Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/04/2024, 15:36

240408-s1ydxagb3t 7

08/04/2024, 15:32

240408-sylmbsga6v 7

Analysis

  • max time kernel
    900s
  • max time network
    868s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    08/04/2024, 15:36

General

  • Target

    植物大战僵尸β版/beta6.30.exe

  • Size

    5.5MB

  • MD5

    ddc203bda30b899ce6f66f290918bb74

  • SHA1

    622fb88e1d4772a473d6f79607b895d1105699fc

  • SHA256

    f5cab4bb3f62e2f090426265eea9cd21571ca491b2266947a2049cb8e94bbf0c

  • SHA512

    52c7e09ff5e636a75599452b8cc70ec25f58fdc09d708afba8cd8c3281b6b0ddc3857ab4da849a5c22095f8054186a02d2617688829bd4c68be63ab84407edf8

  • SSDEEP

    98304:TgoQPw4q0CSYg1Rt1biqkTxAGZcknzHPQ39lOAFN1/JK9JD/mNuhaG8XIwQke9Vz:Tge9sL3kTeGZn43SuN1/JKzTmNuhaGX/

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 54 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 48 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
    "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4176
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x3ec
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3400
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:3052
    • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
      "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
      1⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      PID:4900
    • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
      "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
      1⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious behavior: EnumeratesProcesses
      PID:3412
    • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
      "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
      1⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious behavior: EnumeratesProcesses
      PID:2784
    • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
      "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
      1⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      PID:2656
    • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
      "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
      1⤵
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      PID:4648
    • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\植物大战僵尸修改器v2.6.0.5.exe
      "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\植物大战僵尸修改器v2.6.0.5.exe"
      1⤵
        PID:4504
      • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\PVZ原版启动程序.exe
        "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\PVZ原版启动程序.exe"
        1⤵
        • Suspicious behavior: GetForegroundWindowSpam
        PID:2448
      • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
        "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
        1⤵
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        PID:4224
      • C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe
        "C:\Users\Admin\AppData\Local\Temp\植物大战僵尸β版\beta6.30.exe"
        1⤵
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of AdjustPrivilegeToken
        PID:2784

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\awooga.wav

        Filesize

        714KB

        MD5

        026cecaeea6c55883bc53041f7e5bb20

        SHA1

        8b394f17d64b3ba163ed7d2e0267f03fc770f1bc

        SHA256

        e0e13bc5a00d33429dcc6bb80b95a03c2f80d52fd09ded20855ffd431c8d08b7

        SHA512

        228f502649a41660a4f5e5380ad1a4ac82f3bb6905b4d2107527a706d85809f48bb02a41076d04d074c59f72475190d6f1f31a65824e5ca8e45bd251fcbe3215

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\balloon_pop.wav

        Filesize

        110KB

        MD5

        8ac820919b10c51edc7b84308111d94d

        SHA1

        381e3bbb6191dde51b1b41362fe656caabcda070

        SHA256

        7ddb0252751b23f022e53d620d90b664b6d4731b874e4b8cbd5df73a35629df3

        SHA512

        dabbf15acb60f20cbe51001c4e98290b4bc27a76eb508e073f2a7d9701cdf1138869cb6427a498ef289db8155f14a9d56613a9f32db092cbd5175560cd7ec019

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\bleep.wav

        Filesize

        10KB

        MD5

        6177218b22d7f28bb98c660300590853

        SHA1

        0120244725c75f56cb2ec05c9b4fc295a2077275

        SHA256

        cd4f25b3d23cf6c3d6b265dd1c302d7258465ed8cea453099d2ad89797892c29

        SHA512

        f27911db1e842e88b2b3eb5d038a7e160f7a18834cf6d9f8af5c61d415aeb331501269aa9011b7a1707d738260d1b6f6fdd6a914ad3d52b888841a98c172a9b5

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\blover.wav

        Filesize

        446KB

        MD5

        1d2138a9534ab89d812c3614bda5ab7d

        SHA1

        7a5d32f21ee2286ddceade8776be2d0b8afac9ef

        SHA256

        46cbd2a534a394d0c11dedf4a9f7f80784a5dac281f5c67f805a401b23c4b8fc

        SHA512

        99a10c2826f022a27ab68a55aa6d366feed19a825099475207f6ad056b636a2f0969b7e81ac7d187835f78c754ce3d45492cc581d370b20c1937777755f03c2b

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\boing.wav

        Filesize

        129KB

        MD5

        803f8ee2e73ed27dcce8f049125c320f

        SHA1

        4d1504c8fd0fe8b6a24cd03f09c8104b3b1f8585

        SHA256

        8891c2312961185084434019aea76404f3d10a106aec8c83175d76cae39b79b4

        SHA512

        3667ff2edb8f0fbe6c30a1973e95f4258c7181853825e4e4c3d737a838d733a612278ebdcbfc60448b933379df6984deb32773028556897c0ca279fccff8c0f4

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\bowling.wav

        Filesize

        431KB

        MD5

        3c6d48f86f200cd5142ae960663f193e

        SHA1

        790aa79459fddfa2f22a7c99ae0130fcb7481e1e

        SHA256

        3d4230ce905c9b4eff043ab319cf87b5acf5702b37d3e902bac5c6ce0abe600f

        SHA512

        8fb734dd547eda95e699446df53885caf20db53a1cdf855be647b6bf1f51f40c74f449967aec8eb9ebe74f650ea85c483a3f06925ed0d22fed10463b480c9f11

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\bowlingimpact.wav

        Filesize

        461KB

        MD5

        b7b02889db739f7a63fa041f904e4d1e

        SHA1

        135ed0b1a6c3b019cb7ce192893679e72f8fcf0c

        SHA256

        99265b6058bb821503eb72b3f90165daff006e974f2cc4a632577f73bb47f78f

        SHA512

        5de42e3714264b43bf2f862d7b8f7c11b2ac42da51a792e18d27eb4643d2cd7bd30bf05e74066eda05bdc2bfa8a99b4fe9c35f7b42692ec1931645b671131041

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\bowlingimpact2.wav

        Filesize

        335KB

        MD5

        9750a5f994596f251c37d57f8cc15678

        SHA1

        a72747980b327f4796aa704705f82cac12a35962

        SHA256

        24db62a4335b5ea3a7f74abdbab7d5dcf9308d7df5c1e890bef912d00b5ac85b

        SHA512

        8ac4b9370c137f7108745f4a3c49745df413c999ee4b793ba00271b3a637e731d58be861a5a5b188f252c804b5a29c1e07cfd1afa9a73df081f86bc63373650e

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\buttonclick.wav

        Filesize

        123KB

        MD5

        7131f15493f3823547f6787f0866a500

        SHA1

        9f0ba024373673177586655f9abf7a6e30b15135

        SHA256

        8595a40ca7d14fb5c3880c7cbe819d9ad48a599e79fdca63c65d94cab10dde3b

        SHA512

        bf5320605b53eef486c829412526801b9906725191ab4055bf4f09774d670ad625cc83eb976d62519d698899b6c07473838a2e9fe687b49e0ee357b135d4355a

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\buzzer.wav

        Filesize

        47KB

        MD5

        dc4fc4cb6c5f71cda0dccc006991b918

        SHA1

        a052079b3b124f17c126af1322b92f4e07d06baf

        SHA256

        188dfa9ce1432a945cdb7454868d8c36672eb9bebc2fc34575a0a81ce6c8c7a2

        SHA512

        54a0e04335597f5ea7fc7b05d1f07e961a1cd3bf9c21464870fb93e969fa9d3f7556d739b4edc7dd0dd507d84ffb6666cad1d5026b11d123e8183a98c2e607fa

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\chomp.wav

        Filesize

        171KB

        MD5

        19cd86e62ba4af12c77b31acdbb96985

        SHA1

        5242840af1c4fdcbab9940eb03a806761ee394d7

        SHA256

        2c7b52b64a93ea3b1a4635bed71769cfafdfc019c1fca3d2763d51a07879a037

        SHA512

        64af1e6ef3d996edb72852c0be181389eb8cb1d792f20238ca1898bdb4957d5f0db61d4ec44843528d630e683ddb3f24aa715db3de25a3a517ebef207d4eb900

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\chomp2.wav

        Filesize

        200KB

        MD5

        b4916b3dbf809d4e36ed0399fcb67eac

        SHA1

        6864a88e86b59760f95184f75c536b5bed7539d1

        SHA256

        9bc37beab66e9e9043b42286096202d40ae02b9a03a2725d003ae6066bd584fe

        SHA512

        734efa237a0c915b7b0635a5a7770f4a0404974b36ec88541b8f99d5383cb406931878a8675b4340a19db9ab41a7dd0abd2b2b546c71be6b551a3941675a0b90

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\chompsoft.wav

        Filesize

        168KB

        MD5

        15a7ccac41f3c73601a1a83d95b7fdf7

        SHA1

        ee3d2bf60ae9c3dcc7dfe856e9e6f7e0ed7d266c

        SHA256

        6abdedf3dca2554b608a40a62410ecc795a0a2192e0310b129baee494f9067aa

        SHA512

        ad8e9cdd1ba651200c76cafb054468cc97fab2d608d24332b3172388e932f3330496399d6008e490d713c523f02d5714a5445f0833a5891d121190f4c54e8582

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\diamond.wav

        Filesize

        8KB

        MD5

        e8792be0f206d53579197e4d3f8e007e

        SHA1

        d9381702277e53a2aa2ee36b33d9a79ac1492587

        SHA256

        3f646b00f65ef7a0f70ff57d2812289a0606fd551222cb844f5d21b4828c97b7

        SHA512

        9d424ae538f6932a6a3d1842c263a78502329b2b43c6fc648c158e071ffb7b62def2d2c6c1bd5a75bb561fdfc28dbaede1166e6dd3ba55c3581b5a8306633153

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\dolphin_appears.wav

        Filesize

        251KB

        MD5

        733013c4be2141990edd5ea17753a3bc

        SHA1

        d294bfba00c9e8ac557b19a67ac9e02119e36e02

        SHA256

        19c9d3f4a88f195532eaa192aae4e7b7bf63eb281885eab245115816a054d218

        SHA512

        b3c4565923121d5b92338dc6c78cbb2b2eb389a3cc7e362c1eab528a47f0a5a5845184ae0cb52ef13a7ede6468974dde664dfa3fc7a8ae11686a7743955198a6

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\dolphin_before_jumping.wav

        Filesize

        116KB

        MD5

        e65a9e9e19e45d0cb98a4f3397305ec1

        SHA1

        76796b8c4e6461ff371a933f7e56dad5b97d050c

        SHA256

        7eeb3b9bc1a96668a80ab1a58f1929cc073e40a8605160d8b45f6b6baaae0b67

        SHA512

        f4769e0e47eac89f9859f9088c256b7c469dda5a325a6b7406976b05bd96f23c8e58813a0a8298bec2c5587b422c39c0dde67676fb22b8e602bb6012cd0434c2

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\evillaugh.wav

        Filesize

        56KB

        MD5

        f702eacfb35ad0f1b334f4be5b351194

        SHA1

        0295566ee72ba58796280036d3a6f1feff892a25

        SHA256

        dee32bf9a24682d8363ad69dec0434118388f052cfe4848a7b6497934d130f95

        SHA512

        1ecebaef71a70dba6429c75e0d3026647a07b284b9292645f0ff70abc8f7574e131e1fb1b8e8debdcf1d8d45c28d59f19995f73bbe680e62aa2dd4a9bea788fb

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\floop.wav

        Filesize

        2KB

        MD5

        6c58f70cecdb968eec03b69d52f2c899

        SHA1

        bfd85ff993671574cd440628ce5d3f6f2191ea9f

        SHA256

        4489ff86fe57b66ebd774dcb7b3cff033f3d851d7ed6c400b000a8041a7a0340

        SHA512

        a4da3d856d7651dfb985a3262941ad951a4019e3374938b6d93e9069a71eafdb9abd805901c72e3aacd7cdd394d40b883068a4819f91c9293b557a90b3bccbee

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\frozen.wav

        Filesize

        518KB

        MD5

        29204c237a4ef6ea0c5986d7c49aeda2

        SHA1

        83f9516c42b84cc3b55a3f3b3f228abd5cc9adf9

        SHA256

        84928c21b6ac83aeaeb88540b4750f098d87d49c53803f1228afb77b8e18c44b

        SHA512

        60cac9d7d0edd3727ddd52e714fceeab5acff82eaab9acb9a00f97dfdc5e298405ec7e5c425a39d3c59c40ab255312926d2ab98ecb09d04a4d1e025bd0c9dc6e

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\gravebusterchomp.wav

        Filesize

        396KB

        MD5

        928266dde19484e590a9dbee207f6516

        SHA1

        5864a25c964149c26abee1c1515805cd322109a5

        SHA256

        6474c40a216b7c512f610d87a14c008b0eed20d16ed14a81a58c8a57cd5134b3

        SHA512

        ed0586d1f9f6d03274f98fd09e43e623a5c3a2c7f596a3a596353e75897d8db36eb9127f29c90eee568548abf10a62afe6e900582de90a24f1df763e2e0bf6f2

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\gravebutton.wav

        Filesize

        91KB

        MD5

        a82005a777634159724ff03edafcc3ee

        SHA1

        f8281051006064d7c1b79943c84768ba6b32c614

        SHA256

        6802aa0825b0306fca1ace79eb9b1558815acfe3d2d27fe1b2e825dd24da4c5e

        SHA512

        7d1ac269f5abef5ae6b6102b88a538b8f55e04b12b68ff4729349be5978f77465b3ca7d0b5887cdf885e2ecc314f802d342bb44c1803b3306b652c4c79d230cd

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\groan.wav

        Filesize

        102KB

        MD5

        b641733b84cc097c9e6fb7188afe7424

        SHA1

        f7e7f6fb9867b8ae7954033d2f49180b27e3e170

        SHA256

        98c20a5ac4eaaa4be84d794300bc9bb423bffd5ed026b716a7be578938b12070

        SHA512

        d0663ec0740c0d1e04c61320832202ff072d8e36c21ddab386c1056131e5bd158061bf7265d6a9f2ff520b4c627b736a5541957e5c66041808d17cab2749adac

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\groan2.wav

        Filesize

        88KB

        MD5

        d692246412418c35ce53a585e1c74410

        SHA1

        53a288b40af2543aec5f77f66df66ad1a57f5a01

        SHA256

        53afa1390c6a1d014435648a8dde6eb6420321858fb64f5bd91c43eecfb50ced

        SHA512

        d2e328e12c30e36ed774519792811926ff75425d8bed2ad8d107b43bb5b65b8daec7eaddf7df5596fc8c789334510f467304a8c56eb0303c8ad6ce131df3e365

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\groan3.wav

        Filesize

        177KB

        MD5

        510163e9022e8e79adf15e69eca9bc47

        SHA1

        4f41af5472f7d4442eebab6b536386a88edcd034

        SHA256

        2e1315602a6cc38337b0d250bb1c8488055d37a08c3e949413115d1c2cdbad4e

        SHA512

        5fa10b59ee5d3ec83eb6e1bfc05380762bea527a678d7dc41d635426d5fc3c6b268299712a165eaea8c5512cd4bc42d75644bf0c743930fda9ffc480a7c37cd6

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\groan4.wav

        Filesize

        129KB

        MD5

        e10a466678c10eb4c682b8687051794c

        SHA1

        fe372e78db84d6702e2e81e322000d305eed9b94

        SHA256

        c7cd6ba542fea37604a75bd48b64c916673ad9acd162806d04362bc9a986c42e

        SHA512

        62eb6e4e40c71b0353a65b2ed45e8ed97668aafbc7a5e1a3feefe8e96a61136507549366c37556ec4aee4780399bd3e15a2ad29e7adacb58386b7d1a66a11816

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\groan5.wav

        Filesize

        131KB

        MD5

        cbe9c2ac7b866becd8f653d2fb06f8fd

        SHA1

        9de3c307345739da18124eb335dc2d5b4d9a8c82

        SHA256

        772f05e106f9591914c88883157afebe7613c02da770117b884bf9ddc10dbba6

        SHA512

        7d2cfa2115dffd4e5b259766066957b77de5f1d9c4f7e765899ef8ab58bf1b9b1704d75fa21524b27333051fff24177b9b9a3b730c999c6d477e8c992810a12f

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\groan6.wav

        Filesize

        104KB

        MD5

        541444fd6df145586e25918848d48ca6

        SHA1

        d570d8558b42ce5baeded4ba32ae1ff3259a3b90

        SHA256

        78d2a2def59410e588a4b41d3378198c5e99991e3ab47db9da60c327e35316d0

        SHA512

        586e14c63a24f3eb787059e28fe6af5dd567ab1df78bbff1eab14e37d7c11b04afe4ebda76371306a2369f82dccc6800b875cdb842b3f6ce25ce762a723ac794

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\gulp.wav

        Filesize

        52KB

        MD5

        f6d0f639518ae19813389b0c1f457d6f

        SHA1

        b4e45237e18e84a01bd9fe58525b7391a11fd91a

        SHA256

        b905492514d7e9a80d9918e1a05e3442f065275c9c19be5dc2b95124989907fa

        SHA512

        e8bf1274e5a7e3b6ee8cb6bfdf85c78e9223f00faaaef0e71ca972c01aafa434ed4ce5a24e9dcc590f6c074888872c94f1aa5284d8b2a6a7cbfca50543ae03ae

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\jackinthebox.wav

        Filesize

        516KB

        MD5

        20adf70043d782c6463e9b2c8ebdbd3f

        SHA1

        5676e5817e8763e132a53d31390f0a652156462f

        SHA256

        49efa6b4d66487186f5a422f0aae28f575b1bad06eb5408c9abdda8a0af3fc66

        SHA512

        dd5ba4b52c8960006d6d37c4c9c94253bf1650db5b1e7e68a87a5d086d2f462b940d644b42c5d48baa708895f18fddb9e30b23d837024fa2aad8b7cfaf0029dd

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\lawnmower.wav

        Filesize

        499KB

        MD5

        8cae805df574157c1fe7d33147f4d143

        SHA1

        61a14cd93fef059f289dc7fde991ff7626d9d172

        SHA256

        c214cf61ef1731ce51a14afc7fba253060413fd6aef8d4c6dc3ce6b19bd5cb97

        SHA512

        4f2179ee986351dea3c5dc820c356ec8bd954fb876f7a3e05319a083021fb0dfb0382990a26fefaae494af00b9da1f893432b445267ac5b25af02a10c4168055

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\limbs_pop.wav

        Filesize

        100KB

        MD5

        3f408882103c560cb5d51016eb20ff59

        SHA1

        8c81e2cc47efcd3a9b9b9ea4e472d3c2d6d40a18

        SHA256

        6038b5e05a9583ca0b89cf627f440cc74446f603b54d3ecf051d6dc151a2ca5f

        SHA512

        f52dcd36bed724d3d3605919fc1d9b9205ccc2dfd7460b531b73ff1f15a93b3d9e71e3f9df0ba19dcdbe9f8e5e6b53624fe618703971f3940ee04fe71bf71fb3

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\loadingbar_flower.wav

        Filesize

        103KB

        MD5

        699f9dc280f92c1014ce6218fda9c5f5

        SHA1

        e7cbf8e3315655975bbbefc0179f2237291f01da

        SHA256

        f1b928a286c21b525aabdc7781efa367dd13ab296efc662adef92f3b969c186e

        SHA512

        e97bd351b4c54341bb6761ac3c7d5798ab1b7e7bbd513df4dc86ed961b3aef9795c67be49b541d20007ea64a5171fca4bfb0c0c54b393c51eddd6a3ca7e2f181

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\loadingbar_zombie.wav

        Filesize

        88KB

        MD5

        c03ca3d3cbcd038742728ff0778c2a25

        SHA1

        f245bc6f7875e436df83137e57054b12cbfc2386

        SHA256

        8d721656007ebaf868e9a580412fa3cd4adbda09fb2d2e70abdfdb05626a1aa8

        SHA512

        d40a746d93bad4c93ae6695bacbe0956b3a8fbf0ffdedbfe7d5c4904e423fdfaae69f84cd3eefff465c5a42671b2f878516181364af7597f0e4e5d171a468c26

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\losemusic.wav

        Filesize

        870KB

        MD5

        b7c51ef19561cb79336a7a5bf185f1d1

        SHA1

        be4e3b4be586edc278bacf47c3223d3df7a8da02

        SHA256

        652284b8013d277fd4940de8ac232d6899635229bf3ed86efac3502b64b36f78

        SHA512

        b7de763a480e0c05a120d8e3c0011d192d5e75f29592edc46916d2fcea5c008f52abd6a016b6bbe9da5fe3d4c9f04f1bdc77412bddd5d83bfb48041c07e87a58

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\mindcontrolled.wav

        Filesize

        261KB

        MD5

        48e4b25137d0668941393194be3dfe18

        SHA1

        587db5d2ee0e010cdfa0f5caaf9f5d3deb18635d

        SHA256

        b5f3905c7f1916059b8cdd067534aef23f340dbae937ce7a151982346b4c1cb0

        SHA512

        6f1a3b07561aa2306ed5e8f17d30c8d7b17b49dacf242c812a88a4fd85f4d4c8106a8a8a4abf14ecf042e98e817e184d421368382702de3b81aaf507c9934ba1

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\pause.wav

        Filesize

        69KB

        MD5

        ae3eff34d982fc46e2337b5c96e304ef

        SHA1

        ab2956e303fc2afd2e47ea3cd335bf97febca890

        SHA256

        d2095dd882058529f6522c00070209ccab7583fdd51128495d1481736b38aeca

        SHA512

        40a869c4d13511edc6af762aa4b022aa16957d429a7d512b5ea585204e7f82ed41a835047c6fc80674aa8255c6c29c92bdd3cbb77367096d7b1157ab5e1f70d5

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\plant.wav

        Filesize

        65KB

        MD5

        4639b19bc196852b211b7d44e124d38b

        SHA1

        19af0c783b3cc7bac368453d1b4bfa94d4b74a6f

        SHA256

        cea3eaddeaca216876f117b1429ea65f1a55414f0e71810a2d443e10586d97af

        SHA512

        6a3fcc7e35f441d15d2ec9ee36ee563e7a8152a87125a02e99dab9979cac13601db8a2b228e3c006709213efcebd8170fe285bbb1b9c1eb837efe52c024bf1da

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\plant2.wav

        Filesize

        128KB

        MD5

        bbeaf75da2f1444b2d46ed7350313395

        SHA1

        03bee84851bd3a6ef5c7f12140c2c23ed1041bf5

        SHA256

        ee7ab746345b74c4eb0c3d4ad78dfa846229dbf6324fb47e9622b62b8aa9b69c

        SHA512

        1aa39bbf97255a2f3ba856075d58535fe21e41735eae18b026ab2bf79a5d0fed553b958f9fccf0f87d7c653411d3b73b923935687e485679e6991f54c19605bd

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\plantern.wav

        Filesize

        162KB

        MD5

        f15892c9228e438a521f9c1343b6ede5

        SHA1

        62ea6bf3e93a59d43d54323636c5008a33467bd3

        SHA256

        93fbf06d6f9cd2a053579f416cdde3e0c16e026794c5b4cfa6f550eb485597a1

        SHA512

        5180d1f87338358ba7b2b3201fe60cc905e952225b8999ea9826f8e73d9dcd6c91f1222199e41cc900b4c085de342acf073488361f9cc4914d7e50a5cf23323e

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\pogo_zombie.wav

        Filesize

        86KB

        MD5

        7bae99ab7ec0e9afaa39c8358400c7be

        SHA1

        f7e67f696f823f351ed5004bda271d9b01b3fa81

        SHA256

        6cb56e94cc1b7b122d54d07a66b1d50bfb43bc8a0ae468da381816c66c382539

        SHA512

        68d64ffef343d76ee9ada0e01565dbca21bd3994fcc573028341e1ab7d8cb188b24ad69f02889689db74effbc5a1b2a55bca4aadd1ea220ee286dde9762d771f

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\points.wav

        Filesize

        195KB

        MD5

        e754a08b6608e76b8c7aeca4892b137f

        SHA1

        7c7bf6a7620b06761fc0507b49b8ec14bc8394fe

        SHA256

        0a4ff36d251e5b88635715d5006a5d8dfd3908116a098e7855ef41b5530739e1

        SHA512

        1c65fa2b336f927322135e347a9d532f731df5d050d4dbd2f41eb0179d62d7e5d29b9f675f0a240e7d1aa9f7cc199d8454d3f3c977a0a4d8e0685adce7845f2b

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\potato_mine.wav

        Filesize

        318KB

        MD5

        42229febb16c4b9e4e83562c01e74db2

        SHA1

        b9c18483ca7d1d30c1194e772b325e4eaba6baed

        SHA256

        8d62efe4d82fe6aa505119aca3f90a2ad58bbecda88d8933a703cbc70dd6df2b

        SHA512

        6c82eea0651a98b8798b90ca81de46964e129398690f524d5cd6857a542e1881570e1a17b54eccf3ac07afc9c8d3d80f7993e98e7371d9f451bcaa3cb64b78d4

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\seedlift.wav

        Filesize

        90KB

        MD5

        505051ded222ea758244462714a93c56

        SHA1

        b52ee5285e8afd2547d682dff56e01c37167f463

        SHA256

        5ed6a8bba0a57d4b4fdbc9a046bde593ca6adaf8c34c6ac9f172b0e69306f956

        SHA512

        f95f1d998ed191545b821cbfc256a6a3d5f298f0dac190284de36b90215370d45f9a5237993d2fa02933972cfe169e928658f0e4e57a3f44cfe59a68bcdb560f

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\siren.wav

        Filesize

        618KB

        MD5

        ee0aab385d2d7d69833bb477321c2e60

        SHA1

        8b6cd0cadc3647673496ef6fd5fd2d345839e31a

        SHA256

        87522016ff4427919bb675788842e8c9f6f27e824f09ef7f4cd37e2f12c3ba82

        SHA512

        e83b517e554baac261e54ab8a78bf469691a8911a08d11dd61d5b86c3228341449e88fce792ac470de4776d988aa0e9e6ce7ad8542a2dff4f48d8b9cf1960543

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\slurp.wav

        Filesize

        11KB

        MD5

        1fd064aa57d26cc107ddc69efb39f0c1

        SHA1

        144130063bebcb77f54a55353cf3c4e524555269

        SHA256

        b262d668e78a431f7e2a543834942833979ba408825bd5c81b6f9f82eb22018c

        SHA512

        18200214fe4af8e6a0153a56bdbed0180f924733c1ccda55b932522f0a1889aafc666b89698731c44af0802cbdd5b29dea5e6544c18827f32fa4cccc054401fc

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\splat.wav

        Filesize

        90KB

        MD5

        7a5e3f045ce2233092947350bd3012d8

        SHA1

        ec32b526ec55d9a55df3bfbfaabd028118fe8277

        SHA256

        8edaf30039d27be61887f9eb2a7b0a9a1df242819eddde0b44ceb108cc5f3d52

        SHA512

        e5256263a7c8033561bb4e54c8c4799098505a532b202f22f13d6e5e8d8391d7049decb948ab83e16b67ae98a42c8af3e597b9141376399bd48a6a24b38e7e37

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\splat2.wav

        Filesize

        45KB

        MD5

        3bd9b45d67eb916e2e7f27cc4426efb2

        SHA1

        273f5c6bf1baf616772dc7f2365ff529e05c7e20

        SHA256

        03aeb68e92419e77827fc5689bb4fa2be0d83c16a1fe5932f7546faf8d94350f

        SHA512

        ddde212b6b4fa0ac933fa290bf2450d056bf4504e121e2f8e4940f01462215284f38fdae3db3f00259d7ce2f78c83b8ec9de0713a530d70c086baf427c5a103b

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\splat3.wav

        Filesize

        58KB

        MD5

        eff9a5ed622a51691eaaf83201dc9ea7

        SHA1

        bcb268be2d723bb58c6b229951229ac4210a8cf7

        SHA256

        8cb37f2c97d04c3102248821789967c72b198e7c4a2bceecf93dd374b8b4fadc

        SHA512

        872228ae3e1a89df487e41a1636eede8b5249af52dd4e83254c69329bc4b9ed62368adbb68f84dd8be318d198a28630e6a9809df2e4a6464348747ac44e3b1b2

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\sukhbir.wav

        Filesize

        182KB

        MD5

        9e20c152dba25cd0cdb3a245a461df11

        SHA1

        4cdddb844a6a68ce462e72e49f592ba9acff2d9a

        SHA256

        ba288251ed3cf0b75cf40cd74e781191980941da67a571634cf2416e53d8b51e

        SHA512

        a2334cf310d8f40c7178ebf49c91091a411ff4a54fe525f7124321a732663bc745f18fd7d5fd1ba1b6e0d0f3bf75a44a708fa5a96eba3653ee67aea8c803590b

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\sukhbir2.wav

        Filesize

        162KB

        MD5

        3d8ce7fb78acfc26e69022dac53b5700

        SHA1

        fdc002268e1e9d6e2e1937a05d44e991ec183df9

        SHA256

        60735cfd26f32f34072503b978bc36110241bdd6365c60e9fdebbf7c11023c68

        SHA512

        95e44cb861a001ba327495d5291257f78c7be9c0cc679f21d343dcc794f76591b37b3d0f8f655efe5f07b277dc9b54f0e55b4ee5292b6b9545acbb999059ea29

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\sukhbir3.wav

        Filesize

        214KB

        MD5

        025d72eeec30493dd3e81d88c4295b02

        SHA1

        325c8d26e79150073eae879595169be4664468b6

        SHA256

        be640ac13411b16c5da8bad200720783c4d4fc6573d712bedb8030e28199757e

        SHA512

        fba81e1ab743de530cb8e6b6e86f7883641798243afceaeb2cb3340fad407d7576cd9ddcdac65a2bf76b6bddc4e0ec3001ef1f46ba7dd8f41164353c47c06865

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\sukhbir4.wav

        Filesize

        72KB

        MD5

        8b41a027c067dd27e08cdde3dc1f015a

        SHA1

        36a59f79c0f4625b5acc0e81b29a13b906cf620b

        SHA256

        031b85f6cc54a963059b9d82736e9860273d6bba31beb7d107b01a5cc45ad670

        SHA512

        c6b6d0ed058b48837bc41065bd17176e98b59787669185268ab50212595307b39007db45fbe194ebdf89aac30c803accffdf8afc25570c53d2282ed870fdd55f

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\sukhbir5.wav

        Filesize

        69KB

        MD5

        f698daba84e767843d1056cbf5c91729

        SHA1

        67da29403dc7ce64e1f01d3b3b6e48daccfee565

        SHA256

        f29ebfdff90e331ad4b858283af44ddccb715edfe8ae18dce6d63364f98e91c0

        SHA512

        52e2adce6834d86633427a06c607fae4d06beb8da85d87386131e3eb6684a707d3f47e5654c60523e05d7d469e95de725dce5e9c707a7c4529993e124e72d429

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\sukhbir6.wav

        Filesize

        143KB

        MD5

        1e756e6eff603d82cdef44a61e7fe952

        SHA1

        dad65ebacbf0e6fbe09a208aacf749617c5b35b0

        SHA256

        f3affc8052610140aa9d7ed477af73598fda5c1293f689c56a0089a6a2de9df2

        SHA512

        7f37e1e71c9c526d209f8346294d0753be8e28c3183e0108133ebf8b99913540d5efbd94f790c67945017f32649831a5a34c710913b7dc08c7d13784b62ad261

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\tap.wav

        Filesize

        82KB

        MD5

        93b91f181504c507b55c41c9b2d1666f

        SHA1

        6ddb708c7cf211846d1f92ac1e73b9c71ab15c93

        SHA256

        cfaa0c013c8e526c0c8f74756933d4d831ce798ea1eaa128b311ee8ba1e54c79

        SHA512

        b6742ce81ce762a5323e8e4a7df61c3c1928f36ae2bdeda724c77bee4054a72976fe9c2a7254a1a054d63f1693907f00d8bf72fc58d4bd430242ae920fe5ead0

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\tap2.wav

        Filesize

        78KB

        MD5

        c5982d285cd3c3f83006defdcadbcd42

        SHA1

        7a55031967b649db1ca6c2ccf6bee774e2a64769

        SHA256

        0b327de3811846167c2cb736cb97c5ca4437eeefbd356e68f4607f18a2172f1e

        SHA512

        ee1ff6e72a05c582c0f693f95dc4a44b9d2c580478e2236629a0c17355106b184381f014b9496562779ad50b1d71cc5ccae708bdfc26321352d27ffbe3ff5443

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\throw.wav

        Filesize

        24KB

        MD5

        d6d37e8e21c65dfac89fa21868eff578

        SHA1

        295e29024316366345b306c7ff3b7be3b5f8e63e

        SHA256

        03907011191c95663ed5d7bfbb7ba8037aaa91c698550ac0d809ed205632d57e

        SHA512

        cff85246c0a0e37914394a5ba610d9dbda368e3bd8d0268aee8ed5643e7bf744f64f56c3a07719fea21f662bef8165381a1602a93732b80eee6878249a06ba31

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\throw2.wav

        Filesize

        58KB

        MD5

        2c232540052116ff5b1e132a0b71a434

        SHA1

        a082c64abb4edd6e4b5bd4112fc5c9ffcfc4da3f

        SHA256

        ae33ae01aaf7e3101b77f4a15ad8efb0c1d2a520037ea41ea0dcb42fd3310106

        SHA512

        5be85aff586e443641e8183925d275452db4bc26a94761cfe04a38420f8dedb0f9db2fa8ecfde8124e07d74aafbd6989843e43f58901de334d694c6df0444cd3

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\thunder.wav

        Filesize

        352KB

        MD5

        f117abae69cd6a1090e0e0c0b7cd80d5

        SHA1

        fc86456f73558f3912cf6820a1a184e00e4bc4e5

        SHA256

        6ae38e55f3b28a85552320e94a95495c867c074159a28e9de6bbd694b5e7c9a5

        SHA512

        9c23767899aac03761c8d82e12acfd75ccea1a4fef4b9dcd1b4361153cfbe91ba8fd630e3f8683ff48d32baf739317c8e929fbf97643da4f704ed669564e00e9

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\winmusic.wav

        Filesize

        761KB

        MD5

        8c5ca02390c075e88f09aa5289cc2bd2

        SHA1

        1d99708813a8cb9fb7c898b7afe0071f9a89debe

        SHA256

        7f85399626a534042cb5e671c1dee176ce834bf281198b63a0fd9f82c300115e

        SHA512

        5a1e0ed52b097450f9a426f2b0a04c61325ec2426e0bb8493c2b55f4760c0e3ae480b02ddd92281fd064d618d322eb82605738b7438c4e9c611b318253eadb69

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\zamboni.wav

        Filesize

        281KB

        MD5

        ddcaa275e800fd0f7f0ed6ac40e83f01

        SHA1

        fcba2875537edd5a714bd9d4f135db5b423dd89e

        SHA256

        24e2eff16e37abccc45fe1bbdd2b851761a2866fed5eeed9dcf33254cd7a5665

        SHA512

        0f0ce60f696ff5a0c43a9e778e7fa47aa2719248b1e1e2d608b1c90e8585aa31c040c39bc05a6a1df86ce16d2a4bab109db9bfbdf1ff5c35c82e33836737bd8c

      • C:\ProgramData\PopCap Games\PlantsVsZombies\cached\sounds\zombiesplash.wav

        Filesize

        304KB

        MD5

        6e8a234e2ce373cb62a1ac875ba4048f

        SHA1

        65d2f917d3962447f72880dabef55388a6a87ce3

        SHA256

        a9f98373a7cb03251aad884d8787517d538d2746c4e08f1edb9ea6caa90e540d

        SHA512

        d65f25dbaa48f86398aaa06139d351aa3358a6a0eaa641601ea5ca9c95f5f75a28d5cac015c60e2ca843688b7fb51b6d4044da4b7fa394e724a53e366475ae23

      • C:\ProgramData\PopCap Games\PlantsVsZombies\userdata\user1.dat

        Filesize

        820B

        MD5

        f9f84f8bd88b27779b6288574d72f712

        SHA1

        14143d121aa1eae0a50152dd65ce5492f7320725

        SHA256

        ae2732879230635518c25f4c3ea85d46a30f34f132388243371defbdba42cbc2

        SHA512

        b09d9a211ab819a9a0ed8cddafe991a8662f5de848da943a42bd1e7c00420635fb6517089b147e5cb578cff26629a03443e01cb5032f9e31df937b1226ac8509

      • C:\Users\Admin\AppData\Local\Temp\evb6FC2.tmp

        Filesize

        1KB

        MD5

        0a059b33faacb8f5393c23d47b691b8a

        SHA1

        b3cb0a11b26808edf11c6dff2f84246983b5bcad

        SHA256

        d9ab7d89c666e8b03473e6440dc8404798b0edd149bd3da3eb960aa9994c9c80

        SHA512

        81f30773a725ce6f2d8138df25c24b1716ad3eeacecccb1865c251cca7b8c5e644ffe7300909f4f3b09333d725e55609e6ea7e84439e0e68b5810cfd047d3834

      • memory/2656-515-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/2656-516-0x0000000001210000-0x0000000001211000-memory.dmp

        Filesize

        4KB

      • memory/2784-485-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/2784-493-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/2784-490-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-487-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-514-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/2784-482-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-513-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/2784-480-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-468-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-470-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-458-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-510-0x0000000004B60000-0x0000000004BA1000-memory.dmp

        Filesize

        260KB

      • memory/2784-451-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-445-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/2784-441-0x0000000002C40000-0x0000000002C41000-memory.dmp

        Filesize

        4KB

      • memory/2784-509-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-505-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-501-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/2784-495-0x00000000013A0000-0x00000000013DE000-memory.dmp

        Filesize

        248KB

      • memory/3412-374-0x0000000004D50000-0x0000000004D91000-memory.dmp

        Filesize

        260KB

      • memory/3412-369-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/3412-328-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/3412-324-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/3412-311-0x0000000001090000-0x0000000001091000-memory.dmp

        Filesize

        4KB

      • memory/3412-309-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/3412-367-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/3412-362-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/3412-348-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/3412-439-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/3412-440-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/3412-368-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/3412-364-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/3412-373-0x0000000001720000-0x000000000175E000-memory.dmp

        Filesize

        248KB

      • memory/4176-14-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-6-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4176-44-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-48-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-46-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4176-50-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-53-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-55-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-57-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-59-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-61-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-62-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-63-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4176-40-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-38-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-36-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-34-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4176-32-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-30-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-27-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-25-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-22-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-20-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-13-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-18-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-16-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-238-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4176-12-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-42-0x0000000001550000-0x000000000158E000-memory.dmp

        Filesize

        248KB

      • memory/4176-2-0x0000000077772000-0x0000000077773000-memory.dmp

        Filesize

        4KB

      • memory/4176-1-0x0000000002E40000-0x0000000002E41000-memory.dmp

        Filesize

        4KB

      • memory/4176-64-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4176-65-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4176-66-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4176-67-0x00000000077F0000-0x0000000007831000-memory.dmp

        Filesize

        260KB

      • memory/4176-237-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4176-0-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4900-255-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-239-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4900-240-0x0000000002F30000-0x0000000002F31000-memory.dmp

        Filesize

        4KB

      • memory/4900-245-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4900-250-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-252-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-253-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-308-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4900-307-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4900-302-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-297-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-296-0x0000000010000000-0x0000000010269000-memory.dmp

        Filesize

        2.4MB

      • memory/4900-293-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-291-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-283-0x0000000000400000-0x0000000000D57000-memory.dmp

        Filesize

        9.3MB

      • memory/4900-285-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-281-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB

      • memory/4900-260-0x0000000001500000-0x000000000153E000-memory.dmp

        Filesize

        248KB