Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/11/2024, 20:11

General

  • Target

    BlueStacksInstaller_5.21.600.1019_native_37af3e2585987908aa6f7b6cf80f61e7_MDs1LDM7MTUsMTsxNSw0OzE1LA.exe

  • Size

    913KB

  • MD5

    86b016ee6a71a5219f56779885f691ef

  • SHA1

    1a40a93403e1004f7f8033c5afee8196db16700a

  • SHA256

    a56fd8aa5ffdaddaf58e4fbe8cbb2359fd11f2a93f34d9d0df610baf96972207

  • SHA512

    9f9860782ad93a3a43a9d4509635ac5a08317d3ee60ae314ebdaf4b61855c0a697ca0e5561b5452040763bec719394baaaa1ac4c23c00842be4806ab4dde42a7

  • SSDEEP

    12288:tivtCXQd0gjKX7zuqGKY5Ha3z1cNoaMq+zfxUEwOwGPaGb4hmsLBeJs0RXfGPtRF:tivtCXWeGKY81Oq8wX5RXfGPTSKdvaU

Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies system certificate store 2 TTPs 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlueStacksInstaller_5.21.600.1019_native_37af3e2585987908aa6f7b6cf80f61e7_MDs1LDM7MTUsMTsxNSw0OzE1LA.exe
    "C:\Users\Admin\AppData\Local\Temp\BlueStacksInstaller_5.21.600.1019_native_37af3e2585987908aa6f7b6cf80f61e7_MDs1LDM7MTUsMTsxNSw0OzE1LA.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\BlueStacksInstaller.exe"
      2⤵
      • Executes dropped EXE
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2660
      • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\HD-CheckCpu.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\HD-CheckCpu.exe" --cmd checkHypervEnabled
        3⤵
        • Executes dropped EXE
        PID:2392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

          Filesize

          1KB

          MD5

          55540a230bdab55187a841cfe1aa1545

          SHA1

          363e4734f757bdeb89868efe94907774a327695e

          SHA256

          d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

          SHA512

          c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7

          Filesize

          1KB

          MD5

          c6150925cfea5941ddc7ff2a0a506692

          SHA1

          9e99a48a9960b14926bb7f3b02e22da2b0ab7280

          SHA256

          28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996

          SHA512

          b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

          Filesize

          230B

          MD5

          b6e917c61d34ad8d613f2ff4ac558f3a

          SHA1

          13d9bcee68a40850a52cbd0386ccfef83c292243

          SHA256

          c6c9c138fdc0c9db0b4cfb7126cefffe9eabe9d1b3ea5c773ca57a060f70899e

          SHA512

          0e5d40a4df193c40bb87a51f73a35b73902959b2918a1aad82136a832ae2113cabc52091e4a104ebb318a0dad9a3856c018ded8182a8bfe658526592f55fd2a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          eb9bc6675e5271266ed9c2885aebe929

          SHA1

          b75506bbcab194e7f986f5d8e38291b48cc02482

          SHA256

          a4a4e953ce6b70f3bff51c544c6c57eb72ff69c079e5c894ea8239a1d3bc8c44

          SHA512

          70cefdcfc8424b5ab10f8d7991229d0abe46da5fa07f3786a6029611de3afc086926a8c0ff17196da119afbbbcd16e6303c156ada6c0edc11dac480c53d03a1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ee826a46664ab88f6034bbba3d12d950

          SHA1

          1e70c5ed42bc13db3ee49df76610b5655819f0de

          SHA256

          2d8736178afd24bf9403810cba2e4a92fc2c7ee0703f36dbb54ceae4da01d52e

          SHA512

          4c263a03153d539ba05a4ba372346e292bda47ae706be156362b26869d4ca090f81ca0e06afaf25e5616556e7728604e8e6d1527b7b2b7e870fc258922e19db4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          223516555c0c6408b7205d701c271d03

          SHA1

          c6d0159aa06a7baa1a9f0c6326a152403be243ad

          SHA256

          2c2761f8712aff6768eacbb33470d5833b7d9cc486f79f8e2a84ce2fac7880cd

          SHA512

          e9201289b8dad13bfef3c5a6707c628c17d1d8693f48a45f7cc76c81bc3de4df5f02dfb51bcb88a054105ff74574c67c9e82915b127fc5d75599609541119d77

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          de3edec6bff0865e701aff10fa66638b

          SHA1

          dd33758010a33a7ad39090023e8adfeb152e3f17

          SHA256

          e5fbba8bd6f0c3d0cd5339ffb96e07cd23a8df96cbb8d1a7d6895e9e22023c0f

          SHA512

          959904935baa2d432549f11e8a88e363bf13b23ec79bc4196ca17497eea8df4bd7f244a71fccd0f0655b16fe7c1940c09e6219adccec9daa4de32856f86954cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f074ed4c51b21074968d3de819477b5c

          SHA1

          6da539754707ef276f3c4798cb614c6977b4598d

          SHA256

          e73ce6b77122d56447f95f0c1c1224d91228bf83ec56722e4d4106414f44479c

          SHA512

          b95c765c438be104e1702d11e38bef3b9a03aaad462acb65dff2d733729ef09e1f6009839e4165993577f0f92b2bce08e6df87723e26e166a0c5d7442e3e7f06

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d311f82c781828b1df2eace4cef37b58

          SHA1

          79136c30b66c2c7a811e5e14bf89166e330b7212

          SHA256

          b78b8082c0f7aeed1ae6883523f0d015ba715eb0b4fd6181e5fd0df3f7a979d9

          SHA512

          dfa7bb90ebe9d8256ff7c1c0ba56ea377610228d7f2aba47e7ad77c844e90e8a68b4f975015d67f91b55231eb8f9aca9200c971a45fcd6f732e570d3f060a8b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          578067c12d9fec12fd7b20ea2fcb6651

          SHA1

          b76b989e6efe55f27b3f8a837846fcb601e59210

          SHA256

          fe013664f217140a024dd2776a218484213016e41876f558dd1277d6337b0044

          SHA512

          0a1a79fce63bd1008c227b90585dd60e589ba5e28a231abeb0e1c777168124d31b22658311fffed08cc23fd1112215cf0534485733ec53d66f88b4a596f68f6a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aa2c7d12a98a9ca85bee4577f5647641

          SHA1

          42fe4b5932f529751e505a408ef7a3c75e384747

          SHA256

          c30871bb9c31522d914d0243d3909fabe22073454b7d4205191513fa822b49bc

          SHA512

          bc4afaa4c4d20ea8428fdbe123dcd12aa056c2b14d92350392061c3db905c9fc00856a87286d5b8cc572926ffe717ff086b013941734aa24c5442e7ec97b47da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c03b48c0ea43a4af93054d2b233be61a

          SHA1

          efe5787005bed3bbee01b1000cb54ee2044d27c1

          SHA256

          2ad3c4cb984184f37531e5a01f5429823eedf29c95c78c585fe3a6a2d4102f4b

          SHA512

          d9a92fc0c77bbcbdc9a32457216477715508cde620bc41ef4cd2de6352ffcdf03fc0f2b6d28e7d60b2057145db9f72cad573d4fa473428b361ccf85817191e56

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          79a0621310f76005e66b6613f25e6162

          SHA1

          603a0d7927968d729f1f349b8721c7c5ca091a7d

          SHA256

          2994f04b7507cae396c2ca1f8742528913359057e2adb5d73d54187f7fc7eaea

          SHA512

          3bd34fa6b0176933ab0e7c0ce4364d00e5b8d4c00805926633893e9c899b545dc7f5509a91dcf1a378d3109d17992b24385e4348906c59f6591e727c2ae7a6fd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d4a8774f9a4b0a47da81587ddeb241c9

          SHA1

          7ccda3d4e114720a20afabe451fab462602b6b43

          SHA256

          a0d889e862bfe5ef9bd8a6593f44773ea9108e3494a30e3bc4014f39e454e8a3

          SHA512

          4ff76d5c77e77bafc06bafadfa1262d5e6dd58a5e08178178e06764e65c942f6fe8d6881d01e536b909f78ca06d47d80228c6d0b8cec24610432e821b20a3b09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d4beec03faaa5bc2160a2965fbca820a

          SHA1

          6eb9cf8b0b96c9c2488f3c9ec0a7be65bf521c47

          SHA256

          b456292bc9c828cc7cf282d580be7699bdf0a84d7ee24cb672414e09c7177190

          SHA512

          8950dfbc47fc4eef9b7c614d5832960ef38954244095e69be646edfa39efd9169b342b60afb1614c01dfdf17d1dbdef62ecc42762cbedb2a22c1ab830c930a3c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c889c1aa77bf1f972408c2de317c57fb

          SHA1

          3af75713f4e788931ab3a386bce985411e8fd332

          SHA256

          6804f52df75dd80bb7e4da085c4a52bd53d0716f368378d438b77340010bd1b7

          SHA512

          b6385f440bd1fc050ec4cbec0801e875bb553b80afbbb51cd069134f22b49038791a85285caf993d0cf3fc073efe814d03897fc61ad1dbf2a572b28956ef616e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6e52b44ff3623b86bac402cfbb1b8a1a

          SHA1

          5bc1f8b7ff6cfdb150f320b2ffa2f939ef7b5945

          SHA256

          c32f5957fb5c8fa6683ab0f13f42be27a7f2fa6ea2abc090f188322db3f7e0c7

          SHA512

          62f3178a22622d47c299349ec2a40a884e5e44b0f0aa64c26a5ad708c7672c89f15536591e2a9221047472956469bea190523f28d38894b00a5284892e3726b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8b372626b054e2234ff424f418d9a1de

          SHA1

          7c49b372f3b78e19afce309f3d4632ac9d60cb45

          SHA256

          06ffacc1eed740034f6546a40d18739783f5eb1bd058dfed403c8f814c780530

          SHA512

          b3a7276e49426bffdf99e19af0a58bd8a74d024f1ef007f67527aefbae4cc1352968e5c62ef0f58029a97a01db1d85cf05b12a9d307d1495152c705799477528

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DABA17F5E36CBE65640DD2FE24F104E7

          Filesize

          276B

          MD5

          cba8ab1b75041c61a957dd2bb1043eda

          SHA1

          03cc2a15ad3a8356c9c52bffabdef15b9f9d2ac8

          SHA256

          0bbc21cfcd0ae5d410851b92ad7a5a1b09ef358a60e5857f7734f441d2266fb6

          SHA512

          e72db3a0c9066bff9e8f07cf43c4d973734ce018a45cca24557491e02bc3885c812951da19d23c2d4ecb8cd9c7febacb7bf6f52a53595bf4d23538f9718c2377

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\Assets\change_hover.png

          Filesize

          310B

          MD5

          57092634754fc26e5515e3ed5ca7d461

          SHA1

          3ae4d01db9d6bba535f5292298502193dfc02710

          SHA256

          8e5847487da148ebb3ea029cc92165afd215cdc08f7122271e13eb37f94e6dc1

          SHA512

          553baf9967847292c8e9249dc3b1d55069f51c79f4d1d3832a0036e79691f433a3ce8296a68c774b5797caf7000037637ce61b8365885d2a4eed3ff0730e5e2a

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\Assets\error_icon_72.png

          Filesize

          1KB

          MD5

          4aaf83d2b3fd56ad806708e60474df39

          SHA1

          144777a265879b69fadea3eb3ac6939458918578

          SHA256

          84e59d14d9433e6c3d92daeb8c443063b5e3be6c0b297f0403dbde473a05cb3f

          SHA512

          3b8485f054fe6ed2374bc81cb1786f09741219fbfcb22503707b11cf5db1ab262ba4349633597d5d9ddabc3415b170fa8eebc932f58d211d7092b8fb96fa1304

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\Assets\exit_close.png

          Filesize

          670B

          MD5

          26eb04b9e0105a7b121ea9c6601bbf2a

          SHA1

          efc08370d90c8173df8d8c4b122d2bb64c07ccd8

          SHA256

          7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157

          SHA512

          9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\Assets\loader.png

          Filesize

          279B

          MD5

          03903fd42ed2ee3cb014f0f3b410bcb4

          SHA1

          762a95240607fe8a304867a46bc2d677f494f5c2

          SHA256

          076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1

          SHA512

          8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\Assets\minimize_progress.png

          Filesize

          212B

          MD5

          1504b80f2a6f2d3fefc305da54a2a6c2

          SHA1

          432a9d89ebc2f693836d3c2f0743ea5d2077848d

          SHA256

          2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6

          SHA512

          675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\BlueStacksInstaller.exe.config

          Filesize

          324B

          MD5

          1b456d88546e29f4f007cd0bf1025703

          SHA1

          e5c444fcfe5baf2ef71c1813afc3f2c1100cab86

          SHA256

          d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb

          SHA512

          c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\HD-CheckCpu.exe

          Filesize

          200KB

          MD5

          81234fd9895897b8d1f5e6772a1b38d0

          SHA1

          80b2fec4a85ed90c4db2f09b63bd8f37038db0d3

          SHA256

          2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c

          SHA512

          4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\JSON.dll

          Filesize

          411KB

          MD5

          f5fd966e29f5c359f78cb61a571d1be4

          SHA1

          a55e7ed593b4bc7a77586da0f1223cfd9d51a233

          SHA256

          d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156

          SHA512

          d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\Locales\i18n.en-US.txt

          Filesize

          20KB

          MD5

          a1e3293265a273080e68501ffdb9c2fc

          SHA1

          add264c4a560ce5803ca7b19263f8cd3ed6f68f0

          SHA256

          1cb847f640d0b2b363ce3c44872c4227656e8d2f1b4a5217603a62d802f0581f

          SHA512

          cb61083dc4d7d86f855a4cc3fe7c4938232a55188ad08b028a12445675fbff6188bb40638bd1ce4e6077f5bfc94449c145118c8f9b8929d4e9c47ed74cf7bece

        • C:\Users\Admin\AppData\Local\Temp\7zS43B1FAA6\ThemeFile

          Filesize

          80KB

          MD5

          c3e6bab4f92ee40b9453821136878993

          SHA1

          94493a6b3dfb3135e5775b7d3be227659856fbc4

          SHA256

          de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6

          SHA512

          a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895

        • C:\Users\Admin\AppData\Local\Temp\Cab96E5.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar9707.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

        • \Users\Admin\AppData\Local\Temp\7zS43B1FAA6\BlueStacksInstaller.exe

          Filesize

          629KB

          MD5

          0d021ad9fc86a22215cd014b088f307e

          SHA1

          531e18244b9a43798562c1297c09ccc0239adb61

          SHA256

          c14eb1c61d737e195ce06cb84ba2b05925dcf36ac35c1078f260e423b1ad3485

          SHA512

          e5d977d5a3f5a5888e054521168a9ac22712892d5aea225a6f545e9be885deef1983fbcd963927367b2d7439c18b2e6c71a6b143a924a41f5acabc76e0a6e993

        • memory/2660-129-0x0000000000360000-0x0000000000400000-memory.dmp

          Filesize

          640KB

        • memory/2660-127-0x000007FEF56D3000-0x000007FEF56D4000-memory.dmp

          Filesize

          4KB

        • memory/2660-131-0x0000000000400000-0x0000000000468000-memory.dmp

          Filesize

          416KB

        • memory/2660-132-0x000007FEF56D0000-0x000007FEF60BC000-memory.dmp

          Filesize

          9.9MB

        • memory/2660-190-0x0000000000350000-0x000000000035A000-memory.dmp

          Filesize

          40KB

        • memory/2660-189-0x0000000000350000-0x000000000035A000-memory.dmp

          Filesize

          40KB

        • memory/2660-934-0x000007FEF56D3000-0x000007FEF56D4000-memory.dmp

          Filesize

          4KB

        • memory/2660-935-0x000007FEF56D0000-0x000007FEF60BC000-memory.dmp

          Filesize

          9.9MB

        • memory/2660-936-0x0000000000350000-0x000000000035A000-memory.dmp

          Filesize

          40KB