3429c0a3a677d73c3014417855819a9d1145c0c171d01231371038f04cd49ba3

Analysis

max time kernel
145s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 06:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Guardian-3.5.0.exe
Size

9.3MB
MD5

73485384285e77255857472df8510220
SHA1

c32d3726eb9c5f456e5978ad979803732c50c167
SHA256

3429c0a3a677d73c3014417855819a9d1145c0c171d01231371038f04cd49ba3
SHA512

63ca91990aae81519cf74882ccbc13e1506ac5bcde4a1c7c487840701dc7200566fee0637dccbdb3ab8869f4372af8e70d2ef76a1430b0289d04b1dcd5f613b0
SSDEEP

196608:SjbXbm3AbT/9bcLz3S1bAXnOQTsYjucFh9cjcZvy3EdT:WLm3AbTlI3S1b2npduqh+oKQT

Score

7^/10

upx

Malware Config

Signatures

Loads dropped DLL 21 IoCs

pid	Process
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe
2296	Guardian-3.5.0.exe

UPX packed file 53 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x0006000000023182-69.dat	upx
behavioral1/memory/2296-72-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp	upx
behavioral1/files/0x000600000002314d-75.dat	upx
behavioral1/memory/2296-77-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp	upx
behavioral1/files/0x000600000002317f-78.dat	upx
behavioral1/memory/2296-80-0x00007FFBF7AE0000-0x00007FFBF7AEF000-memory.dmp	upx
behavioral1/files/0x0006000000023154-81.dat	upx
behavioral1/memory/2296-84-0x00007FFBF7820000-0x00007FFBF7839000-memory.dmp	upx
behavioral1/files/0x0006000000023183-83.dat	upx
behavioral1/memory/2296-86-0x00007FFBF7810000-0x00007FFBF781D000-memory.dmp	upx
behavioral1/files/0x000600000002314c-87.dat	upx
behavioral1/memory/2296-90-0x00007FFBF73B0000-0x00007FFBF73C9000-memory.dmp	upx
behavioral1/files/0x0006000000023150-89.dat	upx
behavioral1/memory/2296-92-0x00007FFBF6B50000-0x00007FFBF6B7D000-memory.dmp	upx
behavioral1/files/0x0006000000023155-93.dat	upx
behavioral1/files/0x000600000002317e-95.dat	upx
behavioral1/memory/2296-96-0x00007FFBF6B20000-0x00007FFBF6B4E000-memory.dmp	upx
behavioral1/files/0x0006000000023180-97.dat	upx
behavioral1/memory/2296-99-0x00007FFBE6FA0000-0x00007FFBE7058000-memory.dmp	upx
behavioral1/memory/2296-102-0x00007FFBE6C20000-0x00007FFBE6F98000-memory.dmp	upx
behavioral1/files/0x000600000002314b-104.dat	upx
behavioral1/memory/2296-107-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp	upx
behavioral1/memory/2296-108-0x00007FFBF4E20000-0x00007FFBF4E35000-memory.dmp	upx
behavioral1/files/0x0006000000023152-106.dat	upx
behavioral1/memory/2296-113-0x00007FFBEE2A0000-0x00007FFBEE2B2000-memory.dmp	upx
behavioral1/memory/2296-110-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp	upx
behavioral1/files/0x0006000000023153-111.dat	upx
behavioral1/memory/2296-114-0x00007FFBEDC50000-0x00007FFBEDC5D000-memory.dmp	upx
behavioral1/files/0x0006000000023185-115.dat	upx
behavioral1/memory/2296-117-0x00007FFBF7820000-0x00007FFBF7839000-memory.dmp	upx
behavioral1/memory/2296-118-0x00007FFBE6B00000-0x00007FFBE6C1C000-memory.dmp	upx
behavioral1/files/0x0006000000023151-119.dat	upx
behavioral1/memory/2296-122-0x00007FFBEDC40000-0x00007FFBEDC4D000-memory.dmp	upx
behavioral1/files/0x000600000002314f-121.dat	upx
behavioral1/memory/2296-124-0x00007FFBEDC20000-0x00007FFBEDC34000-memory.dmp	upx
behavioral1/files/0x000600000002317c-125.dat	upx
behavioral1/memory/2296-128-0x00007FFBF6B50000-0x00007FFBF6B7D000-memory.dmp	upx
behavioral1/memory/2296-129-0x00007FFBEDC10000-0x00007FFBEDC1B000-memory.dmp	upx
behavioral1/files/0x000600000002317d-127.dat	upx
behavioral1/memory/2296-131-0x00007FFBF6B20000-0x00007FFBF6B4E000-memory.dmp	upx
behavioral1/memory/2296-132-0x00007FFBE87F0000-0x00007FFBE8813000-memory.dmp	upx
behavioral1/memory/2296-134-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp	upx
behavioral1/memory/2296-135-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp	upx
behavioral1/memory/2296-141-0x00007FFBF6B20000-0x00007FFBF6B4E000-memory.dmp	upx
behavioral1/memory/2296-143-0x00007FFBE6C20000-0x00007FFBE6F98000-memory.dmp	upx
behavioral1/memory/2296-142-0x00007FFBE6FA0000-0x00007FFBE7058000-memory.dmp	upx
behavioral1/memory/2296-144-0x00007FFBF4E20000-0x00007FFBF4E35000-memory.dmp	upx
behavioral1/memory/2296-147-0x00007FFBE6B00000-0x00007FFBE6C1C000-memory.dmp	upx
behavioral1/memory/2296-152-0x00007FFBE6FA0000-0x00007FFBE7058000-memory.dmp	upx
behavioral1/memory/2296-153-0x00007FFBE6C20000-0x00007FFBE6F98000-memory.dmp	upx
behavioral1/memory/2296-156-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp	upx
behavioral1/memory/2296-175-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp	upx
behavioral1/memory/2296-176-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp	upx

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
42	api.ipify.org
43	api.ipify.org

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2712 wrote to memory of 2296	2712	Guardian-3.5.0.exe	92
PID 2712 wrote to memory of 2296	2712	Guardian-3.5.0.exe	92

C:\Users\Admin\AppData\Local\Temp\Guardian-3.5.0.exe
"C:\Users\Admin\AppData\Local\Temp\Guardian-3.5.0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2712
- C:\Users\Admin\AppData\Local\Temp\Guardian-3.5.0.exe
  "C:\Users\Admin\AppData\Local\Temp\Guardian-3.5.0.exe"
  2⤵
  - Loads dropped DLL
  PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI27122\VCRUNTIME140.dll

Filesize
106KB

MD5
4585a96cc4eef6aafd5e27ea09147dc6

SHA1
489cfff1b19abbec98fda26ac8958005e88dd0cb

SHA256
a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

SHA512
d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_asyncio.pyd

Filesize
36KB

MD5
d8ea889dd0e6d149b48e455207d058ab

SHA1
a2260643af8803ae10e0a886ec444d5a0e870a69

SHA256
367dec80ffa627219edc9eb681ab21ed1fdb24b372ad7691dd7d76fde65bc029

SHA512
39153493b945fddad178303e6752f0eb764347cedaf1b180f9af73527e33781130b4484b8100cf3246468a9a552bed3b52a788573e2d84818f84e86f5db03241

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_bz2.pyd

Filesize
48KB

MD5
2d461b41f6e9a305dde68e9c59e4110a

SHA1
97c2266f47a651e37a72c153116d81d93c7556e8

SHA256
abbe3933a34a9653a757244e8e55b0d7d3a108527a3e9e8a7f2013b5f2a9eff4

SHA512
eef132df6e52eb783bad3e6af0d57cb48cda2eb0edb6e282753b02d21970c1eea6bab03c835ff9f28f2d3e25f5e9e18f176a8c5680522c09da358a1c48cf14c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_ctypes.pyd

Filesize
58KB

MD5
1adfe4d0f4d68c9c539489b89717984d

SHA1
8ae31b831b3160f5b88dda58ad3959c7423f8eb2

SHA256
64e8fd952ccf5b8adca80ce8c7bc6c96ec7df381789256fe8d326f111f02e95c

SHA512
b403cc46e0874a75e3c0819784244ed6557eae19b0d76ffd86f56b3739db10ea8deec3dc1ca9e94c101263d0ccf506978443085a70c3ab0816885046b5ef5117

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_hashlib.pyd

Filesize
35KB

MD5
f10d896ed25751ead72d8b03e404ea36

SHA1
eb8e0fd6e2356f76b5ea0cb72ab37399ec9d8ecb

SHA256
3660b985ca47ca1bba07db01458b3153e4e692ee57a8b23ce22f1a5ca18707c3

SHA512
7f234e0d197ba48396fabd1fccc2f19e5d4ad922a2b3fe62920cd485e5065b66813b4b2a2477d2f7f911004e1bc6e5a6ec5e873d8ff81e642fee9e77b428fb42

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_lzma.pyd

Filesize
85KB

MD5
3798175fd77eded46a8af6b03c5e5f6d

SHA1
f637eaf42080dcc620642400571473a3fdf9174f

SHA256
3c9d5a9433b22538fc64141cd3784800c567c18e4379003329cf69a1d59b2a41

SHA512
1f7351c9e905265625d725551d8ea1de5d9999bc333d29e6510a5bca4e4d7c1472b2a637e892a485a7437ea4768329e5365b209dd39d7c1995fe3317dc5aecdf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_multiprocessing.pyd

Filesize
26KB

MD5
b6b3185a2c82bd93dfc03e837826997f

SHA1
4eed50c2a2c3e85e414d8414485a4aa244746d4e

SHA256
2313c1ba0887b185716c908b92b6391ca587f27d4e93228d7c9fc8f8ca21cefd

SHA512
24ef70f81a6b5f14492d201ddd57fe6c0ab99c7031ffdcf5daceb904f87bbe97732369abf90c58b38d4e1b367b7d732e7e24b4d3bc68d1f7c0e83f3d2fd7d49a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_overlapped.pyd

Filesize
32KB

MD5
e1339a750d518d9e3b8500817d8334fb

SHA1
23a2795e41153f782a23717872240ab3e4c8c9b1

SHA256
1e80734d2466925be480ccf198de76efd58393601cd3f0265850d18a629626e2

SHA512
07055de2b82824df7babf4e17cf5015cfec9d803f0f22a625ddf2ef99fcd64b0ec36cf01d6df49a56cd437795db3da2aab7a445c0333693ca38e0460682fbe42

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_queue.pyd

Filesize
25KB

MD5
decdabaca104520549b0f66c136a9dc1

SHA1
423e6f3100013e5a2c97e65e94834b1b18770a87

SHA256
9d4880f7d0129b1de95becd8ea8bbbf0c044d63e87764d18f9ec00d382e43f84

SHA512
d89ee3779bf7d446514fc712dafb3ebc09069e4f665529a7a1af6494f8955ceb040bef7d18f017bcc3b6fe7addeab104535655971be6eed38d0fc09ec2c37d88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_socket.pyd

Filesize
43KB

MD5
bcc3e26a18d59d76fd6cf7cd64e9e14d

SHA1
b85e4e7d300dbeec942cb44e4a38f2c6314d3166

SHA256
4e19f29266a3d6c127e5e8de01d2c9b68bc55075dd3d6aabe22cf0de4b946a98

SHA512
65026247806feab6e1e5bf2b29a439bdc1543977c1457f6d3ddfbb7684e04f11aba10d58cc5e7ea0c2f07c8eb3c9b1c8a3668d7854a9a6e4340e6d3e43543b74

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\_ssl.pyd

Filesize
62KB

MD5
2089768e25606262921e4424a590ff05

SHA1
bc94a8ff462547ab48c2fbf705673a1552545b76

SHA256
3e6e9fc56e1a9fe5edb39ee03e5d47fa0e3f6adb17be1f087dc6f891d3b0bbca

SHA512
371aa8e5c722307fff65e00968b14280ee5046cfcf4a1d9522450688d75a3b0362f2c9ec0ec117b2fc566664f2f52a1b47fe62f28466488163f9f0f1ce367f86

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\base_library.zip

Filesize
1.8MB

MD5
5327287d65cc9ab041ce96e93d3a6d53

SHA1
a57aa09afecf580c301f1a7702dbbb07327cf8a9

SHA256
73cdfcec488b39e14993fb32a233de4bc841a394092fcac1deb6ee41e24720ea

SHA512
68fc996b4809a762b8d44323a5d023ba8a39580039c748bc310da9878c94fe1685709ab959365ecb26a5ee1a82e65f2eb19344f1f03d4dff48eb87a403a57c20

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\certifi\cacert.pem

Filesize
275KB

MD5
78d9dd608305a97773574d1c0fb10b61

SHA1
9e177f31a3622ad71c3d403422c9a980e563fe32

SHA256
794d039ffdf277c047e26f2c7d58f81a5865d8a0eb7024a0fac1164fea4d27cf

SHA512
0c2d08747712ed227b4992f6f8f3cc21168627a79e81c6e860ee2b5f711af7f4387d3b71b390aa70a13661fc82806cc77af8ab1e8a8df82ad15e29e05fa911bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\charset_normalizer\md.cp311-win_amd64.pyd

Filesize
9KB

MD5
66a041a32ddaeb4180818f783d17f039

SHA1
caa458799b9648b78c645dc69dc1a5c80fd42139

SHA256
deb900b2aab13738073f803746e24453481c7ee6b7a699faa93280976b301faf

SHA512
0806070032eb245cdc8bdde8c64eff03c5430e9c46e72f39a2aca9726ad34fef2fdb394aa02072c3885034c6a3158ba500d07090372a4e7b6bc0228b756ef2fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\charset_normalizer\md__mypyc.cp311-win_amd64.pyd

Filesize
38KB

MD5
504be6f1b8621b48e2ed12184532132b

SHA1
5aa2382dd378bfe257b3881030c096dcf6a97d21

SHA256
7a2e9a1e22feaac28c9b8951fa4682055cd88b295f91c1065bf89e7702faf102

SHA512
003e8570122f07b783121c7551774604213e22797fef4dcf49117a6a9eb7e44e343b79f504c8473495a971a9390fbba0bd20f2e890db1b11228b298d386d3120

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\libcrypto-1_1.dll

Filesize
1.1MB

MD5
dffcab08f94e627de159e5b27326d2fc

SHA1
ab8954e9ae94ae76067e5a0b1df074bccc7c3b68

SHA256
135b115e77479eedd908d7a782e004ece6dd900bb1ca05cc1260d5dd6273ef15

SHA512
57e175a5883edb781cdb2286167d027fdb4b762f41fb1fc9bd26b5544096a9c5dda7bccbb6795dcc37ed5d8d03dc0a406bf1a59adb3aeb41714f1a7c8901a17d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\libffi-8.dll

Filesize
29KB

MD5
08b000c3d990bc018fcb91a1e175e06e

SHA1
bd0ce09bb3414d11c91316113c2becfff0862d0d

SHA256
135c772b42ba6353757a4d076ce03dbf792456143b42d25a62066da46144fece

SHA512
8820d297aeda5a5ebe1306e7664f7a95421751db60d71dc20da251bcdfdc73f3fd0b22546bd62e62d7aa44dfe702e4032fe78802fb16ee6c2583d65abc891cbf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\libssl-1_1.dll

Filesize
204KB

MD5
8e8a145e122a593af7d6cde06d2bb89f

SHA1
b0e7d78bb78108d407239e9f1b376e0c8c295175

SHA256
a6a14c1beccbd4128763e78c3ec588f747640297ffb3cc5604a9728e8ef246b1

SHA512
d104d81aca91c067f2d69fd8cec3f974d23fb5372a8f2752ad64391da3dbf5ffe36e2645a18a9a74b70b25462d73d9ea084318846b7646d39ce1d3e65a1c47c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\python311.dll

Filesize
1.6MB

MD5
5792adeab1e4414e0129ce7a228eb8b8

SHA1
e9f022e687b6d88d20ee96d9509f82e916b9ee8c

SHA256
7e1370058177d78a415b7ed113cc15472974440d84267fc44cdc5729535e3967

SHA512
c8298b5780a2a5eebed070ac296eda6902b0cac9fda7bb70e21f482d6693d6d2631ca1ac4be96b75ac0dd50c9ca35be5d0aca9c4586ba7e58021edccd482958b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\select.pyd

Filesize
25KB

MD5
90fea71c9828751e36c00168b9ba4b2b

SHA1
15b506df7d02612e3ba49f816757ad0c141e9dc1

SHA256
5bbbb4f0b4f9e5329ba1d518d6e8144b1f7d83e2d7eaf6c50eef6a304d78f37d

SHA512
e424be422bf0ef06e7f9ff21e844a84212bfa08d7f9fbd4490cbbcb6493cc38cc1223aaf8b7c9cd637323b81ee93600d107cc1c982a2288eb2a0f80e2ad1f3c5

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\ucrtbase.dll

Filesize
1.1MB

MD5
3b337c2d41069b0a1e43e30f891c3813

SHA1
ebee2827b5cb153cbbb51c9718da1549fa80fc5c

SHA256
c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7

SHA512
fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI27122\unicodedata.pyd

Filesize
295KB

MD5
c2556dc74aea61b0bd9bd15e9cd7b0d6

SHA1
05eff76e393bfb77958614ff08229b6b770a1750

SHA256
987a6d21ce961afeaaa40ba69859d4dd80d20b77c4ca6d2b928305a873d6796d

SHA512
f29841f262934c810dd1062151aefac78cd6a42d959a8b9ac832455c646645c07fd9220866b262de1bc501e1a9570591c0050d5d3607f1683437dea1ff04c32b

Download Submit
memory/2296-113-0x00007FFBEE2A0000-0x00007FFBEE2B2000-memory.dmp

Filesize
72KB

Download
memory/2296-129-0x00007FFBEDC10000-0x00007FFBEDC1B000-memory.dmp

Filesize
44KB

Download
memory/2296-102-0x00007FFBE6C20000-0x00007FFBE6F98000-memory.dmp

Filesize
3.5MB

Download
memory/2296-107-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp

Filesize
5.9MB

Download
memory/2296-108-0x00007FFBF4E20000-0x00007FFBF4E35000-memory.dmp

Filesize
84KB

Download
memory/2296-99-0x00007FFBE6FA0000-0x00007FFBE7058000-memory.dmp

Filesize
736KB

Download
memory/2296-96-0x00007FFBF6B20000-0x00007FFBF6B4E000-memory.dmp

Filesize
184KB

Download
memory/2296-110-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp

Filesize
140KB

Download
memory/2296-92-0x00007FFBF6B50000-0x00007FFBF6B7D000-memory.dmp

Filesize
180KB

Download
memory/2296-114-0x00007FFBEDC50000-0x00007FFBEDC5D000-memory.dmp

Filesize
52KB

Download
memory/2296-90-0x00007FFBF73B0000-0x00007FFBF73C9000-memory.dmp

Filesize
100KB

Download
memory/2296-117-0x00007FFBF7820000-0x00007FFBF7839000-memory.dmp

Filesize
100KB

Download
memory/2296-118-0x00007FFBE6B00000-0x00007FFBE6C1C000-memory.dmp

Filesize
1.1MB

Download
memory/2296-86-0x00007FFBF7810000-0x00007FFBF781D000-memory.dmp

Filesize
52KB

Download
memory/2296-122-0x00007FFBEDC40000-0x00007FFBEDC4D000-memory.dmp

Filesize
52KB

Download
memory/2296-84-0x00007FFBF7820000-0x00007FFBF7839000-memory.dmp

Filesize
100KB

Download
memory/2296-124-0x00007FFBEDC20000-0x00007FFBEDC34000-memory.dmp

Filesize
80KB

Download
memory/2296-80-0x00007FFBF7AE0000-0x00007FFBF7AEF000-memory.dmp

Filesize
60KB

Download
memory/2296-128-0x00007FFBF6B50000-0x00007FFBF6B7D000-memory.dmp

Filesize
180KB

Download
memory/2296-103-0x0000020DE9440000-0x0000020DE97B8000-memory.dmp

Filesize
3.5MB

Download
memory/2296-77-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp

Filesize
140KB

Download
memory/2296-131-0x00007FFBF6B20000-0x00007FFBF6B4E000-memory.dmp

Filesize
184KB

Download
memory/2296-132-0x00007FFBE87F0000-0x00007FFBE8813000-memory.dmp

Filesize
140KB

Download
memory/2296-72-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp

Filesize
5.9MB

Download
memory/2296-134-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp

Filesize
5.9MB

Download
memory/2296-135-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp

Filesize
140KB

Download
memory/2296-141-0x00007FFBF6B20000-0x00007FFBF6B4E000-memory.dmp

Filesize
184KB

Download
memory/2296-143-0x00007FFBE6C20000-0x00007FFBE6F98000-memory.dmp

Filesize
3.5MB

Download
memory/2296-142-0x00007FFBE6FA0000-0x00007FFBE7058000-memory.dmp

Filesize
736KB

Download
memory/2296-144-0x00007FFBF4E20000-0x00007FFBF4E35000-memory.dmp

Filesize
84KB

Download
memory/2296-147-0x00007FFBE6B00000-0x00007FFBE6C1C000-memory.dmp

Filesize
1.1MB

Download
memory/2296-152-0x00007FFBE6FA0000-0x00007FFBE7058000-memory.dmp

Filesize
736KB

Download
memory/2296-153-0x00007FFBE6C20000-0x00007FFBE6F98000-memory.dmp

Filesize
3.5MB

Download
memory/2296-155-0x0000020DE9440000-0x0000020DE97B8000-memory.dmp

Filesize
3.5MB

Download
memory/2296-156-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp

Filesize
5.9MB

Download
memory/2296-175-0x00007FFBE7390000-0x00007FFBE7979000-memory.dmp

Filesize
5.9MB

Download
memory/2296-176-0x00007FFBF7B60000-0x00007FFBF7B83000-memory.dmp

Filesize
140KB

Download