Analysis

  • max time kernel
    156s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-06-2024 12:44

General

  • Target

    637584768cadfd84af293b0578c4441cec915774f0cef0baeeb0b99b55f360a2_NeikiAnalytics.exe

  • Size

    29KB

  • MD5

    58cda033ad14dd71ffc5ab0eb221f670

  • SHA1

    cc8e606569cd18c37303bd91b967309ccb50688b

  • SHA256

    637584768cadfd84af293b0578c4441cec915774f0cef0baeeb0b99b55f360a2

  • SHA512

    3a7a63a86ca16c48899811bc62ce4e80749f7b53b81075bb9541218dcc6aef1199283e1f78bda8b8eb65bbb228a23755c99e3863eed08873c0c9313188d0d812

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/nb:AEwVs+0jNDY1qi/qPb

Malware Config

Signatures

  • Detected microsoft outlook phishing page
  • Executes dropped EXE 1 IoCs
  • UPX packed file 26 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\637584768cadfd84af293b0578c4441cec915774f0cef0baeeb0b99b55f360a2_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\637584768cadfd84af293b0578c4441cec915774f0cef0baeeb0b99b55f360a2_NeikiAnalytics.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Suspicious use of WriteProcessMemory
    PID:380
    • C:\Windows\services.exe
      "C:\Windows\services.exe"
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      PID:1980
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1036 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1388

    Network

    MITRE ATT&CK Matrix ATT&CK v13

    Persistence

    Boot or Logon Autostart Execution

    1
    T1547

    Registry Run Keys / Startup Folder

    1
    T1547.001

    Privilege Escalation

    Boot or Logon Autostart Execution

    1
    T1547

    Registry Run Keys / Startup Folder

    1
    T1547.001

    Defense Evasion

    Modify Registry

    1
    T1112

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8ZO46T3J\6YT8K5K1.htm
      Filesize

      175KB

      MD5

      b4a58cc001e8de2c4a004a34754c181b

      SHA1

      e701c2b107a7dad7c2c0d16eb683545999ac6e0a

      SHA256

      99dbdb6ecc88d23eab1da35a8c83c6f0c1eeffdcdc70308b4f89a8911d378a51

      SHA512

      7e61b86b132bed735ab9b9e3b11f286c54bef2633f3b7c41019e587184d4246c7bd284e5bc2fb83b7d194e777a027577cee44bcd1d9ee8a74cb04f4bfedeb35a

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8ZO46T3J\ZSMKOA6B.htm
      Filesize

      175KB

      MD5

      3f6856311eec36b75585ba330f28ce90

      SHA1

      d9f8699af0f85e9795fe7aad489a0c59d309c880

      SHA256

      1800805a0d396d29afa4cfab06254e4263c4851c580d1099726fa2d471176973

      SHA512

      47a1e0c5820f8bae56344d4c69f6f052fa7d0238145599893801814ddabfa79b6090ffeecb323f219b092aa91e7b146d28ec114ef0ab24aa02dea7090920df39

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8ZO46T3J\searchCRMAV8UX.htm
      Filesize

      142KB

      MD5

      acd0f924a2ca37d3847f6b2d048d6760

      SHA1

      094f7d60648fd9648b0d398f64da42782d6e7396

      SHA256

      cef04fd8d2299074e769bed1c725676ff226354668a8f5d55ddf337311d5490d

      SHA512

      354c8fda15bc6d157521a59356ccf871ad40a317e422b87a088ad549db8f29890091f766abb690e2fa4bc46889bfd897db7bca7eae74440c8a92cd2bd73df715

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8ZO46T3J\search[6].htm
      Filesize

      149KB

      MD5

      4588094e13af965604cc17b127931836

      SHA1

      09287117af52f911a404721685c6c54dcc8f49ca

      SHA256

      cf9a132345ef78d344152dc8ec8393f5339f029195225b186ebc22bab7766147

      SHA512

      6b5379ff7991e64fafb7220c38cdb008cca8f34285260708698230d0aaee37e5b74535112dcfaf9c9d71d109a50fc85c1037a16c61a0dfabd6dbf28c17c634e3

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BHC2O5WS\0P5L6TPD.htm
      Filesize

      175KB

      MD5

      a3094d4e7c3bfc8c0677159a06d2ec4c

      SHA1

      5983c3e492fc543cc259200641ea0d72384f9552

      SHA256

      0d18fbd58661c0116757aca571d96a46e73a601272f6181f2411c5c720ca0126

      SHA512

      af65a7d80ccbd176751a8b090871f49ab96be2e3e8c5257231fb053554fdfb9b957e2cda2ba2077ad8704b6062fc61927853a1b4a04a1035e9be311f03851c3e

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BHC2O5WS\170IT1CQ.htm
      Filesize

      175KB

      MD5

      88b4aa2f4e9f9dbdd2993165707f5dc4

      SHA1

      dfbec52f994d27a35df9836417cab37fe42798d5

      SHA256

      4211aee027a58a7c9ea35d70616979e17d57dfa5562cf4154f93dc96b628cd56

      SHA512

      c38296ef0c15763b094f5cb7501ad59281b1b20808e92e43e2270fe211b39e4cbcfd43e9d6bf83eca52536246e1fdc3279f45219bc43183a236c9bf47c53d3bc

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BHC2O5WS\results[2].htm
      Filesize

      1KB

      MD5

      211da0345fa466aa8dbde830c83c19f8

      SHA1

      779ece4d54a099274b2814a9780000ba49af1b81

      SHA256

      aec2ac9539d1b0cac493bbf90948eca455c6803342cc83d0a107055c1d131fd5

      SHA512

      37fd7ef6e11a1866e844439318ae813059106fbd52c24f580781d90da3f64829cf9654acac0dd0f2098081256c5dcdf35c70b2cbef6cbe3f0b91bd2d8edd22ca

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BHC2O5WS\results[5].htm
      Filesize

      1KB

      MD5

      35a826c9d92a048812533924ecc2d036

      SHA1

      cc2d0c7849ea5f36532958d31a823e95de787d93

      SHA256

      0731a24ba3c569a734d2e8a74f9786c4b09c42af70457b185c56f147792168ea

      SHA512

      fd385904a466768357de812d0474e34a0b5f089f1de1e46bd032d889b28f10db84c869f5e81a0e2f1c8ffdd8a110e0736a7d63c887d76de6f0a5fd30bb8ebecd

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BHC2O5WS\searchXTUWDX71.htm
      Filesize

      179KB

      MD5

      1bda435a0eb79b56db803939c35d7e2b

      SHA1

      df515929c59ea3d803b56d81d56de2f89038230e

      SHA256

      26cad843d8b6d42fe0270b4938aa8252bd7c9468e6368182dd9e303c37fd995e

      SHA512

      ca650a07ac1bda8718c1399660f5ce696a72a23f454213e39b923b6cace4d934e37766478db932d6fa25e02dcfc7ea4029314c36fd115e34ad744d529d6d17d5

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\default[3].htm
      Filesize

      304B

      MD5

      cde2c6ec81201bdd39579745c69d502f

      SHA1

      e025748a7d4361b2803140ed0f0abda1797f5388

      SHA256

      a81000fc443c3c99e0e653cca135e16747e63bccebd5052ed64d7ae6f63f227f

      SHA512

      de5ca6169b2bb42a452ebd2f92c23bad3a98c01845a875336d6affe7f0192c2782b1f66f149019c0b880410c836fc45b2e9157dcccc7ad0d9e5953521a2151d4

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\search257G4FCC.htm
      Filesize

      148KB

      MD5

      4cb965b8e878dea7302dcaa7513139af

      SHA1

      26cb040160f059ffea2187810a739d68db3f9c53

      SHA256

      976a8e646096675f3fb1a827dde59f4e2ced0e85b1d694cb61f200b458e3e4b0

      SHA512

      8fd991b8551d1cfcff8b83ba684b2da262566403d2e7dabb7c8da9afc5333bf0344da8c888526e46cd750d1ed9e27355f8e563939425546cf5fb3134d84128b3

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\search5WA0JL9Y.htm
      Filesize

      115KB

      MD5

      7bd3873d9ce0a0aeede6552cee8b390b

      SHA1

      972291491e3084a3de1692a8d39944b5f1d735c4

      SHA256

      e6ad19027ec02cc545519570851ecc89468e6f7d437531c0cbdb1a08ce7ad89c

      SHA512

      0dc5da45768699fe5cd867ebfdb1b47ac056489a87ae60b2bd09a54f789bb26a7238b1f805d929fbe5b6b75a139e172e4129077e26bf5955ce2baccb742dea71

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\searchBQJ2AX8W.htm
      Filesize

      148KB

      MD5

      fbc7136214455d966025690ce01e354c

      SHA1

      6d6fb724925081e4c0269b7ea0319261c34bef4f

      SHA256

      f9353eed67e42b0e960f800b99a2c1e432d5ccc47eb1ed858ebe71252caed006

      SHA512

      74975633bbe1906efd1893bbdccb42b9eeca347af795143d0ad14550079ae60abfb71e36dd691e7f3e2270bdc960f86d8c4296cfbc17a15527b970896a4cea57

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\searchVZAGP3SA.htm
      Filesize

      156KB

      MD5

      c9e0c14344397c1f49d6d748229a43f5

      SHA1

      6187534988616810b39de421b674cccf73de612f

      SHA256

      1c766c70fdd025563ce2ff2208603ebb41c4b29a69d0596230ee98c8aee79ef5

      SHA512

      d94431ec1210e8ecadb1c6d749f79a2b3c7129c10b536171f3e8e1722e7f52972e493f9afdcd8b942c46c27323792777cf249e16b19905dd8f1b0f228186a265

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\search[1].htm
      Filesize

      25B

      MD5

      8ba61a16b71609a08bfa35bc213fce49

      SHA1

      8374dddcc6b2ede14b0ea00a5870a11b57ced33f

      SHA256

      6aa63394c1f5e705b1e89c55ff19eed71957e735c3831a845ff62f74824e13f1

      SHA512

      5855f5b2a78877f7a27ff92eaaa900d81d02486e6e2ea81d80b6f6cf1fe254350444980017e00cdeecdd3c67b86e7acc90cd2d77f06210bdd1d7b1a71d262df1

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\search[9].htm
      Filesize

      128KB

      MD5

      97fe106050fa2a5a334f71bc3435ec3d

      SHA1

      73836eb16534a48bf9b46d3d78db9df7bfd2e768

      SHA256

      be25740a1e6d1a9cd27d6eeeda02ce57e02560a1c028c6c359ef1eb561dc62d6

      SHA512

      55bb22dca1155746cf72a505eec0b99c9cb6b90d89f83ef8a9e9686b8ad9d94812026faf3c5f7973725ae8de7c7796b4192b5e3c9f13570fe24858ccd825fb02

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\results[5].htm
      Filesize

      1KB

      MD5

      ee4aed56584bf64c08683064e422b722

      SHA1

      45e5ba33f57c6848e84b66e7e856a6b60af6c4a8

      SHA256

      a4e6ba8c1fe3df423e6f17fcbeeaa7e90e2bd2fffe8f98ff4b3e6ed970e32c61

      SHA512

      058f023cb934a00c8f1c689001438c9bdd067d923ddcbe7a951f54d3ca82218803e0e81fbc9af5c56375ff7961deed0359af1ffa7335d41379ee97d01a76ded6

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\search8OTYYMJW.htm
      Filesize

      104KB

      MD5

      5c1d551fb21235f722ab951743b8bcbc

      SHA1

      303918d57a4831223eda9ef33f313a706cf87aa2

      SHA256

      dd7ffa4d347cbaab2aba3d47235f7d3f04b4e6b95489e3526336962f85d7cf35

      SHA512

      d42624b883145e52435b770f288ce9dd46244e6fb19ef436b280467eb33a362cbddc4f8dcc014c6c112d4ce1443196b029e33fb7d35fe4b3ba31d30b17b3957f

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\searchGI9XCE8J.htm
      Filesize

      140KB

      MD5

      22bcea7414e1e3dfa0da8f1dd9bf5c3c

      SHA1

      412acf7c28f9cd4b104820d54819930d4afa425e

      SHA256

      71728689ebe7033abb8f921ea52c2d007dde7cfd0fd0bd67dc32ca398cac2c4c

      SHA512

      49c23bb5e9d383e7b110d06822b60508a7c9d668192b45e8add3a2075c56deac398b2d976b3c8ab52af01f746c6909fe8065efd2053e2295bba8fed602ea9a6e

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\searchO9S726KL.htm
      Filesize

      164KB

      MD5

      8e25b4d032ddbcb7d1ee282c47faff04

      SHA1

      3f384ef7e4d13528b6a60ebd7691da4c6871f129

      SHA256

      76614d3d26a3c8828da2318e6b83575eff13b9d4be11c0f4b473125ca54bb094

      SHA512

      4fedea2a45d6f18834b503c9c502d6263bb26e04d0a5b5c08d31001e9c8fa315f68bcdcd6082eae546c4aad63cfbfdf125ca0fabf927e7a336adb048542d2142

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\searchU3RQNS21.htm
      Filesize

      118KB

      MD5

      ef7eac3d8c1163aefe51e45b25edd76e

      SHA1

      4ecd94192c91b9299cdf97b1151d6a7d1ec0d2a0

      SHA256

      2ce979f4a7f4423cb91b0cdd3d2307fc6b9c22e3921e7a8cce57b78ba31eae22

      SHA512

      1c7d6bdbbf4a1d7060124a416ee41c6a7ff2987c73c27ca86955f484022105b7ebef0dfdf37aec04589a7b69ecb6c371f7c532a381e65b0af9cf4c53e6da925a

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\search[6].htm
      Filesize

      186KB

      MD5

      214867e4897044f4c41870a8949f8dd9

      SHA1

      7b7668dea5ee1d08cd49393c3dd8466047d9528f

      SHA256

      a7a5ddd6d4f53ca09f4272683e22bab921d20a037d7f3786ff1c98ae95665baf

      SHA512

      da8f0f816ecb2f9f216e6cd43bdcdbc474dc2582d100f6648fa2963da277ea745ba81a755f04893938561c571e457d7dd28323de6dabdccd13c920ab20b92365

    • C:\Users\Admin\AppData\Local\Temp\ngnckogk.log
      Filesize

      288B

      MD5

      8372331e9594ae6be73dd70c2c83e79c

      SHA1

      9505a52579afb1a8c4234d9f12b6de8dedc16e99

      SHA256

      0d0223d5fae3d0d7a657c8b5a1d9664dae38803ce8f23e1c7691cea185fcf453

      SHA512

      da67f0e9d736f6374f3645aaec42222d9bee31a8514310f741fa2b0370c7fd281c2b154aaf77dad245eeb348ac73000e67824499689023a6f512b2ce31aa4b0d

    • C:\Users\Admin\AppData\Local\Temp\tmp73C2.tmp
      Filesize

      29KB

      MD5

      e7e834fc1504267d9490d29aed7ddea5

      SHA1

      9970a270ff4c2abcd0427464a482433d2fa7fcec

      SHA256

      3c4cdfe4f5a68174b0e4331abcc3aa0d1728bf126c8c50cb7e0bb128bd2f73f9

      SHA512

      fed2e6174ee7de4ffeb2751392d6d40fe84db2c0d5b420a5af71a2c9f4dbb464defb4bcf3a02ad19600da5e321216195a699add2e3deb2b3dbfd8c49d6697b73

    • C:\Users\Admin\AppData\Local\Temp\zincite.log
      Filesize

      320B

      MD5

      ac24cfc9dafd95ca5fec586f6a860301

      SHA1

      b5f1b24e64de04b31208c6002e11f630ed523ef1

      SHA256

      e23dc7ba85ea252b0903c7e90e03c4264f0bd89e197a8ec351ada1ccb7565d46

      SHA512

      df42a137d8bbf279d1901474bb8be6d239e82890ad6528d0a64930ab731ffcbe768cdf61c38a5ddde4d18946e740bf21bb3e909f1c19b68cf2d25cb54a46f206

    • C:\Users\Admin\AppData\Local\Temp\zincite.log
      Filesize

      320B

      MD5

      17a240642392b685195f67f2fc55495a

      SHA1

      1f0bcf7dfe7ecf672fde75aac3b8178b54552847

      SHA256

      505d1a07fbb68c8a9695d3460d44d19ec38b55cb6703791035ceac9c4c687418

      SHA512

      0478807a8345b01aaa7d381f5bd70ee8af3dc4344946fb1c1908ec9b9c58412ddd392c62b1e6d8336326b6765c77927bb80438bd4c01d829beb29c8a563b2d0f

    • C:\Users\Admin\AppData\Local\Temp\zincite.log
      Filesize

      320B

      MD5

      b624b6a9d7dd26f2f589f3fdde64767c

      SHA1

      e496ad4da81987ef8ff0ed000a3dfff8519f81b8

      SHA256

      63c33971b67fc74a35d05a75a6f0bd30e3f370efbeb142d71490d0bd230ce79d

      SHA512

      2fd2015e6c759ec204098ee3d2c348f1614a8286a9f1c4bb7d6d53aad65a0b6db2b1124f721bb7a7bf0224a04e637451d590e31fabdb817ba47929a78b96bef4

    • C:\Users\Admin\AppData\Local\Temp\zincite.log
      Filesize

      320B

      MD5

      6fe7715d2e81847926243d6f0fd591ac

      SHA1

      4ccd5728396b2217ba5159a20bf8c53cf011d41f

      SHA256

      d8226debc1c7e8054042082a4dc627ca3d22f95c05b47bd7fbf18734b2fe940c

      SHA512

      a98d014eda7f4e7130bf5a6fedfe55192444a842e2d32a2ec166e428938d8b1494e394829f68dbd46f7307084e6ee3025cad3713fdfe7078c68bdf10fd1c1933

    • C:\Users\Admin\AppData\Local\Temp\zincite.log
      Filesize

      352B

      MD5

      c5bdacd9065aeb32ad14ef055da04d04

      SHA1

      bd94bfbd6c2293e24eafa72bfe61ea90e3f028da

      SHA256

      82277aac5ef5f45ef05df550f77d51f475efe98d977242deee935cfb8a103d4c

      SHA512

      be047796912f112454fd3cc6bd9c957bb19ceec6085820599b5931212a7c4e69f6d8f6f8499fe4da866ec2a1260cef0d4a8b93bbd41e64ddca54a217bf1012c1

    • C:\Windows\services.exe
      Filesize

      8KB

      MD5

      b0fe74719b1b647e2056641931907f4a

      SHA1

      e858c206d2d1542a79936cb00d85da853bfc95e2

      SHA256

      bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c

      SHA512

      9c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2

    • memory/380-173-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-334-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-656-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-39-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-0-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-707-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-32-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-499-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-107-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/380-13-0x0000000000500000-0x0000000000510200-memory.dmp
      Filesize

      64KB

    • memory/1980-19-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-441-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-14-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-548-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-21-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-26-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-258-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-31-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-5-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-33-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-162-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-38-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-704-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB

    • memory/1980-106-0x0000000000400000-0x0000000000408000-memory.dmp
      Filesize

      32KB