Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    21-02-2024 23:04

General

  • Target

    Aronium.Lite.Setup.exe

  • Size

    8.7MB

  • MD5

    261b84a0957a45af25206abfb153a9dc

  • SHA1

    91406a9d5567efd3a2989e70261b4507a7d78471

  • SHA256

    7a62374ca430fae0b37c2f3cacd501a07c5698e85527a27bc9eaff050a4256bd

  • SHA512

    f9c77d2b934afd75d3b4dced38e047f0d35bfe79932238e7c7324f16f03144c553f12a866d736202a7d879a4f267b93572ca7c788317b6d68be6c36d5b2a80a3

  • SSDEEP

    196608:dOa7l6/pU4XFowYvmUviZzyzI8h36bfwLFbVRrBlt5o9e:ca7sKqaNvwZzy8ffwFVRFxo9e

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 17 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Aronium.Lite.Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Aronium.Lite.Setup.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4476
    • C:\Users\Admin\AppData\Local\Temp\is-FH28P.tmp\Aronium.Lite.Setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-FH28P.tmp\Aronium.Lite.Setup.tmp" /SL5="$8011A,8311009,832512,C:\Users\Admin\AppData\Local\Temp\Aronium.Lite.Setup.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3596
      • C:\Program Files\Aronium\Aronium.Pos.exe
        "C:\Program Files\Aronium\Aronium.Pos.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3080
        • C:\Program Files\Aronium\migration.exe
          "C:\Program Files\Aronium\migration.exe" up -database "C:\Users\Admin\AppData\Local\Aronium\Data\pos.db" -dir "C:\Program Files\Aronium\Migrations\Lite"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5064
  • C:\Windows\system32\osk.exe
    "C:\Windows\system32\osk.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1532
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x3c0
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2040
  • C:\Windows\system32\osk.exe
    "C:\Windows\system32\osk.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\Aronium\Aronium.Common.dll

    Filesize

    24KB

    MD5

    3781106d398a578b1b351783bae4e01f

    SHA1

    03a5fcd09c73c3625bd779f861863d7f4f77a0ab

    SHA256

    1a171455a0eae94c28d0640d0a41aad108360e76a170b18565fd87b03c91e9f0

    SHA512

    3859e3e5317e44cb6c6e64061b9c0598ff0f74d6e9f58af51ce6f4bbf3fa7eea20a0c72c3114c17c903f48dd2c910160909ec820da6442d564820e04112c0d33

  • C:\Program Files\Aronium\Aronium.Modularity.dll

    Filesize

    44KB

    MD5

    4d1ce552fdbf51b08f56b19210066cba

    SHA1

    a732b202aee2c79f423a62749559da34403753ce

    SHA256

    625bc569ff1c50403b3d1a3b2fbedc6697a16ef5466f4564721b31bdbd58c3ce

    SHA512

    b02a15955092fa08d58e26db241faa4d52fc05c083911c487a5ec75e7a43a300da4dfe31deed83819fa70a3a74acdd91492ea7e5353a092144508d2d7392bcf9

  • C:\Program Files\Aronium\Aronium.Pos.Common.dll

    Filesize

    144KB

    MD5

    af4f289487beb17402ba4a249f802e11

    SHA1

    0bd3ae1bfb3c18faa35ca19b7762039094fc241e

    SHA256

    5d0ddd5d1358dcfe403fef1457c6c585e1581ab8f04e3b462a51b69732cdb722

    SHA512

    9ce9255a81b59e41cadaf969d099b4178b19ba76213c52355b6a5e52f75eb65b5569d3f4a9aa1b8214ac49a5b97ad0c68c5e6c4361f4fdc2298c5cf53de454f3

  • C:\Program Files\Aronium\Aronium.Pos.Core.dll

    Filesize

    165KB

    MD5

    9bb6e3866b61eb630079ced369380930

    SHA1

    0c78221ba484a3a6664f20cbc5885e687fc72ea6

    SHA256

    cc2cfadb5c530e7c33fdea6f00b3e2c241208cc2d3da08dd54260843aafaf6d6

    SHA512

    90011ca718bf4d4177d899a163df3efb9177391e00ff2444c186e60b460fca559f3439aecb55b6f78ca69be5eae3229366ce5061ed465b3a2d241d99b574cd15

  • C:\Program Files\Aronium\Aronium.Pos.Facade.dll

    Filesize

    35KB

    MD5

    065abd070b16ba410ad63fbc71fcbfaf

    SHA1

    e4929eccdfc78e1f4f0d3f8cc41a570f70aabdbb

    SHA256

    63481f634c42fb69c2afafd3e78eb4d10ca65ed29f5a690a28fbb2763f909bdf

    SHA512

    8d2b900294e35d517d54088ecb1769ed0c4402eb4e3274a497ec3c776b087e2beb7a98a2dabc086ae11db59eaeee3d79c4a864754e7aad4a09c58a2617e2188f

  • C:\Program Files\Aronium\Aronium.Pos.Presentation.dll

    Filesize

    837KB

    MD5

    708c6f3d448d318fb4cdf0d0b8a88739

    SHA1

    d5bb35cbe9324e633aa01b1827920dd188d1a186

    SHA256

    03acb42b9dfca97860c1cd846dd6e80f6b1a80fa76209a64898b2ff99576433d

    SHA512

    d0739ab1690d9377e251953928064474b9d8afcbee84b9829cee7d4e13faab669ae8767b62d0fcb625d27d2f29a3ec8a484dfa2e4366f738f74f77c26f1e4699

  • C:\Program Files\Aronium\Aronium.Pos.ViewModels.dll

    Filesize

    236KB

    MD5

    26228487014ba4984cbd9143656bf724

    SHA1

    27528a8f833eec879f9b7adcfb43f5e791e5ac7b

    SHA256

    242355756eb07b6a754c908dd927dd419e8d4cbafee5ee933babd82810d1c4db

    SHA512

    106ae9227924211f4c403ca4ff4e273636cac756d1257520ec51f7e84a7051a4fba85e490e3331494f1deb7258f5b33709445bda4181b4b342da5901b6f53d79

  • C:\Program Files\Aronium\Aronium.Pos.exe

    Filesize

    366KB

    MD5

    4b56e94a50ee665c3ea18b8f63c1273f

    SHA1

    df9e4b0ca088348e64afae7fda30a78276525ff0

    SHA256

    4cdda090441867cd6f1e5c2c7aaede01bb5cee6f1c3eff3a355507b5aed2a38f

    SHA512

    e118addce8306237ef6e921eea537c8a9816ed89c6812abd90ed956147b010ba213c0cf8a47b296da9c43beb046dae08940667fbddc164bb28b271cb99c83403

  • C:\Program Files\Aronium\Aronium.Pos.exe.config

    Filesize

    856B

    MD5

    4b93772876fbd86f8316c0b46c1e0a5a

    SHA1

    38272cc81f58278298bfccc8bb729b7ab6129258

    SHA256

    26af1f2b3b2b0306f352199f59c12da8484dff43bb736179c507ed4268058b28

    SHA512

    c7426adac0bde448da88fe3bdf8a03c37946aab8f3587e1abbebce3b0203918622b448e0a95118d225d543e3917b45447d956a5288baeacfe7dcabe7bbbf8052

  • C:\Program Files\Aronium\Aronium.Workflow.dll

    Filesize

    33KB

    MD5

    079aad15f5d4d660efbf72c5c63c1318

    SHA1

    095f4c3706a51712edce922275d61d9638f9d548

    SHA256

    0336e95843466ee037d0d25ede935222e1a8234ec35aca07ccd9a656ae5d7605

    SHA512

    d286b857814d72fb1a4288bdd1d1e9bb2661dfdc789863d903b975e00455a44a8dee6ee4a799c10dff2c39d621fae063ab73283023e23d187f856ecec4e98e6c

  • C:\Program Files\Aronium\Aronium.Wpf.Toolkit.dll

    Filesize

    228KB

    MD5

    22b099d216f27067d1035e73de150b6a

    SHA1

    bc9b168301a84cc5f2e860459758f801e7a888c8

    SHA256

    83d509218451980c858ea7cf0eeb849f0673f5f0c6581a4bd972b057c998a332

    SHA512

    ef01c65ff4e67d680bfd3739336cb06f0d3f83cf631e7f0fe58f84dff6279f69b9f28f43d3d41051f14147eb6a331920657aeed1258af67456eca9dcd6ce0498

  • C:\Program Files\Aronium\Lang\en.lang

    Filesize

    69KB

    MD5

    d9f64a95ea575885ceca991efd31716b

    SHA1

    1e49da1e9b45f19b9bb6b44518de1ab882008a8c

    SHA256

    fb9d8ca9bc93aecc805829f4f3b7c018fe51983ad32e36fa4bd93f299f5bf72c

    SHA512

    1a381995f91cdf3afd6ea4a408ca237eea6f4a8f5261bc4b17b6a42864aa35023e944d157a05199d5bb4c2a875cdbdaf54a7eeb4d6436acaf368b9d8f3e27c3c

  • C:\Program Files\Aronium\Log.properties

    Filesize

    452B

    MD5

    c730d375a112d03ee8f0153a46ff3f9a

    SHA1

    5b7f2bef6dde7728f195a072928ace16a115a046

    SHA256

    3b508fefba17cb40be7abcb454ecb97e46f722601afadd6f47841329d0fd8da7

    SHA512

    99f325360628f76fcd8b6d91620ebe11e59853780868570a5af55e732e7fbd4baa33e9035ec384612821702935e4e1ee3e740361853db2c180b0fa6d69e532e4

  • C:\Program Files\Aronium\Modules\Aronium.ApiClient\Aronium.ApiClient.dll

    Filesize

    17KB

    MD5

    992e03be1c62936fea3c4013ab0b37bb

    SHA1

    ee680a68e6c0a7c7c45de3f1dabe9029335a41cd

    SHA256

    771eff3743cf3a56864b7dc1cf7a42533719fdbc01c38ddc7c87c721b579de80

    SHA512

    af35ab6a7f860065ce0790344ba57c16747e2129f54c257cbb43192fa4acac706d70ca528126fa43c0b99eda496aa1acc7bcfd1856e764b61cf13f1924d86a40

  • C:\Program Files\Aronium\Modules\Aronium.ApiClient\Newtonsoft.Json.dll

    Filesize

    685KB

    MD5

    081d9558bbb7adce142da153b2d5577a

    SHA1

    7d0ad03fbda1c24f883116b940717e596073ae96

    SHA256

    b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3

    SHA512

    2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511

  • C:\Program Files\Aronium\Modules\Aronium.Export\Aronium.Export.dll

    Filesize

    27KB

    MD5

    0a59644082ecb1866adcdd80cef1fec9

    SHA1

    f4eb0f253aa56c2e5ef87e232ea6545c57fa9457

    SHA256

    c63aae92e8de69535d5a78a32e0eab620ce19c76bbced01c56e406179ffd571f

    SHA512

    edebf98c4afbdaa7ac8e5e68e6359eab5649607809d06c261b4cf4a0c58ec47150dba65c047a64c911ad1111dbd2a39325e31be26c09142833734724bd0b460b

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Barcode\Aronium.Pos.Barcode.dll

    Filesize

    17KB

    MD5

    0c463075476253f89d013fc1ecfd2250

    SHA1

    68731972608917e6ba64494a970e1c63c4602e18

    SHA256

    f410343f10bd8551581778c0d03fe43bcb51275979f79794640a49bdbc5ab227

    SHA512

    aa2da52d7c55ad4d04f263bdfb50c78e4c2c6231256ce517c2e357bc0bc82a94b6fdcca581dbf13ec641095a5a6b915d5025243b4b67d8c2dd28b21fb73a3822

  • C:\Program Files\Aronium\Modules\Aronium.Pos.CustomerDisplay\Aronium.Pos.CustomerDisplay.dll

    Filesize

    25KB

    MD5

    722580a37b76b13236aee0366f430299

    SHA1

    5b42e7c51f3f05ea3fa1ae0f1347a69aead32094

    SHA256

    69b8736aa9b5c31cf23ef5e3a58a5cbd84c366a8a09c7f655cae1b77fdbf0cab

    SHA512

    2ff111906e7b6edfa2e2dab07066c00a8470b2074af4900b512ddaed283892a275908c298eacf42c9d22f5649fc4b0b245674a5ae3bad9f039e3446a2250e31b

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Customers.Validation\Aronium.Pos.Customers.Validation.dll

    Filesize

    11KB

    MD5

    d7dab6075b874138669f6742e29149c2

    SHA1

    69c3fb1ad7e16d20d48783e26de492fae7c52d4c

    SHA256

    ae35d48cd224802793a24f8e903c5bb815346fca5c6aed10e0a90d3e18942ae5

    SHA512

    488ebaf357f1b361a328536cdec7495ff2035b63c4d3d4fb10d03b4696bfbbbab6b6d62721bd61e7c89ccd2409bfafc3d5503e004ca6c4968a47c53a5d13a41b

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Email.Reporting\Aronium.Pos.Email.Reporting.dll

    Filesize

    86KB

    MD5

    de17c66a8824bb6f35710051189671f4

    SHA1

    a81c441ba949de5191584d30fd964cb141ecd715

    SHA256

    be6e02ae90a33399759bcf62d1232e3477f524503ef8260ab6fc942e4e747f02

    SHA512

    39f48319f2d81a2f3c0f16b637d4ea8d90bda775742d8c5adc62e0d66baa95657cd7385f6f9a513b830dd2fc36c95eeeb5ed58219883a6cbaa33de9198794a13

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Email\Aronium.Pos.Email.dll

    Filesize

    38KB

    MD5

    690fb6a21925b92c48b70f9463b73148

    SHA1

    f80fcd1e75d523b1dea991acd6980d91e36f9bef

    SHA256

    91b56ae015977227f7c5c5a95b38677466e509561f2d9482e0111fff1dd91676

    SHA512

    0071daa6b92355d8d98cea11e533fb150893018b3fdf77d5030bc440ffcc5f78fb934d4f5749705c2186c697a6d4acca036aa04893a2f5b3cbbb34c9e8940e56

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Feedback\Aronium.Pos.Feedback.dll

    Filesize

    18KB

    MD5

    2d16ab054429578aa66770f81b3a1145

    SHA1

    a5c9cb1305d6fc36d53eeac7786a962326fda4de

    SHA256

    b16741874a02588b25bead362b1f647be4aa7672555146876ac642530b635d36

    SHA512

    7d54c17723b983f997a2477ba72ad606209f885a8d1bc21f6aed13ff9a1b9176c25fb7b610984d2196674b1661806c478bf85d5bf868b9c07c571cdec892c42f

  • C:\Program Files\Aronium\Modules\Aronium.Pos.FiscalPrinter\Aronium.Pos.FiscalPrinter.dll

    Filesize

    37KB

    MD5

    c5b0d2871f5718b3397ce51024eac624

    SHA1

    8e6501edcbb2a34089a84ccd92e139ca4961e969

    SHA256

    66f0bc9a190dc50914ffa9b5e7d425af6f3f14a514ad7a743e3fa4dfc26eb9c1

    SHA512

    a6bff5b8d427b89c45e9fdc082846dee28ad9f2dc650c221fd04cd4e27708b053c4663ed6c5fa2dc43a5e70bbfc4e7ad20df576a96f5e77355e368ada45cd5ab

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Logo\Aronium.Pos.Logo.dll

    Filesize

    49KB

    MD5

    4bdf396b7e6090e4e82fae696650670d

    SHA1

    6e14502db21301df0bbfd4c41b885630d8412f93

    SHA256

    710066cedbc97c6509f37e60818577751befbebc3515076b9c8d1d574f1b8c5a

    SHA512

    7a25abbce9a1d31a6c5d8a131e2d7b8ad64d5dedfeccf498507ac810e44204b6dda61c7d322f6299f183976ebdc178d7f94deec3c370c2d41fb9ceb799b2c958

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Loyalty.Local\Aronium.Pos.Loyalty.Local.dll

    Filesize

    20KB

    MD5

    60740274fc95e8a33fdddbc61e8ef934

    SHA1

    2f7e1aad327ef692f697bc12f102ec2a68a35957

    SHA256

    d7b85c6c2d55d3911785e51fe472d439c6694fb48598e25d1b69bb6bcecc03e6

    SHA512

    c145bf104a9ed325a0f6bd01b685f9c40e1878fbb27efc1c5b583c3ac33d07d93f5241e1a2e4c21d1dc385b382db3c6267ccec4d3e643628d1fb46c731166dc1

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Loyalty\Aronium.Pos.Loyalty.Management.dll

    Filesize

    71KB

    MD5

    2da625e3c9d2a1f4b3329d1b38c80455

    SHA1

    373985929fc02e3eff64b5caaeae88ed3d9def94

    SHA256

    f4d3ee7acd6678a85f118dde0195d0010fbb20c1c8828eb55b50b0a804aa59dc

    SHA512

    b9b0695212b15edd3851bd12a8c1011ff43887db7ad52576bbc3c97244da481f5a23fd63a4b5734762eaa49ca6b613c19b3c57cc6014c9bda17d9d78dcada8f7

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Loyalty\Aronium.Pos.Loyalty.dll

    Filesize

    23KB

    MD5

    64df7be08de645285aedd67db0d47ed2

    SHA1

    698aa66723bedbaae37c220623fe105d54a078d0

    SHA256

    90a6904a7c976a05c5546dc2bc075ebd549dd687ed2cfd2d14a8c4df89369496

    SHA512

    40baf7398ebb64c27b76af3168534c0cff2384cc16b62f9b43c258b44a4f2ff3a3c3a391c5624cb91d0ce84bc139070a9bd78b5bbf736e2f3606f4eff9c10117

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Management\Aronium.Pos.Management.Core.dll

    Filesize

    7KB

    MD5

    38877ad0c168f991344691ba71290b1c

    SHA1

    873c0cc1c81887e4a50c3b0a5e5abb29e70313d8

    SHA256

    37e794a57d0581bd36eca55cfe08684ef22fa1731875559cea9d4eccbd25016f

    SHA512

    b6567458196be08c6e5010516a731ff39d5e16199cbcdde7e461a041c32a888fcb394af8c5f1658331fd62bdcf84cbbf048ee628e9c920a03106251595df9222

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Management\Aronium.Pos.Management.Customers.dll

    Filesize

    83KB

    MD5

    ed120cf1cd34fbceeee0c29181f4f068

    SHA1

    7e23b1d3c587f804675f8a96039cec580a7f57d2

    SHA256

    65e70cb75caef14aed7a1c451fbd3f9e11434f0d37cd62107c6f67c5bfd98970

    SHA512

    09da624838dcb68228828759b6dd839f4f2a71bdb7b223a5ed5f70dfe92f7fb93d3ac127f31e6fed05dba84b709cc7d4ea4b60b68dc98c95fb216dd4dc60f419

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Management\Aronium.Pos.Management.Documents.dll

    Filesize

    228KB

    MD5

    42eaae282c03732ac77cb83af49cc111

    SHA1

    e70502d9bb42f9b9cfa970d18f2a663af1efbe87

    SHA256

    5b7702cbb0aa9760d13f9a358c535ff87f3cc78148d70df3153646c3b29bcae9

    SHA512

    2b71ae5d29a60ca15eb40e90e05172f8e7959d74bf8e09c5062d9f684ab14fd5400cb91071a402158739bfb5cec35da772d11c499d47ab6703497c243a2c1acd

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Management\Aronium.Pos.Management.PaymentTypes.dll

    Filesize

    45KB

    MD5

    e46d57c184425029c7b21a96b554b2de

    SHA1

    9d869e464a6d7ef0442b34577e0fef23390f2b6c

    SHA256

    446acefb11fdec9f2da998955678be3b3d8686e55e949d5ad347db403122b87b

    SHA512

    d28d044b52592bc3531d2c0045e73902951b2eb5ca0c95049a152b73bf43bad3e3b92d334a43e88e6afece77a448491a06d74f7479435c85f4c5d265c5993d77

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Management\Aronium.Pos.Management.Products.dll

    Filesize

    275KB

    MD5

    a7f219f2722951847f9da03086a506fc

    SHA1

    e20043839304d90bb61d97bd029f83edc15df471

    SHA256

    a1391b8809d5852e161860f1fa25a09184d8d4cbdb34208eb85e4b8009102cfd

    SHA512

    a990787a81e6afb94c990d7f423e98fa68edc86fa6104007d1ca01233494bd0ca641ed2ef6696a3ce130b1818545e7dd01f804888fef3fe2445fccb604af617e

  • C:\Program Files\Aronium\Modules\Aronium.Pos.Management\Aronium.Pos.Management.dll

    Filesize

    88KB

    MD5

    9c95b11dfa7cf128b99db03cb8fea2ed

    SHA1

    18bf8e41799f636872570dbdcb5191de4e67c4e1

    SHA256

    5f2f2cc654f46ff9450ace25203660f573f627ae865835d9b086a0a7c3413877

    SHA512

    9f90539f4a493362b5a5668176b72e219900c727c1df99b3023e90f36165f97b650116f153d4f5d5cefcaa481d559c467208444eca00419cbd577a7c7f5a9c30

  • C:\Program Files\Aronium\Modules\Aronium.Pos.MovingAveragePrice\Aronium.Pos.MovingAveragePrice.Lite.dll

    Filesize

    10KB

    MD5

    7643259df64de875ac9704f138a86d1f

    SHA1

    0a99acb412783f6dcded8ca50745f0b4796dc6b3

    SHA256

    fe13e953bb207ad50271ffe90547565a77bd350f6f95764b2c95927321c105d0

    SHA512

    964ecb545703d16eea1f21f0ee6fc302f837d15604c0d4393cb45286c5b62682ef90a76755270b3d3c38b822c420ea69b97aebe7e5829707281ec37bb76e1456

  • C:\Program Files\Aronium\Modules\Aronium.Pos.MovingAveragePrice\Aronium.Pos.MovingAveragePrice.dll

    Filesize

    37KB

    MD5

    6c8e5bb94d4d7cee7257a055b484bd8d

    SHA1

    8b009f6a87a207cd7bd9d1ee82450382c68fa0cd

    SHA256

    8c1097ce64e9f62b36dbd57ac5f3ddb165a7179318e0eb504cd1232d5c8634b4

    SHA512

    2355ba97e04f20e6a4f55a7a83c13cd77dfe3923532031e71d761c18305e1e9120d7c320feab7f4d9bf5415b12d147b4783d68df9fa87c8ea73a56c856e171b1

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Authorization.wf

    Filesize

    1KB

    MD5

    b81d437c2b81891567064f53dd7b65bf

    SHA1

    1766c9600f888a7a835bb9d3fc85fd670834a527

    SHA256

    08d5af9cc0a3fa3a577c0425f43d060ffc01c28641bbee8eb1525f4f976f4fca

    SHA512

    e4c36224f4c4a6c78be2bf63078ac615eb9afbb1bb9de376fdf66d8f8f76be77304845f4df1c59727d8258f826118791b30afded4c437fff8cc0a99b8587e547

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Bootstrap.wf

    Filesize

    8KB

    MD5

    aa9709232e5fd622d427e9653ced2d2c

    SHA1

    62bd5a70ad1690abb7f6f3779acbe09577aafbf8

    SHA256

    433c6ec19dfc96692da3c52eb117245761209a06ecc5192558488bd3da7793fc

    SHA512

    efe65722dd2bacffbd77f2e34005ca20eed316147f201710a8a3e331fa7edecda0af09307907df8eff73850136d2090d897e0c9d761f36b025eb1ecacd2130f5

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.BusinessDay.ClockOut.wf

    Filesize

    1KB

    MD5

    e4ee85fc095b3d6b48e4e4868d6eff7a

    SHA1

    7be7e46ab59d0be9ebd8ba88910202ff24a44896

    SHA256

    565d97de324e82d6456bd276cbeafa1fe99427bcf49d3618eb8c4c02dac5bc35

    SHA512

    d4c2cfb16490f71e67b26d76e80f98f3d8fb4066fa2fcf71685cff39c8474617d19cf42c9d8d11c7579e323c0d95bd0784498ca2f387231d0a1fbf2ec3914008

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.BusinessDay.Close.wf

    Filesize

    8KB

    MD5

    0f541fbd1416834cfcd16e09ca79878e

    SHA1

    3d9be9ef53766e3f6e28867893988798c0c79df7

    SHA256

    4b0da3994ac25276202fe2569911c6607753091eaeb14997d265647a115ae1a3

    SHA512

    bfe91364aff221f47d3db73ce5ecb0b1724f43dff885b5aa5952616612b0732bd4af74284a43f3164a9552e9e14c9062b37cbc05697b1ec1f484bf86b14d410b

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Customer.New.wf

    Filesize

    1KB

    MD5

    8c0e4d18a673453dc7e91e259d6957bb

    SHA1

    d52fff0452584f639664d20715dd369a5389be5c

    SHA256

    c3207d5e9ed1aa756358a91399fd082d4e21e95da3cfade18a9611e6ef11a1af

    SHA512

    3576e4182c308bde361f091d062c05b6e9d509e73c6ecd80a9d88ce79881a549e84e28b142a5b617f2270133dd1cdd1dc6720f8f1ccb0f3b7c9af9a999ee4b3e

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Document.Create.wf

    Filesize

    3KB

    MD5

    c09879e3809abb01010cd10d9e000f6f

    SHA1

    875bcde4822d203b1e17c34116a849c7a7e46665

    SHA256

    8c12d4b058653a587c18ee16c683116ec0b63e5f682398078ef42f905e00360f

    SHA512

    fa1c6483bbd7af0d5a73a91b62e0e6a229f865e64ab17a606e76ebaf89f43761ea7f3615957f3222f725b8be7a5b2cfa34d82f65a22b418345efcac40ae27c58

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Document.Delete.wf

    Filesize

    2KB

    MD5

    65ddc85e7f6a9f3e59f31d5d694d9f3b

    SHA1

    a2e4fa4810e00d07bb3a5b5ae686f51ae2bb09f4

    SHA256

    d66337d6df336753e0328185e6294ab6ea54ee32f04e9346abe0c20ef1ea347d

    SHA512

    0828467cc06bece866ea2d920f82d46e248da4efbcc47b6505960b9b162e42f65bbcce236dcdf5def2c4b024354571b22c85e816bc3d047d081afdc8f6bfbf43

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Document.Update.wf

    Filesize

    3KB

    MD5

    84e051f715271ddf46f2198a0d72f7f4

    SHA1

    9095af37ec29985d4f52514b3ddba02c930781e5

    SHA256

    81f54405d2538182f769024670c10d6e02266c5fc7c409cfcff93fbe1daea579

    SHA512

    5965164c935b6a603a297a62a914234e8866ec2950c3d9c2f5d84a651b7a719a9fef418d5a7dfe447d3164319cbe50b0a1dca2718bb7c72643d7031fc35b0869

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Document.wf

    Filesize

    1KB

    MD5

    7cbcbabb7f645bff16fe28a7d62a2c77

    SHA1

    433301c6a2aa95fbad1258fd38391b899e5b1408

    SHA256

    03febfb515d66bbe486d0ac4338a4ae6dddaf00e597d3f4faed8fd3abc880759

    SHA512

    c1cfe0e21ed42c3c0e18aab102650ae5f1b9eb8d99aa9213c090ff78096d3b82722ba6227ab5bb63a4a210c2719a2d60c7f5336384c75f8ced34b50df1c2ffbe

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Invoices.wf

    Filesize

    3KB

    MD5

    7c901fe40181d88faccc576f4d97307a

    SHA1

    6c4496051ca39bc12e7b0d166d5285e4745b82e2

    SHA256

    ef07bef2cc78e1c2be7db1da0970f2db121519fa26ff998a3c74bc48bfd129b3

    SHA512

    32fd60f964af0e0d41190cbab305fda6059d67c2c361cd91f44c6b13ee426cd67a7f8053c0f986745e12239d9da9404be1c27b7f977322c9c081e90434b1582d

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Item.Comment.wf

    Filesize

    1KB

    MD5

    01865dc30d6f121741759519825cae35

    SHA1

    65c7e8515bedeb2231f1efefc4235747a6d6a280

    SHA256

    1bf9db01b20c002ea0169ff32974ccb1a5f30cad9968f243c979d3f4562e5b5e

    SHA512

    e4683122b83f6067e129ad1304b344ac6195b4fb528220856434d9c70b75fd2544e936626281acdd1d9fbfe5335ff387c77d1f26929ca7e788f080f37c78667c

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Onboarding.wf

    Filesize

    5KB

    MD5

    0de9ff4a5f7889be270982dd21364fcc

    SHA1

    45b613a5801005f9274da4db6a7939bf35d46f69

    SHA256

    d0de69b77fbc507c38cd18f678c0559423718d6d285528e85c1296c4afda0add

    SHA512

    3559ad510132ad3d76de846c77552bdcfc59315728856a3404e183a6b84eaf88b422b5d28bfc6c3cf3f26b0079863d0a3f156021d64a23ec2b15a395105e869c

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Estimate.Clear.wf

    Filesize

    997B

    MD5

    a18d2c6329aef632fe9becc7016ce5ff

    SHA1

    aa7578438e93dc317f3b861d95f4ed6e3b29c434

    SHA256

    aa36208bbe4a09a9874173b1861d9b3bd2df27d35e9d0cc8c81bae0a40461c2f

    SHA512

    70fc966705ca5030ec8dbd92438993613ebf67b20868b78e9ea8698e1753b35a4bba07035936953166d6d67d168ab6037f88e51573f104d93c40849576e208f8

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Estimate.wf

    Filesize

    1KB

    MD5

    7966ad5f95b247bb27e9a1be881d1d4d

    SHA1

    ec7aca6e474c008001f4291a112021a227aa63e2

    SHA256

    e672de6fac45f4b3cf89f20249babfbcaabd058e27b8298f79572fa7ad9af579

    SHA512

    692c0c0863a99a033f69ade7fd4b62f71d76fcf3ca075507165c9f67c1874d86562d3f3f00271caf32cf90cbcc67257949a1fad36d85ab41b433cc49dc0d2dd8

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Item.Add.wf

    Filesize

    1KB

    MD5

    42a81e896bd375fdc8fa4a39a71cdfc8

    SHA1

    603c166496948373652da94bc1dc353b4bbc2a32

    SHA256

    067e366ec370396c790fefe1bc9c2709a04fe5daca654605d42d7667cc4fe585

    SHA512

    ade367c7507bb034a863e68f06cf951504c38b8057763d027370188d8050a62a9de2776588fadd82702f3b9690d7cd65eb94a8d66fad06c0e1f1bb17773bfef5

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Item.Quantity.wf

    Filesize

    2KB

    MD5

    bab08f13394b8442015c450800aef251

    SHA1

    ad12529a22553a260ae49237aabb42d835b2ea3a

    SHA256

    2d098a2aab2bed43faea9a4382183542ae5adfdcbf5541e11f2454393b776e74

    SHA512

    0aeb4a30ce64bfe6dfa761adaf33c1e31ff9c1ff3720c2d3b2db0ed1b1d9c38f5ddb3614188f1749264d5791068963f01630a7ba8b9c3121d04c92d7631bfda4

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Item.wf

    Filesize

    9KB

    MD5

    917071c48701a5537c944b1b35df31bb

    SHA1

    4aab0ae74cae0ee38ff23d8104b800b2aa182000

    SHA256

    7f877fd37b22b0af50dec55c90fe9d54d96d51ad4cfe6fdb4ce974ae56c38334

    SHA512

    02c387e8f8e3f6016a8a2c4765d074c947b8d6eac08018a86993244f8426cfa6d3e612243ad3381d4a121869b04dd09ba1583dd3cb44cce1557ff29a8e7a3a5c

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Save.wf

    Filesize

    4KB

    MD5

    2710ad96c2bd13f9d1beea66d1d5aed1

    SHA1

    2ae4d4c593df324baf763bf92774f165da578349

    SHA256

    dd731d226e583b2947552d7734815374759beba28e0165d074232a1e98018a17

    SHA512

    6fb295eb68686b332ff8d91146cede5d5f5c5e507f168006ace099c0df41e466c6a740b608873e2079fc4ba8a460990d387c9ff060ea9efa68ba5913c740d295

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Order.Transfer.wf

    Filesize

    4KB

    MD5

    b786883c86e1cfd7fed3cd68fb9b6600

    SHA1

    f02d10d34a1779fa5653dd34332cade084ed69ce

    SHA256

    9bc072e3ebf02ee99b92c63c2cb323134370d9ad09459e8aaa5d8de71c1b52db

    SHA512

    16e8f690c0d5c7bdd1ac7d50e870ba09a6bb7d57fcbf101b3d044f629ab15f051d91592d5761f7cb7ae7e2f3ca858d1683f3fa687e45a5bded7dc0c6b4a351c7

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Payment.Email.wf

    Filesize

    1KB

    MD5

    de8a9c67870ea649d6bef1503b198670

    SHA1

    e0e170fd6364b642d7ae75cb20a6b3d0a46013ed

    SHA256

    a0d7134e9c6fc76fbf4158e3b57923d31f3b7e54ae49ecf1d62a228655ffe8e7

    SHA512

    91c703abc41d4a4eb4600670003862f369682f23f7bf3bc3f6eddcaae0819a120b9f90c1ed0a3896dda2725da34ee7e0676253a78ccedb53bfd570865200e1a9

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Payment.wf

    Filesize

    13KB

    MD5

    d87c3e1a62c152fc8948064034b571a6

    SHA1

    50daf6caefaec56334b919e9b5b11c8679a0160e

    SHA256

    61c3bd0b16e1ed50c134e3f7a35ce15c8b72206610ff882883375f800da86266

    SHA512

    524397c0bea6a7f1793223bc14f843432ccd90cf5b1c780c1b5c81035ab9b0d7a1001e0b0d3a3165a84195eae6bdd1ffc99f2582e4f11d3ffb6837394323cbe8

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Refund.wf

    Filesize

    4KB

    MD5

    2fc8fd1783afc8ca6d753669e36ce9ec

    SHA1

    5c919aaaae6e5ceeca5c90c3da4fbfe0d11f242b

    SHA256

    9d89375089b4389a96b048431db43cd8475be96fda3ae7415bd05c9b56e19822

    SHA512

    98a632a2eaade310cdd998c822f33ff1ec28325311eca790c08179ac493401204b7de8afa70714504d8461d930a966c44b9a0e357e137ad8831071df2d3778f9

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Registration.wf

    Filesize

    5KB

    MD5

    be98b0ee6c6932e9bd133ccc36a297cd

    SHA1

    0426c8b7c49a85f5fa648d2dc8103b24eaf59a63

    SHA256

    e8efb9fbe782abe835dbfbaf5c791f4c9f474f0c51eeacd5fb58dd002a8b3dd3

    SHA512

    8a45a6fc3c478cb46ea50e425ac045b99e9e034baf9c3c87df37d7861e9c2e22add0f67238897aa9152615ca6979a295a438db6a0f32f1ca161e2709e0c51983

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.ResetPassword.wf

    Filesize

    2KB

    MD5

    576ea027747bef8fdb707c5f764ebdec

    SHA1

    e1dc6eabd459fcb298fad1304366642ab7bf6a5e

    SHA256

    28ebf837be51dd805b0703513e69eb76d91833bffaa6c4b504b16c1e2bf53b01

    SHA512

    7b03ad3619253c62aba938bd1e8725fe955ff196921fa52aff3dd40083a1cceb64a8294b5a5c6753eb128fb2f92f41cabd9b39aa3bbe43006e34276aeb91eaf6

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.Void.wf

    Filesize

    1KB

    MD5

    ec44912ea50f0387ac688df1cd4dfa1c

    SHA1

    bdb7ddfe75384c041b3f17b8405e1bd8a8043041

    SHA256

    20ab43c67b0d44fe9cbf1ed2ec0377a95246862a014376fb921101a3a754a67e

    SHA512

    e72076179ff7e14378359adddc56e85e4df86eb3891fbf5c42ff4bebfc2581edbeac13f6368c6af37b86a5af540f773d0fe2eb366fd55dd3337521431600ef1d

  • C:\Program Files\Aronium\Workflows\Aronium.Pos.wf

    Filesize

    8KB

    MD5

    daeab69dce537bb62c87c5b96d86d6ca

    SHA1

    5db317005da34e2374f819f806c84b16d0384cc1

    SHA256

    a9b0e1c48b74f82d90fb9eaa6b184019c6dc07bd9d14fc4e33ec4d13dcb68f1d

    SHA512

    54fac547b3055a902e3d3b7579ab5c075094d68dc1cb17929da879d50bded8dffc8a985acdcd55a82639f9013407a57b58f8e20d96e182f044c2ec146bbd4ec9

  • C:\Users\Admin\AppData\Local\Temp\is-FH28P.tmp\Aronium.Lite.Setup.tmp

    Filesize

    2.6MB

    MD5

    29da64752e46798018f79a9a0cddcc64

    SHA1

    88036a87694ffbdcc4695c4c4fe895942cc8bcf1

    SHA256

    634e8bda8ce98353e3d9abc276688f8a4bb5496b8c458e0e3eadd45a5ebd6e1e

    SHA512

    3730ef52e398c008ea4b7b8e2e75cab60bfdd6038c5e8ded18aff69a16796bc620be805ebfffa8a915c018190f9a71b1d463eb79e23bd733f02687e69bb44e09

  • C:\Users\Admin\AppData\Local\Temp\is-FH28P.tmp\Aronium.Lite.Setup.tmp

    Filesize

    3.1MB

    MD5

    edf8793c03dd61ef137ec13eb1569b3e

    SHA1

    34f9314553a1bfcabc50be522073d04ce55b0904

    SHA256

    aa898dbf6a13d1e75fe1e57cc3d36d3dd0455b8b6e79751b08c9882d7a5a594d

    SHA512

    077bc3c3edeedd126db702d8351f8b9116bee7bc03804b2bab5280b7c2e8671c25097cfaba101a6782381fba9966b845c1677af22652a5a52ce25909ff77d77f

  • memory/3080-1006-0x00000290B5310000-0x00000290B531E000-memory.dmp

    Filesize

    56KB

  • memory/3080-1071-0x00000290D39F0000-0x00000290D3A0C000-memory.dmp

    Filesize

    112KB

  • memory/3080-1010-0x00000290CF9A0000-0x00000290CF9D8000-memory.dmp

    Filesize

    224KB

  • memory/3080-1039-0x00000290D3210000-0x00000290D3220000-memory.dmp

    Filesize

    64KB

  • memory/3080-1009-0x00000290B5100000-0x00000290B5110000-memory.dmp

    Filesize

    64KB

  • memory/3080-1041-0x00000290D3800000-0x00000290D380A000-memory.dmp

    Filesize

    40KB

  • memory/3080-1008-0x00000290CF440000-0x00000290CF448000-memory.dmp

    Filesize

    32KB

  • memory/3080-1043-0x00000290D38C0000-0x00000290D3970000-memory.dmp

    Filesize

    704KB

  • memory/3080-1007-0x00000290B6A90000-0x00000290B6A98000-memory.dmp

    Filesize

    32KB

  • memory/3080-1045-0x00000290D3810000-0x00000290D381E000-memory.dmp

    Filesize

    56KB

  • memory/3080-1104-0x00000290D4440000-0x00000290D4A9A000-memory.dmp

    Filesize

    6.4MB

  • memory/3080-1047-0x00000290D3820000-0x00000290D382A000-memory.dmp

    Filesize

    40KB

  • memory/3080-1004-0x00000290CF750000-0x00000290CF792000-memory.dmp

    Filesize

    264KB

  • memory/3080-1049-0x00000290D3830000-0x00000290D383C000-memory.dmp

    Filesize

    48KB

  • memory/3080-1103-0x00000290D3D70000-0x00000290D3DD4000-memory.dmp

    Filesize

    400KB

  • memory/3080-1051-0x00000290D3840000-0x00000290D384A000-memory.dmp

    Filesize

    40KB

  • memory/3080-1102-0x00000290D3C30000-0x00000290D3C3E000-memory.dmp

    Filesize

    56KB

  • memory/3080-1053-0x00000290D3850000-0x00000290D3860000-memory.dmp

    Filesize

    64KB

  • memory/3080-998-0x00000290B69F0000-0x00000290B6A02000-memory.dmp

    Filesize

    72KB

  • memory/3080-1055-0x00000290D3880000-0x00000290D389C000-memory.dmp

    Filesize

    112KB

  • memory/3080-996-0x00000290CF490000-0x00000290CF4BA000-memory.dmp

    Filesize

    168KB

  • memory/3080-1057-0x00000290D3860000-0x00000290D386A000-memory.dmp

    Filesize

    40KB

  • memory/3080-994-0x00000290CF460000-0x00000290CF490000-memory.dmp

    Filesize

    192KB

  • memory/3080-1059-0x00000290D3870000-0x00000290D3880000-memory.dmp

    Filesize

    64KB

  • memory/3080-990-0x00000290B5110000-0x00000290B511C000-memory.dmp

    Filesize

    48KB

  • memory/3080-1061-0x00000290D3970000-0x00000290D3982000-memory.dmp

    Filesize

    72KB

  • memory/3080-988-0x00000290B5100000-0x00000290B5110000-memory.dmp

    Filesize

    64KB

  • memory/3080-1063-0x00000290D38A0000-0x00000290D38AC000-memory.dmp

    Filesize

    48KB

  • memory/3080-987-0x00000290CF540000-0x00000290CF618000-memory.dmp

    Filesize

    864KB

  • memory/3080-1065-0x00000290D39B0000-0x00000290D39C8000-memory.dmp

    Filesize

    96KB

  • memory/3080-985-0x00000290B6A20000-0x00000290B6A60000-memory.dmp

    Filesize

    256KB

  • memory/3080-1067-0x00000290D38B0000-0x00000290D38BC000-memory.dmp

    Filesize

    48KB

  • memory/3080-983-0x00000290B5100000-0x00000290B5110000-memory.dmp

    Filesize

    64KB

  • memory/3080-1069-0x00000290D3990000-0x00000290D3998000-memory.dmp

    Filesize

    32KB

  • memory/3080-982-0x00007FFB04A70000-0x00007FFB0545C000-memory.dmp

    Filesize

    9.9MB

  • memory/3080-1011-0x00000290B5100000-0x00000290B5110000-memory.dmp

    Filesize

    64KB

  • memory/3080-981-0x00000290B4D00000-0x00000290B4D60000-memory.dmp

    Filesize

    384KB

  • memory/3080-1073-0x00000290D3A10000-0x00000290D3A2C000-memory.dmp

    Filesize

    112KB

  • memory/3080-1101-0x00000290D3CB0000-0x00000290D3CF8000-memory.dmp

    Filesize

    288KB

  • memory/3080-1075-0x00000290D3A70000-0x00000290D3AB0000-memory.dmp

    Filesize

    256KB

  • memory/3080-1100-0x00000290D3C20000-0x00000290D3C2E000-memory.dmp

    Filesize

    56KB

  • memory/3080-1077-0x00000290D3A30000-0x00000290D3A42000-memory.dmp

    Filesize

    72KB

  • memory/3080-1099-0x00000290D3C40000-0x00000290D3C54000-memory.dmp

    Filesize

    80KB

  • memory/3080-1079-0x00000290D3B00000-0x00000290D3B4C000-memory.dmp

    Filesize

    304KB

  • memory/3080-1098-0x00000290D3C10000-0x00000290D3C1E000-memory.dmp

    Filesize

    56KB

  • memory/3080-1081-0x00000290D39A0000-0x00000290D39B0000-memory.dmp

    Filesize

    64KB

  • memory/3080-1097-0x00000290D3C00000-0x00000290D3C08000-memory.dmp

    Filesize

    32KB

  • memory/3080-1083-0x00000290D39D0000-0x00000290D39D8000-memory.dmp

    Filesize

    32KB

  • memory/3080-1084-0x00000290D39E0000-0x00000290D39EC000-memory.dmp

    Filesize

    48KB

  • memory/3080-1085-0x00000290D3A50000-0x00000290D3A5A000-memory.dmp

    Filesize

    40KB

  • memory/3080-1086-0x00000290D3A60000-0x00000290D3A68000-memory.dmp

    Filesize

    32KB

  • memory/3080-1087-0x00000290D3B50000-0x00000290D3B78000-memory.dmp

    Filesize

    160KB

  • memory/3080-1088-0x00000290D3AD0000-0x00000290D3AEA000-memory.dmp

    Filesize

    104KB

  • memory/3080-1089-0x00000290D3AB0000-0x00000290D3ABA000-memory.dmp

    Filesize

    40KB

  • memory/3080-1090-0x00000290D3AC0000-0x00000290D3AD0000-memory.dmp

    Filesize

    64KB

  • memory/3080-1091-0x00000290D3BA0000-0x00000290D3BC0000-memory.dmp

    Filesize

    128KB

  • memory/3080-1092-0x00000290D3BC0000-0x00000290D3BD2000-memory.dmp

    Filesize

    72KB

  • memory/3080-1093-0x00000290D3AF0000-0x00000290D3AFC000-memory.dmp

    Filesize

    48KB

  • memory/3080-1094-0x00000290D3BE0000-0x00000290D3BF6000-memory.dmp

    Filesize

    88KB

  • memory/3080-1095-0x00000290D3B80000-0x00000290D3B90000-memory.dmp

    Filesize

    64KB

  • memory/3080-1096-0x00000290D3B90000-0x00000290D3B9C000-memory.dmp

    Filesize

    48KB

  • memory/3596-6-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/3596-9-0x0000000000400000-0x000000000071C000-memory.dmp

    Filesize

    3.1MB

  • memory/3596-594-0x0000000000400000-0x000000000071C000-memory.dmp

    Filesize

    3.1MB

  • memory/3596-980-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/3596-999-0x0000000000400000-0x000000000071C000-memory.dmp

    Filesize

    3.1MB

  • memory/4476-8-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/4476-1000-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB

  • memory/4476-1-0x0000000000400000-0x00000000004D8000-memory.dmp

    Filesize

    864KB