Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

ee97664edf...18.exe

windows7-x64

5

ee97664edf...18.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    140s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/09/2024, 22:55 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe

  • Size

    240KB

  • MD5

    ee97664edf7d93e50b9ef4cccab5f2bc

  • SHA1

    4dad750b772ddf16f847b1c78772db5a4dff2f52

  • SHA256

    8a3b01c27ff83db3f502bf5e76c58af71121def95c020cc140c3d8cddd33e0b4

  • SHA512

    1559241393c29b930a656f58bb96599cdba85c716936c1cacd9161d8f2dd3c5523b0622d545930b0ece307273498f0e126be36651f0f472f7183fb53f0376ac0

  • SSDEEP

    6144:vM45kSXbk8n1WEqCfL/Wm+PYyq9TjbiUU7R4rqx7I7MB0d:LprlzWmp/bFS7WMBW

Score
5/10
discovery

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Users\Admin\AppData\Local\Temp\ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      "C:\Users\Admin\AppData\Local\Temp\ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:1612
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3960,i,15436195446242760253,4000484513008731869,262144 --variations-seed-version --mojo-platform-channel-handle=1308 /prefetch:8
    1⤵
      PID:1956

    Network

    • flag-us
      DNS
      8.8.8.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.8.8.8.in-addr.arpa
      IN PTR
      Response
      8.8.8.8.in-addr.arpa
      IN PTR
      dnsgoogle
    • flag-us
      DNS
      www.facebook.com
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      8.8.8.8:53
      Request
      www.facebook.com
      IN A
      Response
      www.facebook.com
      IN CNAME
      star-mini.c10r.facebook.com
      star-mini.c10r.facebook.com
      IN A
      157.240.221.35
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:55:55 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=�_`; xs=�_�_
      Response
      HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=utf-8
      Date: Fri, 20 Sep 2024 22:55:55 GMT
      Connection: close
      Content-Length: 2959
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:55:55 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:56:00 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:56:00 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:56:00 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:56:05 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:56:05 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:56:10 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-us
      DNS
      232.168.11.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      232.168.11.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      172.210.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.210.232.199.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      35.221.240.157.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      35.221.240.157.in-addr.arpa
      IN PTR
      Response
      35.221.240.157.in-addr.arpa
      IN PTR
      edge-star-mini-shv-01-lhr8facebookcom
    • flag-us
      DNS
      69.31.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      69.31.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      28.118.140.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      28.118.140.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      50.23.12.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      50.23.12.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      198.187.3.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      198.187.3.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      19.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      19.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      44.56.20.217.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      44.56.20.217.in-addr.arpa
      IN PTR
      Response
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:11 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:11 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:11 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:16 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:16 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:16 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:21 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:21 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-gb
      GET
      http://www.facebook.com/home.php?
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      Remote address:
      157.240.221.35:80
      Request
      GET /home.php? HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.18) Gecko/20110203 Firefox/3.6.18
      Host: www.facebook.com
      Cookie: c_user=nal; xs=nal
      Response
      HTTP/1.1 301 Moved Permanently
      Location: https://www.facebook.com/home.php?
      Content-Type: text/plain
      Server: proxygen-bolt
      Date: Fri, 20 Sep 2024 22:57:26 GMT
      Connection: keep-alive
      Content-Length: 0
    • flag-us
      DNS
      42.56.20.217.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      42.56.20.217.in-addr.arpa
      IN PTR
      Response
    • 157.240.221.35:80
      http://www.facebook.com/home.php?
      http
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      748 B
       3.6kB
       9
      7

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      400
    • 157.240.221.35:80
      http://www.facebook.com/home.php?
      http
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      2.0kB
       1.9kB
       18
      10

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301
    • 157.240.221.35:80
      http://www.facebook.com/home.php?
      http
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      2.5kB
       2.3kB
       20
      11

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301

      HTTP Request

      GET http://www.facebook.com/home.php?

      HTTP Response

      301
    • 8.8.8.8:53
      8.8.8.8.in-addr.arpa
      dns
      66 B
       90 B
       1
      1

      DNS Request

      8.8.8.8.in-addr.arpa

    • 8.8.8.8:53
      www.facebook.com
      dns
      ee97664edf7d93e50b9ef4cccab5f2bc_JaffaCakes118.exe
      62 B
       107 B
       1
      1

      DNS Request

      www.facebook.com

      DNS Response

      157.240.221.35

    • 8.8.8.8:53
      232.168.11.51.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      232.168.11.51.in-addr.arpa

    • 8.8.8.8:53
      172.210.232.199.in-addr.arpa
      dns
      74 B
       128 B
       1
      1

      DNS Request

      172.210.232.199.in-addr.arpa

    • 8.8.8.8:53
      35.221.240.157.in-addr.arpa
      dns
      73 B
       126 B
       1
      1

      DNS Request

      35.221.240.157.in-addr.arpa

    • 8.8.8.8:53
      69.31.126.40.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      69.31.126.40.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      28.118.140.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      28.118.140.52.in-addr.arpa

    • 8.8.8.8:53
      50.23.12.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      50.23.12.20.in-addr.arpa

    • 8.8.8.8:53
      198.187.3.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      198.187.3.20.in-addr.arpa

    • 8.8.8.8:53
      19.229.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      19.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      44.56.20.217.in-addr.arpa
      dns
      71 B
       131 B
       1
      1

      DNS Request

      44.56.20.217.in-addr.arpa

    • 8.8.8.8:53
      42.56.20.217.in-addr.arpa
      dns
      71 B
       131 B
       1
      1

      DNS Request

      42.56.20.217.in-addr.arpa

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1612-2-0x0000000000400000-0x0000000000432000-memory.dmp

      Filesize

      200KB

      Download

    • memory/1612-3-0x0000000000400000-0x0000000000432000-memory.dmp

      Filesize

      200KB

      Download

    • memory/1612-4-0x0000000000400000-0x0000000000432000-memory.dmp

      Filesize

      200KB

      Download

    • memory/1612-5-0x0000000000400000-0x0000000000432000-memory.dmp

      Filesize

      200KB

      Download

    • memory/1612-6-0x0000000000400000-0x0000000000432000-memory.dmp

      Filesize

      200KB

      Download

    • memory/2904-1-0x0000000010000000-0x0000000010008000-memory.dmp

      Filesize

      32KB

      Download

    • memory/2904-0-0x0000000010000000-0x0000000010008000-memory.dmp

      Filesize

      32KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.