Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/01/2025, 02:46 UTC

General

  • Target

    JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe

  • Size

    5.2MB

  • MD5

    27842660abd6cb66b371c5d50a0bc96d

  • SHA1

    8474a082443ee28976d41e614a1a5fd6dd6837b6

  • SHA256

    1077d3ac73deecaaac114d21805338c43444020d037c7fc2cac5a73194856710

  • SHA512

    194392a87e53d63b503e0b345bc2dfef0f90619388cf2c6623f382b6b0ac76bc80030ec9e6cedae8f8b7019cd4f02ae6c9327f167e1ccf0ef321617ad98fe13a

  • SSDEEP

    98304:QO1StCcJrt8JBACb2nlsRPL4ZEeLonaO1febmjm7zXyADwmWIXUIAwUH+HwaOaK9:X1StCce2vWR4E2onaEqzRJWIX5Ale/K9

Malware Config

Extracted

Family

latentbot

C2

requiemforadream.zapto.org

Signatures

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

  • Darkcomet family
  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

  • Latentbot family
  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 24 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Identifies Wine through registry keys
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1716
    • C:\Program Files (x86)\Internet Explorer\iexplore.exe
      "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
      2⤵
        PID:5068
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe"
        2⤵
          PID:2116

      Network

      • flag-us
        DNS
        149.220.183.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        149.220.183.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        172.214.232.199.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        172.214.232.199.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        134.32.126.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        134.32.126.40.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        245.131.30.184.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        245.131.30.184.in-addr.arpa
        IN PTR
        Response
        245.131.30.184.in-addr.arpa
        IN PTR
        a184-30-131-245deploystaticakamaitechnologiescom
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        28.118.140.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        28.118.140.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        53.210.109.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        53.210.109.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        171.39.242.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        171.39.242.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        133.211.185.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        133.211.185.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        86.49.80.91.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        86.49.80.91.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        102.144.22.2.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        102.144.22.2.in-addr.arpa
        IN PTR
        Response
        102.144.22.2.in-addr.arpa
        IN PTR
        a2-22-144-102deploystaticakamaitechnologiescom
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        11.153.16.2.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        11.153.16.2.in-addr.arpa
        IN PTR
        Response
        11.153.16.2.in-addr.arpa
        IN PTR
        a2-16-153-11deploystaticakamaitechnologiescom
      • flag-us
        DNS
        11.227.111.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        11.227.111.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      • flag-us
        DNS
        requiemforadream.zapto.org
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        Remote address:
        8.8.8.8:53
        Request
        requiemforadream.zapto.org
        IN A
        Response
      No results found
      • 8.8.8.8:53
        149.220.183.52.in-addr.arpa
        dns
        73 B
        147 B
        1
        1

        DNS Request

        149.220.183.52.in-addr.arpa

      • 8.8.8.8:53
        172.214.232.199.in-addr.arpa
        dns
        74 B
        128 B
        1
        1

        DNS Request

        172.214.232.199.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        134.32.126.40.in-addr.arpa
        dns
        72 B
        158 B
        1
        1

        DNS Request

        134.32.126.40.in-addr.arpa

      • 8.8.8.8:53
        245.131.30.184.in-addr.arpa
        dns
        73 B
        139 B
        1
        1

        DNS Request

        245.131.30.184.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        28.118.140.52.in-addr.arpa
        dns
        72 B
        158 B
        1
        1

        DNS Request

        28.118.140.52.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        53.210.109.20.in-addr.arpa
        dns
        72 B
        158 B
        1
        1

        DNS Request

        53.210.109.20.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        171.39.242.20.in-addr.arpa
        dns
        72 B
        158 B
        1
        1

        DNS Request

        171.39.242.20.in-addr.arpa

      • 8.8.8.8:53
        133.211.185.52.in-addr.arpa
        dns
        73 B
        147 B
        1
        1

        DNS Request

        133.211.185.52.in-addr.arpa

      • 8.8.8.8:53
        86.49.80.91.in-addr.arpa
        dns
        70 B
        145 B
        1
        1

        DNS Request

        86.49.80.91.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        102.144.22.2.in-addr.arpa
        dns
        71 B
        135 B
        1
        1

        DNS Request

        102.144.22.2.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        11.153.16.2.in-addr.arpa
        dns
        70 B
        133 B
        1
        1

        DNS Request

        11.153.16.2.in-addr.arpa

      • 8.8.8.8:53
        11.227.111.52.in-addr.arpa
        dns
        72 B
        158 B
        1
        1

        DNS Request

        11.227.111.52.in-addr.arpa

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        144 B
        264 B
        2
        2

        DNS Request

        requiemforadream.zapto.org

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        144 B
        264 B
        2
        2

        DNS Request

        requiemforadream.zapto.org

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        144 B
        264 B
        2
        2

        DNS Request

        requiemforadream.zapto.org

        DNS Request

        requiemforadream.zapto.org

      • 8.8.8.8:53
        requiemforadream.zapto.org
        dns
        JaffaCakes118_27842660abd6cb66b371c5d50a0bc96d.exe
        72 B
        132 B
        1
        1

        DNS Request

        requiemforadream.zapto.org

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1716-0-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-1-0x0000000077AA4000-0x0000000077AA6000-memory.dmp

        Filesize

        8KB

      • memory/1716-2-0x0000000000401000-0x000000000044E000-memory.dmp

        Filesize

        308KB

      • memory/1716-3-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-4-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-5-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-6-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-7-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-8-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-9-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-10-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-11-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-12-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-13-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-14-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-15-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-16-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-17-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      • memory/1716-18-0x0000000000400000-0x0000000000F62000-memory.dmp

        Filesize

        11.4MB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.