Analysis

  • max time kernel
    23s
  • max time network
    33s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-es
  • resource tags

    arch:x64arch:x86image:win10-20230220-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    18-06-2023 23:52

General

  • Target

    Setup_DriverDoc_2022.exe

  • Size

    6.0MB

  • MD5

    c65a354ac28f2f45c7ca8a38e4f778d6

  • SHA1

    42d84f6be5cfa1503dc7bd8275073872d71a4fc0

  • SHA256

    396cb9e17c57f09c4afab97f91e72011e3f115b15e764c39d26473d92fe2c45e

  • SHA512

    7acba2651fb1378a97c47ce6723808235ddd74d2cb736f5fb6f28a241f3b33188e9a511c6be2eb3ca8e7cad68c05a76a0c853edc5a417a16aacd5c0388950017

  • SSDEEP

    98304:KSi1jH0UJukUYMwioEgGU9KM+ZFNIO05p0oO2gz8+fyTx:MUvkUMiij9KM+7Npc0R4+KTx

Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Kills process with taskkill 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup_DriverDoc_2022.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup_DriverDoc_2022.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4328
    • C:\Users\Admin\AppData\Local\Temp\is-AVD5P.tmp\Setup_DriverDoc_2022.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-AVD5P.tmp\Setup_DriverDoc_2022.tmp" /SL5="$80064,5347251,879104,C:\Users\Admin\AppData\Local\Temp\Setup_DriverDoc_2022.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1952
      • C:\Windows\SysWOW64\taskkill.exe
        "C:\Windows\System32\taskkill.exe" /f /im "DriverDoc.exe"
        3⤵
        • Kills process with taskkill
        • Suspicious use of AdjustPrivilegeToken
        PID:3228
      • C:\Windows\SysWOW64\taskkill.exe
        "C:\Windows\System32\taskkill.exe" /f /im "DriverPro.exe"
        3⤵
        • Kills process with taskkill
        • Suspicious use of AdjustPrivilegeToken
        PID:3536
      • C:\Windows\SysWOW64\taskkill.exe
        "C:\Windows\System32\taskkill.exe" /f /im "DOCSchedule.exe"
        3⤵
        • Kills process with taskkill
        • Suspicious use of AdjustPrivilegeToken
        PID:2312
      • C:\Windows\SysWOW64\taskkill.exe
        "C:\Windows\System32\taskkill.exe" /f /im "DOCTray.exe"
        3⤵
        • Kills process with taskkill
        • Suspicious use of AdjustPrivilegeToken
        PID:4744
      • C:\Program Files (x86)\DriverDoc\DriverDoc.exe
        "C:\Program Files (x86)\DriverDoc\DriverDoc.exe" /INSTALL
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:504
      • C:\Program Files (x86)\DriverDoc\DriverDoc.exe
        "C:\Program Files (x86)\DriverDoc\DriverDoc.exe" /START /INSTALLED
        3⤵
          PID:1768
          • C:\Windows\SysWOW64\schtasks.exe
            "C:\Windows\System32\schtasks.exe" /Delete /TN "DriverDoc Schedule" /F
            4⤵
              PID:3508
            • C:\Windows\SysWOW64\schtasks.exe
              "C:\Windows\System32\schtasks.exe" /Delete /TN "DriverDoc Monitoring" /F
              4⤵
                PID:436
            • C:\Program Files (x86)\DriverDoc\Extra\DriverPro.exe
              "C:\Program Files (x86)\DriverDoc\Extra\DriverPro.exe"
              3⤵
                PID:2152
          • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
            "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
            1⤵
              PID:3832
            • C:\Windows\system32\browser_broker.exe
              C:\Windows\system32\browser_broker.exe -Embedding
              1⤵
                PID:1976

              Network

              MITRE ATT&CK Enterprise v6

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • C:\Program Files (x86)\DriverDoc\DriverDoc.exe

                Filesize

                6.9MB

                MD5

                593731ec5ad57f5556ba30fbfab0d715

                SHA1

                f1134e4ee01c4a38888193130ea5255f6a782685

                SHA256

                5a5c40820ef02808d9d3759d915d8f8ff52dc6a3fc2590584f4c36a9ad3c1de4

                SHA512

                8d28fcbe6f9b044648c730a189dc860e6fd6330fed4c60feb973b8f296358b83a1977ebe57fcfb22837cffd7a649d0f2d963b77982436e38b344d613c2b3df1f

              • C:\Program Files (x86)\DriverDoc\DriverDoc.exe

                Filesize

                6.9MB

                MD5

                593731ec5ad57f5556ba30fbfab0d715

                SHA1

                f1134e4ee01c4a38888193130ea5255f6a782685

                SHA256

                5a5c40820ef02808d9d3759d915d8f8ff52dc6a3fc2590584f4c36a9ad3c1de4

                SHA512

                8d28fcbe6f9b044648c730a189dc860e6fd6330fed4c60feb973b8f296358b83a1977ebe57fcfb22837cffd7a649d0f2d963b77982436e38b344d613c2b3df1f

              • C:\Program Files (x86)\DriverDoc\DriverDoc.exe

                Filesize

                6.9MB

                MD5

                593731ec5ad57f5556ba30fbfab0d715

                SHA1

                f1134e4ee01c4a38888193130ea5255f6a782685

                SHA256

                5a5c40820ef02808d9d3759d915d8f8ff52dc6a3fc2590584f4c36a9ad3c1de4

                SHA512

                8d28fcbe6f9b044648c730a189dc860e6fd6330fed4c60feb973b8f296358b83a1977ebe57fcfb22837cffd7a649d0f2d963b77982436e38b344d613c2b3df1f

              • C:\Program Files (x86)\DriverDoc\DriverDoc.exe

                Filesize

                6.9MB

                MD5

                593731ec5ad57f5556ba30fbfab0d715

                SHA1

                f1134e4ee01c4a38888193130ea5255f6a782685

                SHA256

                5a5c40820ef02808d9d3759d915d8f8ff52dc6a3fc2590584f4c36a9ad3c1de4

                SHA512

                8d28fcbe6f9b044648c730a189dc860e6fd6330fed4c60feb973b8f296358b83a1977ebe57fcfb22837cffd7a649d0f2d963b77982436e38b344d613c2b3df1f

              • C:\Program Files (x86)\DriverDoc\Extra\Brazilian.ini

                Filesize

                12KB

                MD5

                b24c70f0951a902d62e97321ee12be9d

                SHA1

                759555b579c811eaa2bc123edbf49fa6fdc0ab72

                SHA256

                226b01c08d3cd2f0099c6138d97e4ec3096207e220d0203400c9dbeabdf1a446

                SHA512

                b521e94e80d4d97ce6bbc76e954ed3cacfe06fbe9408e8228a442e71c1672218033ba10191083a8dec90e8f5eed475b59c8ad9112c4648099bd1c51778260ee0

              • C:\Program Files (x86)\DriverDoc\Extra\Danish.ini

                Filesize

                12KB

                MD5

                c4e19798b19173eca54cc2f615a0b99e

                SHA1

                6638701c7b4991227e1f883414bcd1315b7b0864

                SHA256

                01539234b53ddc8ac82665ea18daeadd1edd2b4b918b21fa72f3848b6639a301

                SHA512

                4c976fc3282531d5ad32f5ec1f436378cf73f068c650c578e54b25cbe2911a4709bd14c46ebc74ef395afb771e8f8d9f28798b204d5f2a89589f8119ea7c8d20

              • C:\Program Files (x86)\DriverDoc\Extra\DriverPro.exe

                Filesize

                4.9MB

                MD5

                5a1d85fb3c9062304547475d6bd383ed

                SHA1

                dc8722d155277e841ea9404beabb1c012c7eefc0

                SHA256

                de9a6adbda9378230f1a4caff8c23d208a0d19114dcec00391869a83e129787f

                SHA512

                681b4341548c34e2b7dce6731ef7cd35a2271ef482984e4f706b44c07962ee4673d5b2596020c2d2dd1f92867e7001ea84549ac517032f25b3e899313c758e3f

              • C:\Program Files (x86)\DriverDoc\Extra\Dutch.ini

                Filesize

                12KB

                MD5

                cba424ebfd76fbab92e4c611ebbc6bdf

                SHA1

                9678ae22d9585dd12d692522c30aebc5b92a2249

                SHA256

                6951d18ba89c4875983cce91305f802f0f690675d76fd14fa0cb0f792b0aaea3

                SHA512

                22967f3bdd097fa5ffa06945a69d5d39c26b9bd21892a19e9efa234b24349fed7d7e62187506c8d18475055041af15e9b3a877f56ac7eae29478253bc31cc8dc

              • C:\Program Files (x86)\DriverDoc\Extra\English.ini

                Filesize

                11KB

                MD5

                2e509dd5f4217be553fbe379a0a90c23

                SHA1

                9dd8f007d11ad0f4cf30cbc555bb3cf36d4c2a02

                SHA256

                a1e376b66a11846fd448708b81a894d279032d0247bd5c0f79f606c945397162

                SHA512

                6c11872669e593d77dbcefc4a5bd5257c49329bfa8a5260fcb743855d5e7dcfeaf48a69bbe16b81057b049957fca263c7efca630a257fc5813edb687467063cf

              • C:\Program Files (x86)\DriverDoc\Extra\Finnish.ini

                Filesize

                12KB

                MD5

                d140f9ae6ca875d2f8bcec576bb2c203

                SHA1

                871cc1e85dde0d2b4bdab5566defbe8483348fcf

                SHA256

                39fca6cb75735a2bc2abe2b35ca94cde8da856955de641c165c7e1e1f8b5b516

                SHA512

                5815e0d2e5f9242f587d6d79679232c32a9279b25fde308763f210a4cf365430e76d259b714de0aed9904277b586380fbb04a057dd66ae143cca0eef1329362c

              • C:\Program Files (x86)\DriverDoc\Extra\French.ini

                Filesize

                13KB

                MD5

                637686253a68504cc01fe055a25346f7

                SHA1

                59e36e5a2e71887acb4eac090e1cdb8d240379b1

                SHA256

                f008522a75e279cdb23489e24b4835ce6516cf2a669df705c072b23f311b7a3a

                SHA512

                16377b987a8ede42a379a39b641cf3a6c2dc11c454e9cc460808ab3dc8dab5c5782de26923ce524eaeaa5d389bfce5ba46561791424a65b08de2a69b71652fda

              • C:\Program Files (x86)\DriverDoc\Extra\German.ini

                Filesize

                13KB

                MD5

                cae7b08264859d094eccbcd1686e4b58

                SHA1

                31e000b5f93a4af158e3211e9ef6ee24a43df6ed

                SHA256

                1cdef54fcbaf02d46fb31cee5738e2e1f9d5bcd89b58f49ef98c011329266e69

                SHA512

                31646eba2f4e4d312fafe191608c5fa963c4ed1753cc55340314c9c6142424b36d819f67bd9218ad41c2627c8289c5764a752ebc449d3e8e43aa5ab833631771

              • C:\Program Files (x86)\DriverDoc\Extra\Italian.ini

                Filesize

                12KB

                MD5

                49c62ebd53b8d40b961ab63d16d1b18c

                SHA1

                b002185abcc6f84fb272445a3579cfe96972e19a

                SHA256

                9f47adfacf4d1855d0de2b806149084cf6051de2b6de09692fbf17a93b149343

                SHA512

                7895f99d82f95cb3f6c0f91a0c283472205f052c81e8321cd01ebae20d94813a9139262815a0d4258bd719e4cba63e5a2ae9457902f10244affaebed33e72d24

              • C:\Program Files (x86)\DriverDoc\Extra\Japanese.ini

                Filesize

                15KB

                MD5

                4cc34523cefbe42b62cf1839c0f54663

                SHA1

                fdaa0ad16c693906978f7e1364b1c850869354bf

                SHA256

                94c1b8fc0bda3ba585e92b4ed812421bc6dea4da29b2321b1286d27615571b79

                SHA512

                c0ffb819229709cc3bc340c859330da8c5c91763fb5ccccbaed073ed282150dbcefd329fbab440e88dafe30c39e8055be0009113a1400d9170a6701ba63b2824

              • C:\Program Files (x86)\DriverDoc\Extra\Norwegian.ini

                Filesize

                11KB

                MD5

                3285372c3ad0355bd7eec8488f40629d

                SHA1

                48288694c5a5724e8c56339d675666d8476741aa

                SHA256

                2c402fd6e6aab9d8ffc93ca29f07fc55420a598ed1368ec2ad381cb4808195f2

                SHA512

                ea6bd5c5274deb99c4c70f29f17e324649139b5b47cc054a52a2e3b3c4f0e4b1fd80cd105fd32d0b3ab29af115cc09ced4c7f8529bd651f7a6d265dd3d00acab

              • C:\Program Files (x86)\DriverDoc\Extra\Polish.ini

                Filesize

                13KB

                MD5

                92bfc521b92d8ac30cb6fdb31ee37fb2

                SHA1

                14f04856f4a3661007fabb846b83499ebc34cdf7

                SHA256

                357ac44df2a8fa996a78061bc67531b8dd5d2770a3a4aa7ed1aad3c5c52e4050

                SHA512

                4dfc21cdaa3c00e93008ad55061bbb02d31504cec26271cb040356a1e04408fa766b12425aea0e91adb230fe0d231466de4392f0b48c1477b9f083e795ab9b66

              • C:\Program Files (x86)\DriverDoc\Extra\Portuguese.ini

                Filesize

                12KB

                MD5

                d8bd59eb5dcd48a976d2ae97c2edb6a3

                SHA1

                a03eea088611d0acb75aa0d02f14b7c1e5a24e32

                SHA256

                2cb3920f6b44c3c0915c4b7e8f5f24b9c4e3ea0932e14c8c0742fafd07a992e2

                SHA512

                74fca4cd378009775c0eef179ee1e0961591e5ab0b3551dbb91e858edca9437bb1d99f581ced11752adee2c2d8b9c6dfc4329d9a0fdeb0385c09ba1012ba8109

              • C:\Program Files (x86)\DriverDoc\Extra\Russian.ini

                Filesize

                21KB

                MD5

                b4b289047fd327d99e5809234174736b

                SHA1

                c9f2e45efa8ce22720f2dc49bc85764dee49025d

                SHA256

                eb0f8c2bfd6f0d3744e16ddd7db56590e5c9a4f1960b4ea9c2240f691b2504e4

                SHA512

                dccac50a017bb1482e7657f5b166f0316336d049ef446ecc26b1a3cd38ca7e90cbb713bdac3b59414f8e2800fd0b25d25d3ccd4641993213052329e272b96f9a

              • C:\Program Files (x86)\DriverDoc\Extra\Settings.ini

                Filesize

                73B

                MD5

                4dfd24933bec370032a0fde1452d9b14

                SHA1

                f3c3bc92eabe67c9072a0a29968322adad9489c2

                SHA256

                035c7dd8eef04f652d7d7b6b28c27ddb0b867502d088c1cba12319b5718fb1b6

                SHA512

                85ccd0c6cf38ee620b0a4a2289c4161fcb01fcd3546e1cf3ebfe83a087133972661e8b3854db5643caaadded1fcb3d621141a8f39490866d21b53b947f42d97f

              • C:\Program Files (x86)\DriverDoc\Extra\Spanish.ini

                Filesize

                12KB

                MD5

                3eb3ce7cb9d27f10c18ba319882cc7ed

                SHA1

                7e09a5a88f46570f0d95d19602f38379ae01742e

                SHA256

                419ef75a40cc8d0ae3ae7767bc87f9c967b0068afa8bb03cd67b697c00f40cea

                SHA512

                5ec29890eaf47e4ea91dc948811bd1f9dc7dac27b8b116a620b634baf8e33ee605a6e815da04df45478c1460f4cca371ae469f7e4093e12184e24a3a934ef059

              • C:\Program Files (x86)\DriverDoc\Extra\Swedish.ini

                Filesize

                12KB

                MD5

                45b6b39f4009ef7a14dde07ceb42647a

                SHA1

                5372f2432e6a110ee2fff3b37e30a1443132f38f

                SHA256

                1388b135d43d916af79f2630308b7a28e010fb5e32205c70e796130c0828c7fb

                SHA512

                48936b2885b73c0c7841d237a78ad38b0c60f63cac5746e4da87342fbc3b234e7feb437e7456dcb5824c06d022e5351c237819231b3f0d013762c34a2c0844ec

              • C:\Program Files (x86)\DriverDoc\Extra\sqlite3.dll

                Filesize

                633KB

                MD5

                094c675f4e0bfb27c2e77457cbcd9cc7

                SHA1

                9026248bd7802de39282653b0f56d68edfef30a1

                SHA256

                d3dd110c4d330332a37f06268013e4595705981bc74e577f946485416651b83b

                SHA512

                f1730b831df2805e10d78dc984e6e877e437de57cd20488ebfe48f92db8ced1889c369e70d17aee5eb366aa2c7baa14d426cf6c30324b527fa303b1bfccfe0a7

              • C:\Program Files (x86)\DriverDoc\Spanish.ini

                Filesize

                60KB

                MD5

                a7b9c1ecf3a95ea708035e3e43eea7be

                SHA1

                6475c05f90a733b2c08e3ecad14094cc886911fd

                SHA256

                829a1c3af6ee00cbafdfc9f7729af4265a4ccf0a3a656b279a35f95633137032

                SHA512

                c1131fbbbb72623df483e566161c68380f6dcc343a0da9a0b2403175bbc5eae0cef6efb4c654ffadb2029b73ea66b1743bfd4bb1549df343fe03812a99d0fb9e

              • C:\Program Files (x86)\DriverDoc\sqlite3.dll

                Filesize

                633KB

                MD5

                094c675f4e0bfb27c2e77457cbcd9cc7

                SHA1

                9026248bd7802de39282653b0f56d68edfef30a1

                SHA256

                d3dd110c4d330332a37f06268013e4595705981bc74e577f946485416651b83b

                SHA512

                f1730b831df2805e10d78dc984e6e877e437de57cd20488ebfe48f92db8ced1889c369e70d17aee5eb366aa2c7baa14d426cf6c30324b527fa303b1bfccfe0a7

              • C:\Program Files (x86)\DriverDoc\sqlite3.dll

                Filesize

                633KB

                MD5

                094c675f4e0bfb27c2e77457cbcd9cc7

                SHA1

                9026248bd7802de39282653b0f56d68edfef30a1

                SHA256

                d3dd110c4d330332a37f06268013e4595705981bc74e577f946485416651b83b

                SHA512

                f1730b831df2805e10d78dc984e6e877e437de57cd20488ebfe48f92db8ced1889c369e70d17aee5eb366aa2c7baa14d426cf6c30324b527fa303b1bfccfe0a7

              • C:\Users\Admin\AppData\Local\Temp\is-AVD5P.tmp\Setup_DriverDoc_2022.tmp

                Filesize

                3.1MB

                MD5

                d70a98daf7a810ee18ce451ec673e399

                SHA1

                274dff37313f3fbdf82dfc4afd94582359b79fee

                SHA256

                9621346beee2a257b1966b6dc3f1f850d54ae0746bf1718d35c966649ac9b340

                SHA512

                a246aa8979a7bc1a8ae6d1c5ac637939e7ab3380484cb78a3fc98fe9ceccb51cb5d6dfe787ece6bb1420450741c0734a049849dac7242679b8660e71acf00e60

              • C:\Users\Admin\AppData\Local\Temp\is-AVD5P.tmp\Setup_DriverDoc_2022.tmp

                Filesize

                3.1MB

                MD5

                d70a98daf7a810ee18ce451ec673e399

                SHA1

                274dff37313f3fbdf82dfc4afd94582359b79fee

                SHA256

                9621346beee2a257b1966b6dc3f1f850d54ae0746bf1718d35c966649ac9b340

                SHA512

                a246aa8979a7bc1a8ae6d1c5ac637939e7ab3380484cb78a3fc98fe9ceccb51cb5d6dfe787ece6bb1420450741c0734a049849dac7242679b8660e71acf00e60

              • C:\Users\Admin\AppData\Roaming\DriverDoc\program.log

                Filesize

                2KB

                MD5

                23eae797815590e77fa25b7c57dcb069

                SHA1

                ba42e472fe986c5e139d2b513ed3827bb822f6fa

                SHA256

                ebc7bb75aa3c55c92f1968e8b876f73e483cea50154ff1a79ce948ba1217b16b

                SHA512

                2d0b40c6b8b63419280d6dc36ad27a5f1bfe3c98d070a344a82a46857de4dc8aed65b9404758a0b1c781d0b36ff964f42364b8a48e3941003b706d67466d02ab

              • \Program Files (x86)\DriverDoc\Extra\sqlite3.dll

                Filesize

                633KB

                MD5

                094c675f4e0bfb27c2e77457cbcd9cc7

                SHA1

                9026248bd7802de39282653b0f56d68edfef30a1

                SHA256

                d3dd110c4d330332a37f06268013e4595705981bc74e577f946485416651b83b

                SHA512

                f1730b831df2805e10d78dc984e6e877e437de57cd20488ebfe48f92db8ced1889c369e70d17aee5eb366aa2c7baa14d426cf6c30324b527fa303b1bfccfe0a7

              • \Program Files (x86)\DriverDoc\sqlite3.dll

                Filesize

                633KB

                MD5

                094c675f4e0bfb27c2e77457cbcd9cc7

                SHA1

                9026248bd7802de39282653b0f56d68edfef30a1

                SHA256

                d3dd110c4d330332a37f06268013e4595705981bc74e577f946485416651b83b

                SHA512

                f1730b831df2805e10d78dc984e6e877e437de57cd20488ebfe48f92db8ced1889c369e70d17aee5eb366aa2c7baa14d426cf6c30324b527fa303b1bfccfe0a7

              • \Program Files (x86)\DriverDoc\sqlite3.dll

                Filesize

                633KB

                MD5

                094c675f4e0bfb27c2e77457cbcd9cc7

                SHA1

                9026248bd7802de39282653b0f56d68edfef30a1

                SHA256

                d3dd110c4d330332a37f06268013e4595705981bc74e577f946485416651b83b

                SHA512

                f1730b831df2805e10d78dc984e6e877e437de57cd20488ebfe48f92db8ced1889c369e70d17aee5eb366aa2c7baa14d426cf6c30324b527fa303b1bfccfe0a7

              • memory/504-283-0x0000000060900000-0x0000000060993000-memory.dmp

                Filesize

                588KB

              • memory/504-282-0x00000000013A0000-0x0000000001A93000-memory.dmp

                Filesize

                6.9MB

              • memory/504-281-0x0000000001390000-0x0000000001391000-memory.dmp

                Filesize

                4KB

              • memory/1768-294-0x00000000011A0000-0x00000000011A1000-memory.dmp

                Filesize

                4KB

              • memory/1952-122-0x0000000000CE0000-0x0000000000CE1000-memory.dmp

                Filesize

                4KB

              • memory/1952-271-0x0000000000400000-0x000000000071E000-memory.dmp

                Filesize

                3.1MB

              • memory/1952-128-0x0000000000CE0000-0x0000000000CE1000-memory.dmp

                Filesize

                4KB

              • memory/1952-127-0x0000000000400000-0x000000000071E000-memory.dmp

                Filesize

                3.1MB

              • memory/1952-295-0x0000000000400000-0x000000000071E000-memory.dmp

                Filesize

                3.1MB

              • memory/2152-333-0x0000000060900000-0x0000000060993000-memory.dmp

                Filesize

                588KB

              • memory/2152-332-0x0000000000400000-0x00000000008F9000-memory.dmp

                Filesize

                5.0MB

              • memory/3832-337-0x0000020977A20000-0x0000020977A30000-memory.dmp

                Filesize

                64KB

              • memory/4328-117-0x0000000000400000-0x00000000004E4000-memory.dmp

                Filesize

                912KB

              • memory/4328-330-0x0000000000400000-0x00000000004E4000-memory.dmp

                Filesize

                912KB

              • memory/4328-126-0x0000000000400000-0x00000000004E4000-memory.dmp

                Filesize

                912KB