Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/01/2025, 17:26 UTC

250110-vz5gyasrhl 10

10/01/2025, 16:25 UTC

250110-tw4ksssjcp 10

Analysis

  • max time kernel
    150s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2025, 16:25 UTC

General

  • Target

    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe

  • Size

    992KB

  • MD5

    e8c47dd833dd0fb7c60becb77181763d

  • SHA1

    c1267f03431f62775f2dddee3cc0b4f138aabe02

  • SHA256

    b250dccc534f8bacc38656f7dba9bbf3b97c572839f28c49bb8f24400cd52170

  • SHA512

    31a34b13af3a8d02b7a1141b0f9bb50bb6a20b14b73bc6d9d7f19818cf8de8d7257e5048306cd2a4869f7c6074fa516d8e5aa02dc348731e7f1bf1e95f409f9b

  • SSDEEP

    24576:rFhNhAgGFk+hD4QQcf7tg39/UBzb2HiRKcmtUlyGE:hhAFk+VRtS/gbTZf

Malware Config

Signatures

  • NanoCore

    NanoCore is a remote access tool (RAT) with a variety of capabilities.

  • Nanocore family
  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Drops file in Program Files directory 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Identifies Wine through registry keys
    • Adds Run key to start application
    • Checks whether UAC is enabled
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Windows\SysWOW64\schtasks.exe
      "schtasks.exe" /create /f /tn "DSL Manager" /xml "C:\Users\Admin\AppData\Local\Temp\tmp6642.tmp"
      2⤵
      • System Location Discovery: System Language Discovery
      • Scheduled Task/Job: Scheduled Task
      PID:2732
    • C:\Windows\SysWOW64\schtasks.exe
      "schtasks.exe" /create /f /tn "DSL Manager Task" /xml "C:\Users\Admin\AppData\Local\Temp\tmp66DF.tmp"
      2⤵
      • System Location Discovery: System Language Discovery
      • Scheduled Task/Job: Scheduled Task
      PID:2752

Network

  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • flag-us
    DNS
    q7481.codns.com
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    Remote address:
    8.8.8.8:53
    Request
    q7481.codns.com
    IN A
    Response
    q7481.codns.com
    IN A
    127.0.0.1
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 127.0.0.1:7481
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

  • 8.8.8.8:53
    q7481.codns.com
    dns
    JaffaCakes118_e8c47dd833dd0fb7c60becb77181763d.exe
    61 B
    77 B
    1
    1

    DNS Request

    q7481.codns.com

    DNS Response

    127.0.0.1

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\tmp6642.tmp

    Filesize

    1KB

    MD5

    5940ad95c362bc2e7bcadb1525f83343

    SHA1

    dbe3bac2f040cb5e6829f7204ffca645b4a66df7

    SHA256

    76f996ab6677ac150e269e78d0f757d56dd23282d36e4962abc7507ab93cda8f

    SHA512

    a5221540d61e00c2ca2f536aaea9c9842078926c1777dc1d91a84f3f0c1f08a75b3f4d2d5cb18d4a286fcdeb0efdfd18fdeea1397ef6f0c1fbb3069fc1c34a1a

  • C:\Users\Admin\AppData\Local\Temp\tmp66DF.tmp

    Filesize

    1KB

    MD5

    a0bcaf1694d4fcae2c44258530850f35

    SHA1

    99e9ccea3a9dca8d94808f6488fdc37c0b3bfe73

    SHA256

    099c4a82d8e8ddf5ff801a8f08fb5a143834506e936ce846b380a42eb24e888e

    SHA512

    ad3f2fbc09f7d57c24a35a62f00251c93d480e065f3b7fbc7133736cb144a3031fdc9f3e8be8a1c6dcdb8b3def654618faab416f66a28628ab71e55de4df0da3

  • memory/2172-0-0x0000000000400000-0x000000000060A000-memory.dmp

    Filesize

    2.0MB

  • memory/2172-9-0x0000000000400000-0x000000000060A000-memory.dmp

    Filesize

    2.0MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.