bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412

Resubmissions

30/08/2026, 23:08

260830-242p6stxfy7

29/08/2026, 00:22

260829-an59wavtcz

29/08/2026, 00:05

260829-ac7nkaed727

05/03/2024, 08:25

240305-kbamjsbc9310

Analysis

max time kernel
1527s
max time network
1181s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
05/03/2024, 08:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
setup_katana_zero_1.0.5_(30035).exe
Size 175.9MB
Sample240305-kbamjsbc93
SHA256 bdcebe6b1337d638c2570d9781583fffff590c060afca21ede8493b7174de412
MD5 275a3642a506819785178b133848fe36
SHA1 7af438e1754c7a8f277edb03ab05f6f22331ca67
SHA512 c660cf70d55773c3769b765de0e5ff16fe00d8746ab0179ef3a4fb5bd0044c6b43d9a38489579951351676d7b8146dd90324ccc1511d5f8decf1012be0c53b6b
SSDEEP 3145728:NpIC3SSlwLXoA/EIjpDai1L7BJfmiGn2RMWAPBsFsMGrATwVhO12lBzOHBKjjtB2:NpICicgoA/EIjd9ff5WWA81Ue2l1OHB1
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 6 IoCs

pid	Process
4324	setup_katana_zero_1.0.5_(30035).tmp
2680	vcredist_x86.exe
2324	vcredist_x86.exe
656	scriptInterpreter.exe
492	scriptInterpreter.tmp
4296	Katana ZERO.exe

Loads dropped DLL 10 IoCs

pid	Process
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
2324	vcredist_x86.exe
492	scriptInterpreter.tmp
492	scriptInterpreter.tmp

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
1944	icacls.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4324	setup_katana_zero_1.0.5_(30035).tmp
4324	setup_katana_zero_1.0.5_(30035).tmp
492	scriptInterpreter.tmp
492	scriptInterpreter.tmp

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3304	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3304	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4324	setup_katana_zero_1.0.5_(30035).tmp
492	scriptInterpreter.tmp

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4296	Katana ZERO.exe
4296	Katana ZERO.exe
3224	OpenWith.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2412 wrote to memory of 4324	2412	setup_katana_zero_1.0.5_(30035).exe	80
PID 2412 wrote to memory of 4324	2412	setup_katana_zero_1.0.5_(30035).exe	80
PID 2412 wrote to memory of 4324	2412	setup_katana_zero_1.0.5_(30035).exe	80
PID 4324 wrote to memory of 2680	4324	setup_katana_zero_1.0.5_(30035).tmp	81
PID 4324 wrote to memory of 2680	4324	setup_katana_zero_1.0.5_(30035).tmp	81
PID 4324 wrote to memory of 2680	4324	setup_katana_zero_1.0.5_(30035).tmp	81
PID 2680 wrote to memory of 2324	2680	vcredist_x86.exe	82
PID 2680 wrote to memory of 2324	2680	vcredist_x86.exe	82
PID 2680 wrote to memory of 2324	2680	vcredist_x86.exe	82
PID 4324 wrote to memory of 656	4324	setup_katana_zero_1.0.5_(30035).tmp	83
PID 4324 wrote to memory of 656	4324	setup_katana_zero_1.0.5_(30035).tmp	83
PID 4324 wrote to memory of 656	4324	setup_katana_zero_1.0.5_(30035).tmp	83
PID 656 wrote to memory of 492	656	scriptInterpreter.exe	84
PID 656 wrote to memory of 492	656	scriptInterpreter.exe	84
PID 656 wrote to memory of 492	656	scriptInterpreter.exe	84
PID 492 wrote to memory of 1944	492	scriptInterpreter.tmp	85
PID 492 wrote to memory of 1944	492	scriptInterpreter.tmp	85
PID 492 wrote to memory of 1944	492	scriptInterpreter.tmp	85
PID 4324 wrote to memory of 4296	4324	setup_katana_zero_1.0.5_(30035).tmp	88
PID 4324 wrote to memory of 4296	4324	setup_katana_zero_1.0.5_(30035).tmp	88
PID 4324 wrote to memory of 4296	4324	setup_katana_zero_1.0.5_(30035).tmp	88

C:\Users\Admin\AppData\Local\Temp\setup_katana_zero_1.0.5_(30035).exe
"C:\Users\Admin\AppData\Local\Temp\setup_katana_zero_1.0.5_(30035).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2412
- C:\Users\Admin\AppData\Local\Temp\is-D9VV0.tmp\setup_katana_zero_1.0.5_(30035).tmp
  "C:\Users\Admin\AppData\Local\Temp\is-D9VV0.tmp\setup_katana_zero_1.0.5_(30035).tmp" /SL5="$60082,183845417,192512,C:\Users\Admin\AppData\Local\Temp\setup_katana_zero_1.0.5_(30035).exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4324
- - C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
    "C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe" /install /quiet /norestart
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:2680
  - - C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
      "C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe" /install /quiet /norestart -burn.unelevated BurnPipe.{6CED30F6-9A44-4B49-9E97-80335B5F3810} {4665DA70-A596-42AC-8D51-E53454E262C3} 2680
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2324
- - C:\GOG Games\Katana ZERO\__redist\ISI\scriptInterpreter.exe
    "C:\GOG Games\Katana ZERO\__redist\ISI\scriptInterpreter.exe" /verysilent /supportDir="C:\GOG Games\Katana ZERO\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Katana ZERO" /productId="1557080015" /buildId="52336036425347663" /versionName="1.0.5" /Language="English" /LANG="russian"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:656
  - - C:\Users\Admin\AppData\Local\Temp\is-VBN38.tmp\scriptInterpreter.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-VBN38.tmp\scriptInterpreter.tmp" /SL5="$30212,572759,192000,C:\GOG Games\Katana ZERO\__redist\ISI\scriptInterpreter.exe" /verysilent /supportDir="C:\GOG Games\Katana ZERO\__support" /SUPPRESSMSGBOXES /NORESTART /DIR="C:\GOG Games\Katana ZERO" /productId="1557080015" /buildId="52336036425347663" /versionName="1.0.5" /Language="English" /LANG="russian"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:492
    - - C:\Windows\SysWOW64\icacls.exe
        
        "C:\Windows\System32\icacls.exe" "C:\Users\Admin\AppData\Local\Katana_ZERO" /grant Everyone:(OI)(CI)F
        5⤵
        Modifies file permissions
        
        PID:1944
- - C:\GOG Games\Katana ZERO\Katana ZERO.exe
    "C:\GOG Games\Katana ZERO\Katana ZERO.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:4296

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004C0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3304

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
PID:4576

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Katana ZERO.exe

Path C:\GOG Games\Katana ZERO\Katana ZERO.exe
Size 10.3MB
SHA256 ff36e3a9ab704caafdeedaef7fc9cd3a6d04f4534790988482bc86affeb1df70
MD5 cbe767260ae83cb5e6dd4f8cdc6f909a
SHA1 3370fc10f5f320bd547d761cd84c0e4088c4b7bc
SHA512 60be547611af179ed574197fe284897f8b282194bbb300a1cc4026bed3e9769900e2fcad3f133a09b1e57894c1bb4ae07fa3579f3f3182912b8d61bcfa086473
SSDEEP 196608:QZX3Xs1fzBtuW2Ah9jD6DsDoaw2m0M42Ysqar56Fg3fFVLvIDYOALIv5qRAWUY+B:/Ucd+2mY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Katana ZERO.exe

Path C:\GOG Games\Katana ZERO\Katana ZERO.exe
Size 22.6MB
SHA256 4fe3ce70ace9de5f9c5655fec02044183d0f3969e86b970d854f818d257cd8b8
MD5 49f57a3b94953cbfcfeec08f3d898585
SHA1 9b8cb3aa85e82cd980553cdd9643bcf75e9b877b
SHA512 4e714c9dc9e739793016794fe93f2e2c0e091e0b36c7b317206a9bc0e8c3ae8d9451745094550f7954d72fabec744c4edd8a44f3b7d40d2184b3ae35b3be5177
SSDEEP 393216:/Ucd+2mGJuKMIFJB5FXA0ztxjfLVWeyiL6N6b22ki0Ca//gpaOs:/U+0GoKMIFJB5FXA0zTfLVyiL6N6b22o
MD5 SHA1 SHA512 SSDEEP

Submit Download

scriptinterpreter.exe

Path C:\GOG Games\Katana ZERO\__redist\ISI\scriptinterpreter.exe
Size 1.1MB
SHA256 b895f6999c4b7ed7eb3f85c17af9167d12017cd1f5ebc8755adeb969ef4b7fb4
MD5 2e87c207550a0577279abc82aea68b14
SHA1 6ee0b9e5914c742b3e3c5ca626ac79eb4c5866f4
SHA512 dfc48e023dcfd7bdf519961bd3d787c1dffc85dee39861db83638e2ee99ae32bb3d9a66aeabdf27df65e2079d844490af1c03fe7a0b4e110dd53018a90fe936c
SSDEEP 24576:UEft1NCyRWXQ7CwloeMGJW+5jdIWhwdpP8xsH:xLgPQpoeMGxLImIbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 12.0MB
SHA256 faa7205ebb697cee112913e2de4cbd567241db35e89184daa1e54ee6f8371bda
MD5 61066179a1681ac43c40f94343e76dd6
SHA1 1959a1e30f608e9ffd4b1cd20757d6cf681a201c
SHA512 b7ae1d24006062f344aeb750f0086141b24c2029db95b528d81012f37623a9565e2087151b1f278a40c2ba2dcbecd65123fd2bfecff1cbc20972888728a2e844
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/URFMq6cZs7WekAs9If14WWcEiR5mzP:ZLglp+dkBSuF2SfUfn67qekA7fVswBCd
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 6.8MB
SHA256 1167d15da89bc40b15bd76296d3333e2885e07d1fd08c21165da630a76bd224e
MD5 40e21a9655bf55796c03b9ecd8276804
SHA1 933e5969aaab1a2f890144fa258b757ee407a6ab
SHA512 c7fa25ca87bcf843d7656e5557c22e47638dd1ce1d5d44356335eaf3ab861df77fa63a78586dd97274fa2d2ef08d2b9cecb2e1fe9d2c5dbb46475adce216ba08
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/UD:ZLglp+dkBSuF2SfUD
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 7.8MB
SHA256 29a36d91eff82028a0e671bfede27e12a58a49e9ba63c4d18cf6b7d5ef4cae93
MD5 9fded5af6b51647c6597bad045fb5606
SHA1 3a298cf48db10ad20e4b35cbe04dad3f021fe8cb
SHA512 05e473bb025a34aadf0fefbeefb41e854b7f03b43045a469fa648d50e76199fe4d4b959e5f606e4b5b5f5caf22f0933cd83dfb9ed72d60f09e8aa127f496bff9
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/URFMq6cZt:ZLglp+dkBSuF2SfUfn6c
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcredist_x86.exe

Path C:\GOG Games\Katana ZERO\__redist\MSVC2015\vcredist_x86.exe
Size 8.4MB
SHA256 4f69cd491381ec83146529f2b3dc2c6b57e70f771f82818509cda046042e48a4
MD5 00c45d14d57d730efbe310c0b58c0aba
SHA1 753567dd5635f9f7e247cfb2508a94be3b8452f4
SHA512 cf27ddad78503b6d4e43b131293de0c0b5d26aaed593e111c51e8fc193220ec630a8fa300a09d74380a717830e4f8b5a1475a1e4fe77fd3068d1bbb536cc5d36
SSDEEP 196608:yguOzjCPlpdcdklRRvc5wIsj5MSBP8STr/URFMq6cZs7Wek9:ZLglp+dkBSuF2SfUfn67qek9
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup1.dat

Path C:\GOG Games\Katana ZERO\audiogroup1.dat
Size 576KB
SHA256 55b5c6d1c1361320235bd36a88c7f76afefe5cb99d5570b545cd3c6285a43800
MD5 b05127e858d8bbb050f5d36651e0967e
SHA1 a297548b15ce3dd250b8776f5300f1055c1215b4
SHA512 056f4600508067083f4751ed53a4bfe794b55f2581a05081080ef27493822850919f2ae56a55cc852439375c43d3b015ac6d0db7cb5572a752d2998c43678b5e
SSDEEP 12288:Yu1fc8bDJZYOUVnwvhoXQjnu8JUhG9w2/vYCjcc:YKc8blZYJ9wvhoAbuaUhG9r/v99
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup2.dat

Path C:\GOG Games\Katana ZERO\audiogroup2.dat
Size 384KB
SHA256 47268ecf8d95c91efdd82cdf65a414cf35a668aef685951454b3a231693415c9
MD5 2f18ac00b560e4293368e99253731743
SHA1 22b629b22fa24214667c0ba03fdf378cd23daa5b
SHA512 20b76308765d0b5f9ade2c091e1f90dfa231f596624e37105e2e1d55953c8f57ce769701ecec004ff15ed3bcb8e3526126d7f0b27c9861a7a113d64c31c8ddb0
SSDEEP 6144:yxSuXQXrquWZ3YkrXZ5yATl9dgOYuFwPIq7vqaimIIOfIKapU6ORtwUyR8qtB3vy:y0SMrjsXZp9dgOp4rqa+BfBapUzQRblk
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup3.dat

Path C:\GOG Games\Katana ZERO\audiogroup3.dat
Size 512KB
SHA256 648ee3828b8d02ee502c544dd91a26238996ec40600b43fe994c385a12b66c95
MD5 66e48b909bb878b16822064442f66340
SHA1 b8da7d159f67745b60fa61169c2bcd60cc2e659a
SHA512 d9e84c65e857300f5f35d8f085ec95dd56fc275a0a429e9a3837eae93062303126e551c458329e53fe6f022ceb85750a73e3422b1dbd2b8f825789ecd65499fb
SSDEEP 6144:BPjJlsG1yOsnkHsxi1llVacMvGPJ4QgXPGtXsIWCfJxSV0:BPjPr1QkMx0lxh4QqGt1RI2
MD5 SHA1 SHA512 SSDEEP

Submit Download

audiogroup4.dat

Path C:\GOG Games\Katana ZERO\audiogroup4.dat
Size 128KB
SHA256 4b1e551e15c023758e08f81a5a31756693261922ad6fdc9e46ae0246e8dd6dae
MD5 30e8948eabb3fdec92a998c7d9e43cf9
SHA1 dcdb14b46638209a1ce2a4704fcfdef092508302
SHA512 647bea2e1d922835ae37fb803117d73700f3198d25416b5ffdb9ef4e945fc57989af7d201dba0cfe980f9362247a0f417a6b980808cf580a89489dc1d572e802
SSDEEP 3072:0Ar2Rg72nZQchKGqWoBfiQtG8x8Ux7VdGsdTksXxiAXXF:0xiEhoWYfiQtGzURVUs+MNF
MD5 SHA1 SHA512 SSDEEP

Submit Download

data.win

Path C:\GOG Games\Katana ZERO\data.win
Size 57.6MB
SHA256 0a204627a74f01e68dcd9a92527f42188a718be857499b3754a69c5d809da077
MD5 9bf88f42c89857618e5daa9d273bfaa2
SHA1 f20acaefe6850e2847c604b2eb9b0d931a867663
SHA512 f425d1b87ae85addb0be635816f95dde69f0fd822b005fddd8bc1a7a710ba99f03d874c7cc54416e6573d6aefa79cfa719f7a7ced408a9ffb330b18459ae3f0b
SSDEEP 786432:blFcd5E7Lexj3dX+92638JZ0J/fHxoYLYTPMr9e3umuMBYssISm60/4g4:dexjNO9ZMJZ0J/vHJ+ucBYsJhQv
MD5 SHA1 SHA512 SSDEEP

Submit Download

goggame-1557080015.info

Path C:\GOG Games\Katana ZERO\goggame-1557080015.info
Size 767B
SHA256 94dd82645544adce43123cf3f1d741871969c81d4083ba1acc4889b6375d2c98
MD5 f01988a46044d8b8a6fcd5142d78543b
SHA1 d66e3540e68f45baf5d392a4e57ccdf26f480398
SHA512 b72ee86e15583b41f0824c4636e07b1cd06e759705a35eed02ff3bf957e670089e99dad17704b8ef83e1e1d8bda635529c822ec3123e9082663106876c185f98
MD5 SHA1 SHA512

Submit Download

goggame-1557080015.script

Path C:\GOG Games\Katana ZERO\goggame-1557080015.script
Size 399B
SHA256 ed0d0692bf89808121c3bc32b6b4016ce3ba9e6a4d43e199fef802f83cbcf9d0
MD5 53e7ecc9498f87f0195d25207fc4b09f
SHA1 40736cb8d001ef6ed611a67d178f208ed5b9f642
SHA512 c6853cbb70e9b1791d62f2e7f3cc0a385dd1f4327a635fc1bd098776edce1473b1a07c59549730811b10879c5b55ecb81c87167da39036b388dffe5cd3fbd862
MD5 SHA1 SHA512

Submit Download

song_levelselect.ogg

Path C:\GOG Games\Katana ZERO\song_levelselect.ogg
Size 1005KB
SHA256 f643e903b4aaefe750881d9cbd235042c66f48efa794e48cf80f2d14a774801c
MD5 0d5eca20015f58e342406450f5de53c7
SHA1 55b164b551d79f767aa2c9e3a7e4a4262e8671aa
SHA512 8d05e281e555936bda22898d519858ad66720a8e36daa6e4483a9ba2ba4f138c8b0a78699b5d9f8cd379fb58236509d2d761637ce838bc7f19759635b61db54d
SSDEEP 24576:fi+E7ywlhxPjiiqKsDgyd9EM34j6rsIpTIeCGIqSLejqmvrLsm:zQnVPN88SEMI2rXTIetrLV
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_rainonbrick.ogg

Path C:\GOG Games\Katana ZERO\song_rainonbrick.ogg
Size 817KB
SHA256 cd394d7c70ebb828e42b9a2656d8a4b46a1a38a98a0be83299c1038b6ed5df54
MD5 140e479464430d59e53b715d6d919379
SHA1 31730879b4f2dfdcc2e3bbb697ceb148573f6516
SHA512 ea8bf718fd50679c8280c34c629d8b042862a6623993493c4f6b936595b78670d861f9774f8a6018d02beddc840111dd522aed0c973048748cb01466d2e24e38
SSDEEP 24576:CeLC6EGag/QQmVkU6UBReH7nprjnYhYhE:sW/QmUBMbnprUhB
MD5 SHA1 SHA512 SSDEEP

Submit Download

song_silhouette.ogg

Path C:\GOG Games\Katana ZERO\song_silhouette.ogg
Size 2.4MB
SHA256 b6dbc6eed668749c2a63c9952c62c91de91f843919c8b7339a4692298d601639
MD5 9334598285296164391be9e938f61a46
SHA1 917fef29d014fe4b6bb51429892dc4954a6f371e
SHA512 1a6c2489974782cc151edd5ae9d0c83b67e8208f24fbe9b8c95b212223ecca8af452003bfb7a1e82cb540f7884ebbfad8775b765365eea10966d3c82262f08ec
SSDEEP 49152:mGA3bpND/Jm6cF7yFyQacmTDU1Al+72Kks9d8mf/iOfJdQg3uZLc+U8:ID/Jm6cwAfTAnf19d8mXRJdT8
MD5 SHA1 SHA512 SSDEEP

Submit Download

splash.png

Path C:\GOG Games\Katana ZERO\splash.png
Size 637KB
SHA256 0ee0e3e046da7600eb7323f9e9af22712894a0b5e946c2943ed9032a57781579
MD5 ec9531aadbd3ec6a03eb4e7f68f6f75b
SHA1 b3040cb7254b9cbcfbfda05c1866870c73ef1d73
SHA512 7ec3dd5195b1595f1c3fff9a37b67a9f552378d3329d118c1eda6b599c5effbaa7f455b4f35d88ce40ca6e57c89aefdea2e9b56868eb0ae14ced3a5f284f6665
SSDEEP 12288:9Qxrux4YMM7CTsNUyDKIoPNfjScVL8tm9AtfAMtvKg:9CF2U3NNfLL8tmStvKg
MD5 SHA1 SHA512 SSDEEP

Submit Download

unins000.dat

Path C:\GOG Games\Katana ZERO\unins000.dat
Size 369KB
SHA256 d0537a32cc0d33359ea5046fe2da0da9768602f0b3b13644596b52d78dd5d94d
MD5 fb6eb97a97b09373aacd3eacfc690776
SHA1 4b44316f22a5827fe95a99521f8e5774d17c74db
SHA512 1b83f46311218937f0a4a1bc3dd83cc762cdba79f9d365e495696ce2ac0131b8d681eca3f18ad4789d1deb605bbbf37ebfb3eec25c35c79f9c06faad50af0ba3
SSDEEP 3072:LsgKpZOaKhNkC+7uFNpmbKa/x2SvmaUoArn4Imyme:XKp9H21
MD5 SHA1 SHA512 SSDEEP

Submit Download

unins000.msg

Path C:\GOG Games\Katana ZERO\unins000.msg
Size 23KB
SHA256 355172763a74fd034a1a665e832acfad8f4b4670458d6e10279bf1dcb8d6dc4c
MD5 8877ea3fb95053ef855405452c021fd5
SHA1 8a7a4e8609215549cb2e4586e293d9f899cdceaa
SHA512 0d0493ead68a957986d982c4e02e69f62ed1ac43f0fee8c1f33873984efdf276fbd4538473e4e9e65f6ba8d3ba6312db8dd5e454dbb70bc4f3c6e4698f000d48
SSDEEP 192:jQ/8s947IbwvhuWV5U7fclU3qGUlm1yYQIqhHX9lQtlyIq+SOqyNKwkr/gRouoTm:80s98WaKP3QwdQz3HQSOqVNBe8Rm
MD5 SHA1 SHA512 SSDEEP

Submit Download

setup_katana_zero_1.0.5_(30035).tmp

Path C:\Users\Admin\AppData\Local\Temp\is-D9VV0.tmp\setup_katana_zero_1.0.5_(30035).tmp
Size 1.3MB
SHA256 87c07a864e6608f629d76350d65b6f43b603512ad2c8b2f8a2d3fb97d82d1e8f
MD5 03082a6a1e000a77be6a5b921c69bbe9
SHA1 1b9c52a40198158f0cb85ff3f48af0d6416fac8d
SHA512 75d6aac90c3d698158763567b584bfce2c52d64e50b95b6e04aa36a48198f1a6b4125a3a2bdfab68a945d61c2ef45b1fe94755c39dfdf6b9b57b24225934edd8
SSDEEP 24576:pgNfn7OOXeL7dJ/oOP9pjA0fY2Mqz9JT7ytfsxjHElkLD229Oqkipt1NCnqxjVx:6tTX6THjACMq/xCaaMksgiv
MD5 SHA1 SHA512 SSDEEP

Submit Download

1207658714_russian.jpg

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\1207658714_russian.jpg
Size 123KB
SHA256 54b570a31d21ccac124ec399ba447801704e36b9585604e97412eaa5856ae3be
MD5 b441faa02e108da808274955adab990a
SHA1 9426299b31b9b38c0f5e6a13037ec2042a058470
SHA512 4502dd315d70c8c48956384dec2970cdbf80abf98c331eb83e0c09e77191b9af5ff19a5e8ff8b863cae2832440db87069a7953dec820d433941aeccb841397d9
SSDEEP 3072:vHGRzbq42L+ugCEL9p16UMDRYgK51KXR70T9vNsKm+iln+Jh4ztYH8Zs:62mCS1NzgKYIT9vNsKbM+z4zY86
MD5 SHA1 SHA512 SSDEEP

Submit Download

1439474400_russian.jpg

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\1439474400_russian.jpg
Size 174KB
SHA256 21784068974e5b7e3c8c1f9a9c4cc825118b07e538ee1f5ed04588970547a1d2
MD5 8d42509a7905edd54ccfdd18a0da81b1
SHA1 4cea841d362a18dce6e5991656c77682c3cdfa15
SHA512 b2f9182220b5f322095dc7af22b768dea07d2e78cf2f493fadd32d0bb286b47993fa5f8f402b52d37d347bbf37e69c9e3496acc2ca715a71c296554d185bab17
SSDEEP 3072:OsSJ3N0Ybaf7k6pcwn4xK+vvG6JtVNBhKn1hqMW6TKTdA6fRu1ko5:dSoYbaf4oZn4xJvTLNBc/dadzf4yo5
MD5 SHA1 SHA512 SSDEEP

Submit Download

BigOK.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\BigOK.png
Size 3KB
SHA256 59d8bb3e87a89ef523c0495addce38d69560af42aaa82f56dd41b12e6612c13a
MD5 5b43a5d975a53f4fc1da67ce9f7784c1
SHA1 8543fa1e471030049942252b23cb22e0880c3af5
SHA512 5dd5c4e9859a555a4a32da76f5231b44f7556274c6501da530b2cdd570bcb4675f710bee708322a40ed3ef9280c0d652b4e7ef0e9eaf128c08534f59291917f5
MD5 SHA1 SHA512

Submit Download

EULAAccepted.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\EULAAccepted.png
Size 2KB
SHA256 0de278f5ca6d8570d9bda592268a14a28b87d3631fea2d25721947397aaab79c
MD5 461dfeb75927bdb39f9db5348612a611
SHA1 b7893b1fff6801e37ee7337d876962a09184941e
SHA512 68528cf45c81c2c024a672f42c2cd6d4f72c015b443f103ca21deb8ee2bec4f4027490e7f33b5338a87537b5bf7f255f2828aed149f622155ec89cc81687651b
MD5 SHA1 SHA512

Submit Download

EULAShow.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\EULAShow.png
Size 1KB
SHA256 6112851daea2aaa7174e8cfac4a0f61c968bc090342503804c476eff47cc2462
MD5 c596bc9111edc702bbbb29b70984254f
SHA1 d4712c7b91ff4f8994e7907d31357c42eb47c738
SHA512 db50d0a39ec644873a03d64552fff1776cc94f016e8dfc8918e65aee94f7529a6de4637567b5e65c4ea988f3775785c4b52c2d96fe8dbc52b1e21ff59c737c2a
MD5 SHA1 SHA512

Submit Download

GOG_new.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\GOG_new.png
Size 3KB
SHA256 0804b385c1736e009fe8c3b1b14085b9b9abb40ce487360002ab4a8f3505f4e0
MD5 d5b63bdfa47ef5954917c148bacf7b13
SHA1 5302c6715d9e9b5d2768b130f3e516e175684cc9
SHA512 b5cde681be9ad1c1211559dc4b363003bf547e8dc965dbb9560fdddfc28ee1d8f27cc534dd00864d800fd351c48694d7dc8df55fc3d8d69acf8b702c7b421aa9
MD5 SHA1 SHA512

Submit Download

background.jpg

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\background.jpg
Size 383KB
SHA256 4bb388de79ab74a81ffdab24b6969d63245fea259043ff3d8da44969f78d03ed
MD5 f2d4829d52037321c5ddea452034fea5
SHA1 871a5a48fc3dfedfac08eca3d6e865a853d62202
SHA512 923c7ff925fcee7e2342a4a1ab93fd4da1482607da0313c3c78c229aa4555ba79d308d85f04805d2db19ce634afd08594e7de7f7903a6268f4a4b5a53871c613
SSDEEP 6144:FGCsxs2/ZcUbneeY8rFty7aRi9MjwKFXLqWdF5gX4NX91d+FUnsU3HEC9N9pbw5s:oxs2mOneN8rFuaRi6ZqWv5Q4NXLMLU3J
MD5 SHA1 SHA512 SSDEEP

Submit Download

botva2.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\botva2.dll
Size 35KB
SHA256 a4b61626a1626fdabec794e4f323484aa0644baa1c905a5dcf785dc34564f008
MD5 0177746573eed407f8dca8a9e441aa49
SHA1 6b462adf78059d26cbc56b3311e3b97fcb8d05f7
SHA512 d4ac96da2d72e121d1d63d64e78bcea155d62af828324b81889a3cd3928ceeb12f7a22e87e264e34498d100b57cdd3735d2ab2316e1a3bf7fa099ddb75c5071a
SSDEEP 768:Aoi9qZO9Q4rAJa4debLTMkUuzXIu53w4eGlV:Av9qZMQVGLyu5r3V
MD5 SHA1 SHA512 SSDEEP

Submit Download

btn_md5.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\btn_md5.png
Size 8KB
SHA256 b0193ab375f604fa4a25cabdea8f713babde1c07ab562ffc5679352c8e01db47
MD5 3befe9739354ee24a0b1ea8df05ce274
SHA1 ab0bda986a8c46aa19f57b75a2b7b22445a3c625
SHA512 ac016a59e0bfc9b22c376ae5d498c5660893a983d932b2bd502dabe032883c69e79ea8d93c2db49f95415c3cdb068e9f7d1d85527a4f9e68e065a989852d09dd
SSDEEP 192:+CgAPOTLq6/bkYNuQJA6hcxuGcjMTch2kmBm/5o:+IPOTLq6oAANOjTh2kmE/S
MD5 SHA1 SHA512 SSDEEP

Submit Download

crcdll.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\crcdll.dll
Size 69KB
SHA256 23e90ce5a1f2d634a7bf5d5d0522fafeea6df9e536e16f5ce91035d5197128ec
MD5 1d51fac9e2384eeb674199cfd5281d7d
SHA1 861dfdc121357d605d0cc3793266713788109eb2
SHA512 921b00adfe43b883200960e8d0958d4e6b97f6d5cfc096ee277766a3e44cc7805a20877a4edf8bd4d9102bb71a20ac218a9a512f4f76bd751d3ef14f4e0a6eda
SSDEEP 768:tCrczqrdE7n1KuGUlKTs3RLflC7ZWL/sebzx7jMKkkg8dODMh1MK/N58n:tCrczqJ8U5s3R7lYZWbzx7jPgRE5
MD5 SHA1 SHA512 SSDEEP

Submit Download

error.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\error.png
Size 726B
SHA256 142b16dc6239421691fa6e619d1a61e61176d89fa018a88b46893c29a57aad8b
MD5 df10adc25b673e74e19971c17bee5a98
SHA1 ee16fb1cf9491f5e611282f0574b27d76fede412
SHA512 dc3de10e0321966cbbfb2e57b3b41da6f26dff0c7233a47469da58775b5c471e6b5181e4d4ffc81ef8b83dbcad74ccc1aad7678518f99c9185a441d2a23e010f
MD5 SHA1 SHA512

Submit Download

error_icon.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\error_icon.png
Size 1KB
SHA256 acdf96ee4261fae138e6350a0ad50b367022ed5b908fa168baad92644f566ee8
MD5 263720c4b8bb111567a2a49989b8f467
SHA1 cf346fa3c70164648e0eaf72a37c6f4920ab4792
SHA512 94f06a81dc735cf264abde86e6169e5fd78d873d2e926fd48287d2ac5208fc930c3c432186e3510add002bd1b4ae32ad8d35270b17c3ce5f18c43764a8e9de43
MD5 SHA1 SHA512

Submit Download

innocallback.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\innocallback.dll
Size 63KB
SHA256 6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f
MD5 1c55ae5ef9980e3b1028447da6105c75
SHA1 f85218e10e6aa23b2f5a3ed512895b437e41b45c
SHA512 1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b
SSDEEP 1536:+VqUE7JhgAzj/ZuhnOwKWSAXvze/V2C0mswp91:gWgAnB3XDAqt/p91
MD5 SHA1 SHA512 SSDEEP

Submit Download

ok.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\ok.png
Size 1KB
SHA256 0d37d4421a39ca8852eb6760b8e914302bdc6cfcc7b170dc1b6c9bb9be148b7e
MD5 103c1368e60806b1b7995a0894eacf87
SHA1 971392527f6e4b655044773132505c901a6b5469
SHA512 652177e94438aff102f2ed873b26f0985ebed134763852b49b1ca2698463c1dbeb85152f19c8e18d397229ec5cb2cd1d17c61d454ab7c425a2cab540adc8228a
MD5 SHA1 SHA512

Submit Download

progress_center.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\progress_center.png
Size 1KB
SHA256 2b9dae87340e66b67ab1d8247d4a137628e324969f92fe1098f95a7c5bab2f43
MD5 ad7fc1e37e40da38dd57adc446cc6c0e
SHA1 08033265deb9b45243cfa0065d98ffe13a039e26
SHA512 dd715d74f8e1ed6ab75b7b6530b383ac47040d8baa7728be160f6d230bf485a9cc54f15f7dc85b122ce56e54d63fa4890e510dfc89d9c9344e31f789ebac8756
MD5 SHA1 SHA512

Submit Download

progress_left.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\progress_left.png
Size 1KB
SHA256 85e39d909a7300fa2043ec42818582867b981401264b14fc5408e477ae0b4668
MD5 290c7612ad7a077028cd3dc78ce99673
SHA1 18995fbe39d05e4a1cafc7cc2e0f6fb745442f77
SHA512 799841f5b8a1056e78a49c823009750e4b93af130a6c4ff9dc6d386c06b88614e53b46a6df62f5a217d5c99da01cf4e2fe8392c73d39e81000045291cf24205a
MD5 SHA1 SHA512

Submit Download

progress_right.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\progress_right.png
Size 1KB
SHA256 396a3351fe409328782ab138282cf9cec061a5a9540a3506700a620db1f54e7d
MD5 c25a41f022a74308d944d1e807d72f44
SHA1 83c6bbec3fb373fcc78ce0e737742100994cd6d4
SHA512 d2f4449195f3e60c826cfabb52a083d829eb9d0509272977d8fdb33bc5214678949cd27d0594684594e0a3eda2351c39cec8d91923cb716ad144ccf2b966c8e6
MD5 SHA1 SHA512

Submit Download

slideshow.ini

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\slideshow.ini
Size 261B
SHA256 3614059e549ae87a8130e785bdcbf88e44754c6d1ab458969fbce119a4eda6cb
MD5 2332fd96a1f83a3c31e4ebe6e540adb9
SHA1 6442cbc120e8da8751f21b4a880e9038cd25b9f0
SHA512 4be2f5ca70843266fa21e1a045037823e0f4211358daae544f44f348819bec0070285a1e185aad0da94ea07dc0f2223f00ab6fc73e93583d0fbd30c1f7acf207
MD5 SHA1 SHA512

Submit Download

track_center.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\track_center.png
Size 1KB
SHA256 794f9eeca7fd99846968376b76a296c927532cef1271325cbf555caa0d0d5860
MD5 3f2b0c22f8ea28dcbb82b39a16a039aa
SHA1 b3f4dfc2ea86fbdad05877b4c356b7fa8016731d
SHA512 b4bf65d751717e85418947662d315ae3bcb177f60914832fefeeb95da9eddb75eb5531c62e5a5a70ff03c8a025b5a03e61ffbdecc9f483bea9684454ca9362d3
MD5 SHA1 SHA512

Submit Download

track_left.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\track_left.png
Size 1KB
SHA256 a8340fb5380c922b60ea40043590dba067dcfed6e22636851691df38156a3aa8
MD5 55dacb00cbe2825a8540236c5777a205
SHA1 18a52ac6c741b558500fbc1716d46b4fe4471982
SHA512 2ea444cc1080f20761c8d71d96fcd04ef48254cdc1dc41d1d139f459ea5613fe12f6e4bd026bf33a5c01ff038e72e05dae2f8fba33ff517dd395e1911f10ff10
MD5 SHA1 SHA512

Submit Download

track_right.png

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\track_right.png
Size 1KB
SHA256 f54cd6e42f2b2bc5cb8a15f6a28f1499abf094a519ebdf39f4c4e167312c9c16
MD5 ddec70b6c49be3e8c3a7d01c2f6ff1c5
SHA1 5383271999f787c36b1dc8f3cc13c8407b195439
SHA512 f43f94b194b5a7eafcec9e831f61042859c30e1af2e2447195bdd06b12c90982181161a1c1be5aa5223ff664f88e4891bd71cfffb7ef672d6fe4f614030e0e01
MD5 SHA1 SHA512

Submit Download

uninstall.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PTAJ9.tmp\uninstall.dll
Size 691KB
SHA256 cc685dbcf798549ad1a51c1dde45462e2a451ec59f48ee91219182a3871cd5b0
MD5 7db706c324cc9b6fda497d081eed6e26
SHA1 ca97392e573af0cf61bfa3301801a85f2beea44c
SHA512 8edf1494d57d5e708faaff4170f21f435658be897a6fe0acf243ced0701a7fd574b3c973c5bc5e8d92815e966c98977e69ac1e3083ab00c11b072115527ffa19
SSDEEP 12288:9YKdxak+D9/RPZ3GrBBIgk19USw7dffODcHCG0OMnaTVW/Rt888888888888W88c:iea1D9jgBBIz+ZDiG0BaTVW/
MD5 SHA1 SHA512 SSDEEP

Submit Download

uninstall.dll

Path C:\Users\Admin\AppData\Local\Temp\is-RE2D9.tmp\uninstall.dll
Size 712KB
SHA256 d88bcf910e7a5ce4d76ca48b263ef226911b455d3a8db80c9fa69aeb2b3898a1
MD5 f3a88277fc7e0c057c40e47a7e43f9ad
SHA1 78ae0052b323139a4de7a5361a40503a39339f4c
SHA512 3c40377600fbb814fe19423404d2fb29f6342ab2a3a6d5dc50f42086fc0f59174184a0870d7f04fb6ee5f84828e1ed282396bfcb70842084af25f5af15cc8a1f
SSDEEP 12288:S5buPksTwKAZ1BVcvDEmwQT9KT/whp90r2pYZnaTmH7BR888888888888W88888j:OmzEKAXMvDECaY50r2pMaTmb9
MD5 SHA1 SHA512 SSDEEP

Submit Download

scriptInterpreter.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-VBN38.tmp\scriptInterpreter.tmp
Size 1.3MB
SHA256 58ad7a547fa9eb89919070abe14cd50c84cf319157a22c887a8995d648e91c0e
MD5 8bdaa3d205950989c707989e7a8e150e
SHA1 287508181c084f164f4ca20eb9657a36bf9fb81e
SHA512 2e901868bd5010b207ffa378358cd7c4034ee0640d0f5a7096349bf9c97b2e4c0145c8331c5bb2fe621c466c93856f9ff5c838c1a68fabfb9dc3397658e838bf
SSDEEP 24576:4gNfn7OOXeL7dJ/oOP9pjA0fY2Mqz9JT7ytfsxjHElkLD229Oqkipt1NCnqxjVk:ZtTX6THjACMq/xCaaMksgie
MD5 SHA1 SHA512 SSDEEP

Submit Download

logo.png

Path C:\Users\Admin\AppData\Local\Temp\{e2803110-78b3-4664-a479-3611a381656a}\.ba1\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
MD5 SHA1 SHA512

Submit Download

wixstdba.dll

Path C:\Users\Admin\AppData\Local\Temp\{e2803110-78b3-4664-a479-3611a381656a}\.ba1\wixstdba.dll
Size 118KB
SHA256 a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b
MD5 4d20a950a3571d11236482754b4a8e76
SHA1 e68bd784ac143e206d52ecaf54a7e3b8d4d75c9c
SHA512 8b9243d1f9edbcbd6bdaf6874dc69c806bb29e909bd733781fde8ac80ca3fff574d786ca903871d1e856e73fd58403bebb58c9f23083ea7cd749ba3e890af3d2
SSDEEP 1536:nw7WzpopAuJhsVuThs5cXyeM6JUOfPGSpeBxm946ITADDwYkH/1d9chyP7iN6p:pmAuJhAyZFpem90iw//1d9chwG6
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/492-687-0x0000000000450000-0x00000000005A2000-memory.dmp

Download

memory/492-638-0x0000000002A60000-0x0000000002A61000-memory.dmp

Download

memory/492-644-0x00000000030A0000-0x000000000315B000-memory.dmp

Download

memory/492-686-0x0000000003160000-0x0000000003161000-memory.dmp

Download

memory/656-634-0x0000000000BE0000-0x0000000000C19000-memory.dmp

Download

memory/656-630-0x0000000000BE0000-0x0000000000C19000-memory.dmp

Download

memory/656-688-0x0000000000BE0000-0x0000000000C19000-memory.dmp

Download

memory/2412-763-0x00000000008F0000-0x0000000000929000-memory.dmp

Download

memory/2412-141-0x00000000008F0000-0x0000000000929000-memory.dmp

Download

memory/2412-2-0x00000000008F0000-0x0000000000929000-memory.dmp

Download

memory/2412-0-0x00000000008F0000-0x0000000000929000-memory.dmp

Download

memory/4324-307-0x0000000003370000-0x0000000003470000-memory.dmp

Download

memory/4324-657-0x0000000003370000-0x0000000003470000-memory.dmp

Download

memory/4324-648-0x0000000003370000-0x0000000003470000-memory.dmp

Download

memory/4324-695-0x0000000000400000-0x0000000000552000-memory.dmp

Download

memory/4324-696-0x0000000003140000-0x0000000003155000-memory.dmp

Download

memory/4324-697-0x0000000003160000-0x0000000003217000-memory.dmp

Download

memory/4324-698-0x0000000005FD0000-0x0000000005FDE000-memory.dmp

Download

memory/4324-633-0x00000000028B0000-0x00000000028B1000-memory.dmp

Download

memory/4324-538-0x0000000003370000-0x0000000003470000-memory.dmp

Download

memory/4324-63-0x0000000005FD0000-0x0000000005FDE000-memory.dmp

Download

memory/4324-761-0x0000000000400000-0x0000000000552000-memory.dmp

Download

memory/4324-429-0x0000000003370000-0x0000000003470000-memory.dmp

Download

memory/4324-293-0x0000000003370000-0x0000000003470000-memory.dmp

Download

memory/4324-143-0x0000000003140000-0x0000000003155000-memory.dmp

Download

memory/4324-18-0x0000000003160000-0x0000000003217000-memory.dmp

Download

memory/4324-145-0x0000000005FD0000-0x0000000005FDE000-memory.dmp

Download

memory/4324-12-0x0000000003140000-0x0000000003155000-memory.dmp

Download

memory/4324-144-0x0000000003160000-0x0000000003217000-memory.dmp

Download

memory/4324-6-0x00000000028B0000-0x00000000028B1000-memory.dmp

Download

memory/4324-142-0x0000000000400000-0x0000000000552000-memory.dmp

Download

memory/4324-140-0x0000000003220000-0x0000000003221000-memory.dmp

Download