Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231127-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/12/2023, 16:09 UTC

General

  • Target

    SCPH-70004_BIOS_V12_PAL_200.rom1

  • Size

    512KB

  • MD5

    82dc50fa18e636850f557c4ea66c7bfd

  • SHA1

    cc44355ded232a2ba5309bb24d4cd55af08696b2

  • SHA256

    b86fbccaa111ca7497630337dafea7da7320fc4f924ada22b92145ef806e7b42

  • SHA512

    ec1dc6cf74dfc34f01fbbcc2e0f11bb32d7a52101f8ebbd4ca10268165fe2639efa98e018f0a6ae58f74a491461ab301b9dbf9213687731cc2fb4dcb1e22317b

  • SSDEEP

    6144:DBFsXCSZ3B4YEXxyCpmDqoPYmMsHw1SiXWIXjxqJ4Li:1Sf3ounMsMjq4O

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\SCPH-70004_BIOS_V12_PAL_200.rom1
    1⤵
    • Modifies registry class
    PID:4800
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1040
  • C:\Windows\system32\rundll32.exe
    "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
    1⤵
      PID:3016
    • C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe -k UnistackSvcGroup
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3764

    Network

    • flag-us
      DNS
      14.160.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.160.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      208.194.73.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      208.194.73.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      9.228.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      9.228.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      g.bing.com
      Remote address:
      8.8.8.8:53
      Request
      g.bing.com
      IN A
      Response
      g.bing.com
      IN CNAME
      g-bing-com.a-0001.a-msedge.net
      g-bing-com.a-0001.a-msedge.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      GET
      https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=
      Remote address:
      204.79.197.200:443
      Request
      GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid= HTTP/2.0
      host: g.bing.com
      accept-encoding: gzip, deflate
      user-agent: WindowsShellClient/9.0.40929.0 (Windows)
      Response
      HTTP/2.0 204
      cache-control: no-cache, must-revalidate
      pragma: no-cache
      expires: Fri, 01 Jan 1990 00:00:00 GMT
      set-cookie: MUID=06F18B99BC716AB1188C9879BD266BFB; domain=.bing.com; expires=Tue, 31-Dec-2024 16:09:47 GMT; path=/; SameSite=None; Secure; Priority=High;
      strict-transport-security: max-age=31536000; includeSubDomains; preload
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 60D35A6B96674F2AA8F05DFF15A566E3 Ref B: AMS04EDGE1122 Ref C: 2023-12-07T16:09:47Z
      date: Thu, 07 Dec 2023 16:09:47 GMT
    • flag-us
      GET
      https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=
      Remote address:
      204.79.197.200:443
      Request
      GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid= HTTP/2.0
      host: g.bing.com
      accept-encoding: gzip, deflate
      user-agent: WindowsShellClient/9.0.40929.0 (Windows)
      cookie: MUID=06F18B99BC716AB1188C9879BD266BFB
      Response
      HTTP/2.0 204
      cache-control: no-cache, must-revalidate
      pragma: no-cache
      expires: Fri, 01 Jan 1990 00:00:00 GMT
      strict-transport-security: max-age=31536000; includeSubDomains; preload
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 2553331A7E7C4031B17861694DDD937C Ref B: AMS04EDGE1122 Ref C: 2023-12-07T16:09:47Z
      date: Thu, 07 Dec 2023 16:09:47 GMT
    • flag-us
      GET
      https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=
      Remote address:
      204.79.197.200:443
      Request
      GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid= HTTP/2.0
      host: g.bing.com
      accept-encoding: gzip, deflate
      user-agent: WindowsShellClient/9.0.40929.0 (Windows)
      cookie: MUID=06F18B99BC716AB1188C9879BD266BFB
      Response
      HTTP/2.0 204
      cache-control: no-cache, must-revalidate
      pragma: no-cache
      expires: Fri, 01 Jan 1990 00:00:00 GMT
      strict-transport-security: max-age=31536000; includeSubDomains; preload
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 16A16F0A503A45F587DDD936ED340D95 Ref B: AMS04EDGE1122 Ref C: 2023-12-07T16:09:47Z
      date: Thu, 07 Dec 2023 16:09:47 GMT
    • flag-us
      DNS
      155.245.36.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      155.245.36.23.in-addr.arpa
      IN PTR
      Response
      155.245.36.23.in-addr.arpa
      IN PTR
      a23-36-245-155deploystaticakamaitechnologiescom
    • flag-us
      DNS
      200.197.79.204.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      200.197.79.204.in-addr.arpa
      IN PTR
      Response
      200.197.79.204.in-addr.arpa
      IN PTR
      a-0001a-msedgenet
    • flag-us
      DNS
      tse1.mm.bing.net
      Remote address:
      8.8.8.8:53
      Request
      tse1.mm.bing.net
      IN A
      Response
      tse1.mm.bing.net
      IN CNAME
      mm-mm.bing.net.trafficmanager.net
      mm-mm.bing.net.trafficmanager.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239317301205_1OM9XZCKYFXI34HLQ&pid=21.2&w=1920&h=1080&c=4
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239317301205_1OM9XZCKYFXI34HLQ&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 373081
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: DFFB7959284B46F4B7F2BB66FFE40448 Ref B: AMS04EDGE1322 Ref C: 2023-12-07T16:09:49Z
      date: Thu, 07 Dec 2023 16:09:49 GMT
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239317301614_1PEIP2AXZTPQ08R0S&pid=21.2&w=1080&h=1920&c=4
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239317301614_1PEIP2AXZTPQ08R0S&pid=21.2&w=1080&h=1920&c=4 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 350318
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 874D204EF5B340CEB4F7BE2840B46ED2 Ref B: AMS04EDGE1322 Ref C: 2023-12-07T16:09:49Z
      date: Thu, 07 Dec 2023 16:09:49 GMT
    • flag-us
      DNS
      50.23.12.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      50.23.12.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      56.126.166.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      56.126.166.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      135.1.85.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      135.1.85.104.in-addr.arpa
      IN PTR
      Response
      135.1.85.104.in-addr.arpa
      IN PTR
      a104-85-1-135deploystaticakamaitechnologiescom
    • flag-us
      DNS
      119.110.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      119.110.54.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      59.128.231.4.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      59.128.231.4.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      218.240.110.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      218.240.110.104.in-addr.arpa
      IN PTR
      Response
      218.240.110.104.in-addr.arpa
      IN PTR
      a104-110-240-218deploystaticakamaitechnologiescom
    • flag-us
      DNS
      232.194.19.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      232.194.19.2.in-addr.arpa
      IN PTR
      Response
      232.194.19.2.in-addr.arpa
      IN PTR
      a2-19-194-232deploystaticakamaitechnologiescom
    • flag-us
      DNS
      1.208.79.178.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      1.208.79.178.in-addr.arpa
      IN PTR
      Response
      1.208.79.178.in-addr.arpa
      IN PTR
      https-178-79-208-1amsllnwnet
    • flag-us
      DNS
      203.194.19.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      203.194.19.2.in-addr.arpa
      IN PTR
      Response
      203.194.19.2.in-addr.arpa
      IN PTR
      a2-19-194-203deploystaticakamaitechnologiescom
    • flag-us
      DNS
      19.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      19.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      8.179.89.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.179.89.13.in-addr.arpa
      IN PTR
      Response
    • 204.79.197.200:443
      https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=
      tls, http2
      1.9kB
      9.3kB
      22
      19

      HTTP Request

      GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=

      HTTP Response

      204

      HTTP Request

      GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=

      HTTP Response

      204

      HTTP Request

      GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=58d9538bcb46444fac73be0ceb394bdd&localId=w:952BB0C0-A72A-3B52-348D-33E02EF16565&deviceId=6896189399884861&anid=

      HTTP Response

      204
    • 204.79.197.200:443
      https://tse1.mm.bing.net/th?id=OADD2.10239317301614_1PEIP2AXZTPQ08R0S&pid=21.2&w=1080&h=1920&c=4
      tls, http2
      26.3kB
      756.4kB
      554
      550

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239317301205_1OM9XZCKYFXI34HLQ&pid=21.2&w=1920&h=1080&c=4

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239317301614_1PEIP2AXZTPQ08R0S&pid=21.2&w=1080&h=1920&c=4

      HTTP Response

      200

      HTTP Response

      200
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls, http2
      1.2kB
      8.3kB
      16
      14
    • 8.8.8.8:53
      14.160.190.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      14.160.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      208.194.73.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      208.194.73.20.in-addr.arpa

    • 8.8.8.8:53
      9.228.82.20.in-addr.arpa
      dns
      70 B
      156 B
      1
      1

      DNS Request

      9.228.82.20.in-addr.arpa

    • 8.8.8.8:53
      g.bing.com
      dns
      56 B
      158 B
      1
      1

      DNS Request

      g.bing.com

      DNS Response

      204.79.197.200
      13.107.21.200

    • 8.8.8.8:53
      155.245.36.23.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      155.245.36.23.in-addr.arpa

    • 8.8.8.8:53
      200.197.79.204.in-addr.arpa
      dns
      73 B
      106 B
      1
      1

      DNS Request

      200.197.79.204.in-addr.arpa

    • 8.8.8.8:53
      tse1.mm.bing.net
      dns
      62 B
      173 B
      1
      1

      DNS Request

      tse1.mm.bing.net

      DNS Response

      204.79.197.200
      13.107.21.200

    • 8.8.8.8:53
      50.23.12.20.in-addr.arpa
      dns
      70 B
      156 B
      1
      1

      DNS Request

      50.23.12.20.in-addr.arpa

    • 8.8.8.8:53
      56.126.166.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      56.126.166.20.in-addr.arpa

    • 8.8.8.8:53
      135.1.85.104.in-addr.arpa
      dns
      71 B
      135 B
      1
      1

      DNS Request

      135.1.85.104.in-addr.arpa

    • 8.8.8.8:53
      119.110.54.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      119.110.54.20.in-addr.arpa

    • 8.8.8.8:53
      59.128.231.4.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      59.128.231.4.in-addr.arpa

    • 8.8.8.8:53
      218.240.110.104.in-addr.arpa
      dns
      74 B
      141 B
      1
      1

      DNS Request

      218.240.110.104.in-addr.arpa

    • 8.8.8.8:53
      232.194.19.2.in-addr.arpa
      dns
      71 B
      135 B
      1
      1

      DNS Request

      232.194.19.2.in-addr.arpa

    • 8.8.8.8:53
      1.208.79.178.in-addr.arpa
      dns
      71 B
      116 B
      1
      1

      DNS Request

      1.208.79.178.in-addr.arpa

    • 8.8.8.8:53
      203.194.19.2.in-addr.arpa
      dns
      71 B
      135 B
      1
      1

      DNS Request

      203.194.19.2.in-addr.arpa

    • 8.8.8.8:53
      19.229.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      19.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      8.179.89.13.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      8.179.89.13.in-addr.arpa

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm

      Filesize

      16KB

      MD5

      045357d107af693312668dacf6429297

      SHA1

      6decf7ee134d72fa9af1c8389a76f5c84f92e6ad

      SHA256

      38cc10e7f27d8336c8c61f0d8cd26d63598380c3651a67a1ca3226dc430835bd

      SHA512

      1184c1968b718c775fe873166e6b87a66ac8e96744b1c7b5e13a78adc33ae2586ce31ff4a45487af0f168686f607e561f4d60add46bfc7466e4bd917289bbfa1

    • memory/3764-40-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-42-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-33-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-34-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-35-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-36-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-37-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-38-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-39-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-43-0x000001FCF5D50000-0x000001FCF5D51000-memory.dmp

      Filesize

      4KB

    • memory/3764-32-0x000001FCF7100000-0x000001FCF7101000-memory.dmp

      Filesize

      4KB

    • memory/3764-41-0x000001FCF7120000-0x000001FCF7121000-memory.dmp

      Filesize

      4KB

    • memory/3764-0-0x000001FCEDA40000-0x000001FCEDA50000-memory.dmp

      Filesize

      64KB

    • memory/3764-44-0x000001FCF5D40000-0x000001FCF5D41000-memory.dmp

      Filesize

      4KB

    • memory/3764-46-0x000001FCF5D50000-0x000001FCF5D51000-memory.dmp

      Filesize

      4KB

    • memory/3764-49-0x000001FCF5D40000-0x000001FCF5D41000-memory.dmp

      Filesize

      4KB

    • memory/3764-52-0x000001FCF5C80000-0x000001FCF5C81000-memory.dmp

      Filesize

      4KB

    • memory/3764-16-0x000001FCEDB40000-0x000001FCEDB50000-memory.dmp

      Filesize

      64KB

    • memory/3764-64-0x000001FCF5E80000-0x000001FCF5E81000-memory.dmp

      Filesize

      4KB

    • memory/3764-66-0x000001FCF5E90000-0x000001FCF5E91000-memory.dmp

      Filesize

      4KB

    • memory/3764-67-0x000001FCF5E90000-0x000001FCF5E91000-memory.dmp

      Filesize

      4KB

    • memory/3764-68-0x000001FCF5FA0000-0x000001FCF5FA1000-memory.dmp

      Filesize

      4KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.