Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

7f2a197f45...31.exe

windows7-x64

7

7f2a197f45...31.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 06:44 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7f2a197f45fa04029ab8da23ea2a5931.exe

  • Size

    1.1MB

  • MD5

    7f2a197f45fa04029ab8da23ea2a5931

  • SHA1

    6ff1e7cc06beb6a703f5239b3dd4288ae00eb1b7

  • SHA256

    12b5ceacdbfe573ca70763838a3025f0460969204ffec34deb85e5d4a65ba5cb

  • SHA512

    0da39847f60647fbffd1523576a28f6b499dbbb70f99f089bfb48389dfc3ad70aa554633b3416abed37293716ca870d68287f96c94cd19db5f615dea9a928f4b

  • SSDEEP

    24576:D99fMLQ6gSy8Q7BiNL+VElHA1dHdQ0aKMrzws1Ztf3vG:59EUOQdiNiElHAbdoKUwsVf3vG

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7f2a197f45fa04029ab8da23ea2a5931.exe
    "C:\Users\Admin\AppData\Local\Temp\7f2a197f45fa04029ab8da23ea2a5931.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\starter.exe
      "C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\starter.exe" bgAPg0ONV5jgVSdenMBG 962
      2⤵
      • Executes dropped EXE
      PID:2004
    • C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\ArcadeYum.exe
      "C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\ArcadeYum.exe" IC9UaWNrZXQ9YmdBUGcwT05WNWpnVlNkZW5NQkcgL0J1bmRsZXM9MTYzfDE0NXwxMzR8MTYyIC9PYmVyb249MjAgL0Jyb3dzZXI9MSAvQWRMb2M9OTYyIC90cGQ9aHR0cDovL2QxLmFyY2FkZXl1bS5jb20vYWovYnVuZGxlLzk2Mi8/cD1ZVEkwTmpjMU5qZzVNVEY0M0hjODFwdGh1U0J6VGhZYyUyQlRJTWJSZEpTRjdmc1dPS0RFbWpaenIzcXNaSUROOXR0UUM5UWdQRG5pb3pPeEV5Mm5maU8yWDFhT2Z2aHpvUDBGSzMgL29wdGltaXplR0M9MCAvdXNlck5hbWU9QWRtaW4gL3VzZXJTSUQ9Uy0xLTUtMjEtMzgxODA1NjUzMC05MzY2MTk2NTAtMzU1NDAyMTk1NS0xMDAwCg==
      2⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

  • flag-us
    DNS
    fagamesframework.com
    ArcadeYum.exe
    Remote address:
    8.8.8.8:53
    Request
    fagamesframework.com
    IN A
    Response
  • flag-us
    DNS
    d1.arcadeyum.com
    ArcadeYum.exe
    Remote address:
    8.8.8.8:53
    Request
    d1.arcadeyum.com
    IN A
    Response
    d1.arcadeyum.com
    IN A
    172.67.137.213
    d1.arcadeyum.com
    IN A
    104.21.86.236
  • flag-us
    GET
    http://d1.arcadeyum.com/aj/bundle/962/?p=YTI0Njc1Njg5MTF43Hc81pthuSBzThYc%2BTIMbRdJSF7fsWOKDEmjZzr3qsZIDN9ttQC9QgPDniozOxEy2nfiO2X1aOfvhzoP0FK3
    ArcadeYum.exe
    Remote address:
    172.67.137.213:80
    Request
    GET /aj/bundle/962/?p=YTI0Njc1Njg5MTF43Hc81pthuSBzThYc%2BTIMbRdJSF7fsWOKDEmjZzr3qsZIDN9ttQC9QgPDniozOxEy2nfiO2X1aOfvhzoP0FK3 HTTP/1.1
    Host: d1.arcadeyum.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Date: Mon, 29 Jan 2024 06:45:09 GMT
    Content-Length: 0
    Connection: keep-alive
    Location: https://www.servicesrestriction.com/?p=d1.arcadeyum.com
    CF-Cache-Status: DYNAMIC
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5aREZ4dq7LR%2BA8mgurnEZ9WB4ryRmJI0MHD65Pp8CTKkTk%2BWuLSwIOU9rBkcT6cXPTcmb7L0FxxPCiNnMiEONKa9wCLrkVzwQxyX8MN%2BImEmkITsDAF9VszVGrNGRjXZF1Jh"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 84cf82bc5f336322-LHR
    alt-svc: h3=":443"; ma=86400
  • flag-us
    DNS
    www.servicesrestriction.com
    ArcadeYum.exe
    Remote address:
    8.8.8.8:53
    Request
    www.servicesrestriction.com
    IN A
    Response
    www.servicesrestriction.com
    IN A
    104.21.40.181
    www.servicesrestriction.com
    IN A
    172.67.156.20
  • flag-us
    GET
    https://www.servicesrestriction.com/?p=d1.arcadeyum.com
    ArcadeYum.exe
    Remote address:
    104.21.40.181:443
    Request
    GET /?p=d1.arcadeyum.com HTTP/1.1
    Host: www.servicesrestriction.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 29 Jan 2024 06:45:09 GMT
    Content-Type: text/html; charset=UTF-8
    Transfer-Encoding: chunked
    Connection: keep-alive
    vary: Accept-Encoding
    CF-Cache-Status: DYNAMIC
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FjUzr6vg64cfJcSzCQv7L%2F%2BqxI0txzATiKwx%2B4tfUrLaCx7GZL9RVq9ebbR2U332kaEDawZY9mQuyALZ7MCuaBmYnK33xKG0ezLOYqwgkUJjSJ%2FYe46HxXo1HciEr8xxishzlXlclmUat%2BfTgD8%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 84cf82beec5f4065-LHR
    alt-svc: h3=":443"; ma=86400
  • flag-us
    DNS
    arcadeyum.com
    ArcadeYum.exe
    Remote address:
    8.8.8.8:53
    Request
    arcadeyum.com
    IN A
    Response
    arcadeyum.com
    IN A
    172.67.137.213
    arcadeyum.com
    IN A
    104.21.86.236
  • flag-us
    GET
    http://arcadeyum.com/aj/ireport.php?p=urWx%2F%2BHkwtPks8zN1bbp5NXQ5%2BbtzsHE%2F7HHsLa6x8LGwrDCt7GysbP%2F%2F%2F%2FFwsrPxsf%2F0Nfcx8zUzc%2FMwsfcxcLKz8bH%2F%2F%2F5%2Bdzi%2Buqjsa2yrbG1t7A%3D
    ArcadeYum.exe
    Remote address:
    172.67.137.213:80
    Request
    GET /aj/ireport.php?p=urWx%2F%2BHkwtPks8zN1bbp5NXQ5%2BbtzsHE%2F7HHsLa6x8LGwrDCt7GysbP%2F%2F%2F%2FFwsrPxsf%2F0Nfcx8zUzc%2FMwsfcxcLKz8bH%2F%2F%2F5%2Bdzi%2Buqjsa2yrbG1t7A%3D HTTP/1.1
    User-Agent: zz_ayi 2.1.2643
    Host: arcadeyum.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Mon, 29 Jan 2024 06:45:10 GMT
    Content-Type: text/html; charset=iso-8859-1
    Transfer-Encoding: chunked
    Connection: keep-alive
    Location: https://www.arcadeyum.com
    Vary: Accept-Encoding
    CF-Cache-Status: DYNAMIC
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vmAbawL5eaSHMBW3bTNEchzbHCD55p%2FJIA3kI%2FsiTu4RUUir1nwl%2BKKjImLpBiQY1RbnVNsS6m5CkcEhswBcjiWngg6iYv51M8oEiDCa7GsAOxploJ70g3q5vwd16ko1"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 84cf82c1cda863c5-LHR
    alt-svc: h3=":443"; ma=86400
  • flag-us
    DNS
    www.arcadeyum.com
    ArcadeYum.exe
    Remote address:
    8.8.8.8:53
    Request
    www.arcadeyum.com
    IN A
    Response
    www.arcadeyum.com
    IN A
    104.21.86.236
    www.arcadeyum.com
    IN A
    172.67.137.213
  • flag-us
    GET
    https://www.arcadeyum.com/
    ArcadeYum.exe
    Remote address:
    104.21.86.236:443
    Request
    GET / HTTP/1.1
    User-Agent: zz_ayi 2.1.2643
    Host: www.arcadeyum.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 29 Jan 2024 06:45:11 GMT
    Content-Type: text/html; charset=UTF-8
    Transfer-Encoding: chunked
    Connection: keep-alive
    Set-Cookie: PHPSESSID=ma105hp84mb2q8gjrh98aav7ei; path=/; HttpOnly
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate
    Pragma: no-cache
    strict-transport-security: max-age=16070400
    Vary: Accept-Encoding,User-Agent
    Access-Control-Allow-Origin: *
    CF-Cache-Status: DYNAMIC
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WktXqtjd%2FiT9tviHHxG%2BwSe3nJosiRGuyng%2BumFxRHhUSV%2B%2BSVmId7Ul8%2F9lPolW7dAiu7VO%2F3jaIV1EkIalGyxP6RiEg%2BfYRJjvKOS0dOp6fYDxoaBcMI6qe9vTyWnng9KFpw%3D%3D"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Server: cloudflare
    CF-RAY: 84cf82c6fdd979b9-LHR
    alt-svc: h3=":443"; ma=86400
  • flag-us
    DNS
    apps.identrust.com
    ArcadeYum.exe
    Remote address:
    8.8.8.8:53
    Request
    apps.identrust.com
    IN A
    Response
    apps.identrust.com
    IN CNAME
    identrust.edgesuite.net
    identrust.edgesuite.net
    IN CNAME
    a1952.dscq.akamai.net
    a1952.dscq.akamai.net
    IN A
    96.17.179.205
    a1952.dscq.akamai.net
    IN A
    96.17.179.184
  • flag-gb
    GET
    http://apps.identrust.com/roots/dstrootcax3.p7c
    ArcadeYum.exe
    Remote address:
    96.17.179.205:80
    Request
    GET /roots/dstrootcax3.p7c HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: apps.identrust.com
    Response
    HTTP/1.1 200 OK
    X-XSS-Protection: 1; mode=block
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    X-Robots-Tag: noindex
    Referrer-Policy: same-origin
    Last-Modified: Fri, 13 Oct 2023 16:28:31 GMT
    ETag: "37d-6079b8c0929c0"
    Accept-Ranges: bytes
    Content-Length: 893
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Content-Type: application/pkcs7-mime
    Cache-Control: max-age=3600
    Expires: Mon, 29 Jan 2024 07:45:10 GMT
    Date: Mon, 29 Jan 2024 06:45:10 GMT
    Connection: keep-alive
  • 172.67.137.213:80
    http://d1.arcadeyum.com/aj/bundle/962/?p=YTI0Njc1Njg5MTF43Hc81pthuSBzThYc%2BTIMbRdJSF7fsWOKDEmjZzr3qsZIDN9ttQC9QgPDniozOxEy2nfiO2X1aOfvhzoP0FK3
    http
    ArcadeYum.exe
    513 B
     1.4kB
     7
    5

    HTTP Request

    GET http://d1.arcadeyum.com/aj/bundle/962/?p=YTI0Njc1Njg5MTF43Hc81pthuSBzThYc%2BTIMbRdJSF7fsWOKDEmjZzr3qsZIDN9ttQC9QgPDniozOxEy2nfiO2X1aOfvhzoP0FK3

    HTTP Response

    302
  • 104.21.40.181:443
    https://www.servicesrestriction.com/?p=d1.arcadeyum.com
    tls, http
    ArcadeYum.exe
    938 B
     8.9kB
     12
    15

    HTTP Request

    GET https://www.servicesrestriction.com/?p=d1.arcadeyum.com

    HTTP Response

    200
  • 172.67.137.213:80
    http://arcadeyum.com/aj/ireport.php?p=urWx%2F%2BHkwtPks8zN1bbp5NXQ5%2BbtzsHE%2F7HHsLa6x8LGwrDCt7GysbP%2F%2F%2F%2FFwsrPxsf%2F0Nfcx8zUzc%2FMwsfcxcLKz8bH%2F%2F%2F5%2Bdzi%2Buqjsa2yrbG1t7A%3D
    http
    ArcadeYum.exe
    533 B
     1.1kB
     6
    5

    HTTP Request

    GET http://arcadeyum.com/aj/ireport.php?p=urWx%2F%2BHkwtPks8zN1bbp5NXQ5%2BbtzsHE%2F7HHsLa6x8LGwrDCt7GysbP%2F%2F%2F%2FFwsrPxsf%2F0Nfcx8zUzc%2FMwsfcxcLKz8bH%2F%2F%2F5%2Bdzi%2Buqjsa2yrbG1t7A%3D

    HTTP Response

    301
  • 104.21.86.236:443
    https://www.arcadeyum.com/
    tls, http
    ArcadeYum.exe
    1.0kB
     9.0kB
     14
    15

    HTTP Request

    GET https://www.arcadeyum.com/

    HTTP Response

    200
  • 96.17.179.205:80
    http://apps.identrust.com/roots/dstrootcax3.p7c
    http
    ArcadeYum.exe
    421 B
     1.6kB
     6
    5

    HTTP Request

    GET http://apps.identrust.com/roots/dstrootcax3.p7c

    HTTP Response

    200
  • 8.8.8.8:53
    fagamesframework.com
    dns
    ArcadeYum.exe
    66 B
     139 B
     1
    1

    DNS Request

    fagamesframework.com

  • 8.8.8.8:53
    d1.arcadeyum.com
    dns
    ArcadeYum.exe
    62 B
     94 B
     1
    1

    DNS Request

    d1.arcadeyum.com

    DNS Response

    172.67.137.213
    104.21.86.236

  • 8.8.8.8:53
    www.servicesrestriction.com
    dns
    ArcadeYum.exe
    73 B
     105 B
     1
    1

    DNS Request

    www.servicesrestriction.com

    DNS Response

    104.21.40.181
    172.67.156.20

  • 8.8.8.8:53
    arcadeyum.com
    dns
    ArcadeYum.exe
    59 B
     91 B
     1
    1

    DNS Request

    arcadeyum.com

    DNS Response

    172.67.137.213
    104.21.86.236

  • 8.8.8.8:53
    www.arcadeyum.com
    dns
    ArcadeYum.exe
    63 B
     95 B
     1
    1

    DNS Request

    www.arcadeyum.com

    DNS Response

    104.21.86.236
    172.67.137.213

  • 8.8.8.8:53
    apps.identrust.com
    dns
    ArcadeYum.exe
    64 B
     165 B
     1
    1

    DNS Request

    apps.identrust.com

    DNS Response

    96.17.179.205
    96.17.179.184

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c3f99de15490c91f77864e510101fe44

    SHA1

    3d46acbfa498af49fe7422ab76fa37d733ec2f4c

    SHA256

    29de0fa1cfc6ca655fe6100d065ef229adce9e49c6b1490378f2dfcbb6a5005e

    SHA512

    15a87d70327942f27facd7b4aebd7dfe9a4ce88ca31a3c384bf0f9f8808e4af92e641a1b80ca75194dd0ee3c88c39fdc9fb4d2238ad60846dbc55f10ae953c19

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Cab2780.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Tar280F.tmp
    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

    Download Submit

  • C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\ArcadeYum.exe
    Filesize

    883KB

    MD5

    1df9cb2785075f2738d8bdb876831731

    SHA1

    4a3048ba67f8b2529846e51cd0e7793f63f20ae3

    SHA256

    8459860387ea51a7d83e817f72d46f4eeaade8ec4414c89843676dc29d4496d9

    SHA512

    9209c7aac280b00905432be6d1f592c8fa99b6bbbc112297a0273d761d5c75d90e836bb66823181cf563df645b34e022f755e865f5d07b5588e1688d8476d330

    Download Submit

  • C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\ArcadeYum.exe.config
    Filesize

    231B

    MD5

    ae437dea18c61477cc2f17f46fb11d01

    SHA1

    94afba8148c6072ad60c6899ed717005681e9da5

    SHA256

    d8966d4c96ba3c910f86c44d6d7b6c298cc70cc3c5c61bb975861eed846b0754

    SHA512

    61ad33f07fbb65863f1eb02a14230c38766fbb5e1fe4263433ecd32375249e7af71e49f054e5f919884f5250dccf95fb6791ceeadf3c2d4cb468ba5af3e8902b

    Download Submit

  • C:\Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\config.cfg
    Filesize

    73B

    MD5

    9f48223e72c07a29f7da2043b2a77c7e

    SHA1

    cdfc5fc42b47ae2a89e99347b61345e39d9e0526

    SHA256

    3d781804f0cd93d69d1d01a636aab3199b1b082eafaf485ec7a9ee24492b4b5c

    SHA512

    5ffdfb05f1cafb2c1b4be250be03eec4167ab1ed77d6d60cee5cbc3276668d161128c393f38ae0ad6966b2c00fde7810189f9d81060c14e02a275438d2a39fad

    Download Submit

  • \Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\starter.exe
    Filesize

    1007KB

    MD5

    a0865a8429851042ede865187a5d6eeb

    SHA1

    1a71a4301d305a1cdacfd4c18acd6a057bd4cf44

    SHA256

    ebb4713a230340735681433fc87be0e46ab2db19ef395276a573086e45a631c2

    SHA512

    e20e286ca064ef84ac2f18450894c46d162af00c263b25a19f1d685769e1780a48961faf1397ff819bca2f2880759f7a7e86dc3d5b080b91e8afe164409bda42

    Download Submit

  • \Users\Public\Documents\{8C1A49E6-2F7F-40E3-923F-5DE549CAF021}\starter.exe
    Filesize

    521KB

    MD5

    992afae26dad8c8dd426968663f67f79

    SHA1

    3e07d8ad827c9230434a3b595d71e9d7971ed544

    SHA256

    d47cab9af0e1ec58f859df06eebb19d10dbfeb26d4252a613a44d5dcd486909a

    SHA512

    fcbaf4ef20160cdcfdec8ca830c78adf1ec988c91eae1fbff3cbea6edc9af106ddfacbbe7510b0ff7ccd7a9768cf767605d9637559b8237e68c28295adfcb26f

    Download Submit

  • memory/2696-23-0x00000000743B0000-0x0000000074A9E000-memory.dmp

    Filesize

    6.9MB

    Download

  • memory/2696-25-0x0000000004B30000-0x0000000004B70000-memory.dmp

    Filesize

    256KB

    Download

  • memory/2696-26-0x0000000004B30000-0x0000000004B70000-memory.dmp

    Filesize

    256KB

    Download

  • memory/2696-24-0x0000000004B30000-0x0000000004B70000-memory.dmp

    Filesize

    256KB

    Download

  • memory/2696-22-0x00000000010B0000-0x0000000001192000-memory.dmp

    Filesize

    904KB

    Download

  • memory/2696-90-0x00000000743B0000-0x0000000074A9E000-memory.dmp

    Filesize

    6.9MB

    Download

  • memory/2696-91-0x0000000004B30000-0x0000000004B70000-memory.dmp

    Filesize

    256KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.