: 39224: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:53,621 [root] DEBUG: 39224: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:53,626 [root] DEBUG: 39224: Hooked 632 out of 632 functions
2026-05-29 05:08:53,628 [root] DEBUG: 39224: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:53,635 [root] DEBUG: 39076: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:53,636 [root] DEBUG: 39224: RestoreHeaders: Restored original import table.
2026-05-29 05:08:53,637 [root] INFO: Loaded monitor into process with pid 39224
2026-05-29 05:08:53,638 [root] DEBUG: 39224: caller_dispatch: Added region at 0x027E0000 to tracked regions list (ntdll::LdrLoadDll returns to 0x027E0035, thread 39348).
2026-05-29 05:08:53,638 [root] DEBUG: 39224: DumpPEsInRange: Scanning range 0x027E0000 - 0x027E0127.
2026-05-29 05:08:53,639 [root] DEBUG: 39224: ScanForDisguisedPE: Size too small: 0x127 bytes
2026-05-29 05:08:53,642 [lib.common.results] INFO: Uploading file C:\zDtLzmEP\CAPE\39224_7948930538929552026 to CAPE\7e30ed158a5742c26cb908be9bb4cf2f53b8961300008b04eb7bc20944b02f8c; Size is 295; Max size: 100000000
2026-05-29 05:08:53,645 [root] DEBUG: 39224: DumpMemory: Payload successfully created: C:\zDtLzmEP\CAPE\39224_7948930538929552026 (size 295 bytes)
2026-05-29 05:08:53,645 [root] DEBUG: 39224: DumpRegion: Dumped entire allocation from 0x027E0000, size 4096 bytes.
2026-05-29 05:08:53,646 [root] DEBUG: 39224: ProcessTrackedRegion: Dumped region at 0x027E0000.
2026-05-29 05:08:53,647 [root] DEBUG: 39224: YaraScan: Scanning 0x027E0000, size 0x127
2026-05-29 05:08:53,648 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:08:53,648 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:53,650 [lib.api.process] INFO: Injected into 32-bit <Process 39224 MicrosoftEdgeUpdate.exe>
2026-05-29 05:08:53,652 [root] DEBUG: 39224: caller_dispatch: Added region at 0x00150000 to tracked regions list (kernel32::LoadLibraryExW returns to 0x0015D98E, thread 39228).
2026-05-29 05:08:53,653 [root] DEBUG: 39076: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:53,654 [root] DEBUG: 39224: YaraScan: Scanning 0x00150000, size 0x34220
2026-05-29 05:08:53,655 [root] DEBUG: 39076: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:53,656 [root] DEBUG: 39224: ProcessImageBase: Main module image at 0x00150000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:53,659 [root] DEBUG: 39076: Hooked 632 out of 632 functions
2026-05-29 05:08:53,660 [root] DEBUG: 39224: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:53,661 [root] DEBUG: 39224: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:53,665 [root] DEBUG: 39224: DLL loaded at 0x75F00000: C:\Windows\System32\SHCORE (0x87000 bytes).
2026-05-29 05:08:53,671 [root] DEBUG: 39224: DLL loaded at 0x70670000: C:\Windows\SYSTEM32\NETAPI32 (0x14000 bytes).
2026-05-29 05:08:53,672 [root] DEBUG: 39224: DLL loaded at 0x75460000: C:\Windows\SYSTEM32\VERSION (0x8000 bytes).
2026-05-29 05:08:53,673 [root] DEBUG: 39224: DLL loaded at 0x75450000: C:\Windows\SYSTEM32\WTSAPI32 (0xf000 bytes).
2026-05-29 05:08:53,674 [root] DEBUG: 39224: DLL loaded at 0x74890000: C:\Windows\SYSTEM32\NETUTILS (0xb000 bytes).
2026-05-29 05:08:53,674 [root] DEBUG: 39224: DLL loaded at 0x748A0000: C:\Windows\SYSTEM32\WKSCLI (0x11000 bytes).
2026-05-29 05:08:53,675 [root] DEBUG: 39224: DLL loaded at 0x6AEB0000: C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\msedgeupdate (0x23d000 bytes).
2026-05-29 05:08:53,684 [root] DEBUG: 39224: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:08:53,685 [root] DEBUG: 39224: DLL loaded at 0x6AB30000: C:\Windows\system32\MDMRegistration (0x53000 bytes).
2026-05-29 05:08:53,697 [root] DEBUG: 39076: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:53,698 [root] DEBUG: 39224: DLL loaded at 0x6F2A0000: C:\Windows\SYSTEM32\powrprof (0x44000 bytes).
2026-05-29 05:08:53,699 [root] DEBUG: 39224: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\CRYPTSP (0x13000 bytes).
2026-05-29 05:08:53,700 [root] DEBUG: 39224: DLL loaded at 0x70D00000: C:\Windows\SYSTEM32\ncrypt (0x21000 bytes).
2026-05-29 05:08:53,701 [root] DEBUG: 39224: DLL loaded at 0x76790000: C:\Windows\System32\imagehlp (0x19000 bytes).
2026-05-29 05:08:53,701 [root] DEBUG: 39076: RestoreHeaders: Restored original import table.
2026-05-29 05:08:53,702 [root] DEBUG: 39224: DLL loaded at 0x6AA70000: C:\Windows\SYSTEM32\tbs (0x13000 bytes).
2026-05-29 05:08:53,703 [root] INFO: Loaded monitor into process with pid 39076
2026-05-29 05:08:53,703 [root] DEBUG: 39224: DLL loaded at 0x6AA90000: C:\Windows\SYSTEM32\DMCmnUtils (0x63000 bytes).
2026-05-29 05:08:53,704 [root] DEBUG: 39224: DLL loaded at 0x6AB00000: C:\Windows\SYSTEM32\omadmapi (0x2c000 bytes).
2026-05-29 05:08:53,706 [root] DEBUG: 39224: DLL loaded at 0x6F290000: C:\Windows\SYSTEM32\UMPDC (0xd000 bytes).
2026-05-29 05:08:53,708 [root] DEBUG: 39224: DLL loaded at 0x70200000: C:\Windows\SYSTEM32\NTASN1 (0x28000 bytes).
2026-05-29 05:08:53,709 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:53,711 [root] DEBUG: 39076: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 39196).
2026-05-29 05:08:53,712 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:53,712 [root] DEBUG: 39076: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:53,714 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,715 [root] DEBUG: 39224: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:08:53,715 [root] DEBUG: 39224: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\cryptsp (0x13000 bytes).
2026-05-29 05:08:53,716 [root] DEBUG: 39224: DLL loaded at 0x6EC40000: C:\Windows\SYSTEM32\DSREG (0x107000 bytes).
2026-05-29 05:08:53,722 [root] DEBUG: 39224: DLL loaded at 0x74180000: C:\Windows\SYSTEM32\profapi (0x1c000 bytes).
2026-05-29 05:08:53,740 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:53,741 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:53,749 [root] DEBUG: 39224: api-rate-cap: NtWaitForSingleObject hook disabled due to rate
2026-05-29 05:08:53,751 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,755 [root] DEBUG: 39224: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:08:53,756 [root] DEBUG: 39224: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptPrimitives (0x5f000 bytes).
2026-05-29 05:08:53,760 [root] DEBUG: 39224: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:08:53,773 [root] DEBUG: 39224: DLL loaded at 0x6AB30000: C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\psmachine (0x58000 bytes).
2026-05-29 05:08:53,788 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,804 [root] DEBUG: Error 5 (0x5) - OpenProcessHandler: Error obtaining target process name: Access is denied.
2026-05-29 05:08:53,806 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 8300, handle 0x2ec: Error obtaining target process name
2026-05-29 05:08:53,825 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,862 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,902 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,925 [root] DEBUG: 39224: DLL loaded at 0x6AAD0000: C:\Windows\System32\SystemSettings.DataModel (0x57000 bytes).
2026-05-29 05:08:53,927 [root] DEBUG: 39224: caller_dispatch: Added region at 0x6AAD0000 to tracked regions list (ntdll::LdrGetDllHandle returns to 0x6AAFB711, thread 39888).
2026-05-29 05:08:53,928 [root] DEBUG: 39224: ProcessTrackedRegion: Region at 0x6AAD0000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\SystemSettings.DataModel.dll is in known range, skipping
2026-05-29 05:08:53,936 [root] DEBUG: 39224: DLL loaded at 0x75410000: C:\Windows\SYSTEM32\USERENV (0x25000 bytes).
2026-05-29 05:08:53,942 [root] DEBUG: 39076: caller_dispatch: Added region at 0x05360000 to tracked regions list (ntdll::LdrLoadDll returns to 0x05360035, thread 39196).
2026-05-29 05:08:53,943 [root] DEBUG: 39076: DumpPEsInRange: Scanning range 0x05360000 - 0x05360127.
2026-05-29 05:08:53,943 [root] DEBUG: 39076: ScanForDisguisedPE: Size too small: 0x127 bytes
2026-05-29 05:08:53,946 [root] DEBUG: 39076: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::LdrLoadDll returns to 0x007451D4, thread 39380).
2026-05-29 05:08:53,949 [root] DEBUG: 39076: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:53,950 [lib.common.results] INFO: Uploading file C:\zDtLzmEP\CAPE\39076_22447341538929552026 to CAPE\170344fa25d76ead906e5045685db59cc63d25ba185edc2c98d8f6b10cb8c770; Size is 295; Max size: 100000000
2026-05-29 05:08:53,951 [root] DEBUG: 39076: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:53,957 [root] DEBUG: 39076: DumpMemory: Payload successfully created: C:\zDtLzmEP\CAPE\39076_22447341538929552026 (size 295 bytes)
2026-05-29 05:08:53,958 [root] DEBUG: 39224: CreateThreadBreakpoints: Failed to open thread and get a handle.
2026-05-29 05:08:53,959 [root] DEBUG: 39076: DumpRegion: Dumped entire allocation from 0x05360000, size 4096 bytes.
2026-05-29 05:08:53,960 [root] DEBUG: 39224: CreateThreadBreakpoints: Failed to open thread and get a handle.
2026-05-29 05:08:53,961 [root] DEBUG: 39076: ProcessTrackedRegion: Dumped region at 0x05360000.
2026-05-29 05:08:53,961 [root] DEBUG: 39076: YaraScan: Scanning 0x05360000, size 0x127
2026-05-29 05:08:53,967 [root] DEBUG: 39224: DLL loaded at 0x6FCF0000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x3ba000 bytes).
2026-05-29 05:08:53,982 [root] DEBUG: 39224: DLL loaded at 0x77270000: C:\Windows\System32\CFGMGR32 (0x3b000 bytes).
2026-05-29 05:08:53,987 [root] DEBUG: 39224: DLL loaded at 0x6AA40000: C:\Windows\System32\StructuredQuery (0x81000 bytes).
2026-05-29 05:08:53,992 [root] DEBUG: 39076: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:53,993 [root] DEBUG: 39076: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:53,994 [root] DEBUG: 39224: DLL loaded at 0x70910000: C:\Windows\SYSTEM32\PROPSYS (0xc2000 bytes).
2026-05-29 05:08:53,995 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:08:53,996 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:53,998 [lib.api.process] INFO: Injected into 32-bit <Process 39076 updater.exe>
2026-05-29 05:08:54,002 [root] DEBUG: 39224: DLL loaded at 0x6A9A0000: C:\Windows\System32\Windows.StateRepositoryPS (0x93000 bytes).
2026-05-29 05:08:54,003 [root] DEBUG: 39076: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:54,005 [root] DEBUG: 39076: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:54,008 [root] DEBUG: 39076: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:54,009 [root] DEBUG: 39076: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:54,013 [root] DEBUG: 39224: DLL loaded at 0x6A900000: C:\Windows\system32\Windows.Storage.Search (0x9d000 bytes).
2026-05-29 05:08:54,014 [root] DEBUG: 39076: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:54,028 [root] DEBUG: 39076: CreateProcessHandler: Injection info set for new process 39312: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x00540000
2026-05-29 05:08:54,029 [root] INFO: Announced 32-bit process name: updater.exe pid: 39312
2026-05-29 05:08:54,029 [lib.api.process] INFO: Monitor config for process 39312: C:\lpw_albt\dll\39312.ini
2026-05-29 05:08:54,031 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:54,036 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:54,039 [root] DEBUG: 39224: DLL loaded at 0x6A8F0000: C:\Windows\SYSTEM32\LINKINFO (0xb000 bytes).
2026-05-29 05:08:54,044 [root] DEBUG: Loader: Injecting process 39312 (thread 39184) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:54,045 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:54,046 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:54,047 [lib.api.process] INFO: Injected into 32-bit <Process 39312 updater.exe>
2026-05-29 05:08:54,050 [root] DEBUG: 39076: DLL loaded at 0x74960000: C:\Windows\system32\apphelp (0x9f000 bytes).
2026-05-29 05:08:54,060 [root] DEBUG: 39312: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:54,061 [root] DEBUG: 39312: Interactive desktop enabled.
2026-05-29 05:08:54,063 [root] DEBUG: 39312: Dropped file limit defaulting to 100.
2026-05-29 05:08:54,076 [root] DEBUG: 39312: Disabling sleep skipping.
2026-05-29 05:08:54,078 [root] DEBUG: 39312: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:54,079 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,085 [root] DEBUG: 39224: DLL loaded at 0x6F0B0000: C:\Windows\System32\msxml6 (0x1dd000 bytes).
2026-05-29 05:08:54,092 [root] DEBUG: 39224: DLL loaded at 0x6AE60000: C:\Windows\SYSTEM32\WINSTA (0x47000 bytes).
2026-05-29 05:08:54,119 [root] DEBUG: 39312: Monitor initialised: 32-bit capemon loaded in process 39312 at 0x6ab90000, thread 39184, image base 0x540000, stack from 0x4f5000-0x500000
2026-05-29 05:08:54,120 [root] DEBUG: 39224: DLL loaded at 0x75340000: C:\Windows\system32\winhttp (0xca000 bytes).
2026-05-29 05:08:54,121 [root] DEBUG: 39312: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=149.0.7814.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2b4,0x2e0,0x2e4,0x24c,0x2d8,0xaf8584,0xaf8
2026-05-29 05:08:54,124 [root] DEBUG: 39224: DLL loaded at 0x6E3B0000: C:\Windows\system32\OnDemandConnRouteHelper (0x12000 bytes).
2026-05-29 05:08:54,127 [root] DEBUG: 39224: DLL loaded at 0x73FA0000: C:\Windows\SYSTEM32\IPHLPAPI (0x32000 bytes).
2026-05-29 05:08:54,128 [root] DEBUG: 39224: DLL loaded at 0x76290000: C:\Windows\System32\NSI (0x7000 bytes).
2026-05-29 05:08:54,129 [root] DEBUG: 39224: DLL loaded at 0x6BC10000: C:\Windows\SYSTEM32\dhcpcsvc6 (0x14000 bytes).
2026-05-29 05:08:54,132 [root] DEBUG: 39224: DLL loaded at 0x73F80000: C:\Windows\SYSTEM32\dhcpcsvc (0x16000 bytes).
2026-05-29 05:08:54,143 [root] DEBUG: 39224: DLL loaded at 0x6A870000: C:\Windows\SYSTEM32\webio (0x73000 bytes).
2026-05-29 05:08:54,145 [root] DEBUG: 39224: DLL loaded at 0x6E350000: C:\Windows\system32\mswsock (0x52000 bytes).
2026-05-29 05:08:54,146 [root] DEBUG: 39224: DLL loaded at 0x6E2F0000: C:\Windows\SYSTEM32\WINNSI (0x8000 bytes).
2026-05-29 05:08:54,148 [root] DEBUG: 39312: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:54,152 [root] DEBUG: 39224: DLL loaded at 0x702C0000: C:\Windows\SYSTEM32\DNSAPI (0x90000 bytes).
2026-05-29 05:08:54,159 [root] DEBUG: 39224: DLL loaded at 0x6D030000: C:\Windows\System32\rasadhlp (0x8000 bytes).
2026-05-29 05:08:54,163 [root] DEBUG: 39312: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:54,164 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,164 [root] DEBUG: 39312: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:54,165 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,168 [root] DEBUG: 39312: Hooked 632 out of 632 functions
2026-05-29 05:08:54,169 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,170 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,179 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 40132: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:08:54,180 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,183 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 40132
2026-05-29 05:08:54,183 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,187 [root] DEBUG: 39224: DLL loaded at 0x6CFD0000: C:\Windows\System32\fwpuclnt (0x58000 bytes).
2026-05-29 05:08:54,188 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,189 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,189 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,190 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,192 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 40132
2026-05-29 05:08:54,197 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,198 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,199 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,200 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,203 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,203 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,214 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,216 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,217 [root] DEBUG: 39312: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:54,218 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,219 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,223 [root] DEBUG: 39312: RestoreHeaders: Restored original import table.
2026-05-29 05:08:54,227 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,228 [root] INFO: Loaded monitor into process with pid 39312
2026-05-29 05:08:54,230 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,237 [root] DEBUG: 39312: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 39184).
2026-05-29 05:08:54,238 [root] DEBUG: 39312: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:54,239 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,249 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,250 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,264 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,265 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,283 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,290 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,299 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,303 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,308 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,313 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,313 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,318 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,319 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,326 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,328 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,329 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,334 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,335 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,339 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,341 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,350 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,352 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,357 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,358 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,362 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,363 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,367 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,369 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,371 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,375 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,376 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,381 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,382 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,387 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,388 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,392 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,396 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,411 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,413 [root] DEBUG: 39224: DLL loaded at 0x6CF50000: C:\Windows\System32\schannel (0x7c000 bytes).
2026-05-29 05:08:54,414 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,415 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,419 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,424 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,430 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,431 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,436 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,437 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,443 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,447 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,452 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,452 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,454 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,459 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,459 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,510 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,515 [root] DEBUG: 39312: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:54,518 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,519 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,520 [root] DEBUG: 39312: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 39184).
2026-05-29 05:08:54,523 [root] DEBUG: 39312: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:54,549 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,550 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,551 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,552 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,557 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,558 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,570 [root] DEBUG: 39312: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:54,575 [root] DEBUG: 39312: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:54,581 [root] DEBUG: 39312: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:54,581 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,582 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,586 [root] DEBUG: 39312: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:54,591 [root] DEBUG: 39312: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:54,597 [root] DEBUG: 39312: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:54,598 [root] DEBUG: 39312: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:54,608 [root] DEBUG: 39312: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:54,615 [root] DEBUG: 39312: OpenProcessHandler: Image base for process 39076 (handle 0x2f8): 0x00540000.
2026-05-29 05:08:54,616 [root] DEBUG: 39312: OpenProcessHandler: Injection info created for process 39076, handle 0x2f8: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:54,632 [root] INFO: Added new file to list with pid 39312 and path C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad\metadata
2026-05-29 05:08:54,644 [root] INFO: Added new file to list with pid 39076 and path C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad\settings.dat
2026-05-29 05:08:54,657 [root] DEBUG: 39076: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:08:54,662 [root] DEBUG: 39076: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:08:54,675 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,679 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,679 [root] DEBUG: 39076: OpenProcessHandler: Injection info created for process 4484, handle 0x390: C:\Windows\explorer.exe
2026-05-29 05:08:54,684 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,686 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,691 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,692 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,696 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,697 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,703 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,704 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,709 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,710 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,714 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,715 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,719 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,721 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,725 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,726 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,730 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,731 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,735 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,736 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,741 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,742 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,746 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,747 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,751 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,752 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,756 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,756 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,761 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,762 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,766 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,767 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,771 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,772 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,776 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,777 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,781 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,782 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,793 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,796 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,801 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,802 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,806 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,807 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,811 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,812 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,817 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,818 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,823 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,824 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,828 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,831 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,836 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,837 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,841 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,842 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,847 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,849 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,853 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,854 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,859 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,863 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,868 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,870 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,874 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,875 [root] DEBUG: 39224: DLL loaded at 0x6CF40000: C:\Windows\SYSTEM32\mskeyprotect (0x10000 bytes).
2026-05-29 05:08:54,875 [root] DEBUG: 39224: DLL loaded at 0x70200000: C:\Windows\SYSTEM32\NTASN1 (0x28000 bytes).
2026-05-29 05:08:54,876 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,880 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,881 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,885 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,886 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,890 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,894 [root] DEBUG: 39224: DLL loaded at 0x70D00000: C:\Windows\SYSTEM32\ncrypt (0x21000 bytes).
2026-05-29 05:08:54,894 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,899 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,899 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,904 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,905 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,910 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,911 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,915 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,917 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,921 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,926 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,927 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,931 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,931 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,935 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,936 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,942 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,943 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,947 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,948 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,952 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,954 [root] DEBUG: 39224: DLL loaded at 0x6CEF0000: C:\Windows\system32\ncryptsslp (0x1f000 bytes).
2026-05-29 05:08:54,954 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,959 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,960 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,966 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,967 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,971 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,973 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,977 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,978 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,983 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,985 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,989 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,990 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:54,994 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:54,995 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,000 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,000 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,005 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,005 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,009 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,010 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,015 [root] DEBUG: 39224: DLL loaded at 0x701B0000: C:\Windows\SYSTEM32\MSASN1 (0xe000 bytes).
2026-05-29 05:08:55,016 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,017 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,021 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,022 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,026 [root] DEBUG: 39076: DLL loaded at 0x748A0000: C:\Windows\SYSTEM32\wkscli (0x11000 bytes).
2026-05-29 05:08:55,027 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,030 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,031 [root] DEBUG: 39076: DLL loaded at 0x74890000: C:\Windows\SYSTEM32\netutils (0xb000 bytes).
2026-05-29 05:08:55,033 [root] DEBUG: 39076: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:08:55,034 [root] DEBUG: 39076: DLL loaded at 0x6A810000: C:\Windows\SYSTEM32\MDMRegistration (0x53000 bytes).
2026-05-29 05:08:55,035 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,036 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,040 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,041 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,043 [root] DEBUG: 39076: DLL loaded at 0x6F2A0000: C:\Windows\SYSTEM32\powrprof (0x44000 bytes).
2026-05-29 05:08:55,043 [root] DEBUG: 39076: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\CRYPTSP (0x13000 bytes).
2026-05-29 05:08:55,045 [root] DEBUG: 39076: DLL loaded at 0x70D00000: C:\Windows\SYSTEM32\ncrypt (0x21000 bytes).
2026-05-29 05:08:55,046 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,047 [root] DEBUG: 39076: DLL loaded at 0x76790000: C:\Windows\System32\imagehlp (0x19000 bytes).
2026-05-29 05:08:55,047 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,049 [root] DEBUG: 39076: DLL loaded at 0x6A750000: C:\Windows\SYSTEM32\tbs (0x13000 bytes).
2026-05-29 05:08:55,050 [root] DEBUG: 39076: DLL loaded at 0x6A770000: C:\Windows\SYSTEM32\DMCmnUtils (0x63000 bytes).
2026-05-29 05:08:55,051 [root] DEBUG: 39076: DLL loaded at 0x6A7E0000: C:\Windows\SYSTEM32\omadmapi (0x2c000 bytes).
2026-05-29 05:08:55,052 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,053 [root] DEBUG: 39076: DLL loaded at 0x6F290000: C:\Windows\SYSTEM32\UMPDC (0xd000 bytes).
2026-05-29 05:08:55,053 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,055 [root] DEBUG: 39076: DLL loaded at 0x70200000: C:\Windows\SYSTEM32\NTASN1 (0x28000 bytes).
2026-05-29 05:08:55,059 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,060 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,065 [root] DEBUG: 39076: DLL loaded at 0x70670000: C:\Windows\system32\netapi32 (0x14000 bytes).
2026-05-29 05:08:55,066 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,067 [root] DEBUG: 39076: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:08:55,068 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,068 [root] DEBUG: 39076: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\cryptsp (0x13000 bytes).
2026-05-29 05:08:55,069 [root] DEBUG: 39076: DLL loaded at 0x6EC40000: C:\Windows\SYSTEM32\DSREG (0x107000 bytes).
2026-05-29 05:08:55,075 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,075 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,078 [root] DEBUG: 39076: DLL loaded at 0x74180000: C:\Windows\SYSTEM32\profapi (0x1c000 bytes).
2026-05-29 05:08:55,079 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,081 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,085 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,085 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,091 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,091 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,096 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,098 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,102 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,103 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,105 [root] DEBUG: 39076: OpenProcessHandler: Injection info created for process 948, handle 0x44c: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,107 [root] DEBUG: Error 5 (0x5) - OpenProcessHandler: Error obtaining target process name: Access is denied.
2026-05-29 05:08:55,109 [root] DEBUG: 39076: OpenProcessHandler: Injection info created for process 19212, handle 0x448: Error obtaining target process name
2026-05-29 05:08:55,110 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,110 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,111 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,111 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,116 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,117 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,121 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,122 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,126 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,127 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,131 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,131 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,137 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,137 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,138 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,139 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,142 [root] DEBUG: 19212: DLL loaded at 0x00007FFF524B0000: C:\Windows\System32\taskschd (0xac000 bytes).
2026-05-29 05:08:55,143 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,143 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 41444: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x0000000000540000
2026-05-29 05:08:55,144 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,153 [root] INFO: Announced 32-bit process name: updater.exe pid: 41444
2026-05-29 05:08:55,153 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,154 [lib.api.process] INFO: Monitor config for process 41444: C:\lpw_albt\dll\41444.ini
2026-05-29 05:08:55,154 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,157 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:55,158 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,160 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,161 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:55,164 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,167 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,169 [root] DEBUG: Loader: Injecting process 41444 (thread 41448) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:55,169 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:55,170 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:55,171 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,171 [lib.api.process] INFO: Injected into 32-bit <Process 41444 updater.exe>
2026-05-29 05:08:55,172 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,177 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,178 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,182 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,183 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,188 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,189 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,193 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,194 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,198 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,199 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,204 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,204 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,209 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,209 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,216 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,218 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,222 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,223 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,228 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,231 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,236 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,238 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,240 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,242 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,243 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,245 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,245 [root] INFO: Announced 32-bit process name: updater.exe pid: 41444
2026-05-29 05:08:55,247 [lib.api.process] INFO: Monitor config for process 41444: C:\lpw_albt\dll\41444.ini
2026-05-29 05:08:55,248 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:55,250 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,251 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,255 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:55,272 [root] DEBUG: Error 87 (0x57) - OpenProcessHandler: Error obtaining target process name: The parameter is incorrect.
2026-05-29 05:08:55,273 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4, handle 0x6fc: Error obtaining target process name
2026-05-29 05:08:55,274 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 124, handle 0x6fc:
2026-05-29 05:08:55,275 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 384, handle 0x6fc: C:\Windows\System32\smss.exe
2026-05-29 05:08:55,278 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 480, handle 0x6fc: C:\Windows\System32\csrss.exe
2026-05-29 05:08:55,281 [root] DEBUG: Loader: Injecting process 41444 (thread 41448) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:55,281 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 556, handle 0x6fc: C:\Windows\System32\wininit.exe
2026-05-29 05:08:55,282 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:55,283 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 576, handle 0x6fc: C:\Windows\System32\csrss.exe
2026-05-29 05:08:55,284 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:55,284 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 656, handle 0x6fc: C:\Windows\System32\winlogon.exe
2026-05-29 05:08:55,286 [lib.api.process] INFO: Injected into 32-bit <Process 41444 updater.exe>
2026-05-29 05:08:55,287 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 676, handle 0x6fc: C:\Windows\System32\services.exe
2026-05-29 05:08:55,289 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 724, handle 0x6fc: C:\Windows\System32\lsass.exe
2026-05-29 05:08:55,290 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 832, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,296 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 860, handle 0x6fc: C:\Windows\System32\fontdrvhost.exe
2026-05-29 05:08:55,297 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 868, handle 0x6fc: C:\Windows\System32\fontdrvhost.exe
2026-05-29 05:08:55,299 [root] DEBUG: 41444: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:55,299 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 948, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,300 [root] DEBUG: 41444: Interactive desktop enabled.
2026-05-29 05:08:55,301 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1004, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,301 [root] DEBUG: 41444: Dropped file limit defaulting to 100.
2026-05-29 05:08:55,313 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 472, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,316 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 772, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,317 [root] DEBUG: 41444: Disabling sleep skipping.
2026-05-29 05:08:55,317 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1048, handle 0x6fc: C:\Windows\System32\dwm.exe
2026-05-29 05:08:55,319 [root] DEBUG: 41444: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:55,320 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1096, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,321 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,331 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1136, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,333 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1164, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,333 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1268, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,334 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1284, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,335 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1292, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,336 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1308, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,337 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1352, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,338 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1444, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,341 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1596, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,343 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1632, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,344 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1644, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,345 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1664, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,346 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1828, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,347 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1852, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,347 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1860, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,348 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1868, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,349 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1992, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,350 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2020, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,351 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2036, handle 0x6fc:
2026-05-29 05:08:55,352 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2124, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,355 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2224, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,355 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2240, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,357 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2296, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,358 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2344, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,359 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2456, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,360 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2472, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,361 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2520, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,362 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2696, handle 0x6fc: C:\Windows\System32\spoolsv.exe
2026-05-29 05:08:55,362 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2724, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,363 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2772, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,364 [root] DEBUG: 41444: Monitor initialised: 32-bit capemon loaded in process 41444 at 0x6ab90000, thread 41448, image base 0x540000, stack from 0x4f35000-0x4f40000
2026-05-29 05:08:55,364 [root] DEBUG: 41444: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --wake-all --system
2026-05-29 05:08:55,365 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2876, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,366 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2896, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,368 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3012, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,370 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3020, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,373 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3040, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,375 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3048, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,377 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3056, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,378 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2292, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,379 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2820, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,381 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3396, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,381 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3892, handle 0x6fc: C:\Windows\System32\SearchIndexer.exe
2026-05-29 05:08:55,382 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3992, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,382 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3500, handle 0x6fc: C:\Windows\System32\sihost.exe
2026-05-29 05:08:55,383 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3416, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,386 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4148, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,391 [root] DEBUG: 41444: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:55,391 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4240, handle 0x6fc: C:\Windows\System32\taskhostw.exe
2026-05-29 05:08:55,392 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4300, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,393 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4380, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,394 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4484, handle 0x6fc: C:\Windows\explorer.exe
2026-05-29 05:08:55,394 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4524, handle 0x6fc: C:\Windows\System32\ctfmon.exe
2026-05-29 05:08:55,395 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4592, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,396 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4788, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,397 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4916, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,398 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5200, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,398 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5260, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,399 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5544, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,400 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5624, handle 0x6fc: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
2026-05-29 05:08:55,401 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5688, handle 0x6fc: C:\Windows\System32\RuntimeBroker.exe
2026-05-29 05:08:55,402 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5800, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,403 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5892, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,406 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6008, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,407 [root] DEBUG: 41444: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:55,408 [root] DEBUG: 41444: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:55,408 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6136, handle 0x6fc: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
2026-05-29 05:08:55,409 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5948, handle 0x6fc: C:\Windows\System32\RuntimeBroker.exe
2026-05-29 05:08:55,411 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6436, handle 0x6fc: C:\Windows\System32\RuntimeBroker.exe
2026-05-29 05:08:55,412 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6616, handle 0x6fc: C:\Windows\System32\taskhostw.exe
2026-05-29 05:08:55,414 [root] DEBUG: 41444: Hooked 632 out of 632 functions
2026-05-29 05:08:55,414 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6996, handle 0x6fc: C:\Windows\System32\smartscreen.exe
2026-05-29 05:08:55,417 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 7052, handle 0x6fc: C:\Windows\System32\SecurityHealthSystray.exe
2026-05-29 05:08:55,418 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 7088, handle 0x6fc: C:\Windows\System32\SecurityHealthService.exe
2026-05-29 05:08:55,420 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6284, handle 0x6fc: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,421 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3976, handle 0x6fc: C:\Windows\System32\conhost.exe
2026-05-29 05:08:55,423 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1104, handle 0x6fc: C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
2026-05-29 05:08:55,423 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5128, handle 0x6fc: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:55,424 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6768, handle 0x6fc: C:\Program Files (x86)\Steam\steam.exe
2026-05-29 05:08:55,425 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6400, handle 0x6fc: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,427 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6356, handle 0x6fc: C:\Program Files (x86)\Common Files\Steam\steamservice.exe
2026-05-29 05:08:55,429 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6360, handle 0x6fc: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:55,429 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6392, handle 0x6fc: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,431 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2160, handle 0x6fc: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:55,432 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6512, handle 0x6fc: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,437 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6504, handle 0x724: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:55,439 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 7444, handle 0x724: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,440 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 7544, handle 0x724: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,441 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 7844, handle 0x724: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:55,442 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 8100, handle 0x724: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,444 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 8340, handle 0x724: C:\Users\admin\AppData\Local\Discord\app-1.0.9238\Discord.exe
2026-05-29 05:08:55,444 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 8108, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,445 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3820, handle 0x724: C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
2026-05-29 05:08:55,447 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 8044, handle 0x724: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
2026-05-29 05:08:55,449 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1740, handle 0x724: C:\Windows\System32\dllhost.exe
2026-05-29 05:08:55,450 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1316, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,452 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 3404, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,452 [root] DEBUG: 41444: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:55,453 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5364, handle 0x724: C:\Windows\System32\SgrmBroker.exe
2026-05-29 05:08:55,454 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6640, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,455 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2580, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,456 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6028, handle 0x724: C:\Windows\System32\MoUsoCoreWorker.exe
2026-05-29 05:08:55,457 [root] DEBUG: 41444: RestoreHeaders: Restored original import table.
2026-05-29 05:08:55,457 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 6188, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,458 [root] INFO: Loaded monitor into process with pid 41444
2026-05-29 05:08:55,458 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 7184, handle 0x724: C:\Windows\System32\backgroundTaskHost.exe
2026-05-29 05:08:55,459 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 9012, handle 0x724: C:\Windows\System32\CompatTelRunner.exe
2026-05-29 05:08:55,460 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2004, handle 0x724: C:\Windows\servicing\TrustedInstaller.exe
2026-05-29 05:08:55,461 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 8316, handle 0x724: C:\Windows\System32\notepad.exe
2026-05-29 05:08:55,462 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 1508, handle 0x724: C:\Windows\System32\conhost.exe
2026-05-29 05:08:55,463 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 4960, handle 0x724: C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3745_none_7ded3f327ca60a41\TiWorker.exe
2026-05-29 05:08:55,463 [root] DEBUG: 41444: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 41448).
2026-05-29 05:08:55,464 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 2840, handle 0x724: C:\Windows\System32\CompatTelRunner.exe
2026-05-29 05:08:55,467 [root] DEBUG: 41444: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:55,468 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 5076, handle 0x724: C:\Windows\System32\sppsvc.exe
2026-05-29 05:08:55,471 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 10232, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,472 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,472 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 12120, handle 0x724: C:\Windows\System32\wbem\WmiPrvSE.exe
2026-05-29 05:08:55,473 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 15816, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,474 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 17256, handle 0x724: C:\Windows\System32\wbem\WmiPrvSE.exe
2026-05-29 05:08:55,476 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 17672, handle 0x724: C:\Windows\System32\wbem\WmiPrvSE.exe
2026-05-29 05:08:55,479 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 18000, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,480 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 18072, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,481 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 18332, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,481 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 18340, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,482 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 18404, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,483 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 19212, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,484 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 19444, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,484 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 19788, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,485 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 20664, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,486 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 20836, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,487 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 20948, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,488 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 21628, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,489 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 22256, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,490 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 24056, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,491 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 24440, handle 0x724: C:\Windows\System32\svchost.exe
2026-05-29 05:08:55,492 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 31996, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,493 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 32244, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,494 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 35108, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,499 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 37472, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,500 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 37492, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,501 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 37628, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,502 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 37652, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,502 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 37688, handle 0x724: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
2026-05-29 05:08:55,504 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 39076, handle 0x724: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:55,504 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 39312, handle 0x724: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:55,505 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 40132, handle 0x724: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,506 [root] DEBUG: 39224: OpenProcessHandler: Injection info created for process 41444, handle 0x724: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:55,512 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,537 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,539 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,554 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,595 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,633 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,672 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,710 [root] DEBUG: 41444: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:55,712 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,720 [root] DEBUG: 41444: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 41448).
2026-05-29 05:08:55,720 [root] DEBUG: 41444: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,756 [root] DEBUG: 41444: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:55,757 [root] DEBUG: 41444: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:55,764 [root] DEBUG: 41444: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 3.836928e-06)
2026-05-29 05:08:55,768 [root] DEBUG: 41444: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:55,771 [root] DEBUG: 41444: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:55,776 [root] DEBUG: 41444: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:55,778 [root] DEBUG: 41444: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:55,785 [root] DEBUG: 41444: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:55,788 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,789 [root] DEBUG: 41444: OpenProcessHandler: Injection info created for process 19212, handle 0x2d4: C:\Program Files\Google\Chrome\Application\chrome.exe
2026-05-29 05:08:55,790 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,797 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,798 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,801 [root] DEBUG: 41444: CreateProcessHandler: Injection info set for new process 42488: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x00540000
2026-05-29 05:08:55,803 [root] INFO: Announced 32-bit process name: updater.exe pid: 42488
2026-05-29 05:08:55,803 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,804 [lib.api.process] INFO: Monitor config for process 42488: C:\lpw_albt\dll\42488.ini
2026-05-29 05:08:55,805 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,807 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:55,810 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:55,811 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,813 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,817 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,822 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,823 [root] DEBUG: Loader: Injecting process 42488 (thread 42492) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:55,829 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,830 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:55,830 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,831 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:55,838 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,839 [lib.api.process] INFO: Injected into 32-bit <Process 42488 updater.exe>
2026-05-29 05:08:55,839 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,842 [root] DEBUG: 41444: DLL loaded at 0x74960000: C:\Windows\system32\apphelp (0x9f000 bytes).
2026-05-29 05:08:55,846 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,846 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,855 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,856 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,861 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,862 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,866 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,866 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,872 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,876 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,877 [root] DEBUG: 42488: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:55,878 [root] DEBUG: 42488: Interactive desktop enabled.
2026-05-29 05:08:55,879 [root] DEBUG: 42488: Dropped file limit defaulting to 100.
2026-05-29 05:08:55,885 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,887 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,893 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,894 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,898 [root] DEBUG: 42488: Disabling sleep skipping.
2026-05-29 05:08:55,902 [root] DEBUG: 42488: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:55,903 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,904 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:55,906 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,916 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,917 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,921 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,926 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,931 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,939 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,940 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,955 [root] DEBUG: 42488: Monitor initialised: 32-bit capemon loaded in process 42488 at 0x6ab90000, thread 42492, image base 0x540000, stack from 0x4f55000-0x4f60000
2026-05-29 05:08:55,956 [root] DEBUG: 42488: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=149.0.7814.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x2f8,0xaf8584,0xaf8
2026-05-29 05:08:55,961 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,962 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,970 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,971 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:55,978 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:55,995 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,003 [root] DEBUG: 39224: CreateProcessHandler: Injection info set for new process 42768: C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe, ImageBase: 0x00150000
2026-05-29 05:08:56,004 [root] DEBUG: 42488: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:56,005 [root] DEBUG: 39224: DLL loaded at 0x6E2E0000: C:\Windows\SYSTEM32\DPAPI (0x8000 bytes).
2026-05-29 05:08:56,007 [root] INFO: Announced 32-bit process name: MicrosoftEdgeUpdate.exe pid: 42768
2026-05-29 05:08:56,011 [lib.api.process] INFO: Monitor config for process 42768: C:\lpw_albt\dll\42768.ini
2026-05-29 05:08:56,014 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:56,017 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:56,017 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,020 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,022 [root] DEBUG: 42488: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:56,023 [root] DEBUG: 42488: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:56,027 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,028 [root] DEBUG: 42488: Hooked 632 out of 632 functions
2026-05-29 05:08:56,029 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,048 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,049 [root] DEBUG: Loader: Injecting process 42768 (thread 42772) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:56,053 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,054 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:56,055 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:56,058 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,059 [lib.api.process] INFO: Injected into 32-bit <Process 42768 MicrosoftEdgeUpdate.exe>
2026-05-29 05:08:56,060 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,065 [root] DEBUG: 39224: DLL loaded at 0x74960000: C:\Windows\system32\apphelp (0x9f000 bytes).
2026-05-29 05:08:56,071 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,072 [root] DEBUG: 42488: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:56,074 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,079 [root] DEBUG: 42488: RestoreHeaders: Restored original import table.
2026-05-29 05:08:56,080 [root] INFO: Loaded monitor into process with pid 42488
2026-05-29 05:08:56,082 [root] DEBUG: 42768: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:56,083 [root] DEBUG: 42768: Interactive desktop enabled.
2026-05-29 05:08:56,084 [root] DEBUG: 42768: Dropped file limit defaulting to 100.
2026-05-29 05:08:56,086 [root] DEBUG: 42768: Disabling sleep skipping.
2026-05-29 05:08:56,092 [root] DEBUG: 42488: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 42492).
2026-05-29 05:08:56,097 [root] DEBUG: 42768: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:56,097 [root] DEBUG: 42488: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:56,098 [root] DEBUG: 42768: YaraScan: Scanning 0x00150000, size 0x34220
2026-05-29 05:08:56,099 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,100 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,102 [root] DEBUG: 42768: Monitor initialised: 32-bit capemon loaded in process 42768 at 0x6ab90000, thread 42772, image base 0x150000, stack from 0x26f4000-0x2700000
2026-05-29 05:08:56,103 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,107 [root] DEBUG: 42768: Commandline: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4yMzMuMyIgc2hlbGxfdmVyc2lvbj0iMS4zLjIzMy4zIiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0ie0ZERjY3RTBELUJGNzYtNEZCMy1BQzZFLUM3MEI1RDRCM0I0Qn0iIHVzZXJpZD0ie0ZCMzgwRkUzLTYxODktNEI5Qi05ODc1LUY5NkNEMjM3MjdBMH0iIGluc3RhbGxzb3VyY2U9InNjaGVkdWxlciIgcmVxdWVzdGlkPSJ7QUUzQzlEQTEtM0RCQy00MzQ0LUIwRDktMjBDNEM0N
2026-05-29 05:08:56,113 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,114 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,132 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,145 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,159 [root] DEBUG: 42768: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:56,160 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,160 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,170 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,179 [root] DEBUG: 42768: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:56,180 [root] DEBUG: 42768: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:56,190 [root] DEBUG: 42768: Hooked 632 out of 632 functions
2026-05-29 05:08:56,191 [root] DEBUG: 42768: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:56,195 [root] DEBUG: 42768: RestoreHeaders: Restored original import table.
2026-05-29 05:08:56,198 [root] INFO: Loaded monitor into process with pid 42768
2026-05-29 05:08:56,201 [root] DEBUG: 42768: caller_dispatch: Added region at 0x00150000 to tracked regions list (kernel32::LoadLibraryExW returns to 0x0015D98E, thread 42772).
2026-05-29 05:08:56,202 [root] DEBUG: 42768: YaraScan: Scanning 0x00150000, size 0x34220
2026-05-29 05:08:56,203 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,204 [root] DEBUG: 42768: ProcessImageBase: Main module image at 0x00150000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:56,210 [root] DEBUG: 42768: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:56,211 [root] DEBUG: 42768: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:56,213 [root] DEBUG: 42768: DLL loaded at 0x75F00000: C:\Windows\System32\SHCORE (0x87000 bytes).
2026-05-29 05:08:56,216 [root] DEBUG: 42768: DLL loaded at 0x70670000: C:\Windows\SYSTEM32\NETAPI32 (0x14000 bytes).
2026-05-29 05:08:56,217 [root] DEBUG: 42768: DLL loaded at 0x75460000: C:\Windows\SYSTEM32\VERSION (0x8000 bytes).
2026-05-29 05:08:56,217 [root] DEBUG: 42768: DLL loaded at 0x75450000: C:\Windows\SYSTEM32\WTSAPI32 (0xf000 bytes).
2026-05-29 05:08:56,218 [root] DEBUG: 42768: DLL loaded at 0x74890000: C:\Windows\SYSTEM32\NETUTILS (0xb000 bytes).
2026-05-29 05:08:56,219 [root] DEBUG: 42768: DLL loaded at 0x748A0000: C:\Windows\SYSTEM32\WKSCLI (0x11000 bytes).
2026-05-29 05:08:56,220 [root] DEBUG: 42768: DLL loaded at 0x6AEB0000: C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.233.3\msedgeupdate (0x23d000 bytes).
2026-05-29 05:08:56,225 [root] DEBUG: 42768: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:08:56,226 [root] DEBUG: 42768: DLL loaded at 0x6A810000: C:\Windows\system32\MDMRegistration (0x53000 bytes).
2026-05-29 05:08:56,235 [root] DEBUG: 42768: DLL loaded at 0x6F2A0000: C:\Windows\SYSTEM32\powrprof (0x44000 bytes).
2026-05-29 05:08:56,237 [root] DEBUG: 42768: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\CRYPTSP (0x13000 bytes).
2026-05-29 05:08:56,238 [root] DEBUG: 42768: DLL loaded at 0x70D00000: C:\Windows\SYSTEM32\ncrypt (0x21000 bytes).
2026-05-29 05:08:56,238 [root] DEBUG: 42768: DLL loaded at 0x76790000: C:\Windows\System32\imagehlp (0x19000 bytes).
2026-05-29 05:08:56,239 [root] DEBUG: 42768: DLL loaded at 0x6A750000: C:\Windows\SYSTEM32\tbs (0x13000 bytes).
2026-05-29 05:08:56,240 [root] DEBUG: 42768: DLL loaded at 0x6A770000: C:\Windows\SYSTEM32\DMCmnUtils (0x63000 bytes).
2026-05-29 05:08:56,241 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,242 [root] DEBUG: 42768: DLL loaded at 0x6A7E0000: C:\Windows\SYSTEM32\omadmapi (0x2c000 bytes).
2026-05-29 05:08:56,243 [root] DEBUG: 42768: DLL loaded at 0x6F290000: C:\Windows\SYSTEM32\UMPDC (0xd000 bytes).
2026-05-29 05:08:56,248 [root] DEBUG: 42768: DLL loaded at 0x70200000: C:\Windows\SYSTEM32\NTASN1 (0x28000 bytes).
2026-05-29 05:08:56,249 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,250 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,252 [root] DEBUG: 42768: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:08:56,253 [root] DEBUG: 42768: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\cryptsp (0x13000 bytes).
2026-05-29 05:08:56,253 [root] DEBUG: 42768: DLL loaded at 0x6EC40000: C:\Windows\SYSTEM32\DSREG (0x107000 bytes).
2026-05-29 05:08:56,262 [root] DEBUG: 42768: DLL loaded at 0x74180000: C:\Windows\SYSTEM32\profapi (0x1c000 bytes).
2026-05-29 05:08:56,265 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,266 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,280 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,281 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,282 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,294 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,296 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,303 [root] DEBUG: 42768: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:08:56,303 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,306 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,308 [root] DEBUG: 42768: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptPrimitives (0x5f000 bytes).
2026-05-29 05:08:56,312 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,315 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,315 [root] DEBUG: 42768: DLL loaded at 0x6AE60000: C:\Windows\SYSTEM32\WINSTA (0x47000 bytes).
2026-05-29 05:08:56,321 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,323 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,323 [root] DEBUG: 42768: DLL loaded at 0x73FA0000: C:\Windows\SYSTEM32\Iphlpapi (0x32000 bytes).
2026-05-29 05:08:56,324 [root] DEBUG: 42768: DLL loaded at 0x76290000: C:\Windows\System32\NSI (0x7000 bytes).
2026-05-29 05:08:56,325 [root] DEBUG: 42768: DLL loaded at 0x73F80000: C:\Windows\SYSTEM32\dhcpcsvc (0x16000 bytes).
2026-05-29 05:08:56,329 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,330 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,331 [root] DEBUG: 42768: CreateThreadBreakpoints: Failed to open thread and get a handle.
2026-05-29 05:08:56,331 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,346 [root] DEBUG: 42768: CreateThreadBreakpoints: Failed to open thread and get a handle.
2026-05-29 05:08:56,347 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,348 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,354 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,355 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,364 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,368 [root] DEBUG: 42768: DLL loaded at 0x73E90000: C:\Windows\SYSTEM32\diagnosticdataquery (0xc000 bytes).
2026-05-29 05:08:56,371 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,371 [root] DEBUG: 42768: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:08:56,372 [root] DEBUG: 42488: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:56,373 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,376 [root] DEBUG: 42768: DLL loaded at 0x6F0B0000: C:\Windows\System32\msxml6 (0x1dd000 bytes).
2026-05-29 05:08:56,378 [root] DEBUG: 42488: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 42492).
2026-05-29 05:08:56,394 [root] DEBUG: 42488: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,395 [root] DEBUG: 42768: DLL loaded at 0x73EB0000: C:\Windows\System32\netprofm (0x32000 bytes).
2026-05-29 05:08:56,396 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,398 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,404 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,407 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,413 [root] DEBUG: 42768: DLL loaded at 0x73EA0000: C:\Windows\System32\npmproxy (0xa000 bytes).
2026-05-29 05:08:56,433 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,433 [root] DEBUG: 42488: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:56,434 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,438 [root] DEBUG: 42488: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:56,440 [root] DEBUG: 42768: DLL loaded at 0x75340000: C:\Windows\system32\winhttp (0xca000 bytes).
2026-05-29 05:08:56,445 [root] DEBUG: 42488: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:56,446 [root] DEBUG: 42768: DLL loaded at 0x6E3B0000: C:\Windows\system32\OnDemandConnRouteHelper (0x12000 bytes).
2026-05-29 05:08:56,449 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,450 [root] DEBUG: 42488: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:56,451 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,452 [root] DEBUG: 42768: DLL loaded at 0x6BC10000: C:\Windows\SYSTEM32\dhcpcsvc6 (0x14000 bytes).
2026-05-29 05:08:56,453 [root] DEBUG: 42488: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:56,460 [root] DEBUG: 42488: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:56,462 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,462 [root] DEBUG: 42488: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:56,465 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,471 [root] DEBUG: 42488: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:56,472 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,475 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,476 [root] DEBUG: 42488: OpenProcessHandler: Image base for process 41444 (handle 0x310): 0x00540000.
2026-05-29 05:08:56,477 [root] DEBUG: 42768: DLL loaded at 0x6A870000: C:\Windows\SYSTEM32\webio (0x73000 bytes).
2026-05-29 05:08:56,478 [root] DEBUG: 42488: OpenProcessHandler: Injection info created for process 41444, handle 0x310: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:56,479 [root] DEBUG: 42768: DLL loaded at 0x6E350000: C:\Windows\system32\mswsock (0x52000 bytes).
2026-05-29 05:08:56,480 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,480 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,483 [root] DEBUG: 42768: DLL loaded at 0x6E2F0000: C:\Windows\SYSTEM32\WINNSI (0x8000 bytes).
2026-05-29 05:08:56,488 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,490 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,491 [root] DEBUG: 42768: DLL loaded at 0x702C0000: C:\Windows\SYSTEM32\DNSAPI (0x90000 bytes).
2026-05-29 05:08:56,491 [root] DEBUG: 42488: DLL loaded at 0x75640000: C:\Windows\System32\MSCTF (0xd4000 bytes).
2026-05-29 05:08:56,496 [root] DEBUG: 42768: DLL loaded at 0x6D030000: C:\Windows\System32\rasadhlp (0x8000 bytes).
2026-05-29 05:08:56,502 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 42488, handle 0x2878: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:56,508 [root] DEBUG: 41444: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:08:56,510 [root] DEBUG: 41444: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:08:56,520 [root] DEBUG: 42768: DLL loaded at 0x6CFD0000: C:\Windows\System32\fwpuclnt (0x58000 bytes).
2026-05-29 05:08:56,521 [root] DEBUG: 41444: OpenProcessHandler: Injection info created for process 4484, handle 0x380: C:\Windows\explorer.exe
2026-05-29 05:08:56,536 [root] DEBUG: 41444: CreateProcessHandler: Injection info set for new process 43608: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x00540000
2026-05-29 05:08:56,538 [root] DEBUG: 42768: DLL loaded at 0x6CF50000: C:\Windows\System32\schannel (0x7c000 bytes).
2026-05-29 05:08:56,539 [root] INFO: Announced 32-bit process name: updater.exe pid: 43608
2026-05-29 05:08:56,540 [lib.api.process] INFO: Monitor config for process 43608: C:\lpw_albt\dll\43608.ini
2026-05-29 05:08:56,541 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:56,545 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:56,553 [root] DEBUG: Loader: Injecting process 43608 (thread 43612) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:56,555 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:56,555 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:56,557 [lib.api.process] INFO: Injected into 32-bit <Process 43608 updater.exe>
2026-05-29 05:08:56,564 [root] DEBUG: 42768: DLL loaded at 0x6CF40000: C:\Windows\SYSTEM32\mskeyprotect (0x10000 bytes).
2026-05-29 05:08:56,566 [root] DEBUG: 42768: DLL loaded at 0x70200000: C:\Windows\SYSTEM32\NTASN1 (0x28000 bytes).
2026-05-29 05:08:56,567 [root] DEBUG: 43608: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:56,568 [root] DEBUG: 43608: Interactive desktop enabled.
2026-05-29 05:08:56,569 [root] DEBUG: 42768: DLL loaded at 0x70D00000: C:\Windows\SYSTEM32\ncrypt (0x21000 bytes).
2026-05-29 05:08:56,570 [root] DEBUG: 43608: Dropped file limit defaulting to 100.
2026-05-29 05:08:56,570 [root] DEBUG: 42768: DLL loaded at 0x6CEF0000: C:\Windows\system32\ncryptsslp (0x1f000 bytes).
2026-05-29 05:08:56,576 [root] DEBUG: 42768: DLL loaded at 0x701B0000: C:\Windows\SYSTEM32\MSASN1 (0xe000 bytes).
2026-05-29 05:08:56,583 [root] DEBUG: 43608: Disabling sleep skipping.
2026-05-29 05:08:56,585 [root] DEBUG: 43608: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:56,586 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,628 [root] DEBUG: 43608: Monitor initialised: 32-bit capemon loaded in process 43608 at 0x6ab90000, thread 43612, image base 0x540000, stack from 0x4f55000-0x4f60000
2026-05-29 05:08:56,629 [root] DEBUG: 43608: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --wake --system
2026-05-29 05:08:56,656 [root] DEBUG: 43608: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:56,672 [root] DEBUG: 43608: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:56,674 [root] DEBUG: 43608: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:56,678 [root] DEBUG: 43608: Hooked 632 out of 632 functions
2026-05-29 05:08:56,712 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:56,713 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:56,717 [root] DEBUG: 43608: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:56,720 [root] DEBUG: 43608: RestoreHeaders: Restored original import table.
2026-05-29 05:08:56,723 [root] INFO: Loaded monitor into process with pid 43608
2026-05-29 05:08:56,729 [root] DEBUG: 43608: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 43612).
2026-05-29 05:08:56,731 [root] DEBUG: 43608: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:56,732 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,771 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,808 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,848 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,885 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,922 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,926 [root] DEBUG: 42768: DLL loaded at 0x6E2E0000: C:\Windows\SYSTEM32\DPAPI (0x8000 bytes).
2026-05-29 05:08:56,930 [root] INFO: Added new file to list with pid 42768 and path C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
2026-05-29 05:08:56,934 [root] DEBUG: 42768: NtTerminateProcess hook: Attempting to dump process 42768
2026-05-29 05:08:56,935 [root] DEBUG: 42768: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:08:56,940 [root] INFO: Process with pid 42768 has terminated
2026-05-29 05:08:56,950 [root] DEBUG: 39224: NtTerminateProcess hook: Attempting to dump process 39224
2026-05-29 05:08:56,951 [root] DEBUG: 39224: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:08:56,957 [root] INFO: Process with pid 39224 has terminated
2026-05-29 05:08:56,961 [root] DEBUG: 43608: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:56,962 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:56,967 [root] DEBUG: 43608: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 43612).
2026-05-29 05:08:56,969 [root] DEBUG: 43608: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,002 [root] DEBUG: 43608: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:57,004 [root] DEBUG: 43608: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:57,009 [root] DEBUG: 43608: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 3.836952e-06)
2026-05-29 05:08:57,013 [root] DEBUG: 43608: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:57,014 [root] DEBUG: 43608: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:57,017 [root] DEBUG: 43608: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:57,018 [root] DEBUG: 43608: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:57,023 [root] DEBUG: 43608: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:57,028 [root] DEBUG: 43608: OpenProcessHandler: Image base for process 41444 (handle 0x2d4): 0x00540000.
2026-05-29 05:08:57,028 [root] DEBUG: 43608: OpenProcessHandler: Injection info created for process 41444, handle 0x2d4: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:57,034 [root] DEBUG: 43608: CreateProcessHandler: Injection info set for new process 43916: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x00540000
2026-05-29 05:08:57,037 [root] INFO: Announced 32-bit process name: updater.exe pid: 43916
2026-05-29 05:08:57,037 [lib.api.process] INFO: Monitor config for process 43916: C:\lpw_albt\dll\43916.ini
2026-05-29 05:08:57,039 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:57,045 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:57,050 [root] DEBUG: Loader: Injecting process 43916 (thread 43920) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:57,052 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:57,052 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:57,054 [lib.api.process] INFO: Injected into 32-bit <Process 43916 updater.exe>
2026-05-29 05:08:57,057 [root] DEBUG: 43608: DLL loaded at 0x74960000: C:\Windows\system32\apphelp (0x9f000 bytes).
2026-05-29 05:08:57,067 [root] DEBUG: 43916: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:57,068 [root] DEBUG: 43916: Interactive desktop enabled.
2026-05-29 05:08:57,069 [root] DEBUG: 43916: Dropped file limit defaulting to 100.
2026-05-29 05:08:57,080 [root] DEBUG: 43916: Disabling sleep skipping.
2026-05-29 05:08:57,082 [root] DEBUG: 43916: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:57,083 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,106 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:57,106 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:57,119 [root] DEBUG: 43916: Monitor initialised: 32-bit capemon loaded in process 43916 at 0x6ab90000, thread 43920, image base 0x540000, stack from 0x4f35000-0x4f40000
2026-05-29 05:08:57,121 [root] DEBUG: 43916: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=149.0.7814.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2e0,0x2d8,0x2e4,0x2dc,0x2e8,0xaf8584,0xaf8
2026-05-29 05:08:57,129 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:57,130 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:57,145 [root] DEBUG: 43916: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:57,159 [root] DEBUG: 43916: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:57,160 [root] DEBUG: 43916: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:57,164 [root] DEBUG: 43916: Hooked 632 out of 632 functions
2026-05-29 05:08:57,204 [root] DEBUG: 43916: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:57,207 [root] DEBUG: 43916: RestoreHeaders: Restored original import table.
2026-05-29 05:08:57,208 [root] INFO: Loaded monitor into process with pid 43916
2026-05-29 05:08:57,216 [root] DEBUG: 43916: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 43920).
2026-05-29 05:08:57,217 [root] DEBUG: 43916: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:57,218 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,260 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,298 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,335 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,374 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,413 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,451 [root] DEBUG: 43916: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:57,452 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,455 [root] DEBUG: 43916: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 43920).
2026-05-29 05:08:57,456 [root] DEBUG: 43916: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:57,494 [root] DEBUG: 43916: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:57,495 [root] DEBUG: 43916: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:57,498 [root] DEBUG: 43916: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:57,501 [root] DEBUG: 43916: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:57,503 [root] DEBUG: 43916: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:57,506 [root] DEBUG: 43916: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:57,507 [root] DEBUG: 43916: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:57,511 [root] DEBUG: 43916: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:57,516 [root] DEBUG: 43916: OpenProcessHandler: Image base for process 43608 (handle 0x2f0): 0x00540000.
2026-05-29 05:08:57,517 [root] DEBUG: 43916: OpenProcessHandler: Injection info created for process 43608, handle 0x2f0: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:57,523 [root] DEBUG: 43916: DLL loaded at 0x75640000: C:\Windows\System32\MSCTF (0xd4000 bytes).
2026-05-29 05:08:57,524 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 43916, handle 0x2878: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:57,540 [root] DEBUG: 43608: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:08:57,542 [root] DEBUG: 43608: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:08:57,550 [root] DEBUG: 43608: OpenProcessHandler: Injection info created for process 4484, handle 0x380: C:\Windows\explorer.exe
2026-05-29 05:08:57,573 [root] INFO: Announced starting service "b'GoogleUpdaterInternalService149.0.7814.0'"
2026-05-29 05:08:58,590 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 44272: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x0000000000540000
2026-05-29 05:08:58,591 [root] INFO: Announced 32-bit process name: updater.exe pid: 44272
2026-05-29 05:08:58,592 [lib.api.process] INFO: Monitor config for process 44272: C:\lpw_albt\dll\44272.ini
2026-05-29 05:08:58,593 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:58,599 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:58,604 [root] DEBUG: Loader: Injecting process 44272 (thread 44276) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:58,605 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:58,606 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:58,608 [lib.api.process] INFO: Injected into 32-bit <Process 44272 updater.exe>
2026-05-29 05:08:58,610 [root] INFO: Announced 32-bit process name: updater.exe pid: 44272
2026-05-29 05:08:58,610 [lib.api.process] INFO: Monitor config for process 44272: C:\lpw_albt\dll\44272.ini
2026-05-29 05:08:58,611 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:58,617 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:58,623 [root] DEBUG: Loader: Injecting process 44272 (thread 44276) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:58,624 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:08:58,625 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:58,627 [lib.api.process] INFO: Injected into 32-bit <Process 44272 updater.exe>
2026-05-29 05:08:58,628 [root] INFO: Announced 32-bit process name: updater.exe pid: 44272
2026-05-29 05:08:58,628 [lib.api.process] INFO: Monitor config for process 44272: C:\lpw_albt\dll\44272.ini
2026-05-29 05:08:58,629 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:58,635 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:58,642 [root] DEBUG: Loader: Injecting process 44272 with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:58,643 [root] DEBUG: InjectDll: No thread ID supplied, GetProcessInitialThreadId failed, falling back to thread injection.
2026-05-29 05:08:58,651 [root] DEBUG: 44272: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:58,652 [root] DEBUG: 44272: Interactive desktop enabled.
2026-05-29 05:08:58,653 [root] DEBUG: 44272: Dropped file limit defaulting to 100.
2026-05-29 05:08:58,658 [root] DEBUG: 44272: Disabling sleep skipping.
2026-05-29 05:08:58,659 [root] DEBUG: 44272: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:58,661 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:58,697 [root] DEBUG: 44272: Monitor initialised: 32-bit capemon loaded in process 44272 at 0x6ab90000, thread 44392, image base 0x540000, stack from 0x5485000-0x5490000
2026-05-29 05:08:58,698 [root] DEBUG: 44272: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --system --windows-service --service=update-internal
2026-05-29 05:08:58,724 [root] DEBUG: 44272: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:58,739 [root] DEBUG: 44272: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:58,740 [root] DEBUG: 44272: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:58,744 [root] DEBUG: 44272: Hooked 632 out of 632 functions
2026-05-29 05:08:58,783 [root] DEBUG: 44272: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:58,787 [root] DEBUG: 44272: RestoreHeaders: Restored original import table.
2026-05-29 05:08:58,788 [root] INFO: Loaded monitor into process with pid 44272
2026-05-29 05:08:58,793 [root] DEBUG: 44272: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 44392).
2026-05-29 05:08:58,794 [root] DEBUG: 44272: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:58,795 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:58,832 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:58,870 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:58,907 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:58,944 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:58,990 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,028 [root] DEBUG: 44272: caller_dispatch: Added region at 0x05340000 to tracked regions list (ntdll::LdrLoadDll returns to 0x05340035, thread 44392).
2026-05-29 05:08:59,029 [root] DEBUG: 44272: DumpPEsInRange: Scanning range 0x05340000 - 0x05340127.
2026-05-29 05:08:59,031 [root] DEBUG: 44272: ScanForDisguisedPE: Size too small: 0x127 bytes
2026-05-29 05:08:59,033 [root] DEBUG: 44272: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::LdrLoadDll returns to 0x007451D4, thread 44436).
2026-05-29 05:08:59,035 [root] DEBUG: 44272: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:59,036 [lib.common.results] INFO: Uploading file C:\zDtLzmEP\CAPE\44272_584300598929552026 to CAPE\869d6b1c979b6dd973f92dbe50f68bb5cf3cb8fc971562e6405b09d7f5dad91f; Size is 295; Max size: 100000000
2026-05-29 05:08:59,037 [root] DEBUG: 44272: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,041 [root] DEBUG: 44272: DumpMemory: Payload successfully created: C:\zDtLzmEP\CAPE\44272_584300598929552026 (size 295 bytes)
2026-05-29 05:08:59,043 [root] DEBUG: 44272: DumpRegion: Dumped entire allocation from 0x05340000, size 4096 bytes.
2026-05-29 05:08:59,044 [root] DEBUG: 44272: ProcessTrackedRegion: Dumped region at 0x05340000.
2026-05-29 05:08:59,045 [root] DEBUG: 44272: YaraScan: Scanning 0x05340000, size 0x127
2026-05-29 05:08:59,078 [root] DEBUG: 44272: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:59,080 [root] DEBUG: 44272: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:59,082 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:08:59,083 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:59,084 [lib.api.process] INFO: Injected into 32-bit <Process 44272 updater.exe>
2026-05-29 05:08:59,088 [root] DEBUG: 44272: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:59,091 [root] DEBUG: 44272: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:59,095 [root] DEBUG: 44272: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:59,096 [root] DEBUG: 44272: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:59,101 [root] DEBUG: 44272: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:59,110 [root] DEBUG: 44272: CreateProcessHandler: Injection info set for new process 44644: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x00540000
2026-05-29 05:08:59,111 [root] INFO: Announced 32-bit process name: updater.exe pid: 44644
2026-05-29 05:08:59,112 [lib.api.process] INFO: Monitor config for process 44644: C:\lpw_albt\dll\44644.ini
2026-05-29 05:08:59,115 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:08:59,120 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:08:59,125 [root] DEBUG: Loader: Injecting process 44644 (thread 44648) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:59,126 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:08:59,127 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:08:59,129 [lib.api.process] INFO: Injected into 32-bit <Process 44644 updater.exe>
2026-05-29 05:08:59,131 [root] DEBUG: 44272: DLL loaded at 0x74960000: C:\Windows\system32\apphelp (0x9f000 bytes).
2026-05-29 05:08:59,139 [root] DEBUG: 44644: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:08:59,140 [root] DEBUG: 44644: Interactive desktop enabled.
2026-05-29 05:08:59,141 [root] DEBUG: 44644: Dropped file limit defaulting to 100.
2026-05-29 05:08:59,146 [root] DEBUG: 44644: Disabling sleep skipping.
2026-05-29 05:08:59,147 [root] DEBUG: 44644: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:08:59,149 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,185 [root] DEBUG: 44644: Monitor initialised: 32-bit capemon loaded in process 44644 at 0x6ab90000, thread 44648, image base 0x540000, stack from 0x1c4000-0x1d0000
2026-05-29 05:08:59,186 [root] DEBUG: 44644: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=149.0.7814.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2f0,0x2f4,0x2f8,0x2e8,0x2fc,0xaf8584,0xaf8
2026-05-29 05:08:59,210 [root] DEBUG: 44644: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:08:59,224 [root] DEBUG: 44644: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:08:59,226 [root] DEBUG: 44644: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:08:59,232 [root] DEBUG: 44644: Hooked 632 out of 632 functions
2026-05-29 05:08:59,271 [root] DEBUG: 44644: Syscall hook installed, syscall logging level 1
2026-05-29 05:08:59,274 [root] DEBUG: 44644: RestoreHeaders: Restored original import table.
2026-05-29 05:08:59,275 [root] INFO: Loaded monitor into process with pid 44644
2026-05-29 05:08:59,281 [root] DEBUG: 44644: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 44648).
2026-05-29 05:08:59,282 [root] DEBUG: 44644: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:08:59,283 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,320 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,357 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,395 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,431 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,471 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,510 [root] DEBUG: 44644: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:08:59,514 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,515 [root] DEBUG: 44644: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 44648).
2026-05-29 05:08:59,515 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:08:59,516 [root] DEBUG: 44644: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:08:59,517 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:08:59,553 [root] DEBUG: 44644: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:08:59,555 [root] DEBUG: 44644: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:08:59,557 [root] DEBUG: 44644: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 3.836928e-06)
2026-05-29 05:08:59,560 [root] DEBUG: 44644: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:59,562 [root] DEBUG: 44644: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:08:59,565 [root] DEBUG: 44644: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:08:59,567 [root] DEBUG: 44644: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:08:59,576 [root] DEBUG: 44644: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:08:59,585 [root] DEBUG: 44644: OpenProcessHandler: Image base for process 44272 (handle 0x300): 0x00540000.
2026-05-29 05:08:59,589 [root] DEBUG: 44644: OpenProcessHandler: Injection info created for process 44272, handle 0x300: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:08:59,624 [root] DEBUG: 44272: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:08:59,628 [root] DEBUG: 44272: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:08:59,644 [root] DEBUG: 44272: OpenProcessHandler: Injection info created for process 4484, handle 0x380: C:\Windows\explorer.exe
2026-05-29 05:09:00,653 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:00,655 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:01,140 [root] DEBUG: 12120: DLL loaded at 0x00007FFF4EE90000: C:\Windows\System32\fwpuclnt (0x80000 bytes).
2026-05-29 05:09:01,495 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:01,496 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:01,786 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:01,787 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:02,628 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:02,629 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:02,634 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:02,635 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:02,655 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:02,657 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:02,661 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:02,662 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:02,666 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:02,668 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:02,672 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:02,673 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,107 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,109 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,110 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,110 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,111 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 45104: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:09:03,111 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 45104
2026-05-29 05:09:03,114 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,115 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,116 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,116 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,117 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,118 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,119 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4DE90000: C:\Windows\SYSTEM32\wbemcomn (0x90000 bytes).
2026-05-29 05:09:03,120 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,121 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3FD20000: C:\Windows\system32\wbem\wbemprox (0x11000 bytes).
2026-05-29 05:09:03,122 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,123 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 45104
2026-05-29 05:09:03,127 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,128 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,128 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,129 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,129 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 45188: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:09:03,131 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3F950000: C:\Windows\system32\wbem\wbemsvc (0x14000 bytes).
2026-05-29 05:09:03,131 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 45188
2026-05-29 05:09:03,139 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,140 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,141 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,142 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,143 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 45188
2026-05-29 05:09:03,143 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3F9F0000: C:\Windows\system32\wbem\fastprox (0x10b000 bytes).
2026-05-29 05:09:03,148 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,149 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,152 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,154 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,155 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 45268: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:09:03,155 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3F880000: C:\Windows\SYSTEM32\amsi (0x1f000 bytes).
2026-05-29 05:09:03,160 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 45268
2026-05-29 05:09:03,166 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,167 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,169 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268721e+00 (from 6.268295e+00)
2026-05-29 05:09:03,170 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,171 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,172 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,172 [root] DEBUG: 19212: DLL loaded at 0x00007FFF3F830000: C:\Program Files\Windows Defender\MpOav (0x44000 bytes).
2026-05-29 05:09:03,174 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 45268
2026-05-29 05:09:03,185 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:03,186 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:03,187 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,187 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,209 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:03,211 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:03,452 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:03,453 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,172 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,173 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,177 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,178 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,183 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,184 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,190 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,191 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,195 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,196 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,201 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,613 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,613 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,622 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,624 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,652 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,654 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,671 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,672 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,680 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,681 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,722 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,723 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,757 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,757 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:04,768 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:04,769 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:05,034 [root] INFO: Added new file to list with pid 39076 and path C:\Program Files (x86)\Google\GoogleUpdater\b9971a97-28ef-490c-860e-b42ddc3a1afc.tmp
2026-05-29 05:09:05,037 [root] INFO: Error dumping file from path "C:\Program Files (x86)\Google\GoogleUpdater\a049874d-96c2-4b23-9153-dacb563a1f22.tmp": [Errno 13] Permission denied: 'C:\\Program Files (x86)\\Google\\GoogleUpdater\\a049874d-96c2-4b23-9153-dacb563a1f22.tmp'
2026-05-29 05:09:05,039 [root] INFO: Error dumping file from path "C:\Program Files (x86)\Google\GoogleUpdater\a049874d-96c2-4b23-9153-dacb563a1f22.tmp": [Errno 13] Permission denied: 'C:\\Program Files (x86)\\Google\\GoogleUpdater\\a049874d-96c2-4b23-9153-dacb563a1f22.tmp'
2026-05-29 05:09:05,044 [root] INFO: Added new file to list with pid 39076 and path C:\Program Files (x86)\Google\GoogleUpdater\prefs.json
2026-05-29 05:09:05,053 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:05,055 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:05,055 [lib.common.results] INFO: Uploading file C:\Program Files (x86)\Google\GoogleUpdater\a049874d-96c2-4b23-9153-dacb563a1f22.tmp to files\dbd55f76fba2e3574e2a489d2b687c2db5bdaed0abfb697c9a8a7b90ab697d11; Size is 1347; Max size: 100000000
2026-05-29 05:09:05,078 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:05,080 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:05,113 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:05,120 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:05,133 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:05,136 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:05,155 [root] INFO: Added new file to list with pid 39076 and path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
2026-05-29 05:09:05,156 [root] INFO: Added new file to list with pid 39076 and path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
2026-05-29 05:09:05,157 [root] INFO: Process with pid 39076 has terminated
2026-05-29 05:09:05,158 [root] DEBUG: 39076: NtTerminateProcess hook: Attempting to dump process 39076
2026-05-29 05:09:05,161 [root] DEBUG: 39076: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:05,163 [root] DEBUG: 44272: OpenProcessHandler: Injection info created for process 948, handle 0x418: C:\Windows\System32\svchost.exe
2026-05-29 05:09:05,169 [root] DEBUG: 44272: DLL loaded at 0x748C0000: C:\Windows\SYSTEM32\sxs (0x87000 bytes).
2026-05-29 05:09:05,178 [root] INFO: Process with pid 39312 has terminated
2026-05-29 05:09:05,179 [root] DEBUG: 39312: NtTerminateProcess hook: Attempting to dump process 39312
2026-05-29 05:09:05,183 [root] DEBUG: 39312: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:05,184 [root] DEBUG: 43608: DLL loaded at 0x748C0000: C:\Windows\SYSTEM32\sxs (0x87000 bytes).
2026-05-29 05:09:05,264 [root] INFO: Announced starting service "b'GoogleUpdaterService149.0.7814.0'"
2026-05-29 05:09:05,808 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:05,809 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:06,276 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 45804: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x0000000000540000
2026-05-29 05:09:06,278 [root] INFO: Announced 32-bit process name: updater.exe pid: 45804
2026-05-29 05:09:06,279 [lib.api.process] INFO: Monitor config for process 45804: C:\lpw_albt\dll\45804.ini
2026-05-29 05:09:06,281 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:06,286 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:09:06,292 [root] DEBUG: Loader: Injecting process 45804 (thread 45808) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,293 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:06,294 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,296 [lib.api.process] INFO: Injected into 32-bit <Process 45804 updater.exe>
2026-05-29 05:09:06,299 [root] INFO: Announced 32-bit process name: updater.exe pid: 45804
2026-05-29 05:09:06,300 [lib.api.process] INFO: Monitor config for process 45804: C:\lpw_albt\dll\45804.ini
2026-05-29 05:09:06,300 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:06,308 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:09:06,313 [root] DEBUG: Loader: Injecting process 45804 (thread 45808) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,315 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:06,316 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,318 [lib.api.process] INFO: Injected into 32-bit <Process 45804 updater.exe>
2026-05-29 05:09:06,319 [root] INFO: Announced 32-bit process name: updater.exe pid: 45804
2026-05-29 05:09:06,321 [lib.api.process] INFO: Monitor config for process 45804: C:\lpw_albt\dll\45804.ini
2026-05-29 05:09:06,322 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:06,328 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:09:06,333 [root] DEBUG: Loader: Injecting process 45804 with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,334 [root] DEBUG: InjectDll: No thread ID supplied, GetProcessInitialThreadId failed, falling back to thread injection.
2026-05-29 05:09:06,342 [root] DEBUG: 45804: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:09:06,343 [root] DEBUG: 45804: Interactive desktop enabled.
2026-05-29 05:09:06,345 [root] DEBUG: 45804: Dropped file limit defaulting to 100.
2026-05-29 05:09:06,351 [root] DEBUG: 45804: Disabling sleep skipping.
2026-05-29 05:09:06,353 [root] DEBUG: 45804: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:09:06,354 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,392 [root] DEBUG: 45804: Monitor initialised: 32-bit capemon loaded in process 45804 at 0x6ab90000, thread 45924, image base 0x540000, stack from 0x4f45000-0x4f50000
2026-05-29 05:09:06,395 [root] DEBUG: 45804: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --system --windows-service --service=update
2026-05-29 05:09:06,419 [root] DEBUG: 45804: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:09:06,433 [root] DEBUG: 45804: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:09:06,434 [root] DEBUG: 45804: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:09:06,438 [root] DEBUG: 45804: Hooked 632 out of 632 functions
2026-05-29 05:09:06,476 [root] DEBUG: 45804: Syscall hook installed, syscall logging level 1
2026-05-29 05:09:06,479 [root] DEBUG: 45804: RestoreHeaders: Restored original import table.
2026-05-29 05:09:06,481 [root] INFO: Loaded monitor into process with pid 45804
2026-05-29 05:09:06,487 [root] DEBUG: 45804: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 45924).
2026-05-29 05:09:06,488 [root] DEBUG: 45804: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:09:06,489 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,527 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,563 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,601 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,638 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,675 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,713 [root] DEBUG: 45804: caller_dispatch: Added region at 0x04E00000 to tracked regions list (ntdll::LdrLoadDll returns to 0x04E00035, thread 45924).
2026-05-29 05:09:06,715 [root] DEBUG: 45804: DumpPEsInRange: Scanning range 0x04E00000 - 0x04E00127.
2026-05-29 05:09:06,715 [root] DEBUG: 45804: ScanForDisguisedPE: Size too small: 0x127 bytes
2026-05-29 05:09:06,717 [root] DEBUG: 45804: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::LdrLoadDll returns to 0x007451D4, thread 45972).
2026-05-29 05:09:06,718 [root] DEBUG: 45804: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:09:06,720 [root] DEBUG: 45804: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,722 [lib.common.results] INFO: Uploading file C:\zDtLzmEP\CAPE\45804_1588732469929552026 to CAPE\599d18f776d07de195a6c842892d8be40b1764cc90296df604bf5283e19c6de8; Size is 295; Max size: 100000000
2026-05-29 05:09:06,726 [root] DEBUG: 45804: DumpMemory: Payload successfully created: C:\zDtLzmEP\CAPE\45804_1588732469929552026 (size 295 bytes)
2026-05-29 05:09:06,727 [root] DEBUG: 45804: DumpRegion: Dumped entire allocation from 0x04E00000, size 4096 bytes.
2026-05-29 05:09:06,728 [root] DEBUG: 45804: ProcessTrackedRegion: Dumped region at 0x04E00000.
2026-05-29 05:09:06,730 [root] DEBUG: 45804: YaraScan: Scanning 0x04E00000, size 0x127
2026-05-29 05:09:06,761 [root] DEBUG: 45804: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:09:06,762 [root] DEBUG: 45804: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:09:06,765 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-29 05:09:06,767 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,768 [lib.api.process] INFO: Injected into 32-bit <Process 45804 updater.exe>
2026-05-29 05:09:06,772 [root] DEBUG: 45804: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:09:06,774 [root] DEBUG: 45804: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:09:06,778 [root] DEBUG: 45804: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:09:06,780 [root] DEBUG: 45804: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:09:06,785 [root] DEBUG: 45804: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:09:06,796 [root] DEBUG: 45804: CreateProcessHandler: Injection info set for new process 45208: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe, ImageBase: 0x00540000
2026-05-29 05:09:06,797 [root] INFO: Announced 32-bit process name: updater.exe pid: 45208
2026-05-29 05:09:06,798 [lib.api.process] INFO: Monitor config for process 45208: C:\lpw_albt\dll\45208.ini
2026-05-29 05:09:06,799 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:06,805 [lib.api.process] INFO: 32-bit DLL to inject is C:\lpw_albt\dll\ujJJun.dll, loader C:\lpw_albt\bin\IJlvWFq.exe
2026-05-29 05:09:06,811 [root] DEBUG: Loader: Injecting process 45208 (thread 45380) with C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,822 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:06,823 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\ujJJun.dll.
2026-05-29 05:09:06,825 [lib.api.process] INFO: Injected into 32-bit <Process 45208 updater.exe>
2026-05-29 05:09:06,827 [root] DEBUG: 45804: DLL loaded at 0x74960000: C:\Windows\system32\apphelp (0x9f000 bytes).
2026-05-29 05:09:06,837 [root] DEBUG: 45208: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:09:06,838 [root] DEBUG: 45208: Interactive desktop enabled.
2026-05-29 05:09:06,840 [root] DEBUG: 45208: Dropped file limit defaulting to 100.
2026-05-29 05:09:06,845 [root] DEBUG: 45208: Disabling sleep skipping.
2026-05-29 05:09:06,846 [root] DEBUG: 45208: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:09:06,848 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:06,884 [root] DEBUG: 45208: Monitor initialised: 32-bit capemon loaded in process 45208 at 0x6ab90000, thread 45380, image base 0x540000, stack from 0x50f4000-0x5100000
2026-05-29 05:09:06,886 [root] DEBUG: 45208: Commandline: "C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=149.0.7814.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x2f0,0x254,0x24c,0x250,0x298,0xaf8584,0xaf8
2026-05-29 05:09:06,910 [root] DEBUG: 45208: hook_api: LdrpCallInitRoutine export address 0x77812B50 obtained via GetFunctionAddress
2026-05-29 05:09:06,924 [root] DEBUG: 45208: hook_api: Trampoline creation failed for GetCommandLineA, retrying with HOOK_SAFEST
2026-05-29 05:09:06,926 [root] DEBUG: 45208: hook_api: Trampoline creation failed for GetCommandLineW, retrying with HOOK_SAFEST
2026-05-29 05:09:06,930 [root] DEBUG: 45208: Hooked 632 out of 632 functions
2026-05-29 05:09:06,967 [root] DEBUG: 45208: Syscall hook installed, syscall logging level 1
2026-05-29 05:09:06,970 [root] DEBUG: 45208: RestoreHeaders: Restored original import table.
2026-05-29 05:09:06,971 [root] INFO: Loaded monitor into process with pid 45208
2026-05-29 05:09:06,976 [root] DEBUG: 45208: InstrumentationCallback: Added region at 0x75FB274C (base 0x75F90000) to tracked regions list (thread 45380).
2026-05-29 05:09:06,977 [root] DEBUG: 45208: ProcessTrackedRegion: Region at 0x75F90000 mapped as \Device\HarddiskVolume2\Windows\SysWOW64\kernel32.dll is in known range, skipping
2026-05-29 05:09:06,979 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,018 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,059 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,096 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,134 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,172 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,195 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,196 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,201 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,202 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,209 [root] DEBUG: 45208: caller_dispatch: Scanning calling region at 0x00540000...
2026-05-29 05:09:07,211 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,214 [root] DEBUG: 45208: caller_dispatch: Added region at 0x00540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x008118AC, thread 45380).
2026-05-29 05:09:07,215 [root] DEBUG: 45208: YaraScan: Scanning 0x00540000, size 0x686738
2026-05-29 05:09:07,251 [root] DEBUG: 45208: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:09:07,253 [root] DEBUG: 45208: DLL loaded at 0x75DF0000: C:\Windows\System32\bcryptprimitives (0x5f000 bytes).
2026-05-29 05:09:07,257 [root] DEBUG: 45208: ProcessImageBase: Main module image at 0x00540000 unmodified (entropy change 3.836928e-06)
2026-05-29 05:09:07,261 [root] DEBUG: 45208: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:09:07,263 [root] DEBUG: 45208: DLL loaded at 0x75F00000: C:\Windows\System32\shcore (0x87000 bytes).
2026-05-29 05:09:07,267 [root] DEBUG: 45208: DLL loaded at 0x74A30000: C:\Windows\SYSTEM32\Wldp (0x24000 bytes).
2026-05-29 05:09:07,268 [root] DEBUG: 45208: DLL loaded at 0x74A60000: C:\Windows\SYSTEM32\windows.storage (0x613000 bytes).
2026-05-29 05:09:07,272 [root] DEBUG: 45208: DLL loaded at 0x74A00000: C:\Windows\SYSTEM32\ntmarta (0x29000 bytes).
2026-05-29 05:09:07,277 [root] DEBUG: 45208: OpenProcessHandler: Image base for process 45804 (handle 0x2f8): 0x00540000.
2026-05-29 05:09:07,278 [root] DEBUG: 45208: OpenProcessHandler: Injection info created for process 45804, handle 0x2f8: C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe
2026-05-29 05:09:07,297 [root] DEBUG: 45804: DLL loaded at 0x74950000: C:\Windows\SYSTEM32\kernel.appcore (0xf000 bytes).
2026-05-29 05:09:07,300 [root] DEBUG: 45804: DLL loaded at 0x76650000: C:\Windows\System32\clbcatq (0x7e000 bytes).
2026-05-29 05:09:07,308 [root] DEBUG: 45804: OpenProcessHandler: Injection info created for process 4484, handle 0x384: C:\Windows\explorer.exe
2026-05-29 05:09:07,369 [root] DEBUG: 45804: DLL loaded at 0x748A0000: C:\Windows\SYSTEM32\wkscli (0x11000 bytes).
2026-05-29 05:09:07,373 [root] DEBUG: 45804: DLL loaded at 0x74890000: C:\Windows\SYSTEM32\netutils (0xb000 bytes).
2026-05-29 05:09:07,375 [root] DEBUG: 45804: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:09:07,376 [root] DEBUG: 45804: DLL loaded at 0x6B090000: C:\Windows\SYSTEM32\MDMRegistration (0x53000 bytes).
2026-05-29 05:09:07,385 [root] DEBUG: 45804: DLL loaded at 0x6F2A0000: C:\Windows\SYSTEM32\powrprof (0x44000 bytes).
2026-05-29 05:09:07,387 [root] DEBUG: 45804: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\CRYPTSP (0x13000 bytes).
2026-05-29 05:09:07,388 [root] DEBUG: 45804: DLL loaded at 0x70D00000: C:\Windows\SYSTEM32\ncrypt (0x21000 bytes).
2026-05-29 05:09:07,389 [root] DEBUG: 45804: DLL loaded at 0x76790000: C:\Windows\System32\imagehlp (0x19000 bytes).
2026-05-29 05:09:07,391 [root] DEBUG: 45804: DLL loaded at 0x6AFD0000: C:\Windows\SYSTEM32\tbs (0x13000 bytes).
2026-05-29 05:09:07,392 [root] DEBUG: 45804: DLL loaded at 0x6AFF0000: C:\Windows\SYSTEM32\DMCmnUtils (0x63000 bytes).
2026-05-29 05:09:07,394 [root] DEBUG: 45804: DLL loaded at 0x6B060000: C:\Windows\SYSTEM32\omadmapi (0x2c000 bytes).
2026-05-29 05:09:07,396 [root] DEBUG: 45804: DLL loaded at 0x6F290000: C:\Windows\SYSTEM32\UMPDC (0xd000 bytes).
2026-05-29 05:09:07,399 [root] DEBUG: 45804: DLL loaded at 0x70200000: C:\Windows\SYSTEM32\NTASN1 (0x28000 bytes).
2026-05-29 05:09:07,406 [root] DEBUG: 45804: DLL loaded at 0x70670000: C:\Windows\system32\netapi32 (0x14000 bytes).
2026-05-29 05:09:07,408 [root] DEBUG: 45804: DLL loaded at 0x6EBD0000: C:\Windows\SYSTEM32\msvcp110_win (0x65000 bytes).
2026-05-29 05:09:07,409 [root] DEBUG: 45804: DLL loaded at 0x741D0000: C:\Windows\SYSTEM32\cryptsp (0x13000 bytes).
2026-05-29 05:09:07,410 [root] DEBUG: 45804: DLL loaded at 0x6EC40000: C:\Windows\SYSTEM32\DSREG (0x107000 bytes).
2026-05-29 05:09:07,418 [root] DEBUG: 45804: DLL loaded at 0x74180000: C:\Windows\SYSTEM32\profapi (0x1c000 bytes).
2026-05-29 05:09:07,438 [root] DEBUG: 45804: OpenProcessHandler: Injection info created for process 948, handle 0x480: C:\Windows\System32\svchost.exe
2026-05-29 05:09:07,443 [root] DEBUG: 45804: DLL loaded at 0x748C0000: C:\Windows\SYSTEM32\sxs (0x87000 bytes).
2026-05-29 05:09:07,520 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,521 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,536 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,536 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,542 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,543 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,549 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,551 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,555 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,556 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,571 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,572 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,575 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,576 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,577 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,578 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4CBF0000: C:\Windows\System32\Windows.StateRepositoryPS (0x146000 bytes).
2026-05-29 05:09:07,579 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,583 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,585 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,586 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,586 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,592 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,593 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,598 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,599 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,603 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,604 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,608 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,612 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,612 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,613 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,618 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,620 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,621 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,623 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,624 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,625 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,629 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,630 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,631 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,634 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,640 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,641 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,642 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,643 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,646 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,647 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,652 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,654 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,659 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,660 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,666 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,666 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,671 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,672 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,676 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,677 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,682 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,690 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,695 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,695 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,701 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,704 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,705 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,706 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,711 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,712 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,718 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,720 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,721 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,722 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,728 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,730 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,735 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,737 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,741 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,742 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,748 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,753 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,760 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,762 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,766 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,766 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,771 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,773 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,779 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,781 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,789 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,791 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,796 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,799 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,805 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,806 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,812 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,813 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,818 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,818 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,832 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,833 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,835 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,835 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,840 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,842 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,844 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,844 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,848 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,849 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,850 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,852 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,857 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,858 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,859 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,861 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,863 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,864 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,867 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,869 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,870 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,873 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,876 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,876 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,878 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,879 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,883 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,884 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,884 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,885 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,889 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,891 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,892 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,893 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,896 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,897 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,898 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,899 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,901 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,903 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,906 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,907 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,913 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,914 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,916 [root] DEBUG: 19212: DLL loaded at 0x00007FFF594D0000: C:\Windows\System32\coml2 (0x79000 bytes).
2026-05-29 05:09:07,921 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,922 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,923 [root] DEBUG: 19212: DLL loaded at 0x00007FFF4CD40000: C:\Windows\system32\mssprxy (0x28000 bytes).
2026-05-29 05:09:07,924 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268738e+00 (from 6.268295e+00)
2026-05-29 05:09:07,926 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,932 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,933 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:07,940 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:07,942 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,175 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,177 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,182 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,184 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,191 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,192 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,200 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,201 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,207 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,208 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,296 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,297 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,302 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,303 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,307 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,308 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,897 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,898 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,903 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,905 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,909 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,912 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,920 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268736e+00 (from 6.268295e+00)
2026-05-29 05:09:08,921 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,927 [root] DEBUG: 19212: DLL loaded at 0x00007FFF51B20000: C:\Windows\SYSTEM32\WindowsCodecs (0x1b4000 bytes).
2026-05-29 05:09:08,935 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,936 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,937 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,939 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,941 [root] DEBUG: 19212: DLL loaded at 0x00007FFF432B0000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-29 05:09:08,941 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,942 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,946 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,947 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,949 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,950 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,952 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,953 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,955 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,956 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,958 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,958 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,963 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,964 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,965 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,967 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,968 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,969 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,971 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,972 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,973 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,974 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,980 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,980 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,981 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,982 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,987 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,987 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:08,993 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,995 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:08,998 [root] DEBUG: 19212: DLL loaded at 0x00007FFF566C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:09:09,005 [root] DEBUG: 19212: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:09:09,007 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,008 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,012 [root] DEBUG: 19212: CreateProcessHandler: Injection info set for new process 46972: C:\Program Files\Google\Chrome\Application\chrome.exe, ImageBase: 0x00007FF63CBD0000
2026-05-29 05:09:09,016 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,017 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 46972
2026-05-29 05:09:09,017 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,017 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,021 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,022 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,023 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,024 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,025 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,025 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,028 [root] DEBUG: 19212: ProcessMessage: Skipping monitoring process 46972
2026-05-29 05:09:09,029 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,030 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,031 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,033 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,033 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,035 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,041 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,042 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,043 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,044 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,044 [root] DEBUG: 19212: ProcessTrackedRegion: Region at 0x00007FFEFA3E0000 mapped as \Device\HarddiskVolume2\Program Files\Google\Chrome\Application\148.0.7778.217\chrome_elf.dll is in known range, skipping
2026-05-29 05:09:09,049 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,049 [root] DEBUG: 19212:
2026-05-29 05:09:09,054 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,175 [root] DEBUG: 19212: ProcessTrackedRegion: Updated entropy for tracked region at 0x00007FFEFA3E0000: 6.268737e+00 (from 6.268295e+00)
2026-05-29 05:09:09,742 [root] INFO: Process with pid 19212 appears to have terminated
2026-05-29 05:09:12,161 [root] INFO: Process with pid 43608 has terminated
2026-05-29 05:09:12,163 [root] DEBUG: 43608: NtTerminateProcess hook: Attempting to dump process 43608
2026-05-29 05:09:12,167 [root] DEBUG: 43608: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:12,187 [root] INFO: Process with pid 41444 has terminated
2026-05-29 05:09:12,190 [root] INFO: Process with pid 43916 has terminated
2026-05-29 05:09:12,191 [root] DEBUG: 43916: NtTerminateProcess hook: Attempting to dump process 43916
2026-05-29 05:09:12,192 [root] DEBUG: 41444: NtTerminateProcess hook: Attempting to dump process 41444
2026-05-29 05:09:12,196 [root] DEBUG: 43916: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:12,197 [root] DEBUG: 41444: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:12,216 [root] INFO: Process with pid 42488 has terminated
2026-05-29 05:09:12,217 [root] DEBUG: 42488: NtTerminateProcess hook: Attempting to dump process 42488
2026-05-29 05:09:12,222 [root] DEBUG: 42488: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:12,957 [root] DEBUG: 4484: OpenProcessHandler: Image base for process 6136 (handle 0x2550): 0x00007FF662BA0000.
2026-05-29 05:09:13,587 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
2026-05-29 05:09:13,714 [root] DEBUG: 4484: api-cap: RtlSetCurrentTransaction hook disabled due to count: 5000
2026-05-29 05:09:13,723 [root] DEBUG: 4484: api-cap: NtQueryKey hook disabled due to count: 5000
2026-05-29 05:09:14,076 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 47624: C:\Windows\system32\BackgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:09:14,080 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 47624
2026-05-29 05:09:14,081 [lib.api.process] INFO: Monitor config for process 47624: C:\lpw_albt\dll\47624.ini
2026-05-29 05:09:14,085 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:14,090 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:14,099 [root] DEBUG: Loader: Injecting process 47624 (thread 47628) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:14,102 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:14,104 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:14,106 [lib.api.process] INFO: Injected into 64-bit <Process 47624 backgroundTaskHost.exe>
2026-05-29 05:09:14,108 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 47624
2026-05-29 05:09:14,109 [lib.api.process] INFO: Monitor config for process 47624: C:\lpw_albt\dll\47624.ini
2026-05-29 05:09:14,110 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:14,118 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:14,129 [root] DEBUG: Loader: Injecting process 47624 (thread 47628) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:14,132 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:14,134 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:14,137 [lib.api.process] INFO: Injected into 64-bit <Process 47624 backgroundTaskHost.exe>
2026-05-29 05:09:14,141 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 47624
2026-05-29 05:09:14,143 [lib.api.process] INFO: Monitor config for process 47624: C:\lpw_albt\dll\47624.ini
2026-05-29 05:09:14,144 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:14,155 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:14,160 [root] DEBUG: Loader: Injecting process 47624 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:14,161 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 47628, handle 0x120
2026-05-29 05:09:14,162 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:14,163 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:14,165 [lib.api.process] INFO: Injected into 64-bit <Process 47624 backgroundTaskHost.exe>
2026-05-29 05:09:15,063 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4C1E0000: C:\Windows\system32\SecurityHealthProxyStub (0x1f000 bytes).
2026-05-29 05:09:15,067 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4C1E0000: C:\Windows\system32\SecurityHealthProxyStub (0x1f000 bytes).
2026-05-29 05:09:15,075 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 47832: C:\Windows\System32\SecurityHealthHost.exe, ImageBase: 0x00007FF7DE070000
2026-05-29 05:09:15,076 [root] INFO: Announced 64-bit process name: SecurityHealthHost.exe pid: 47832
2026-05-29 05:09:15,079 [lib.api.process] INFO: Monitor config for process 47832: C:\lpw_albt\dll\47832.ini
2026-05-29 05:09:15,082 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,089 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,094 [root] DEBUG: 4484: api-rate-cap: NtOpenKeyEx hook disabled due to rate
2026-05-29 05:09:15,095 [root] DEBUG: Loader: Injecting process 47832 (thread 47836) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,096 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:15,098 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,099 [lib.api.process] INFO: Injected into 64-bit <Process 47832 SecurityHealthHost.exe>
2026-05-29 05:09:15,103 [root] INFO: Announced 64-bit process name: SecurityHealthHost.exe pid: 47832
2026-05-29 05:09:15,105 [lib.api.process] INFO: Monitor config for process 47832: C:\lpw_albt\dll\47832.ini
2026-05-29 05:09:15,106 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,114 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,119 [root] DEBUG: Loader: Injecting process 47832 (thread 47836) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,122 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:15,122 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,126 [lib.api.process] INFO: Injected into 64-bit <Process 47832 SecurityHealthHost.exe>
2026-05-29 05:09:15,132 [root] DEBUG: 4484: CreateProcessHandler: Injection info set for new process 47940: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF64C440000
2026-05-29 05:09:15,133 [root] INFO: Announced 64-bit process name: msedge.exe pid: 47940
2026-05-29 05:09:15,136 [root] DEBUG: 47832: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:09:15,138 [lib.api.process] INFO: Monitor config for process 47940: C:\lpw_albt\dll\47940.ini
2026-05-29 05:09:15,138 [root] DEBUG: 47832: Interactive desktop enabled.
2026-05-29 05:09:15,140 [root] DEBUG: 47832: Dropped file limit defaulting to 100.
2026-05-29 05:09:15,141 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,146 [root] DEBUG: 47832: Disabling sleep skipping.
2026-05-29 05:09:15,147 [root] DEBUG: 47832: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:09:15,152 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,158 [root] DEBUG: Loader: Injecting process 47940 (thread 47944) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,160 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:15,162 [root] DEBUG: 47832: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:09:15,162 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,163 [lib.api.process] INFO: Injected into 64-bit <Process 47940 msedge.exe>
2026-05-29 05:09:15,165 [root] DEBUG: 47832: YaraScan: Scanning 0x00007FF7DE070000, size 0x19174
2026-05-29 05:09:15,168 [root] INFO: Announced 64-bit process name: msedge.exe pid: 47940
2026-05-29 05:09:15,168 [root] DEBUG: 47832: Monitor initialised: 64-bit capemon loaded in process 47832 at 0x00007FFF17B00000, thread 47836, image base 0x00007FF7DE070000, stack from 0x0000005048354000-0x0000005048360000
2026-05-29 05:09:15,170 [lib.api.process] INFO: Monitor config for process 47940: C:\lpw_albt\dll\47940.ini
2026-05-29 05:09:15,172 [root] DEBUG: 47832: Commandline: C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
2026-05-29 05:09:15,173 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,181 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,187 [root] DEBUG: Loader: Injecting process 47940 (thread 47944) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,188 [root] DEBUG: 47832: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:09:15,189 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:15,191 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,192 [lib.api.process] INFO: Injected into 64-bit <Process 47940 msedge.exe>
2026-05-29 05:09:15,216 [root] INFO: Announced 64-bit process name: msedge.exe pid: 47940
2026-05-29 05:09:15,217 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:09:15,218 [root] DEBUG: 47832: set_hooks: Unable to hook LockResource
2026-05-29 05:09:15,219 [lib.api.process] INFO: Monitor config for process 47940: C:\lpw_albt\dll\47940.ini
2026-05-29 05:09:15,222 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,223 [root] DEBUG: 47832: Hooked 627 out of 628 functions
2026-05-29 05:09:15,226 [root] DEBUG: 47832: Syscall hook installed, syscall logging level 1
2026-05-29 05:09:15,232 [root] DEBUG: 47832: RestoreHeaders: Restored original import table.
2026-05-29 05:09:15,234 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,235 [root] INFO: Loaded monitor into process with pid 47832
2026-05-29 05:09:15,238 [root] DEBUG: 47832: caller_dispatch: Added region at 0x00007FF7DE070000 to tracked regions list (ntdll::NtAllocateVirtualMemory returns to 0x00007FF7DE07D3B2, thread 47836).
2026-05-29 05:09:15,239 [root] DEBUG: 47832: YaraScan: Scanning 0x00007FF7DE070000, size 0x19174
2026-05-29 05:09:15,241 [root] DEBUG: Loader: Injecting process 47940 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,243 [root] DEBUG: 47832: ProcessImageBase: Main module image at 0x00007FF7DE070000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:09:15,246 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 47944, handle 0x120
2026-05-29 05:09:15,247 [root] DEBUG: 47832: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:09:15,248 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:15,250 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,252 [root] DEBUG: 47832: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:09:15,254 [lib.api.process] INFO: Injected into 64-bit <Process 47940 msedge.exe>
2026-05-29 05:09:15,257 [root] DEBUG: 47832: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:09:15,268 [root] DEBUG: 47940: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:09:15,271 [root] DEBUG: 47940: Interactive desktop enabled.
2026-05-29 05:09:15,273 [root] DEBUG: 47940: Dropped file limit defaulting to 100.
2026-05-29 05:09:15,286 [root] DEBUG: 47940: Edge-specific hook-set enabled.
2026-05-29 05:09:15,289 [root] DEBUG: 47940: Disabling sleep skipping.
2026-05-29 05:09:15,291 [root] DEBUG: 47940: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:09:15,294 [root] DEBUG: 47832: DLL loaded at 0x00007FFF56FA0000: C:\Windows\system32\Wldp (0x2d000 bytes).
2026-05-29 05:09:15,295 [root] DEBUG: 47832: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:15,296 [root] DEBUG: 47832: DLL loaded at 0x00007FFF18890000: C:\Windows\system32\SecurityHealthAgent (0x6d000 bytes).
2026-05-29 05:09:15,304 [root] DEBUG: 47940: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:09:15,305 [root] DEBUG: 47940: Monitor initialised: 64-bit capemon loaded in process 47940 at 0x00007FFF17B00000, thread 47944, image base 0x00007FF64C440000, stack from 0x0000005981FF4000-0x0000005982000000
2026-05-29 05:09:15,306 [root] DEBUG: 47940: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
2026-05-29 05:09:15,313 [root] DEBUG: 47832: DLL loaded at 0x00007FFF4C1E0000: C:\Windows\system32\SecurityHealthProxyStub (0x1f000 bytes).
2026-05-29 05:09:15,318 [root] DEBUG: 47832: DLL loaded at 0x00007FFF52B60000: C:\Windows\System32\msxml6 (0x25f000 bytes).
2026-05-29 05:09:15,321 [root] DEBUG: 47940: Hooked 2 out of 2 functions
2026-05-29 05:09:15,326 [root] DEBUG: 47832: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:09:15,328 [root] DEBUG: 47832: DLL loaded at 0x00007FFF52DC0000: C:\Windows\SYSTEM32\wintypes (0x155000 bytes).
2026-05-29 05:09:15,329 [root] DEBUG: 47832: DLL loaded at 0x00007FFF55410000: C:\Windows\System32\RMCLIENT (0x2a000 bytes).
2026-05-29 05:09:15,330 [root] DEBUG: 47832: DLL loaded at 0x00007FFF523E0000: C:\Windows\System32\XmlLite (0x36000 bytes).
2026-05-29 05:09:15,333 [root] DEBUG: 47832: DLL loaded at 0x00007FFF517C0000: C:\Windows\System32\twinapi.appcore (0x203000 bytes).
2026-05-29 05:09:15,335 [root] DEBUG: 47832: DLL loaded at 0x00007FFF40FB0000: C:\Windows\System32\wpnapps (0x15b000 bytes).
2026-05-29 05:09:15,351 [root] DEBUG: 47832: DLL loaded at 0x00007FFF52490000: C:\Windows\SYSTEM32\usermgrcli (0x16000 bytes).
2026-05-29 05:09:15,351 [root] DEBUG: 47940: Syscall hook installed, syscall logging level 1
2026-05-29 05:09:15,367 [root] DEBUG: 47940: RestoreHeaders: Restored original import table.
2026-05-29 05:09:15,369 [root] DEBUG: 47832: DLL loaded at 0x00007FFF50870000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-29 05:09:15,370 [root] INFO: Loaded monitor into process with pid 47940
2026-05-29 05:09:15,372 [root] DEBUG: 47940: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-29 05:09:15,374 [root] DEBUG: 47940: DLL loaded at 0x00007FFF43500000: C:\Windows\SYSTEM32\version (0xa000 bytes).
2026-05-29 05:09:15,380 [root] DEBUG: 47940: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:09:15,383 [root] DEBUG: 47832: DLL loaded at 0x00007FFF3FD40000: C:\Windows\System32\ShellCommonCommonProxyStub (0xe4000 bytes).
2026-05-29 05:09:15,384 [root] DEBUG: 47940: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\Wldp (0x2d000 bytes).
2026-05-29 05:09:15,386 [root] DEBUG: 47940: DLL loaded at 0x00007FFF55710000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-29 05:09:15,402 [root] DEBUG: 47940: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\SHCORE (0xad000 bytes).
2026-05-29 05:09:15,419 [root] DEBUG: 47940: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:09:15,422 [root] DEBUG: 4484: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4AE131000, size: 0x1000.
2026-05-29 05:09:15,426 [root] DEBUG: 4484: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4AE121000, size: 0x1000.
2026-05-29 05:09:15,432 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE120000.
2026-05-29 05:09:15,440 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:09:15,454 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE130000.
2026-05-29 05:09:15,454 [root] DEBUG: 47832: NtTerminateProcess hook: Attempting to dump process 47832
2026-05-29 05:09:15,460 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:09:15,461 [root] DEBUG: 47832: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:15,495 [root] INFO: Process with pid 47832 has terminated
2026-05-29 05:09:15,517 [root] DEBUG: 4484: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4ADD41000, size: 0x1000.
2026-05-29 05:09:15,523 [root] DEBUG: 4484: OpenProcessHandler: Image base for process 18000 (handle 0x2bd4): 0x00007FF64C440000.
2026-05-29 05:09:15,559 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE130000.
2026-05-29 05:09:15,567 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE130000.
2026-05-29 05:09:15,570 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:09:15,571 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 40856: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe, ImageBase: 0x00007FF68FC40000
2026-05-29 05:09:15,582 [root] INFO: Announced 64-bit process name: ShellExperienceHost.exe pid: 40856
2026-05-29 05:09:15,583 [lib.api.process] INFO: Monitor config for process 40856: C:\lpw_albt\dll\40856.ini
2026-05-29 05:09:15,583 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4ADD40000.
2026-05-29 05:09:15,586 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:09:15,586 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,771 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 21076: C:\Windows\system32\BackgroundTaskHost.exe, ImageBase: 0x00007FF62C670000
2026-05-29 05:09:15,775 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 21076
2026-05-29 05:09:15,776 [lib.api.process] INFO: Monitor config for process 21076: C:\lpw_albt\dll\21076.ini
2026-05-29 05:09:15,778 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,788 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,792 [root] DEBUG: Loader: Injecting process 21076 (thread 21104) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,793 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:15,798 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,799 [lib.api.process] INFO: Injected into 64-bit <Process 21076 backgroundTaskHost.exe>
2026-05-29 05:09:15,802 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 21076
2026-05-29 05:09:15,804 [lib.api.process] INFO: Monitor config for process 21076: C:\lpw_albt\dll\21076.ini
2026-05-29 05:09:15,804 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,813 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,818 [root] DEBUG: Loader: Injecting process 21076 (thread 21104) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,820 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:15,823 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,824 [lib.api.process] INFO: Injected into 64-bit <Process 21076 backgroundTaskHost.exe>
2026-05-29 05:09:15,826 [root] INFO: Announced 64-bit process name: backgroundTaskHost.exe pid: 21076
2026-05-29 05:09:15,827 [lib.api.process] INFO: Monitor config for process 21076: C:\lpw_albt\dll\21076.ini
2026-05-29 05:09:15,830 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:15,839 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:15,844 [root] DEBUG: Loader: Injecting process 21076 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,845 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 21104, handle 0xe8
2026-05-29 05:09:15,846 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:15,849 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:15,852 [lib.api.process] INFO: Injected into 64-bit <Process 21076 backgroundTaskHost.exe>
2026-05-29 05:09:15,867 [root] INFO: Process with pid 47940 appears to have terminated
2026-05-29 05:09:17,106 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:17,125 [root] DEBUG: Loader: Injecting process 40856 (thread 41488) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:17,128 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:17,129 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:17,137 [lib.api.process] INFO: Injected into 64-bit <Process 40856 ShellExperienceHost.exe>
2026-05-29 05:09:17,146 [root] INFO: Announced 64-bit process name: ShellExperienceHost.exe pid: 40856
2026-05-29 05:09:17,147 [lib.api.process] INFO: Monitor config for process 40856: C:\lpw_albt\dll\40856.ini
2026-05-29 05:09:17,149 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:17,384 [root] INFO: Added new file to list with pid 45804 and path C:\Program Files (x86)\Google\GoogleUpdater\7989abab-a7ca-4963-9e60-79faaac6a3b3.tmp
2026-05-29 05:09:17,391 [root] INFO: Error dumping file from path "C:\Program Files (x86)\Google\GoogleUpdater\dfb7449c-f0c2-42cb-abb1-511b4850a144.tmp": [Errno 13] Permission denied: 'C:\\Program Files (x86)\\Google\\GoogleUpdater\\dfb7449c-f0c2-42cb-abb1-511b4850a144.tmp'
2026-05-29 05:09:17,393 [root] INFO: Error dumping file from path "C:\Program Files (x86)\Google\GoogleUpdater\dfb7449c-f0c2-42cb-abb1-511b4850a144.tmp": [Errno 13] Permission denied: 'C:\\Program Files (x86)\\Google\\GoogleUpdater\\dfb7449c-f0c2-42cb-abb1-511b4850a144.tmp'
2026-05-29 05:09:17,412 [lib.common.results] INFO: Uploading file C:\Program Files (x86)\Google\GoogleUpdater\dfb7449c-f0c2-42cb-abb1-511b4850a144.tmp to files\a6af73fc6c6b34efcef0893b17131ffde42852106e36849b08da30799dcd20a2; Size is 1347; Max size: 100000000
2026-05-29 05:09:19,417 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:19,423 [root] DEBUG: Loader: Injecting process 40856 (thread 41488) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:19,426 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:19,428 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:19,429 [lib.api.process] INFO: Injected into 64-bit <Process 40856 ShellExperienceHost.exe>
2026-05-29 05:09:19,431 [root] INFO: Announced 64-bit process name: ShellExperienceHost.exe pid: 40856
2026-05-29 05:09:19,433 [lib.api.process] INFO: Monitor config for process 40856: C:\lpw_albt\dll\40856.ini
2026-05-29 05:09:19,434 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:21,491 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:21,496 [root] DEBUG: Loader: Injecting process 40856 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:21,497 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 41488, handle 0x48
2026-05-29 05:09:21,499 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:21,503 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:21,506 [lib.api.process] INFO: Injected into 64-bit <Process 40856 ShellExperienceHost.exe>
2026-05-29 05:09:21,668 [root] DEBUG: 4484: OpenProcessHandler: Injection info created for process 39360, handle 0xc84: C:\Windows\System32\rundll32.exe
2026-05-29 05:09:22,205 [root] INFO: Process with pid 44272 has terminated
2026-05-29 05:09:22,207 [root] DEBUG: 44272: NtTerminateProcess hook: Attempting to dump process 44272
2026-05-29 05:09:22,212 [root] DEBUG: 44272: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:22,215 [root] INFO: Process with pid 45804 has terminated
2026-05-29 05:09:22,217 [root] DEBUG: 45804: NtTerminateProcess hook: Attempting to dump process 45804
2026-05-29 05:09:22,221 [root] DEBUG: 45804: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:22,233 [root] INFO: Process with pid 44644 has terminated
2026-05-29 05:09:22,235 [root] DEBUG: 44644: NtTerminateProcess hook: Attempting to dump process 44644
2026-05-29 05:09:22,240 [root] DEBUG: 44644: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:22,250 [root] INFO: Process with pid 45208 has terminated
2026-05-29 05:09:22,252 [root] DEBUG: 45208: NtTerminateProcess hook: Attempting to dump process 45208
2026-05-29 05:09:22,259 [root] DEBUG: 45208: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:24,594 [root] DEBUG: 4484: api-rate-cap: GetSystemTimeAsFileTime hook disabled due to rate
2026-05-29 05:09:24,598 [root] DEBUG: 4484: api-rate-cap: GetSystemTimeAsFileTime hook disabled due to rate
2026-05-29 05:09:24,600 [root] DEBUG: 4484: api-rate-cap: GetSystemTimeAsFileTime hook disabled due to rate
2026-05-29 05:09:25,997 [root] DEBUG: 4484: api-cap: NtSetInformationThread hook disabled due to count: 5000
2026-05-29 05:09:27,048 [root] DEBUG: 17256: NtTerminateProcess hook: Attempting to dump process 17256
2026-05-29 05:09:27,050 [root] DEBUG: 17256: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:09:27,059 [root] INFO: Process with pid 17256 has terminated
2026-05-29 05:09:44,213 [root] INFO: Announced starting service "b'wisvc'"
2026-05-29 05:09:45,232 [root] DEBUG: 676: CreateProcessHandler: Injection info set for new process 32156: C:\Windows\system32\svchost.exe, ImageBase: 0x00007FF7BF220000
2026-05-29 05:09:45,237 [root] INFO: Announced 64-bit process name: svchost.exe pid: 32156
2026-05-29 05:09:45,238 [lib.api.process] INFO: Monitor config for process 32156: C:\lpw_albt\dll\32156.ini
2026-05-29 05:09:45,241 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:45,258 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:45,263 [root] DEBUG: Loader: Injecting process 32156 (thread 32396) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:45,265 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:45,266 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:45,268 [lib.api.process] INFO: Injected into 64-bit <Process 32156 svchost.exe>
2026-05-29 05:09:45,271 [root] INFO: Announced 64-bit process name: svchost.exe pid: 32156
2026-05-29 05:09:45,272 [lib.api.process] INFO: Monitor config for process 32156: C:\lpw_albt\dll\32156.ini
2026-05-29 05:09:45,274 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:45,282 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:45,286 [root] DEBUG: Loader: Injecting process 32156 (thread 32396) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:45,288 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:45,289 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:45,291 [lib.api.process] INFO: Injected into 64-bit <Process 32156 svchost.exe>
2026-05-29 05:09:45,294 [root] INFO: Announced 64-bit process name: svchost.exe pid: 32156
2026-05-29 05:09:45,296 [lib.api.process] INFO: Monitor config for process 32156: C:\lpw_albt\dll\32156.ini
2026-05-29 05:09:45,299 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:45,308 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:45,314 [root] DEBUG: Loader: Injecting process 32156 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:45,317 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 32396, handle 0x124
2026-05-29 05:09:45,319 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:09:45,323 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:45,325 [lib.api.process] INFO: Injected into 64-bit <Process 32156 svchost.exe>
2026-05-29 05:09:45,339 [root] DEBUG: 32156: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:09:45,342 [root] DEBUG: 32156: Interactive desktop enabled.
2026-05-29 05:09:45,344 [root] DEBUG: 32156: Dropped file limit defaulting to 100.
2026-05-29 05:09:45,347 [root] DEBUG: 32156: Disabling sleep skipping.
2026-05-29 05:09:45,350 [root] DEBUG: 32156: Services hook set enabled
2026-05-29 05:09:45,355 [root] DEBUG: 32156: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:09:45,368 [root] DEBUG: 32156: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:09:45,369 [root] DEBUG: 32156: Monitor initialised: 64-bit capemon loaded in process 32156 at 0x00007FFF17B00000, thread 32396, image base 0x00007FF7BF220000, stack from 0x000000CAF62B4000-0x000000CAF62C0000
2026-05-29 05:09:45,371 [root] DEBUG: 32156: Commandline: C:\Windows\system32\svchost.exe -k netsvcs -p
2026-05-29 05:09:45,387 [root] DEBUG: 32156: Hooked 69 out of 69 functions
2026-05-29 05:09:45,388 [root] DEBUG: 32156: RestoreHeaders: Restored original import table.
2026-05-29 05:09:45,391 [root] INFO: Loaded monitor into process with pid 32156
2026-05-29 05:09:45,393 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:09:45,396 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:09:45,398 [root] DEBUG: 32156: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:09:45,402 [root] DEBUG: 32156: DLL loaded at 0x00007FFF40A10000: c:\windows\system32\flightsettings (0xe6000 bytes).
2026-05-29 05:09:45,405 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56FA0000: C:\Windows\SYSTEM32\WLDP (0x2d000 bytes).
2026-05-29 05:09:45,409 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52B00000: C:\Windows\SYSTEM32\wtsapi32 (0x14000 bytes).
2026-05-29 05:09:45,412 [root] DEBUG: 32156: DLL loaded at 0x00007FFF50870000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-29 05:09:45,414 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57360000: C:\Windows\SYSTEM32\WINSTA (0x5b000 bytes).
2026-05-29 05:09:45,417 [root] DEBUG: 32156: DLL loaded at 0x00007FFF48780000: C:\Windows\System32\OneCoreCommonProxyStub (0x7f000 bytes).
2026-05-29 05:09:45,421 [root] DEBUG: 32156: DLL loaded at 0x00007FFF566C0000: c:\windows\system32\msvcp110_win (0x8a000 bytes).
2026-05-29 05:09:45,422 [root] DEBUG: 32156: DLL loaded at 0x00007FFF522D0000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-29 05:09:45,424 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56EF0000: C:\Windows\SYSTEM32\cryptsp (0x18000 bytes).
2026-05-29 05:09:45,425 [root] DEBUG: 32156: DLL loaded at 0x0000023B45300000: C:\Windows\System32\wosc (0x4e000 bytes).
2026-05-29 05:09:45,428 [root] DEBUG: 32156: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:09:45,430 [root] DEBUG: 32156: DLL loaded at 0x00007FFF42490000: C:\Windows\System32\Windows.Networking.Connectivity (0xb9000 bytes).
2026-05-29 05:09:45,432 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F560000: C:\Windows\System32\npmproxy (0x10000 bytes).
2026-05-29 05:09:45,435 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52DC0000: C:\Windows\System32\WinTypes (0x155000 bytes).
2026-05-29 05:09:45,439 [root] DEBUG: 32156: DLL loaded at 0x00007FFF569F0000: C:\Windows\System32\IPHLPAPI (0x3b000 bytes).
2026-05-29 05:09:45,440 [root] DEBUG: 32156: DLL loaded at 0x00007FFF58B20000: C:\Windows\System32\NSI (0x8000 bytes).
2026-05-29 05:09:45,442 [root] DEBUG: 32156: DLL loaded at 0x00007FFF40900000: C:\Windows\System32\dusmapi (0x11000 bytes).
2026-05-29 05:09:45,444 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57560000: C:\Windows\System32\profapi (0x25000 bytes).
2026-05-29 05:09:45,448 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F590000: C:\Windows\System32\Cabinet (0x29000 bytes).
2026-05-29 05:09:45,453 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57520000: C:\Windows\System32\USERENV (0x2e000 bytes).
2026-05-29 05:09:45,454 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57AA0000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-29 05:09:45,457 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3EE40000: C:\Windows\System32\UpdatePolicy (0x43000 bytes).
2026-05-29 05:09:45,459 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57130000: C:\Windows\System32\MSASN1 (0x12000 bytes).
2026-05-29 05:09:45,461 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D6A0000: C:\Windows\System32\iertutil (0x2bc000 bytes).
2026-05-29 05:09:45,463 [root] DEBUG: 32156: DLL loaded at 0x00007FFF47980000: C:\Windows\System32\Windows.Web (0xc3000 bytes).
2026-05-29 05:09:45,477 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,480 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,483 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,485 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,486 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,488 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,493 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,494 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,497 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:45,499 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18700000: C:\Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings (0x16000 bytes).
2026-05-29 05:09:45,502 [root] DEBUG: 32156: DLL loaded at 0x00007FFF42C10000: C:\Windows\system32\fcon (0x45000 bytes).
2026-05-29 05:09:45,506 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56630000: C:\Windows\system32\rsaenh (0x34000 bytes).
2026-05-29 05:09:45,525 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,526 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,530 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,532 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,535 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,537 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,539 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,540 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,544 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:45,546 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:45,551 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:45,552 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:45,554 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:45,555 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:45,559 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:45,562 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:45,563 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:45,568 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:45,570 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:45,570 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:45,596 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,598 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,601 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,604 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,609 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,612 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,615 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,618 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,620 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:45,642 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,645 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,651 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,653 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,655 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,657 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,658 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,660 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,664 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:45,667 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:45,670 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:45,674 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:45,675 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:45,678 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:45,680 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:45,681 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:45,685 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:45,687 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:45,689 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:45,693 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:45,717 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,719 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,720 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,722 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,725 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,727 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,728 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,731 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,734 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:45,756 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,757 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,761 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,765 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,766 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,769 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,771 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,773 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,775 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:45,776 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:45,781 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:45,782 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:45,784 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:45,785 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:45,788 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:45,790 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:45,792 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:45,795 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:45,797 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:45,798 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:45,821 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,823 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,826 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,828 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,830 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,832 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,833 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,834 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,840 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:45,861 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,864 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,865 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,867 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,869 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,872 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,874 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,875 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,879 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:45,882 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:45,885 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:45,889 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:45,890 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:45,891 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:45,893 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:45,896 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:45,898 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:45,899 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:45,901 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:45,903 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:45,927 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,930 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,933 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,934 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,937 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,940 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,942 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,946 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,949 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:45,971 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:45,972 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:45,974 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:45,977 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:45,978 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:45,981 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:45,983 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:45,985 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:45,988 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:45,990 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:45,993 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:45,996 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:45,998 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:46,000 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:46,002 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:46,004 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:46,006 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:46,007 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:46,009 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:46,012 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:46,061 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,065 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,067 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,068 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,071 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,072 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,076 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,078 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,081 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:46,106 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,107 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,109 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,111 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,113 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,114 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,117 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,120 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,122 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:46,123 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:46,126 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:46,128 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:46,131 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:46,137 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:46,138 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:46,141 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:46,147 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:46,148 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:46,149 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:46,152 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:46,179 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,180 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,183 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,184 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,186 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,187 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,188 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,191 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,193 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:46,215 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,216 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,219 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,221 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,222 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,224 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,227 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,227 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,232 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:46,238 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:46,248 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:46,250 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:46,251 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:46,252 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:46,255 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:46,257 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:46,258 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:46,259 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:46,261 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:46,264 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:46,291 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,293 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,297 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,298 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,300 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,302 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,305 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,306 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,311 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:46,338 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,339 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,342 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,348 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,351 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,353 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,356 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,359 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,363 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:46,365 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:46,368 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:46,370 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:46,374 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:46,382 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:46,384 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:46,385 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:46,387 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:46,390 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:46,392 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:46,395 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:46,455 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,457 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,461 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,463 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,466 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,468 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,469 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,472 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,476 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:46,499 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,501 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,503 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,506 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,507 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,509 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,511 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,514 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,518 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:46,521 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:46,525 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:46,527 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:46,529 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:46,530 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:46,533 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:46,536 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:46,539 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:46,547 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:46,549 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:46,552 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:46,585 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,587 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,590 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,592 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,594 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,596 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,598 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,599 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,602 [root] DEBUG: 32156: DLL loaded at 0x00007FFF45630000: C:\Windows\SYSTEM32\AEPIC (0x92000 bytes).
2026-05-29 05:09:46,628 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56B10000: C:\Windows\system32\logoncli (0x43000 bytes).
2026-05-29 05:09:46,631 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4F3B0000: C:\Windows\system32\utcutil (0x1f000 bytes).
2026-05-29 05:09:46,633 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57490000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-29 05:09:46,635 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56A30000: C:\Windows\system32\netutils (0xc000 bytes).
2026-05-29 05:09:46,640 [root] DEBUG: 32156: DLL loaded at 0x00007FFF52560000: C:\Windows\system32\WINHTTP (0x10a000 bytes).
2026-05-29 05:09:46,643 [root] DEBUG: 32156: DLL loaded at 0x00007FFF56770000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-29 05:09:46,645 [root] DEBUG: 32156: DLL loaded at 0x00007FFF18A70000: C:\Windows\system32\dcntel (0xbf000 bytes).
2026-05-29 05:09:46,647 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57470000: C:\Windows\system32\UMPDC (0x12000 bytes).
2026-05-29 05:09:46,650 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59EF0000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-29 05:09:46,651 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4FA10000: C:\Windows\SYSTEM32\Tbs (0x1b000 bytes).
2026-05-29 05:09:46,654 [root] DEBUG: 32156: DLL loaded at 0x00007FFF3F700000: C:\Windows\system32\WDSCORE (0x43000 bytes).
2026-05-29 05:09:46,656 [root] DEBUG: 32156: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\MSI (0x337000 bytes).
2026-05-29 05:09:46,661 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43550000: C:\Windows\system32\NETAPI32 (0x19000 bytes).
2026-05-29 05:09:46,662 [root] DEBUG: 32156: DLL loaded at 0x00007FFF523E0000: C:\Windows\system32\XmlLite (0x36000 bytes).
2026-05-29 05:09:46,665 [root] DEBUG: 32156: DLL loaded at 0x00007FFF43500000: C:\Windows\system32\VERSION (0xa000 bytes).
2026-05-29 05:09:46,666 [root] DEBUG: 32156: DLL loaded at 0x00007FFF55FF0000: C:\Windows\system32\tdh (0x11b000 bytes).
2026-05-29 05:09:46,671 [root] DEBUG: 32156: DLL loaded at 0x00007FFF57750000: C:\Windows\System32\cfgmgr32 (0x4e000 bytes).
2026-05-29 05:09:46,679 [root] DEBUG: 32156: DLL loaded at 0x00007FFF59A80000: C:\Windows\System32\setupapi (0x46e000 bytes).
2026-05-29 05:09:46,686 [root] DEBUG: 32156: DLL loaded at 0x00007FFF4D3B0000: C:\Windows\system32\SAMCLI (0x19000 bytes).
2026-05-29 05:09:46,687 [root] DEBUG: 32156: DLL loaded at 0x00007FFF17360000: C:\Windows\system32\appraiser (0x212000 bytes).
2026-05-29 05:09:46,791 [root] DEBUG: 4484: api-cap: IsDebuggerPresent hook disabled due to count: 5000
2026-05-29 05:09:47,385 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 48508: C:\Windows\system32\DllHost.exe, ImageBase: 0x00007FF6706B0000
2026-05-29 05:09:47,390 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 48508
2026-05-29 05:09:47,394 [lib.api.process] INFO: Monitor config for process 48508: C:\lpw_albt\dll\48508.ini
2026-05-29 05:09:47,395 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:47,398 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:47,438 [root] DEBUG: Loader: Injecting process 48508 (thread 48512) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:47,443 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:47,448 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:47,452 [lib.api.process] INFO: Injected into 64-bit <Process 48508 dllhost.exe>
2026-05-29 05:09:47,457 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 48508
2026-05-29 05:09:47,459 [lib.api.process] INFO: Monitor config for process 48508: C:\lpw_albt\dll\48508.ini
2026-05-29 05:09:47,460 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:09:47,477 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:09:47,496 [root] DEBUG: Loader: Injecting process 48508 (thread 48512) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:47,498 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:09:47,499 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:09:47,505 [lib.api.process] INFO: Injected into 64-bit <Process 48508 dllhost.exe>
2026-05-29 05:09:47,519 [root] DEBUG: 48508: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:09:47,521 [root] DEBUG: 48508: Interactive desktop enabled.
2026-05-29 05:09:47,523 [root] DEBUG: 48508: Dropped file limit defaulting to 100.
2026-05-29 05:09:47,527 [root] DEBUG: 48508: Disabling sleep skipping.
2026-05-29 05:09:47,530 [root] DEBUG: 48508: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:09:47,542 [root] DEBUG: 48508: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:09:47,545 [root] DEBUG: 48508: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:09:47,549 [root] DEBUG: 48508: Monitor initialised: 64-bit capemon loaded in process 48508 at 0x00007FFF17B00000, thread 48512, image base 0x00007FF6706B0000, stack from 0x000000CF522F4000-0x000000CF52300000
2026-05-29 05:09:47,552 [root] DEBUG: 48508: Commandline: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
2026-05-29 05:09:47,568 [root] DEBUG: 48508: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:09:47,593 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:09:47,595 [root] DEBUG: 48508: set_hooks: Unable to hook LockResource
2026-05-29 05:09:47,600 [root] DEBUG: 48508: Hooked 627 out of 628 functions
2026-05-29 05:09:47,602 [root] DEBUG: 48508: Syscall hook installed, syscall logging level 1
2026-05-29 05:09:47,609 [root] DEBUG: 48508: RestoreHeaders: Restored original import table.
2026-05-29 05:09:47,610 [root] INFO: Loaded monitor into process with pid 48508
2026-05-29 05:09:47,611 [root] DEBUG: 48508: caller_dispatch: Added region at 0x00007FF6706B0000 to tracked regions list (ntdll::NtAllocateVirtualMemory returns to 0x00007FF6706B12F2, thread 48512).
2026-05-29 05:09:47,613 [root] DEBUG: 48508: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:09:47,615 [root] DEBUG: 48508: ProcessImageBase: Main module image at 0x00007FF6706B0000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:09:47,619 [root] DEBUG: 48508: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:09:47,622 [root] DEBUG: 48508: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:09:47,625 [root] DEBUG: 48508: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:09:47,641 [root] DEBUG: 48508: DLL loaded at 0x00007FFF54FC0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-29 05:09:47,658 [root] DEBUG: 48508: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:09:47,659 [root] DEBUG: 48508: DLL loaded at 0x00007FFF432B0000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-29 05:09:47,666 [root] DEBUG: 48508: DLL loaded at 0x00007FFF52860000: C:\Windows\system32\propsys (0xf6000 bytes).
2026-05-29 05:09:47,782 [root] DEBUG: 4484: api-cap: NtQueryValueKey hook disabled due to count: 5000
2026-05-29 05:09:52,827 [root] INFO: Process with pid 48508 has terminated
2026-05-29 05:09:52,829 [root] DEBUG: 48508: NtTerminateProcess hook: Attempting to dump process 48508
2026-05-29 05:09:52,831 [root] DEBUG: 48508: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:10:16,937 [root] DEBUG: 4484: api-cap: MsgWaitForMultipleObjectsEx hook disabled due to count: 5000
2026-05-29 05:10:16,940 [root] DEBUG: 4484: api-cap: MsgWaitForMultipleObjectsEx hook disabled due to count: 5001
2026-05-29 05:10:17,638 [root] DEBUG: 4484: api-cap: NtQueryInformationThread hook disabled due to count: 5000
2026-05-29 05:10:18,360 [root] DEBUG: 4484: api-cap: NtWaitForSingleObject hook disabled due to count: 5000
2026-05-29 05:10:22,976 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 48136: C:\Windows\system32\DllHost.exe, ImageBase: 0x00007FF6706B0000
2026-05-29 05:10:22,977 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 48136
2026-05-29 05:10:22,982 [lib.api.process] INFO: Monitor config for process 48136: C:\lpw_albt\dll\48136.ini
2026-05-29 05:10:22,991 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:10:23,006 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:10:23,013 [root] DEBUG: Loader: Injecting process 48136 (thread 48144) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:10:23,016 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:10:23,018 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:10:23,019 [lib.api.process] INFO: Injected into 64-bit <Process 48136 dllhost.exe>
2026-05-29 05:10:23,023 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 48136
2026-05-29 05:10:23,026 [lib.api.process] INFO: Monitor config for process 48136: C:\lpw_albt\dll\48136.ini
2026-05-29 05:10:23,029 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:10:23,040 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:10:23,047 [root] DEBUG: Loader: Injecting process 48136 (thread 48144) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:10:23,051 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:10:23,052 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:10:23,053 [lib.api.process] INFO: Injected into 64-bit <Process 48136 dllhost.exe>
2026-05-29 05:10:23,064 [root] DEBUG: 48136: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:10:23,065 [root] DEBUG: 48136: Interactive desktop enabled.
2026-05-29 05:10:23,070 [root] DEBUG: 48136: Dropped file limit defaulting to 100.
2026-05-29 05:10:23,074 [root] DEBUG: 48136: Disabling sleep skipping.
2026-05-29 05:10:23,077 [root] DEBUG: 48136: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:10:23,090 [root] DEBUG: 48136: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:10:23,091 [root] DEBUG: 48136: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:10:23,093 [root] DEBUG: 48136: Monitor initialised: 64-bit capemon loaded in process 48136 at 0x00007FFF17B00000, thread 48144, image base 0x00007FF6706B0000, stack from 0x00000029920F4000-0x0000002992100000
2026-05-29 05:10:23,094 [root] DEBUG: 48136: Commandline: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
2026-05-29 05:10:23,111 [root] DEBUG: 48136: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:10:23,136 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:10:23,138 [root] DEBUG: 48136: set_hooks: Unable to hook LockResource
2026-05-29 05:10:23,145 [root] DEBUG: 48136: Hooked 627 out of 628 functions
2026-05-29 05:10:23,149 [root] DEBUG: 48136: Syscall hook installed, syscall logging level 1
2026-05-29 05:10:23,155 [root] DEBUG: 48136: RestoreHeaders: Restored original import table.
2026-05-29 05:10:23,157 [root] INFO: Loaded monitor into process with pid 48136
2026-05-29 05:10:23,162 [root] DEBUG: 48136: caller_dispatch: Added region at 0x00007FF6706B0000 to tracked regions list (ntdll::NtAllocateVirtualMemory returns to 0x00007FF6706B12F2, thread 48144).
2026-05-29 05:10:23,164 [root] DEBUG: 48136: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:10:23,168 [root] DEBUG: 48136: ProcessImageBase: Main module image at 0x00007FF6706B0000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:10:23,172 [root] DEBUG: 48136: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:10:23,173 [root] DEBUG: 48136: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:10:23,177 [root] DEBUG: 48136: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:10:23,191 [root] DEBUG: 48136: DLL loaded at 0x00007FFF54FC0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-29 05:10:23,209 [root] DEBUG: 48136: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:10:23,211 [root] DEBUG: 48136: DLL loaded at 0x00007FFF432B0000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-29 05:10:23,218 [root] DEBUG: 48136: DLL loaded at 0x00007FFF52860000: C:\Windows\system32\propsys (0xf6000 bytes).
2026-05-29 05:10:23,230 [root] DEBUG: 48136: DLL loaded at 0x00007FFF51B20000: C:\Windows\system32\WindowsCodecs (0x1b4000 bytes).
2026-05-29 05:10:23,233 [root] DEBUG: 48136: DLL loaded at 0x00007FFF47790000: C:\Windows\system32\PhotoMetadataHandler (0x84000 bytes).
2026-05-29 05:10:23,249 [root] DEBUG: 48136: DLL loaded at 0x00007FFF50870000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-29 05:10:27,090 [root] INFO: Added new file to list with pid 12120 and path C:
2026-05-29 05:10:27,092 [root] DEBUG: 12120: NtTerminateProcess hook: Attempting to dump process 12120
2026-05-29 05:10:27,095 [root] DEBUG: 12120: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:10:27,100 [root] INFO: Process with pid 12120 has terminated
2026-05-29 05:10:28,330 [root] INFO: Process with pid 48136 has terminated
2026-05-29 05:10:28,334 [root] DEBUG: 48136: NtTerminateProcess hook: Attempting to dump process 48136
2026-05-29 05:10:28,336 [root] DEBUG: 48136: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:10:35,205 [root] INFO: Added new file to list with pid 24440 and path C:\ProgramData\Microsoft\Windows\WER\Temp\b73daafd-8c1d-4dbe-b95a-82d5dbbbe57a
2026-05-29 05:10:35,210 [root] DEBUG: 24440: NtTerminateProcess hook: Attempting to dump process 24440
2026-05-29 05:10:35,213 [root] DEBUG: 24440: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:10:35,238 [root] INFO: Process with pid 24440 has terminated
2026-05-29 05:10:36,910 [root] DEBUG: 21628: NtTerminateProcess hook: Attempting to dump process 21628
2026-05-29 05:10:36,912 [root] DEBUG: 21628: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:10:36,921 [root] INFO: Process with pid 21628 has terminated
2026-05-29 05:10:46,718 [root] DEBUG: 32156: NtTerminateProcess hook: Attempting to dump process 32156
2026-05-29 05:10:46,721 [root] DEBUG: 32156: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:10:46,726 [root] INFO: Process with pid 32156 has terminated
2026-05-29 05:11:01,329 [root] DEBUG: 4484: DLL loaded at 0x00007FFF42C10000: C:\Windows\system32\zipfldr (0x4a000 bytes).
2026-05-29 05:11:01,332 [root] DEBUG: 4484: DLL loaded at 0x00007FFF42C10000: C:\Windows\system32\zipfldr (0x4a000 bytes).
2026-05-29 05:11:01,382 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3BBD0000: C:\Windows\SYSTEM32\MsftEdit (0x34d000 bytes).
2026-05-29 05:11:01,384 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3BBD0000: C:\Windows\SYSTEM32\MsftEdit (0x34d000 bytes).
2026-05-29 05:11:01,396 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F6A0000: C:\Program Files\Common Files\microsoft shared\ink\tiptsf (0xa9000 bytes).
2026-05-29 05:11:01,398 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F6A0000: C:\Program Files\Common Files\microsoft shared\ink\tiptsf (0xa9000 bytes).
2026-05-29 05:11:01,436 [root] DEBUG: 4484: DLL loaded at 0x0000000012AE0000: C:\Windows\system32\UIRibbon (0x3ec000 bytes).
2026-05-29 05:11:01,439 [root] DEBUG: 4484: DLL loaded at 0x0000000012AE0000: C:\Windows\system32\UIRibbon (0x3ec000 bytes).
2026-05-29 05:11:01,564 [root] DEBUG: 4484: api-cap: NtOpenProcessToken hook disabled due to count: 5000
2026-05-29 05:11:01,644 [root] DEBUG: 4484: DLL loaded at 0x00007FFF467E0000: C:\Windows\System32\Windows.System.Launcher (0xbd000 bytes).
2026-05-29 05:11:01,650 [root] DEBUG: 4484: DLL loaded at 0x00007FFF467E0000: C:\Windows\System32\Windows.System.Launcher (0xbd000 bytes).
2026-05-29 05:11:02,038 [root] DEBUG: 4484: api-cap: CoCreateInstance hook disabled due to count: 5001
2026-05-29 05:11:02,039 [root] DEBUG: 4484: api-cap: CoCreateInstance hook disabled due to count: 5000
2026-05-29 05:11:05,595 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\njRAT-v0.6.4.lnk to files\36fa265ccb5056882a0b208dfed8c80117aee4d21b3cebb8068d81fdf4ebce0a; Size is 609; Max size: 100000000
2026-05-29 05:11:05,610 [root] DEBUG: 4484: api-cap: NtReleaseMutant hook disabled due to count: 5000
2026-05-29 05:11:07,663 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4F390000: C:\Windows\system32\twext (0x33000 bytes).
2026-05-29 05:11:07,665 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4F390000: C:\Windows\system32\twext (0x33000 bytes).
2026-05-29 05:11:07,703 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F2B0000: C:\Windows\System32\shacct (0x29000 bytes).
2026-05-29 05:11:07,704 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F2B0000: C:\Windows\System32\shacct (0x29000 bytes).
2026-05-29 05:11:07,747 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F250000: C:\Program Files\Windows Defender\shellext (0x55000 bytes).
2026-05-29 05:11:07,749 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F250000: C:\Program Files\Windows Defender\shellext (0x55000 bytes).
2026-05-29 05:11:07,773 [root] DEBUG: 4484: api-cap: NtOpenProcess hook disabled due to count: 5000
2026-05-29 05:11:07,854 [root] DEBUG: 4484: DLL loaded at 0x00007FFF1C370000: C:\Windows\System32\sendmail (0x2b000 bytes).
2026-05-29 05:11:07,857 [root] DEBUG: 4484: DLL loaded at 0x00007FFF1C370000: C:\Windows\System32\sendmail (0x2b000 bytes).
2026-05-29 05:11:07,873 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F8A0000: C:\Windows\system32\mydocs (0x11000 bytes).
2026-05-29 05:11:07,876 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F8A0000: C:\Windows\system32\mydocs (0x11000 bytes).
2026-05-29 05:11:07,947 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4F430000: C:\Windows\System32\drprov (0xb000 bytes).
2026-05-29 05:11:07,951 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4F430000: C:\Windows\System32\drprov (0xb000 bytes).
2026-05-29 05:11:07,956 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F230000: C:\Windows\System32\ntlanman (0x1f000 bytes).
2026-05-29 05:11:07,959 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F230000: C:\Windows\System32\ntlanman (0x1f000 bytes).
2026-05-29 05:11:07,962 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4F210000: C:\Windows\System32\DAVHLPR (0xd000 bytes).
2026-05-29 05:11:07,964 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4F210000: C:\Windows\System32\DAVHLPR (0xd000 bytes).
2026-05-29 05:11:07,967 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3EFA0000: C:\Windows\System32\davclnt (0x1e000 bytes).
2026-05-29 05:11:07,968 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3EFA0000: C:\Windows\System32\davclnt (0x1e000 bytes).
2026-05-29 05:11:07,999 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18B90000: C:\Windows\System32\PlayToDevice (0x64000 bytes).
2026-05-29 05:11:08,003 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18B90000: C:\Windows\System32\PlayToDevice (0x64000 bytes).
2026-05-29 05:11:08,015 [root] DEBUG: 4484: DLL loaded at 0x0000000010380000: C:\Windows\System32\EhStorAPI (0x26000 bytes).
2026-05-29 05:11:08,017 [root] DEBUG: 4484: DLL loaded at 0x0000000010380000: C:\Windows\System32\EhStorAPI (0x26000 bytes).
2026-05-29 05:11:10,489 [root] DEBUG: 4484: DLL loaded at 0x00007FFF1C370000: C:\Windows\SYSTEM32\CHARTV (0x25000 bytes).
2026-05-29 05:11:10,492 [root] DEBUG: 4484: DLL loaded at 0x00007FFF1C370000: C:\Windows\SYSTEM32\CHARTV (0x25000 bytes).
2026-05-29 05:11:10,575 [root] DEBUG: 4484: DLL loaded at 0x00007FFF589D0000: C:\Windows\System32\comdlg32 (0xda000 bytes).
2026-05-29 05:11:10,585 [root] DEBUG: 4484: DLL loaded at 0x00007FFF589D0000: C:\Windows\System32\comdlg32 (0xda000 bytes).
2026-05-29 05:11:18,261 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18AE0000: C:\Windows\SYSTEM32\WDSCORE (0x43000 bytes).
2026-05-29 05:11:18,264 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18AE0000: C:\Windows\SYSTEM32\WDSCORE (0x43000 bytes).
2026-05-29 05:11:18,268 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Windows\system32\winshfhc (0xa000 bytes).
2026-05-29 05:11:18,271 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Windows\system32\winshfhc (0xa000 bytes).
2026-05-29 05:11:18,287 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F830000: C:\Program Files\Windows Defender\MpOav (0x44000 bytes).
2026-05-29 05:11:18,290 [root] DEBUG: 4484: DLL loaded at 0x00007FFF3F830000: C:\Program Files\Windows Defender\MpOav (0x44000 bytes).
2026-05-29 05:11:18,295 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,298 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,314 [root] DEBUG: 4484: DLL loaded at 0x00007FFF55EC0000: C:\Windows\SYSTEM32\gpapi (0x23000 bytes).
2026-05-29 05:11:18,315 [root] DEBUG: 4484: DLL loaded at 0x00007FFF55EC0000: C:\Windows\SYSTEM32\gpapi (0x23000 bytes).
2026-05-29 05:11:18,407 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,408 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,476 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,479 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,537 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,540 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,569 [root] DEBUG: 4484: api-cap: NtReadFile hook disabled due to count: 5000
2026-05-29 05:11:18,587 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18AE0000: C:\Windows\SYSTEM32\WDSCORE (0x43000 bytes).
2026-05-29 05:11:18,590 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18AE0000: C:\Windows\SYSTEM32\WDSCORE (0x43000 bytes).
2026-05-29 05:11:18,592 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Windows\system32\winshfhc (0xa000 bytes).
2026-05-29 05:11:18,597 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Windows\system32\winshfhc (0xa000 bytes).
2026-05-29 05:11:18,607 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,610 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,653 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18AE0000: C:\Windows\SYSTEM32\WDSCORE (0x43000 bytes).
2026-05-29 05:11:18,655 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18AE0000: C:\Windows\SYSTEM32\WDSCORE (0x43000 bytes).
2026-05-29 05:11:18,660 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Windows\system32\winshfhc (0xa000 bytes).
2026-05-29 05:11:18,664 [root] DEBUG: 4484: DLL loaded at 0x00007FFF4D300000: C:\Windows\system32\winshfhc (0xa000 bytes).
2026-05-29 05:11:18,672 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,675 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,748 [root] DEBUG: 4484: api-cap: RegEnumKeyExW hook disabled due to count: 5000
2026-05-29 05:11:18,760 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,762 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,824 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,825 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,887 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,890 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,967 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:18,969 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:19,030 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:19,032 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:19,085 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:19,087 [root] DEBUG: 4484: DLL loaded at 0x00007FFF47F70000: C:\Program Files\Windows Defender\MPCLIENT (0xe9000 bytes).
2026-05-29 05:11:19,173 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 48764: C:\Windows\system32\DllHost.exe, ImageBase: 0x00007FF6706B0000
2026-05-29 05:11:19,176 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 48764
2026-05-29 05:11:19,177 [lib.api.process] INFO: Monitor config for process 48764: C:\lpw_albt\dll\48764.ini
2026-05-29 05:11:19,181 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:19,207 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:19,253 [root] DEBUG: Loader: Injecting process 48764 (thread 48776) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:19,254 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:19,256 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:19,259 [lib.api.process] INFO: Injected into 64-bit <Process 48764 dllhost.exe>
2026-05-29 05:11:19,266 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 48764
2026-05-29 05:11:19,268 [lib.api.process] INFO: Monitor config for process 48764: C:\lpw_albt\dll\48764.ini
2026-05-29 05:11:19,269 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:19,288 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:19,300 [root] DEBUG: Loader: Injecting process 48764 (thread 48776) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:19,302 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:19,306 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:19,313 [lib.api.process] INFO: Injected into 64-bit <Process 48764 dllhost.exe>
2026-05-29 05:11:19,329 [root] DEBUG: 48764: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-29 05:11:19,333 [root] DEBUG: 48764: Interactive desktop enabled.
2026-05-29 05:11:19,336 [root] DEBUG: 48764: Dropped file limit defaulting to 100.
2026-05-29 05:11:19,340 [root] DEBUG: 48764: Disabling sleep skipping.
2026-05-29 05:11:19,351 [root] DEBUG: 48764: YaraInit: Compiled rules loaded from existing file C:\lpw_albt\data\yara\capemon.yac
2026-05-29 05:11:19,364 [root] DEBUG: 48764: RtlInsertInvertedFunctionTable 0x00007FFF59F6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFF5A0BD4F0
2026-05-29 05:11:19,365 [root] DEBUG: 48764: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:11:19,373 [root] DEBUG: 48764: Monitor initialised: 64-bit capemon loaded in process 48764 at 0x00007FFF17B00000, thread 48776, image base 0x00007FF6706B0000, stack from 0x000000D3A26F4000-0x000000D3A2700000
2026-05-29 05:11:19,390 [root] DEBUG: 48764: Commandline: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
2026-05-29 05:11:19,405 [root] DEBUG: 48764: hook_api: LdrpCallInitRoutine export address 0x00007FFF59F699BC obtained via GetFunctionAddress
2026-05-29 05:11:19,431 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-29 05:11:19,437 [root] DEBUG: 48764: set_hooks: Unable to hook LockResource
2026-05-29 05:11:19,443 [root] DEBUG: 48764: Hooked 627 out of 628 functions
2026-05-29 05:11:19,446 [root] DEBUG: 48764: Syscall hook installed, syscall logging level 1
2026-05-29 05:11:19,454 [root] DEBUG: 48764: RestoreHeaders: Restored original import table.
2026-05-29 05:11:19,456 [root] INFO: Loaded monitor into process with pid 48764
2026-05-29 05:11:19,462 [root] DEBUG: 48764: caller_dispatch: Added region at 0x00007FF6706B0000 to tracked regions list (ntdll::NtAllocateVirtualMemory returns to 0x00007FF6706B12F2, thread 48776).
2026-05-29 05:11:19,465 [root] DEBUG: 48764: YaraScan: Scanning 0x00007FF6706B0000, size 0x8026
2026-05-29 05:11:19,471 [root] DEBUG: 48764: ProcessImageBase: Main module image at 0x00007FF6706B0000 unmodified (entropy change 0.000000e+00)
2026-05-29 05:11:19,478 [root] DEBUG: 4484: api-cap: NtSetInformationFile hook disabled due to count: 5000
2026-05-29 05:11:19,502 [root] DEBUG: 48764: DLL loaded at 0x00007FFF55510000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-29 05:11:19,504 [root] DEBUG: 48764: DLL loaded at 0x00007FFF57EF0000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-29 05:11:19,508 [root] DEBUG: 48764: DLL loaded at 0x00007FFF58B30000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-29 05:11:19,535 [root] DEBUG: 48764: DLL loaded at 0x00007FFF54FC0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-29 05:11:19,564 [root] DEBUG: 48764: DLL loaded at 0x00007FFF58070000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-29 05:11:19,568 [root] DEBUG: 48764: DLL loaded at 0x00007FFF432B0000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-29 05:11:19,577 [root] DEBUG: 48764: DLL loaded at 0x00007FFF52860000: C:\Windows\system32\propsys (0xf6000 bytes).
2026-05-29 05:11:21,144 [root] DEBUG: 4484: api-cap: NtCreateMutant hook disabled due to count: 5000
2026-05-29 05:11:22,918 [root] DEBUG: 4484: DLL loaded at 0x00007FFF46F60000: C:\Windows\System32\Windows.Shell.ServiceHostBuilder (0x1d000 bytes).
2026-05-29 05:11:22,920 [root] DEBUG: 4484: DLL loaded at 0x00007FFF46F60000: C:\Windows\System32\Windows.Shell.ServiceHostBuilder (0x1d000 bytes).
2026-05-29 05:11:22,934 [root] DEBUG: 4484: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4AE111000, size: 0x1000.
2026-05-29 05:11:22,935 [root] DEBUG: 4484: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4AE101000, size: 0x1000.
2026-05-29 05:11:22,950 [root] DEBUG: 4484: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4AE0F1000, size: 0x1000.
2026-05-29 05:11:22,959 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18A90000: C:\Windows\system32\activationclient (0x12000 bytes).
2026-05-29 05:11:22,966 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18A90000: C:\Windows\system32\activationclient (0x12000 bytes).
2026-05-29 05:11:22,985 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 49284: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe, ImageBase: 0x00007FF7155A0000
2026-05-29 05:11:22,987 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49284
2026-05-29 05:11:22,990 [lib.api.process] INFO: Monitor config for process 49284: C:\lpw_albt\dll\49284.ini
2026-05-29 05:11:22,994 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:23,011 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:23,016 [root] DEBUG: Loader: Injecting process 49284 (thread 49288) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:23,020 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:23,022 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:23,024 [lib.api.process] INFO: Injected into 64-bit <Process 49284 CHXSmartScreen.exe>
2026-05-29 05:11:23,029 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49284
2026-05-29 05:11:23,030 [lib.api.process] INFO: Monitor config for process 49284: C:\lpw_albt\dll\49284.ini
2026-05-29 05:11:23,031 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:23,049 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:23,054 [root] DEBUG: Loader: Injecting process 49284 (thread 49288) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:23,057 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:23,061 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:23,066 [lib.api.process] INFO: Injected into 64-bit <Process 49284 CHXSmartScreen.exe>
2026-05-29 05:11:23,067 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49284
2026-05-29 05:11:23,070 [lib.api.process] INFO: Monitor config for process 49284: C:\lpw_albt\dll\49284.ini
2026-05-29 05:11:23,073 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:23,089 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:23,094 [root] DEBUG: Loader: Injecting process 49284 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:23,097 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 49288, handle 0x8c
2026-05-29 05:11:23,100 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:11:23,101 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:23,103 [lib.api.process] INFO: Injected into 64-bit <Process 49284 CHXSmartScreen.exe>
2026-05-29 05:11:23,370 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE0F0000.
2026-05-29 05:11:23,373 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:23,374 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE120000.
2026-05-29 05:11:23,376 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:23,377 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE100000.
2026-05-29 05:11:23,380 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:23,382 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE110000.
2026-05-29 05:11:23,384 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:23,386 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE130000.
2026-05-29 05:11:23,389 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:24,685 [root] INFO: Process with pid 48764 has terminated
2026-05-29 05:11:24,688 [root] DEBUG: 48764: NtTerminateProcess hook: Attempting to dump process 48764
2026-05-29 05:11:24,690 [root] DEBUG: 48764: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:26,818 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE130000.
2026-05-29 05:11:26,823 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE120000.
2026-05-29 05:11:26,825 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE100000.
2026-05-29 05:11:26,850 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 49668: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe, ImageBase: 0x00007FF7155A0000
2026-05-29 05:11:26,852 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49668
2026-05-29 05:11:26,856 [lib.api.process] INFO: Monitor config for process 49668: C:\lpw_albt\dll\49668.ini
2026-05-29 05:11:26,862 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:26,884 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:26,890 [root] DEBUG: Loader: Injecting process 49668 (thread 49672) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:26,894 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:26,896 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:26,898 [lib.api.process] INFO: Injected into 64-bit <Process 49668 CHXSmartScreen.exe>
2026-05-29 05:11:26,903 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49668
2026-05-29 05:11:26,903 [lib.api.process] INFO: Monitor config for process 49668: C:\lpw_albt\dll\49668.ini
2026-05-29 05:11:26,905 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:26,921 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:26,927 [root] DEBUG: Loader: Injecting process 49668 (thread 49672) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:26,928 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:26,932 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:26,934 [lib.api.process] INFO: Injected into 64-bit <Process 49668 CHXSmartScreen.exe>
2026-05-29 05:11:26,938 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49668
2026-05-29 05:11:26,939 [lib.api.process] INFO: Monitor config for process 49668: C:\lpw_albt\dll\49668.ini
2026-05-29 05:11:26,939 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:26,961 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:26,966 [root] DEBUG: Loader: Injecting process 49668 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:26,968 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 49672, handle 0x120
2026-05-29 05:11:26,972 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-29 05:11:26,974 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:26,975 [lib.api.process] INFO: Injected into 64-bit <Process 49668 CHXSmartScreen.exe>
2026-05-29 05:11:27,197 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE0F0000.
2026-05-29 05:11:27,200 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:27,203 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE110000.
2026-05-29 05:11:27,206 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:27,209 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE100000.
2026-05-29 05:11:27,213 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:27,215 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE120000.
2026-05-29 05:11:27,219 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:27,222 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE130000.
2026-05-29 05:11:27,225 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:28,775 [root] DEBUG: 4484: DLL loaded at 0x00007FFF189D0000: C:\Windows\System32\sendmail (0x2b000 bytes).
2026-05-29 05:11:28,778 [root] DEBUG: 4484: DLL loaded at 0x00007FFF189D0000: C:\Windows\System32\sendmail (0x2b000 bytes).
2026-05-29 05:11:28,782 [root] DEBUG: 4484: DLL loaded at 0x0000000013930000: C:\Windows\system32\sfc (0x3000 bytes).
2026-05-29 05:11:28,787 [root] DEBUG: 4484: DLL loaded at 0x0000000013930000: C:\Windows\system32\sfc (0x3000 bytes).
2026-05-29 05:11:28,790 [root] DEBUG: 4484: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\msi (0x337000 bytes).
2026-05-29 05:11:28,792 [root] DEBUG: 4484: DLL loaded at 0x00007FFF1C620000: C:\Windows\system32\msi (0x337000 bytes).
2026-05-29 05:11:28,796 [root] DEBUG: 4484: DLL loaded at 0x00007FFF189B0000: C:\Windows\system32\acppage (0x19000 bytes).
2026-05-29 05:11:28,799 [root] DEBUG: 4484: DLL loaded at 0x00007FFF189B0000: C:\Windows\system32\acppage (0x19000 bytes).
2026-05-29 05:11:28,836 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18990000: C:\Windows\system32\mydocs (0x11000 bytes).
2026-05-29 05:11:28,838 [root] DEBUG: 4484: DLL loaded at 0x00007FFF18990000: C:\Windows\system32\mydocs (0x11000 bytes).
2026-05-29 05:11:29,762 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE130000.
2026-05-29 05:11:29,766 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE120000.
2026-05-29 05:11:29,767 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE110000.
2026-05-29 05:11:29,769 [root] DEBUG: 4484: AllocationHandler: Allocation already in tracked region list: 0x00007DF4AE100000.
2026-05-29 05:11:29,796 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 49952: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe, ImageBase: 0x00007FF7155A0000
2026-05-29 05:11:29,799 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49952
2026-05-29 05:11:29,801 [lib.api.process] INFO: Monitor config for process 49952: C:\lpw_albt\dll\49952.ini
2026-05-29 05:11:29,806 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:29,823 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:29,831 [root] DEBUG: Loader: Injecting process 49952 (thread 49956) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:29,837 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:29,839 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:29,841 [lib.api.process] INFO: Injected into 64-bit <Process 49952 CHXSmartScreen.exe>
2026-05-29 05:11:29,846 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49952
2026-05-29 05:11:29,847 [lib.api.process] INFO: Monitor config for process 49952: C:\lpw_albt\dll\49952.ini
2026-05-29 05:11:29,847 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:29,868 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:29,874 [root] DEBUG: Loader: Injecting process 49952 (thread 49956) with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:29,877 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-29 05:11:29,882 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:29,884 [lib.api.process] INFO: Injected into 64-bit <Process 49952 CHXSmartScreen.exe>
2026-05-29 05:11:29,890 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 49952
2026-05-29 05:11:29,893 [lib.api.process] INFO: Monitor config for process 49952: C:\lpw_albt\dll\49952.ini
2026-05-29 05:11:29,895 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-29 05:11:29,917 [lib.api.process] INFO: 64-bit DLL to inject is C:\lpw_albt\dll\uwEeDg.dll, loader C:\lpw_albt\bin\MooDbyJw.exe
2026-05-29 05:11:29,923 [root] DEBUG: Loader: Injecting process 49952 with C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:29,928 [root] DEBUG: GetProcessInitialThreadId: ReadProcessMemory failed (0x00000011F59FD048).
2026-05-29 05:11:29,931 [root] DEBUG: InjectDll: No thread ID supplied, GetProcessInitialThreadId failed (SessionId=1).
2026-05-29 05:11:29,933 [root] DEBUG: Successfully injected DLL C:\lpw_albt\dll\uwEeDg.dll.
2026-05-29 05:11:30,152 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE0F0000.
2026-05-29 05:11:30,158 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:30,160 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE110000.
2026-05-29 05:11:30,162 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:30,163 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE100000.
2026-05-29 05:11:30,165 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:30,170 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE120000.
2026-05-29 05:11:30,171 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:30,177 [root] DEBUG: 4484: FreeHandler: Address: 0x00007DF4AE130000.
2026-05-29 05:11:30,182 [root] DEBUG: 4484: ScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:38,476 [root] DEBUG: 4484: api-cap: PostMessageW hook disabled due to count: 5000
2026-05-29 05:11:38,916 [root] INFO: Analysis timeout hit, terminating analysis
2026-05-29 05:11:38,917 [lib.api.process] INFO: Terminate event set for process 4484
2026-05-29 05:11:38,921 [root] DEBUG: 4484: Terminate Event: Attempting to dump process 4484
2026-05-29 05:11:38,930 [root] DEBUG: 4484: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:38,952 [root] DEBUG: 4484: ReverseScanForNonZero: Error - Supplied size zero.
2026-05-29 05:11:38,954 [root] DEBUG: 4484: GetPageAddress: Error - Supplied address zero.
2026-05-29 05:11:38,957 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
2026-05-29 05:11:38,973 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Mono.Cecil.dll
2026-05-29 05:11:38,995 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
2026-05-29 05:11:39,005 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\NAudio.dll:Zone.Identifier
2026-05-29 05:11:39,013 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Plugin\ch.dll
2026-05-29 05:11:39,020 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Plugin\Mic.dll
2026-05-29 05:11:39,039 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Plugin\cam.dll
2026-05-29 05:11:39,049 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Mono.Cecil.dll:Zone.Identifier
2026-05-29 05:11:39,054 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Stub.manifest
2026-05-29 05:11:39,062 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\njRAT.exe
2026-05-29 05:11:39,073 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\NAudio.dll
2026-05-29 05:11:39,081 [root] INFO: Added new file to list with pid 4484 and path C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\GeoIP.dat:Zone.Identifier
2026-05-29 05:11:39,110 [root] DEBUG: 4484: Dropped file limit reached.
2026-05-29 05:11:39,111 [lib.api.process] INFO: Termination confirmed for process 4484
2026-05-29 05:11:39,113 [root] DEBUG: 4484: Terminate Event: monitor shutdown complete for process 4484
2026-05-29 05:11:39,113 [root] INFO: Terminate event set for process 4484
2026-05-29 05:11:39,119 [lib.api.process] INFO: Terminate event set for process 832
2026-05-29 05:11:39,119 [root] DEBUG: 832: Terminate Event: Attempting to dump process 832
2026-05-29 05:11:39,124 [root] DEBUG: 832: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:39,127 [lib.api.process] INFO: Termination confirmed for process 832
2026-05-29 05:11:39,128 [root] DEBUG: 832: Terminate Event: monitor shutdown complete for process 832
2026-05-29 05:11:39,129 [root] INFO: Terminate event set for process 832
2026-05-29 05:11:39,135 [lib.api.process] INFO: Terminate event set for process 676
2026-05-29 05:11:39,136 [root] DEBUG: 676: Terminate Event: Attempting to dump process 676
2026-05-29 05:11:39,140 [root] DEBUG: 676: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:39,142 [lib.api.process] INFO: Termination confirmed for process 676
2026-05-29 05:11:39,143 [root] INFO: Terminate event set for process 676
2026-05-29 05:11:39,146 [root] DEBUG: 676: Terminate Event: monitor shutdown complete for process 676
2026-05-29 05:11:39,147 [lib.api.process] INFO: Terminate event set for process 10232
2026-05-29 05:11:39,149 [root] DEBUG: 10232: Terminate Event: Attempting to dump process 10232
2026-05-29 05:11:39,152 [root] DEBUG: 10232: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:39,154 [lib.api.process] INFO: Termination confirmed for process 10232
2026-05-29 05:11:39,155 [root] DEBUG: 10232: Terminate Event: monitor shutdown complete for process 10232
2026-05-29 05:11:39,156 [root] INFO: Terminate event set for process 10232
2026-05-29 05:11:39,160 [lib.api.process] INFO: Terminate event set for process 15816
2026-05-29 05:11:39,160 [root] DEBUG: 15816: Terminate Event: Attempting to dump process 15816
2026-05-29 05:11:39,163 [root] DEBUG: 15816: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:39,170 [root] DEBUG: 15816: Terminate Event: Shutdown complete for process 15816 but failed to inform analyzer.
2026-05-29 05:11:44,154 [lib.api.process] INFO: Termination confirmed for process 15816
2026-05-29 05:11:44,155 [root] INFO: Terminate event set for process 15816
2026-05-29 05:11:44,157 [lib.api.process] INFO: Terminate event set for process 17672
2026-05-29 05:11:44,162 [root] DEBUG: 17672: Terminate Event: Attempting to dump process 17672
2026-05-29 05:11:44,165 [root] DEBUG: 17672: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:44,172 [lib.api.process] INFO: Termination confirmed for process 17672
2026-05-29 05:11:44,173 [root] INFO: Terminate event set for process 17672
2026-05-29 05:11:44,172 [root] DEBUG: 17672: Terminate Event: monitor shutdown complete for process 17672
2026-05-29 05:11:44,177 [root] DEBUG: 19788: Terminate Event: Attempting to dump process 19788
2026-05-29 05:11:44,178 [lib.api.process] INFO: Terminate event set for process 19788
2026-05-29 05:11:44,181 [root] DEBUG: 19788: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-29 05:11:44,189 [root] INFO: Added new file to list with pid 19788 and path C:\Windows\System32\WINBIODATABASE\51F39552-1075-4199-B513-0C10EA185DB0.DAT
2026-05-29 05:11:44,191 [lib.api.process] INFO: Termination confirmed for process 19788
2026-05-29 05:11:44,192 [root] INFO: Terminate event set for process 19788
2026-05-29 05:11:44,192 [root] INFO: Created shutdown mutex
2026-05-29 05:11:44,195 [root] DEBUG: 19788: Terminate Event: monitor shutdown complete for process 19788
2026-05-29 05:11:45,198 [root] INFO: Shutting down package
2026-05-29 05:11:45,198 [root] INFO: Stopping auxiliary modules
2026-05-29 05:11:45,200 [root] INFO: Stopping auxiliary module: Browser
2026-05-29 05:11:45,202 [root] INFO: Stopping auxiliary module: Human
2026-05-29 05:11:45,204 [root] INFO: Stopping auxiliary module: Screenshots
2026-05-29 05:11:45,206 [root] INFO: Finishing auxiliary modules
2026-05-29 05:11:45,208 [root] INFO: Shutting down pipe server and dumping dropped files
2026-05-29 05:11:45,212 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db to files\ee45069a17c6d577c64e0afdde6a367ad352b93ec2102bd008a562bae2057d08; Size is 14688; Max size: 100000000
2026-05-29 05:11:45,232 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db to files\b02ec916d941aa9bd471d898682d7ecd34b7b4b2f22508a3942bbe02b43bf3c5; Size is 1048576; Max size: 100000000
2026-05-29 05:11:45,247 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db to files\dd99e60a9415909238ec04c20a82759325692e674e62f343b8731785a7948c0f; Size is 1048576; Max size: 100000000
2026-05-29 05:11:45,253 [root] WARNING: File at path c:\programdata\microsoft\windows\wer\temp\wer1fbe.tmp.csv does not exist, skipping
2026-05-29 05:11:45,255 [root] WARNING: File at path c:\programdata\microsoft\windows\wer\temp\wer201d.tmp.txt does not exist, skipping
2026-05-29 05:11:45,259 [lib.common.results] INFO: Uploading file C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\Crashpad\settings.dat to files\73ce2c3f336c4205614f4ebe70cb8ffc7a16626b3b2e5a3add7897b8c2b18d11; Size is 40; Max size: 100000000
2026-05-29 05:11:45,281 [lib.common.results] INFO: Uploading file C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log to files\6f8a1e217debeef34df2bb5aee8bc601adb34ec1b4795b45848a82f148c447ad; Size is 692952; Max size: 100000000
2026-05-29 05:11:45,291 [root] WARNING: File at path c:\program files (x86)\google\googleupdater\b9971a97-28ef-490c-860e-b42ddc3a1afc.tmp does not exist, skipping
2026-05-29 05:11:45,294 [lib.common.results] INFO: Uploading file C:\Program Files (x86)\Google\GoogleUpdater\prefs.json to files\9074f6d84c7494b68b6ac053cfebaf533d9317e73ecef82bfb43d9563609238e; Size is 1347; Max size: 100000000
2026-05-29 05:11:45,307 [lib.common.results] INFO: Uploading file C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl to files\763a20d7c742de700b4df22c9d2b9030b757d87a90f1bcdedc667ffe7ac90bee; Size is 766737; Max size: 100000000
2026-05-29 05:11:45,320 [lib.common.results] INFO: Uploading file C:\Program Files (x86)\Google\GoogleUpdater\updater.log to files\45b39c6881e37f3933542b7df63b2fccaf29f511d2d2d5710f8b84ab6aac46ee; Size is 372399; Max size: 100000000
2026-05-29 05:11:45,332 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db to files\12637c43abec0fd3257c6a7d01bbe3b13cfd33c3592e233a52bfa01da56de6e3; Size is 1048576; Max size: 100000000
2026-05-29 05:11:45,341 [root] WARNING: File at path c:\program files (x86)\google\googleupdater\7989abab-a7ca-4963-9e60-79faaac6a3b3.tmp does not exist, skipping
2026-05-29 05:11:45,341 [root] WARNING: File at path c: does not exist, skipping
2026-05-29 05:11:45,341 [root] WARNING: File at path c:\programdata\microsoft\windows\wer\temp\b73daafd-8c1d-4dbe-b95a-82d5dbbbe57a does not exist, skipping
2026-05-29 05:11:45,349 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db to files\b9e1167ba6dcbaa5c30a733e70fdcd0cf6a29735801e4c787650f38f923507a4; Size is 1048576; Max size: 100000000
2026-05-29 05:11:45,364 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Mono.Cecil.dll to files\cdadc26c09f869e21053ee1a0acf3b2d11df8edd599fe9c377bd4d3ce1c9cda9; Size is 312320; Max size: 100000000
2026-05-29 05:11:45,380 [lib.common.results] INFO: Uploading file C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db to files\7067b0bfc26447a18ec8620c9d10a494417d6c67c7852de96e028e5a6750e2ec; Size is 58320; Max size: 100000000
2026-05-29 05:11:45,391 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\NAudio.dll:Zone.Identifier to files\e89d2af66c5f4fe43d711796469141aa46d59dad40c76747a835085a79343cff; Size is 81; Max size: 100000000
2026-05-29 05:11:45,405 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Plugin\ch.dll to files\89a1bbe42cde01ddfe531d69dd6ea6575296096010400cb63cbf4999eca52e52; Size is 13312; Max size: 100000000
2026-05-29 05:11:45,418 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Plugin\Mic.dll to files\fde583027a692d210e8f1f73667fa0037705128ade8bbfbc9b780f019ead6672; Size is 417280; Max size: 100000000
2026-05-29 05:11:45,428 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Plugin\cam.dll to files\b02c56d29447690cdafd8f2f6877d526d1f6efcaae74017719c460d9b3ee38b8; Size is 65024; Max size: 100000000
2026-05-29 05:11:45,438 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Mono.Cecil.dll:Zone.Identifier to files\e89d2af66c5f4fe43d711796469141aa46d59dad40c76747a835085a79343cff; Size is 81; Max size: 100000000
2026-05-29 05:11:45,446 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\Stub.manifest to files\835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5; Size is 487; Max size: 100000000
2026-05-29 05:11:45,456 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\njRAT.exe to files\fd624aa205517580e83fad7a4ce4d64863e95f62b34ac72647b1974a52822199; Size is 982016; Max size: 100000000
2026-05-29 05:11:45,466 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\NAudio.dll to files\cd9709bf1c7396f6fe3684b5177fa0890c706ca82e2b98ba58e8d8383632a3c8; Size is 391168; Max size: 100000000
2026-05-29 05:11:45,479 [lib.common.results] INFO: Uploading file C:\Users\admin\Downloads\njRAT-v0.6.4\njRAT-v0.6.4\GeoIP.dat:Zone.Identifier to files\e89d2af66c5f4fe43d711796469141aa46d59dad40c76747a835085a79343cff; Size is 81; Max size: 100000000
2026-05-29 05:11:45,484 [lib.common.results] INFO: Uploading file C:\Windows\System32\WINBIODATABASE\51F39552-1075-4199-B513-0C10EA185DB0.DAT to files\6b3e1d4386205e419a3b194048ca599a847aea72b81731edf88bfcce8e75a2e2; Size is 1144; Max size: 100000000
2026-05-29 05:11:45,494 [root] WARNING: Folder at path "C:\zDtLzmEP\debugger" does not exist, skipping
2026-05-29 05:11:45,495 [root] WARNING: Folder at path "C:\zDtLzmEP\tlsdump" does not exist, skipping
2026-05-29 05:11:46,401 [root] DEBUG: 832: CreateProcessHandler: Injection info set for new process 50052: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe, ImageBase: 0x00007FF7155A0000
2026-05-29 05:11:49,881 [root] WARNING: Monitor injection attempted but failed for process 14400
2026-05-29 05:11:49,882 [root] WARNING: Monitor injection attempted but failed for process 14568
2026-05-29 05:11:49,883 [root] WARNING: Monitor injection attempted but failed for process 17284
2026-05-29 05:11:49,885 [root] WARNING: Monitor injection attempted but failed for process 13880
2026-05-29 05:11:49,885 [root] WARNING: Monitor injection attempted but failed for process 14004
2026-05-29 05:11:49,886 [root] WARNING: Monitor injection attempted but failed for process 23460
2026-05-29 05:11:49,887 [root] WARNING: Monitor injection attempted but failed for process 23880
2026-05-29 05:11:49,888 [root] WARNING: Monitor injection attempted but failed for process 24000
2026-05-29 05:11:49,889 [root] WARNING: Monitor injection attempted but failed for process 24056
2026-05-29 05:11:49,890 [root] WARNING: Monitor injection attempted but failed for process 24216
2026-05-29 05:11:49,891 [root] WARNING: Monitor injection attempted but failed for process 47624
2026-05-29 05:11:49,892 [root] WARNING: Monitor injection attempted but failed for process 40856
2026-05-29 05:11:49,893 [root] WARNING: Monitor injection attempted but failed for process 21076
2026-05-29 05:11:49,894 [root] WARNING: Monitor injection attempted but failed for process 49284
2026-05-29 05:11:49,895 [root] WARNING: Monitor injection attempted but failed for process 49668
2026-05-29 05:11:49,895 [root] WARNING: Monitor injection attempted but failed for process 49952
2026-05-29 05:11:49,897 [root] INFO: Analysis completed
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| cuckoo1 | cuckoo1 | KVM | 2026-05-29 05:08:00 | 2026-05-29 05:11:52 | none |
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (39224) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
| Process: MicrosoftEdgeUpdate.exe (42768) | ||||||||
| registry | HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | |||||||
Seek in progress...
| Direct | IP | Country Name | ASN |
|---|---|---|---|
| Y | 20.227.97.55 [VT] | unknown | - |
| Y | 185.199.110.133 [VT] | unknown | - |
| Y | 204.62.249.50 [VT] | unknown | - |
| Y | 207.241.225.195 [VT] | unknown | - |
| Y | 207.241.224.2 [VT] | unknown | - |
| Y | 142.250.183.40 [VT] | unknown | - |
| Y | 40.115.75.193 [VT] | unknown | - |
| Y | 151.101.130.49 [VT] | unknown | - |
| Y | 40.126.14.164 [VT] | unknown | - |
| Y | 150.171.109.25 [VT] | unknown | - |
| Y | 150.171.27.10 [VT] | unknown | - |
| Y | 52.168.117.168 [VT] | unknown | - |
| Y | 140.82.112.21 [VT] | unknown | - |
| Y | 185.199.109.133 [VT] | unknown | - |
| Y | 185.199.111.215 [VT] | unknown | - |
| Y | 172.64.154.167 [VT] | unknown | - |
| Y | 72.153.5.62 [VT] | unknown | - |
| Y | 72.153.5.96 [VT] | unknown | - |
| Y | 72.153.5.141 [VT] | unknown | - |
| Y | 23.202.166.56 [VT] | unknown | - |
| Y | 150.171.109.17 [VT] | unknown | - |
| Y | 4.237.22.34 [VT] | unknown | - |
| Y | 140.82.113.21 [VT] | unknown | - |
| Y | 185.199.111.133 [VT] | unknown | - |
| Y | 185.199.109.215 [VT] | unknown | - |
| Y | 151.101.1.91 [VT] | unknown | - |
| Y | 4.237.22.38 [VT] | unknown | - |
| Y | 142.251.222.225 [VT] | unknown | - |
| Y | 104.29.139.64 [VT] | unknown | - |
| Y | 104.29.138.167 [VT] | unknown | - |
| Y | 104.29.139.127 [VT] | unknown | - |
| Y | 104.29.139.79 [VT] | unknown | - |
| Y | 104.29.139.80 [VT] | unknown | - |
| Y | 104.29.143.154 [VT] | unknown | - |
| Y | 104.29.140.192 [VT] | unknown | - |
| Y | 104.29.141.87 [VT] | unknown | - |
| Y | 104.29.140.169 [VT] | unknown | - |
| Y | 104.29.140.203 [VT] | unknown | - |
| Y | 104.29.132.63 [VT] | unknown | - |
| Y | 104.29.132.10 [VT] | unknown | - |
| Y | 104.29.132.111 [VT] | unknown | - |
| Y | 104.29.136.160 [VT] | unknown | - |
| Y | 104.29.132.31 [VT] | unknown | - |
| Y | 104.29.142.11 [VT] | unknown | - |
| Y | 104.29.141.225 [VT] | unknown | - |
| Y | 104.29.146.22 [VT] | unknown | - |
| Y | 104.29.141.192 [VT] | unknown | - |
| Y | 104.29.142.56 [VT] | unknown | - |
| Y | 104.29.149.139 [VT] | unknown | - |
| Y | 104.29.149.147 [VT] | unknown | - |
| Y | 104.29.149.129 [VT] | unknown | - |
| Y | 104.29.149.149 [VT] | unknown | - |
| Y | 104.29.149.140 [VT] | unknown | - |
| N | 162.159.137.234 [VT] | unknown | - |
| Y | 204.79.197.203 [VT] | unknown | - |
| Y | 150.171.28.12 [VT] | unknown | - |
| Y | 149.135.84.50 [VT] | unknown | - |
| Y | 18.155.216.46 [VT] | unknown | - |
| Y | 104.18.33.89 [VT] | unknown | - |
| Y | 150.171.109.24 [VT] | unknown | - |
| Y | 150.171.28.10 [VT] | unknown | - |
| Y | 104.115.81.106 [VT] | unknown | - |
| Y | 216.239.38.223 [VT] | unknown | - |
| Y | 104.115.81.75 [VT] | unknown | - |
| Y | 142.250.183.38 [VT] | unknown | - |
| Y | 142.250.195.130 [VT] | unknown | - |
| Y | 23.211.129.205 [VT] | unknown | - |
| Y | 142.251.42.118 [VT] | unknown | - |
| N | 142.250.195.110 [VT] | unknown | - |
| Y | 172.217.25.200 [VT] | unknown | - |
| N | 216.239.34.157 [VT] | unknown | - |
| Y | 142.250.195.226 [VT] | unknown | - |
| Y | 142.251.42.99 [VT] | unknown | - |
| Y | 34.110.196.231 [VT] | unknown | - |
| N | 142.250.183.46 [VT] | unknown | - |
| N | 142.250.195.131 [VT] | unknown | - |
| N | 172.217.25.206 [VT] | unknown | - |
| N | 172.217.194.188 [VT] | unknown | - |
| N | 104.115.81.136 [VT] | unknown | - |
| N | 142.251.10.84 [VT] | unknown | - |
| Y | 146.75.119.82 [VT] | unknown | - |
| N | 199.232.211.52 [VT] | unknown | - |
| N | 23.209.183.106 [VT] | unknown | - |
| N | 162.254.194.56 [VT] | unknown | - |
| Y | 162.254.195.69 [VT] | unknown | - |
| Y | 162.254.195.75 [VT] | unknown | - |
| Y | 103.10.125.22 [VT] | unknown | - |
| N | 23.216.106.59 [VT] | unknown | - |
| N | 162.159.128.235 [VT] | unknown | - |
| N | 162.159.136.232 [VT] | unknown | - |
| N | 162.159.135.233 [VT] | unknown | - |
| N | 162.159.137.232 [VT] | unknown | - |
| N | 162.159.134.234 [VT] | unknown | - |
| N | 162.159.135.234 [VT] | unknown | - |
| N | 162.159.133.233 [VT] | unknown | - |
| N | 142.250.195.227 [VT] | unknown | - |
| Y | 40.126.14.161 [VT] | unknown | - |
| Y | 104.115.81.8 [VT] | unknown | - |
| Y | 172.172.255.218 [VT] | unknown | - |
| N | 23.221.49.17 [VT] | unknown | - |
| N | 199.232.215.52 [VT] | unknown | - |
| Y | 103.10.125.23 [VT] | unknown | - |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| api.steampowered.com [VT] | A 23.216.106.59 [VT] | 23.216.106.59 [VT] |
| ipv6check-udp.steamserver.net [VT] |
CNAME udp.ipv6check.akadns.net
[VT]
AAAA 2404:3fc0:1:102::670a:7d36 [VT] AAAA 2404:3fc0:1:102::670a:7d37 [VT] AAAA 2404:3fc0:1:100::670a:7d06 [VT] AAAA 2404:3fc0:1:100::42 [VT] AAAA 2404:3fc0:1:102::670a:7d38 [VT] CNAME syd.udp.ipv6check.akadns.net [VT] AAAA 2404:3fc0:1:100::670a:7d08 [VT] AAAA 2404:3fc0:1:102::670a:7d35 [VT] AAAA 2404:3fc0:1:100::32 [VT] |
|
| ipv6check-http.steamserver.net [VT] |
CNAME http.ipv6check.akadns.net
[VT]
CNAME syd.http.ipv6check.akadns.net [VT] |
|
| steamconnecttest.com [VT] |
A 23.221.49.17
[VT]
A 23.221.49.11 [VT] |
23.45.168.91 [VT] |
| c.pki.goog [VT] |
A 142.250.195.227
[VT]
CNAME pki-goog.l.google.com [VT] |
142.250.195.163 [VT] |
| discordapp.com [VT] |
A 162.159.135.233
[VT]
A 162.159.134.233 [VT] A 162.159.133.233 [VT] A 162.159.129.233 [VT] A 162.159.130.233 [VT] |
162.159.135.233 [VT] |
| gateway-us-east1-c.discord.gg [VT] |
A 162.159.130.234
[VT]
A 162.159.134.234 [VT] A 162.159.135.234 [VT] A 162.159.133.234 [VT] A 162.159.136.234 [VT] |
162.159.135.234 [VT] |
| status.discord.com [VT] |
A 162.159.128.233
[VT]
A 162.159.138.232 [VT] A 162.159.137.232 [VT] A 162.159.135.232 [VT] A 162.159.136.232 [VT] |
162.159.136.232 [VT] |
| cdn.discordapp.com [VT] | 162.159.129.233 [VT] | |
| updates.discord.com [VT] | 162.159.137.232 [VT] | |
| google.com [VT] |
A 142.250.195.238
[VT]
A 142.251.222.238 [VT] |
142.250.195.142 [VT] |
| dns.google [VT] |
A 8.8.4.4
[VT]
A 8.8.8.8 [VT] |
8.8.8.8 [VT] |
| cmp1-dfw2.steamserver.net [VT] | A 162.254.194.56 [VT] | 162.254.194.56 [VT] |
| p2p-syd1.discovery.steamserver.net [VT] |
A 103.10.125.24
[VT]
A 103.10.125.42 [VT] |
103.10.125.24 [VT] |
| clientconfig.akamai.steamstatic.com [VT] |
A 23.209.183.106
[VT]
A 23.209.183.176 [VT] |
23.211.125.112 [VT] |
| shared.steamstatic.com [VT] |
A 199.232.215.52
[VT]
A 199.232.211.52 [VT] CNAME shared.valve.map.fastly.net [VT] |
199.232.211.52 [VT] |
| accounts.google.com [VT] | A 142.251.10.84 [VT] | 74.125.68.84 [VT] |
| easylist-downloads.adblockplus.org [VT] |
A 104.115.81.144
[VT]
CNAME production-filterlist-delivery.easylist-downloads.adblockplus.org.edgesuite.net [VT] CNAME a1446.dscr.akamai.net [VT] A 104.115.81.136 [VT] |
23.219.86.131 [VT] |
| mtalk.google.com [VT] |
A 172.217.194.188
[VT]
CNAME mobile-gtalk.l.google.com [VT] |
172.253.158.188 [VT] |
| android.clients.google.com [VT] |
CNAME android.l.google.com
[VT]
A 142.251.222.14 [VT] A 142.250.195.174 [VT] A 142.250.195.110 [VT] A 142.250.183.46 [VT] A 172.217.25.206 [VT] A 142.251.42.110 [VT] A 142.250.207.14 [VT] A 142.250.195.142 [VT] A 172.217.25.174 [VT] |
142.250.195.142 [VT] |
| www.gstatic.com [VT] | A 142.250.195.131 [VT] | 142.250.195.131 [VT] |
| play.google.com [VT] | 142.250.195.142 [VT] | |
| tunnel.googlezip.net [VT] | A 216.239.34.157 [VT] | 216.239.34.157 [VT] |
| latency.discord.media [VT] |
A 162.159.130.235
[VT]
A 162.159.129.235 [VT] A 162.159.138.234 [VT] A 162.159.137.234 [VT] A 162.159.128.235 [VT] |
162.159.137.234 [VT] |
| disabled.invalid [VT] | NXDOMAIN |
No results found.
No behavioral analysis data available.
No dropped files found.
No CAPE payloads found.