Overview

overview

8

Static

static

3

2026-06-01...ar.exe

windows10-2004-x64

8

2026-06-01...ar.exe

windows11-21h2-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    115s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    01/06/2026, 15:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-01_def41511958b835b50a7e2cfd24c629d_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
  • Size 5.1MB
  • Sample260601-sebm1sgw21
  • SHA256 6c63cfd68ceaa348cb7541d16014b78c90c73b8fb29cd08cd166a7044ce818dd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-01_def41511958b835b50a7e2cfd24c629d_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-01_def41511958b835b50a7e2cfd24c629d_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1572
  • C:\Users\Admin\AppData\Local\Temp\2026-06-01_def41511958b835b50a7e2cfd24c629d_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-06-01_def41511958b835b50a7e2cfd24c629d_akira_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4004

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 10.8MB
        • SHA256 8fe53b35aeb4d4c4206e6dd58b1f9ea50159d4ca4fb7f6666e0d5a229e3de2db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 11.2MB
        • SHA256 26a71fc397b0c92e92cd6bab24d9259fe04dbad8dfb0a233c888d8402712fd43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 11.0MB
        • SHA256 dd94dad27c2974b581e27e8ba8cbcc3abff91a045291594ffcdeae8f78cb41df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 5.8MB
        • SHA256 bd56a3553bb4f5f6220fef83b59484478eae10678b9d895e5734645757e1126d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 10.3MB
        • SHA256 1ab1d6d248341bd5ec2b0974b1588884c9eed6ca5fc934081da43fd63a5cfcd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 10.6MB
        • SHA256 17ed9fc602db404b85c8db93b9f827c237198280f7d53729530dffade42d13a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 10.3MB
        • SHA256 008775fc5afd4c1fab346072c3a98b23c9bf19eed850401d102233a8ee9ad1b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 14.4MB
        • SHA256 f0bd5e36a752af6f99f089c907442e4990ac36e5e6700d1651d10e173cac4c32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 10.6MB
        • SHA256 557a154471524308638737be135ae4cd7955e8865a50f2887b192e04133f5d61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 12.4MB
        • SHA256 391573f4d14ab7448de33306fa62f4a68a0ffd2ee80634111a6849de654cdf86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 10.4MB
        • SHA256 d21f53c0a697e95b0a5e277c88c53e76aaff8bca6747702c799a33544cb79301
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 16.3MB
        • SHA256 f1623011a399229aee2eeab797e99385772779e44d604e980ea3a09736abfc77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 12.0MB
        • SHA256 223409a4e03491bbb7a2c881c63776878656eadec7103b4cbb08f3cb4354900e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 13.7MB
        • SHA256 6718e3874e75462d09a7fb324dd8c43fbf35070dfa20531a5e18a4328d274527
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 12.5MB
        • SHA256 648f09d3bda40f22592a30a8d18cae56862bc942d771b19b8872eb4ba3c1e69d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 11.9MB
        • SHA256 b1e1096a295e4b55fafd7c1de4409cd967c6520e6305dc308ee10251614a72ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 12.1MB
        • SHA256 c13d28405ddb9285ff54c9b08d81ee1ea1a517a149c9e01a3215ce4fe6943f57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 13.3MB
        • SHA256 f9d3e4ec5dc0a5f994dc88ad98509e4d0ef2582dcc39c5f4b533606c25afc6f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 11.7MB
        • SHA256 52b4715173f46f08b20c5609ddb432b9582036b776a0196c34f3f4a2e54b075a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 10.3MB
        • SHA256 a9973f1794ade4a92f939adfbce036607a31b4a6091a4408012fc320ebdbf347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 10.3MB
        • SHA256 622a26c26e578182ea760de990a6a04e1cc74be29120c4d3ad8f7ee637fd93dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 10.3MB
        • SHA256 07020b6834f69080970c9b8e671c826eed5e568d1e03d09b417bb485f0f58e3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 10.3MB
        • SHA256 25431dc8727bf7f9509897abb49fbb7bae22fb65f2c3d2c569f678eeeb366523
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 10.3MB
        • SHA256 d5315ed9b5a591bf146b9cf74d422c93cd277ae51f769311d423f0a3c00e11c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 10.3MB
        • SHA256 6349d1064855f2e0f6c382a57e594069006a699f2da9175307ad4102d8d54af0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 10.3MB
        • SHA256 b0c6de897034c58b5cf7b42ecf6f01e3359284f8124ebe433d45fac21792c076
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 10.6MB
        • SHA256 aebfcd26a9526f74416afda7492748c06a1b4082731d9ba1f8676b548ff6045a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 10.3MB
        • SHA256 0d5c4e229094ea29c23737fb57535b8ff8b79f45ea3f1bb918a4e8a28209c8fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 10.3MB
        • SHA256 cdde6757e721babecb06ad8b70c1e43dffcf755be44b85d4ce652a240569ef3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 10.4MB
        • SHA256 fdd6099a36c9bc76d7a77e3b09db643f071b8a2f1a0d9e0e0e20d217039bb415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 10.3MB
        • SHA256 fad00d8cb0cfa1a1b64b4f8ae2284fd279aca6010118e94e634458435ac7e659
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 10.3MB
        • SHA256 4c7d70df5fc57fad09427d84ec749e61c3de4e2d32509f41e4ac5eee8fab5823
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 10.4MB
        • SHA256 85ac20f686040f057dbae0097f08881bb6fef2b715604d461342fec772993d80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 10.6MB
        • SHA256 21e06db64b9996878f85ff9d7784f21cf94ecc1d17d46baf94551715f8155100
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 10.7MB
        • SHA256 1eff81f9a0b424d3b1d60134c27f5f9eb9dd267ab793aba8476ac46ab8e36627
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 10.3MB
        • SHA256 573063f6c5edae9ef8f4b5eb5b1ab6077299fa2bc29d031b250ef77110611f90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 10.3MB
        • SHA256 12b094865cfbc4c7c33091aa8b395e1dfdf065b72ebc908f2fef8d8be5e5953c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 10.3MB
        • SHA256 09f25a56505665a9fa7ade02ecf42d8cdfaf45523305244dfcf8dcdaa36a3376
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 10.3MB
        • SHA256 288c9c36b3c752d56bb691b2b55de0cba99b610e52bbcc9f5a8d90702d206486
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 10.3MB
        • SHA256 fc794759377ab4ac80f01b60a00fc118251d56b2210ff19911c3cd3ff8bb7706
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 10.3MB
        • SHA256 a8e59fafd3379b233fabdc4d82ca8820a42615eb7c2b18e26ddb8d790328b800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 10.3MB
        • SHA256 979f966cf02c71e0ca57301d02cf3fd0f5e03d45aa679e77e9356160bf2fa228
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 10.3MB
        • SHA256 cc34404250a172006df62d325c8444b69761897d188fa5cdbb6bf31914722594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 10.3MB
        • SHA256 9d831aea12394c819c4b287c2f14192de3e8120b47cc74f1da36c9e80033103e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 10.3MB
        • SHA256 032463232fd4dfe9b4a5df74c3df6e23847c130a466028877a80372a5e4e8748
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 10.3MB
        • SHA256 5e762ef920942497a39bba1535e5719b8e0b9604d8ad1a92538f7bc71ac89abe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 10.3MB
        • SHA256 8aa7949c76155e1c7d041b2855ba43d133775661998097e7816593904df24197
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 10.3MB
        • SHA256 20d38729c7ce6dc026e2131f1f10a939032f8120b6ecaea9c53f2008d908be03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 10.3MB
        • SHA256 b711c8a2a69d998a0b22d5310ce56976f7c5e9acaf59a447362208baad172299
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 10.3MB
        • SHA256 8d0017c1ad40f37aafda71013f461057ab96fbbe72ba737f32122e36efd61a0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 10.3MB
        • SHA256 f574ebf5e7a429e8890e5d65f5154df826d674e194a6fd7f29a6fc25c57b7e05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 10.3MB
        • SHA256 23b9ba7e7fb141ea385d6c5538ba1d83df67c6541d48ccbbab04ce2dc40ab368
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 10.3MB
        • SHA256 158e2571f52f4254d99efc5510c719a34cbfb02c09137112e6a60f3deda986ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 10.3MB
        • SHA256 92c68a517372b5828735ec13cbc0028a068b7a2380ea5b886eaac8855a4e552b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 10.3MB
        • SHA256 e9db95f3718e476e49ff924df7df567c14a7ef9ad975644d5bc6c49d28091ca1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 10.3MB
        • SHA256 33e9e12eee440d9ef704ddb4828914b5d73fa069503ac0cd3cf8801c338e44f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 10.3MB
        • SHA256 f6ad5b5f1dbe556086f7a0ca91ed726e335373b84ca2d85b395e20c1656e5faa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 10.3MB
        • SHA256 ed86086c4a573f2ace88f1a07ce9e96e6f3de143610e1fe568a9f74300fc997c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 10.4MB
        • SHA256 e3fc2684a754314a8ee01a2a780a6be06e52875800794f2a136ad02c2e9e57b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 10.3MB
        • SHA256 2300653fbac9c2416013cd91f63af07cf60226f5fa1227d3e911fb5d17d49907
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 10.3MB
        • SHA256 f5bace64413182235103de36a0e32d4ff3b4f4c5b0d9ba4316e20488b8b33614
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 10.3MB
        • SHA256 248e498e74fda0a03756a79e8f128ef42088d079de0afc5c253ffebcd564d57d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 5.1MB
        • SHA256 6c63cfd68ceaa348cb7541d16014b78c90c73b8fb29cd08cd166a7044ce818dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1572-243-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/1572-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4004-304-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download