Analysis

  • max time kernel
    141s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18-06-2024 14:49

General

  • Target

    2024-06-18_3d5241ae5c8f5c2973b2573ea545999a_avoslocker_cobalt-strike_metamorfo.exe

  • Size

    375KB

  • MD5

    3d5241ae5c8f5c2973b2573ea545999a

  • SHA1

    2eb9499b93c145be17ff3a4401266d2afffa1531

  • SHA256

    2d57b801c909c2f7856cd634c10c20844ce69502e85ce5405c4ad193e1f93ba0

  • SHA512

    744d57cb811c8a30b53bd5a5f06b5c0611c2ecd429cea75c86d4d6a9426824023afc17436631febc2ffd9d9ec1acc7f73642c0440c2f3a6800ba64428f345910

  • SSDEEP

    6144:kQ91dwpFilh+CQn2TtWga+1hPRqRRaR9bYLw5LGbH:kQ94pFilh+CQ2LaLRiNhGbH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-18_3d5241ae5c8f5c2973b2573ea545999a_avoslocker_cobalt-strike_metamorfo.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-18_3d5241ae5c8f5c2973b2573ea545999a_avoslocker_cobalt-strike_metamorfo.exe"
    1⤵
      PID:2760
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://zoom.us/support/down4j?os=win&err=20030000&v=2_6_1
      1⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1696
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1696 CREDAT:275457 /prefetch:2
        2⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2256

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
      Filesize

      70KB

      MD5

      49aebf8cbd62d92ac215b2923fb1b9f5

      SHA1

      1723be06719828dda65ad804298d0431f6aff976

      SHA256

      b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

      SHA512

      bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      f2f98992cff73a74d0c9eeb9fd5e29ff

      SHA1

      54b6a46911516005425fd391f9d4e5dac921f6d2

      SHA256

      dafad8c02ba17fc6e385994b0a4739b26bf77694de7315463600ab359e62deed

      SHA512

      26fa29dd0dc8afd335d2cb475d5206b690223c9440a3c92a048fecfdc1363eae18a20232aff55d90d156f481097a3dd88b5e3c348d9df6604e70830f9556b63f

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      75fd189558e072e2ecfbfcb18f435696

      SHA1

      ca03d91f0d782b36cf6cf3cd90df8f5713b8b8de

      SHA256

      ee330c64b0d13a9b332b3daf550389a96b215c0d423e11da2f51f712fe747df7

      SHA512

      0428375771ca22e7534e0ef1b56b9a497f038f6bf7f413e074fab7633d9f9679fdb95981227f4f1c8a4a6322d8f5bd0d54343c9f5c68e9b3da11b9b5285e8067

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      a0f4dc05cd0889ee6c2ffe693b4832d6

      SHA1

      16c803166255a7090c169ad313492ca6b8c50f60

      SHA256

      0034786dee380398a6df9281a6a347a97f4705c535ff9202ac9f038b7efd9a63

      SHA512

      47f3cd726014c1c97f8f94e8d986fce24ceb9c191d3e5e1cfc8af2b5fc0f3fc562d09923001669fcc1aaf5bf11813bca3d26a07fb5d8279a73c4dc378befd68c

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      827b74532634b3d4ef3e86b363380522

      SHA1

      73f29e9994c8e09833539c3e0c8c3053adbc9ec0

      SHA256

      b2a3f2f1aeff7b7dcfe23a5ed250d627ac20226e25f407f5a3387dd7794f16a6

      SHA512

      83268cf5102c90fe8f5d97a9130b9d53bcfb5ebbfdc4fce33b0948550fc6136018736718a55b8e9f89094a7edb6b731441135f174cb10e20102c5be44d6b6158

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      6a562bf471dce2fec060a7992277dc7a

      SHA1

      6fcae21dd303480231e4fc28f5778af5b8280412

      SHA256

      c5d5bf5bb3c097ae98f5b9c669efd62bd6b1dd308d5bbeda92fd0368f9389d49

      SHA512

      ea041053680e152d513cf6e3594c60b22921792e4c02efb08edee8b23a8fc2a1075289672ff097ffaeb2ae03933012de2ebeb6a953007ad8a529f304a51309d0

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      6dd3e8db3b780a13657f732a2a41073f

      SHA1

      3eeac52fd99c86b8b9589817207dfc80087ffe3e

      SHA256

      589bf934d5c4d4d361e7f2f8b443bcb1b2e15be71d9f922f2819819db3d1d9db

      SHA512

      c0bc2d9ec255d0991f83a3bf8cdb5f0c7ac6f15bda3bf7dbcbd916f2b2b726da39f2d499c08bbf32ce8dde8121454a164232f9af3f9e3d5ba3e154e5fad2c900

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      ed3c3e639a3b466f500d71412cd2db7f

      SHA1

      fbc1d3d4e65c5d3cded96a87346a38becfb7b53c

      SHA256

      1db9e2a087e417380530c38c760d48e38efe518d9b5ee3db7d0cbad9fe4404f6

      SHA512

      dde6a8f28aa1e86ed0b37d9b4c1b0bbd861f4c0362f352d77b7e1858808f4e5c03846ce2fad655da3c6ce14e2829345d326546b19e669db1c5a29e2c293bbfb6

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      f593eee629639c724d0ef4ff3b472f21

      SHA1

      bfa1b458a44e56576422b485be9d1faec64b4281

      SHA256

      83bac4d28d311626d0fb92e601b4d06381c3c2131a0b23c3cfad2af27023ca78

      SHA512

      43c6f33cb1d9e2f3c31f4b3abb0abe8165c6bf52360d67b2a977c527e59a32ec066f7451d06689d2ac5a802f3e9865884639b0f359cfb57873c42325bcf6e9e8

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      8a85d1b65d2c4efbb2832ba17d4650db

      SHA1

      6a975b29cd82d0a194e09b21ae0d71180f452b36

      SHA256

      d4e80092d8b1bd02f2917ae3c8d1fc8e2bae1a9d3a8e6b1628dd73f54d95fe21

      SHA512

      ebd236d41e82a8d527147ed0211a321792fa4cb800fc147fedc3f23a9b7e2f40b659928ca2a5982907b8bd38e7fdfc7e804cdee52dde8a886ed1695484285713

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      7386eda5e44dbcb578b2896d6e6f6afd

      SHA1

      5375b81a5d3c4f84a5ec3a171903eb868e86a6a4

      SHA256

      09046daf0a788daac28e1db2438e27f122148fd6df71e2a8af9d3c934c1eadbd

      SHA512

      5c36a3574aaef8bc0747b43d02fe9b9814da4aadb08afe0a7aff29061a6ae170a315018ecf6e3e858577d096c001da961bb997467198df6863de9e84020f7aa9

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      b7d81d7c40aa58ff159da9c7537b7ba2

      SHA1

      3aa4f3717545904c8110e9c336b0a63f14b6910f

      SHA256

      7e99f22303b3d7e0436f3471df5a49ed918d91cf90b675eb0f92d812daf79287

      SHA512

      1bd42b0230d1bafa9456e58b45162522f67ff3b415e042bfec2ed2a39fd12bc4cd93c4b5e94b83bab748e6a19a2400a48cf3882d590119629dddc4f80e6d4d0e

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      d68024457099cdd0edb44aaae0188b8f

      SHA1

      7333670562f78b6c456a30024cb6db04685a1818

      SHA256

      46b7d9333dcfc89f0cb1f93e385680481c142166f19ff03c4d625da6748a9ac0

      SHA512

      e55115d2a82399be458dd9cefc5752202b7c7c15370fc66a37e246264830f367e5d82d82b74d05a5bb83702233e5c1249a9c011914c36c9f46eb2a7675d44f80

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      276bfe0f7a45cb8b92320c440a75df10

      SHA1

      61925940f55a9dc42595a0a8d15bb1ef0a3bc6f0

      SHA256

      54c41f46134215a4144d0460b797f7c128bb06f011639f11d4666ab8930964f4

      SHA512

      4508791207e1c44449ed7c5a8c341bde9c3e0cf2e15aaf63c67bb325b64d7d3d5e2ea83f6356651ca68f9e9a2347dbecefa47b51f58ef1aa44eb07b81abe77d6

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      7081b464ba9cbfc59e33f96f9a5ca253

      SHA1

      ef6f0e8070d89befe46051f70b29dd71bfcb6ef4

      SHA256

      e7137cd6da4abc40cba71fd8db7eee6011e65faffd30f90d4064ff79624f984d

      SHA512

      e792297e9af673c0514f0f921997ca96898503d2f41fdefe9ac142dba321e729a487eeb24f3df983b548cf73d671a8c0743d1f25f3c6318174db6e5585e2d846

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      0cb3308f059c407ecff540a1db07b66e

      SHA1

      0c1b6402cf1c105b17a8204f76c7131bf10a2c0d

      SHA256

      cad0ec974c28d75182ddf3c3c32056746bb3af6c9d642fc569dd121bb641362f

      SHA512

      6cdfee16b76009dd99b9cc478279a9ce3276dea9bcd59b429f1a89c6183c9490d477ec9ea90443a25276d4ed41a280137b9995d56bdee5da0113938527d7d8ca

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      32f65c30554ec360d1492e7dde3a538e

      SHA1

      c606a117ba465fdbe442e3725a88d6ee82591d30

      SHA256

      83c0e0327f95927dd4d8a5dcb10f50ebee963aa8901850967beca495a59baf87

      SHA512

      9022000609eb9278b22708aab4eca14dc4409215a04fa1c2bd7b7152ea7094063188a1357270b158d3e282b32c869ebc6e5bfad390975f0e15cebb3f2cd0c87b

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      df6f671574918544eded7a262069b11c

      SHA1

      b1831642d3e74e88e5c84168dfda93b53a1356c8

      SHA256

      1d320920d6f193e3f60825b75dd043cb348563b0c71027217258f4456047182f

      SHA512

      55568e644690c04d38e1491751b2eaa7c1ab1c3a42156ffa88c89b581da7d64d4edc438cf7aad5cd5ac1e4180ba3242df5116e2e85af0bb78d1c8a542533f677

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      0cd92b6691fd9c730e0b2eeb25d0193c

      SHA1

      cba9accfcc728ffe53c0b5df18f580e2f9483232

      SHA256

      1d2867e5a1c57696a6dd9bead178c5d50c384e32391e9dce63ce4736df340e34

      SHA512

      b4f0c748e64a1fa4dffc0916f011762c529bbfe49ac3826145add1d434a25bb5d4bad56d53264210448a354972254bcff2647f14cb8bc67ebb9552ec85ed5c47

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      83a8d163023205ba523b3405c9392341

      SHA1

      5fe6ae16f11fef8ae95fcd69da375126fe843b2e

      SHA256

      6d17c16a244aad7bb8c732403f8fca2f6886005c2888e20ef5e19ab0255802e9

      SHA512

      66a3d7a2d6b95a380fbd60cdb39bbf92e64038ea1ff332b40a4c067e1a3c621c26226059b243d4c918f5840ef950d05d9879c4402300fb7dcdacf60075b71569

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      fc62bf823dfcf725d8d41377b3a2094a

      SHA1

      9192132e685f01db8d8ccf43bd1311cc8ca3b9a4

      SHA256

      84d8996c7be64594ee7019e1f8a3626a31a05e4065f9ead956dcff1c4d1fe45f

      SHA512

      c92c8c228399b8b6ac1ed9d654e4b4d71997f1d4a60d9e4c4dd162e6a0faa9e035c8c8c87a525f20b31489eef2900f460d1d707e25786345065ba85d1146bb39

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      8b637a5549a8c29c1208f299f35bd391

      SHA1

      941971ffc4e140ebeefd11bbb5f35d1a193807dd

      SHA256

      3acd0a1abec7a15ad4165b3885f96a8712c81c2e057f34e98e85b0693192e9c3

      SHA512

      a62ea808d1644d4f8d6a0bdc1c36f25ab21eb3bd124496c01ccdebfe1bc535e2e300424e9c85e889e755d04daa58893f3a0843cd38620dc5be9c0585cc9df2c7

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      b12984ae7e7fcbcae667f776141c5fa4

      SHA1

      a07e700896281f4a7c433c8f44924669762ca11b

      SHA256

      912c0b31d4ba4b8744d24a571e164b1dd58b70f746eb26eed2b744ff6c879115

      SHA512

      c1c9e0dd02d4773379659b939c3daf5383972575ce9ee9751b0a7a82d08f626be43e25413078919632f3cb736f733764a984b5634531845c7cb55693123924cf

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      73b4511f4f33df04594ec856188c2d91

      SHA1

      e2979c8d62f1d985fb9886ed6d69b3a821050049

      SHA256

      d344abd218f98eb9eb12ab3fa7b0089989f2456d2c16dd58d10262789a505647

      SHA512

      7359bb83e442b07e6ae5e4e56d00c090b5fbe4aae7fb59e9fee34a662f45d2154db984ff980c103f122acd25b1661e1b57644ce0da340c270bdc03135339235a

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      b392fa01b12576b00dce52995aff14a3

      SHA1

      dd23ef5c442f21e25efbfe1347adc6f531162218

      SHA256

      e598a347af036da004648e7cc891fa0d1d1de166e7c314fcc5296bdd10dd9638

      SHA512

      c5874fcc372512bd3ed2e4db0edd6d3e7491deae0c9a462f4ef332d5edf8d1843741521c26ddfad0ed53d30700c97f679f562716f028b5f1d350f874482d0ed2

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      6ef0cdeb2309dc6ff1ae4cc1050692e9

      SHA1

      bc9fd937b8d7b65997d09bf6768fe2a9f0155270

      SHA256

      3d78d8850510c447c16c5a3067076fe4a34e771f12a6d1f6da8f5a5ecc51ec97

      SHA512

      f3658242282d7f7a814a8809986e89ef56bd8a6bd80d4dcb56cdcc8d66ae23f57bbb291af9708e226943e8d120a9b7cc66f05df3d7541f750a208b0779238408

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      438a6ce13e519ffb33b409d71fc593de

      SHA1

      8cbff4f35d464598803313923cd1363a9c198e6d

      SHA256

      080186764e0415e4735195f4722b5d07eb318e5754717462cc4662e1e1a5c447

      SHA512

      184711b2d03d9c679342cc4a63f4ee1746e46d56a8671b9198a0ae75b1075edadd7e91f20dba86227d15264d6d490829b3d0b108579b3e316acecede99b11ca2

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      b5020eaea4d1fcf24c31ee4b8c5fa5c9

      SHA1

      0ed013cea15c3e3a177d118bc96e08a4fcd7dcae

      SHA256

      0fa2d76bcc7a395fbd442133b23bcc779727edfb30d5289f327a5d6c060977b4

      SHA512

      9dfe88ab9f7d3048254701a9e32ad139797f925cd080a5ad62ad15f969e7ab5a2ae21b8b8c8636eb3a1cc6dd6d3fcbadf9109f4eed4cd5fa25947b2283f9a290

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      c01715e5d6345319b4d1a096ebc1a41f

      SHA1

      233a8efee4e9ba2743bba1ab1c74b7ddc48f4c90

      SHA256

      60f3e5e22e0c4a0d906e8a8b3031f3ea65a4a490627ff4772d478788d0c31b90

      SHA512

      4db37b0730262beadfd214175ec65e2086a685ea1447e061b655d548ba1e0b9975e6d56675220294e8718a201ac1fbd2740f8a320d1c154e63d6c0ff4e400d9a

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      7e7079af8069e5677946d7c631ff10f4

      SHA1

      e7f25d3d29336b942ce34bb3bbe3ac53240da533

      SHA256

      645dc83eb3f1a03ded5e58242fe1f4887d04ba4a543fd0551488cbbebdd8cd1c

      SHA512

      4760e37f4d4cc70738c2df54a39ca9023e0975f07bb1fa5824fd1adbfa63892eb05717f8cffa67363cdf5d2d25bf60767c2a9c5af4f04bdba21c5d54c874f5a6

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      cf0b067b5514fec6329132c4f8f3b225

      SHA1

      3ce8f011de50249bc9bb1555af559cb34f4f6233

      SHA256

      6615b995d44b7f29969c85a0c98755ac673422a8e39cf766a6e86c486bea53cb

      SHA512

      d39bbe3ebbc73d31ddc3dc4475abfb35d727030d72781c147acbcdc165129d363c69a28259df18ae4df084a224b9ba01dd50b8e1eb58e8a6a4aa4a987f9e33ce

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
      Filesize

      342B

      MD5

      2031380f3be7fd2cf33a9e7cdfddc8b4

      SHA1

      4e106acccd86e91e02744697a3669c82248aa0b9

      SHA256

      ab3aa5c4a672c6dc0634c3933499c755194636a96759c4d369fcc459b8a85b23

      SHA512

      04d7152295e6502de5d86700099fdc32fcf6fc0e48499d556eb809a2b0a9602c3d7744e261ad36a721042db3e55613de11ae65a77478d8cce733e958e9d79911

    • C:\Users\Admin\AppData\Local\Temp\Tar26AA.tmp
      Filesize

      181KB

      MD5

      4ea6026cf93ec6338144661bf1202cd1

      SHA1

      a1dec9044f750ad887935a01430bf49322fbdcb7

      SHA256

      8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

      SHA512

      6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    • memory/2760-117-0x0000000000480000-0x0000000000482000-memory.dmp
      Filesize

      8KB