Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    49s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    09/07/2020, 18:31

General

  • Target

    2370A6234D8A97737A93039E6129746750191DEC4B6F7015A61DB9A3AAA131C8.exe

  • Size

    3.6MB

  • MD5

    6a594f559bff2fa3ff115c0dc83336e5

  • SHA1

    d3c4f8223888e5c09397ed08ee701231ebdb1355

  • SHA256

    2370a6234d8a97737a93039e6129746750191dec4b6f7015a61db9a3aaa131c8

  • SHA512

    4c9093710174b0dcfd766fae20fb7ccf29aae6860ba34997cba07dab55b191253c3b762ab4f6a14c76be8c3a37f00bc995add3da0e087cd15714c76a16403d77

Score
7/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 98 IoCs
  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious use of WriteProcessMemory 3 IoCs
  • js 2 IoCs
  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2370A6234D8A97737A93039E6129746750191DEC4B6F7015A61DB9A3AAA131C8.exe
    "C:\Users\Admin\AppData\Local\Temp\2370A6234D8A97737A93039E6129746750191DEC4B6F7015A61DB9A3AAA131C8.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    • Enumerates system info in registry
    • Checks processor information in registry
    PID:992
    • C:\Users\Admin\AppData\Local\Temp\2370A6234D8A97737A93039E6129746750191DEC4B6F7015A61DB9A3AAA131C8.exe
      "C:\Users\Admin\AppData\Local\Temp\2370A6234D8A97737A93039E6129746750191DEC4B6F7015A61DB9A3AAA131C8.exe" /_ShowProgress /mnl
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:3792
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4020

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/992-0-0x00000000029C0000-0x0000000002CD7000-memory.dmp

      Filesize

      3.1MB

    • memory/992-1-0x00000000029C0000-0x0000000002CD7000-memory.dmp

      Filesize

      3.1MB

    • memory/992-2-0x0000000003CF0000-0x00000000042B2000-memory.dmp

      Filesize

      5.8MB

    • memory/992-5-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/992-6-0x0000000005E20000-0x0000000005E21000-memory.dmp

      Filesize

      4KB

    • memory/992-7-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-8-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/992-9-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/992-89-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-134-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-148-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/992-195-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/992-216-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-228-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/992-298-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-352-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-354-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-353-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-355-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-356-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-357-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-358-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-359-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-360-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-361-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-362-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-363-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-364-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-365-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-366-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-367-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-368-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-369-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-370-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-371-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-372-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-373-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-374-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-375-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-376-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-377-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-378-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-379-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-380-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-381-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-382-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-383-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-384-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-385-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-386-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-387-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-389-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-388-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-391-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-390-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-392-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-393-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-394-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-395-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-396-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-397-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-398-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-400-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-399-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-401-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-402-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-403-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-404-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-405-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-406-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-407-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-408-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-409-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-410-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-411-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-412-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-414-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-413-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-415-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-416-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-417-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-418-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-419-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-421-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-422-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-423-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-424-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-425-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-426-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-427-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-428-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-429-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-430-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-431-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-432-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-433-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-434-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-435-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-436-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-437-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-438-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-439-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-440-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-441-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-442-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-443-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-444-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-445-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-446-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-447-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-448-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-449-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-450-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-451-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-452-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-453-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-454-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-455-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-456-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-457-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-458-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-459-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-460-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-461-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-462-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-463-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-464-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-465-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-466-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-467-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-468-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-469-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-470-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-471-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-472-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-473-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-475-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-474-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-476-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-477-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-478-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-479-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-480-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-481-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-482-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-483-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-484-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-485-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-486-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-487-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-488-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-490-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-489-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-491-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-492-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-493-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-494-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-496-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-495-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-497-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-498-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-499-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-500-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-501-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-502-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-503-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-505-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-504-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-506-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-507-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-509-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-508-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-511-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-510-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-512-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-513-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-514-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-516-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-515-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-517-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-518-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-519-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-521-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-520-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-522-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-523-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-524-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-525-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-526-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-527-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-528-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-529-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-530-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-531-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-532-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-533-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-534-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-535-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-536-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-537-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-538-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-539-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-540-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-541-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-542-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-543-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-544-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-545-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-546-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-547-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-548-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-549-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-550-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-551-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-552-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-553-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-554-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-555-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-556-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-557-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-558-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-559-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-560-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-561-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-562-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-563-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-564-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-565-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-567-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-566-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-568-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-569-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-570-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-571-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-573-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-572-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-574-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-575-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-576-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-577-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-578-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-579-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-580-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-581-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-582-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-583-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-584-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-585-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-586-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-587-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-588-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-589-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-590-0x0000000004900000-0x0000000004910000-memory.dmp

      Filesize

      64KB

    • memory/992-593-0x0000000005620000-0x0000000005621000-memory.dmp

      Filesize

      4KB

    • memory/3792-597-0x0000000002A70000-0x0000000002D87000-memory.dmp

      Filesize

      3.1MB

    • memory/3792-598-0x0000000002A70000-0x0000000002D87000-memory.dmp

      Filesize

      3.1MB

    • memory/3792-599-0x0000000003DA0000-0x0000000004362000-memory.dmp

      Filesize

      5.8MB