Overview

overview

8

Static

static

3

2026-06-02...ar.exe

windows10-2004-x64

8

2026-06-02...ar.exe

windows11-21h2-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 14:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 8.4MB
  • Sample260602-ra6rxse121
  • SHA256 8a77126519489e35c350587f1df6d3ced820d773c9cf346b5d8f04b88cae4b77
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3716
  • C:\Users\Admin\AppData\Local\Temp\2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-06-02_40f1e2578f4e3e06663635240f6cc377_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3976

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 9.0MB
        • SHA256 b25e86a9290f415d519e738fd7779f0a421ad86b7fa4d9a3b581d2439d0e94b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 9.4MB
        • SHA256 3173b065b5f112914b0770697761a739598bffc09a22b793c570c9734b19c92e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 9.1MB
        • SHA256 1cbeba486379f5b1fba785b2a2ecdddf777de770bc573b3bb1e1e5ae9304f05e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 8.5MB
        • SHA256 380fbbe3cd1c432e6cd45f46fe1d9209021798ee7f47f92000c6c91b3c010c74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 17.2MB
        • SHA256 6b8059a25e83ba727a74008e2f0cbaeb67a4be32831c8acc360e7c8a1a484a41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 16.9MB
        • SHA256 5a2b74a98b987333f63d54659edb5ef159c0729d61c695d7c8184fc0b1feea7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 21.0MB
        • SHA256 4d40125f7901e9961a6f44f398b65aeba71c7b07c975eceedac3954f6137f48b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 17.2MB
        • SHA256 820b5c1aa5c3b8ce1792cf4e3b992eb976d0a779a795a0e7a8ee9720ea6df0f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 40.4MB
        • SHA256 c3cf0e6be49b504d7ed477e3ecb01693ac50bb9ed96a7ca390707a69beba0aa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 19.0MB
        • SHA256 16c1beb0f09990d702fd74d4b66e1848a52ab9bb389d0f387dbd5863053bf108
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 17.0MB
        • SHA256 f4b935734ec456144af1d28f7823ad5b1aa84f866b049ea69933be88a3c8e0cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 23.0MB
        • SHA256 17c8b1a1b05bc9f39f2ff81dbf4dc7a148546f87c9f48fa4b2fbff4c4917ae07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 18.6MB
        • SHA256 2155a414de3ee112ba9ff8e785ac3acc3cc324f646df6aca07fa6239a3a055da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 20.4MB
        • SHA256 4f19b7727da4e930f4072a98d8c8937c7ab4f80cc920d59203b7fd492ab7dbed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 19.2MB
        • SHA256 26b42984280eeec1f1d3df25962e8514c685510971b95d67df270c5c61b90aec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 18.5MB
        • SHA256 0bb8c55251c62d1d77cdf3bea6878f0717d78997bc0a9037a6710f34a135b483
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 18.7MB
        • SHA256 cf660575a11a937ff13ddc6911d67f091e5f9a9e2a9601a341412ff2a282543c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 20.0MB
        • SHA256 78714df19b65e098676c1b5cbf33b01b62604468f8cc6c3d8312b59b69989d2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 18.3MB
        • SHA256 2d549ffa4f5062d5680fde424ecbde537f966f7120a4610dc2193c5e3cbd5a69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 16.9MB
        • SHA256 31165ad6c4f04956aeb8da7a92fd4ae358e9ad791189ecd7e948a47c1b55eab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 16.9MB
        • SHA256 b4ffeb7d0a6a77add45779123cde5ab8e878f07a26fe9a143b0f95592b1c9609
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 16.9MB
        • SHA256 29d1b55559ef4a8ed594239f081ef32df9182d414014f74c4256dab981c9f632
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 16.9MB
        • SHA256 95e9972cd524688827895e1acba4d5e140e343cf461ac49f21ea9b7460bbb4de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 16.9MB
        • SHA256 8574d7abf089f1d148cd0c3cae04b56df9b336e5bfaf8501d6e3121d9fc2cf68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 16.9MB
        • SHA256 e04999e0cdc7288a25199306d8a20c61245345d3b072570b7a77ac4f066ca9b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 16.9MB
        • SHA256 b3f7b9861d67350d7ae062ed2229b3e4dc07cfe4e46ed368538281000c83ea9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 17.2MB
        • SHA256 bd5227b78758a78503939afab4df8ce939b5561152774a08bac1232863a6c894
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 16.9MB
        • SHA256 792094386a4f4496910734cb2576ecd53f975da80e125da69cab7ded1fef69fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 16.9MB
        • SHA256 2ed96aaf98aac0140ae48c0a65647d1f57c27643737063bee9479a6c3487240f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 17.1MB
        • SHA256 6e088ec57693055d8b8db21ed0fdc8278776debd69d4e8eddde2bc7383b18ca9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 16.9MB
        • SHA256 0fd8b088df7ab54257aa125de49219d94b20b1fa50d90ba0730cbb834fd25cfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 16.9MB
        • SHA256 31f9f9a1555f068699156ff6a9036f26c7b401f9507b7ad9bffa077ce36e7961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 17.1MB
        • SHA256 92b9a058e9222bcd2f572c297d936db668aa125c23e83280850d27d05c580541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 17.2MB
        • SHA256 5b134043223acc297230e280961cd31c405a49185cf0964cd33090351e4ac7e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 17.4MB
        • SHA256 47473ca5291b7f9c8d40a99a3fed7c0e2f81d3f3de3979700a4906677e507cea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 16.9MB
        • SHA256 988489529357ea09f876f67126dc57c49f68ca4dae0203216ca0ecb9143e7aeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 16.9MB
        • SHA256 e86680580f66df342c54abc590e694625b3a3d9d8157b117d4f4f9ae6573b822
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 16.9MB
        • SHA256 960da81dcf6c557918d81ed9ce4a719d50e373b2bbae2d6985e2807db9793e40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 16.9MB
        • SHA256 9c32167040d0358bb6bbc47af765ccf53691ceb2aec062e6671997f9f8eb4ee4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 16.9MB
        • SHA256 873f81e1c28fe473811cdc742c0f01eca6053efbb7111064a126248b39f6667b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 16.9MB
        • SHA256 9dea99d14a2c53bce609386a51b4efb421b4c7426a07efcef7aae2d42344eab2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 16.9MB
        • SHA256 fbdc6a8cc4b9bd0f41807b99902d66323387929e0c806bf25853c914eff80d8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 16.9MB
        • SHA256 59cba6e5f3d17e769f227ed53b08a4b686f58554aa6c6b0372b4fb9303aa345c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 16.9MB
        • SHA256 4a9da058408fb813da053b061dee020c16be79c87dc1e9b9a82355aa4ea727f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 16.9MB
        • SHA256 0b0f0c1a3d5203c1108adcea7fb107a114b6498a37a8d7d7623c155a2e9460b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 16.9MB
        • SHA256 9a8d703496f607b843713e5fefbbb3477210779e172e71f0b80e5bc7cb0db00c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 16.9MB
        • SHA256 f3a84c70a7364e0bdc905d242b69a6a12e0445db8427830041aa71cda081101d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 16.9MB
        • SHA256 a02dcbf8097c623bad1a7d8848b3c63b9641b92f6bef32bc53e31374e79f6343
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 16.9MB
        • SHA256 b0e3117862732eb05c2e6a2c09dbf8e42c3d500c2c47e25e08920e81b1a06e1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 16.9MB
        • SHA256 295262b74f29892022902a170d9cbe0b030757a3e71b5c244aeac2d278b2d385
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 16.9MB
        • SHA256 b745cb72282ce4a266d09c3a08a8e1703635052f6bc6e41b62d0af54f8d097e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 8.5MB
        • SHA256 d48abd90f5bd8a264bc82190ec6c7fbfa13fa2f655a6aee1287da9b47d6855ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 16.9MB
        • SHA256 50c22b5c19ae8a90bfd2fb24b9abeadd24fa44a3b0caedfcc59b4f838e994604
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 16.9MB
        • SHA256 7ff1510382681afd01c95c67796c57535818809f4aea4d6289fa96b9293099dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 16.9MB
        • SHA256 984f89009db9db8c37cd6cc071f7fcf8f91118d62fb0e56afff0e64beba27ea4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 16.9MB
        • SHA256 19d1e21d70b0a6b45eb7ef86d8c917866ab65328ea7dcbe8962bf62dccd1a47d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 16.9MB
        • SHA256 ae2fe87a105d7e886d2bfe277f5ebc5d6efe6876ad40ea287319dde907a3f2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 16.9MB
        • SHA256 854b16dfdb572b752422e281d4ff46c19b48decd13961cbecfba81ad60540047
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 16.9MB
        • SHA256 1e45f9a48cdde9affd5149bd8b8996fb2161c4ff50868b5d6d4d3d312eb76132
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 16.9MB
        • SHA256 975645659b9b64c610489d5947de77652810b22691d60279a10b6730cdf03539
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 17.0MB
        • SHA256 06119490a011b97fc47455acbe2449ee44b85a6a7cb80368e231b8ffbc9feef2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 17.0MB
        • SHA256 0056673b1461b5a4308fc4f76a4a7c6cce574ee356142a81b0eb3c9135359124
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 8.4MB
        • SHA256 8a77126519489e35c350587f1df6d3ced820d773c9cf346b5d8f04b88cae4b77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3716-141-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3716-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3976-246-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download