Overview

overview

10

Static

static

10

2026-07-05...ry.exe

windows10-2004-x64

9

2026-07-05...ry.exe

windows11-ltsc_2024-x64

9

Analysis

  • max time kernel
    130s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 07:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-05_5b54d58ce79f35b213d7d92957bca769_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
  • Size 875KB
  • Sample260705-httr2aax8v
  • SHA256 bf409e2e64c7e5e1eda50d97c39cee146d8aba646d13eddde7a81f3db5365642
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
adwareaspackv2discoverypersistencespywarestealer

Malware Config

Signatures

  • Detects executables packed with ASPack 52 IoCs
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • ASPack v2.12-2.42 49 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops autorun.inf file 1 TTPs 2 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 38 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of FindShellTrayWindow 53 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-05_5b54d58ce79f35b213d7d92957bca769_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-05_5b54d58ce79f35b213d7d92957bca769_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry.exe"
    1⤵
    • Adds Run key to start application
    • Drops autorun.inf file
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • NTFS ADS
    • Suspicious use of SetWindowsHookEx
    PID:2796
  • C:\905c0769f9a06c95a24ddf945\patcher.exe
    C:\905c0769f9a06c95a24ddf945\patcher.exe
    1⤵
    • Executes dropped EXE
    • Adds Run key to start application
    • Drops autorun.inf file
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1724
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:4904
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4872
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:860
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2344

    Network

          MITRE ATT&CK Enterprise v16

          Reconnaissance

          Resource Development

          Initial Access

          Replication Through Removable Media

          1
          T1091

          Execution

          Persistence

          Boot or Logon Autostart Execution

          2
          T1547

          Active Setup

          1
          T1547.014

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Privilege Escalation

          Boot or Logon Autostart Execution

          2
          T1547

          Active Setup

          1
          T1547.014

          Registry Run Keys / Startup Folder

          1
          T1547.001

          Defense Evasion

          Modify Registry

          3
          T1112

          Credential Access

          Credentials from Password Stores

          1
          T1555

          Credentials from Web Browsers

          1
          T1555.003

          Unsecured Credentials

          1
          T1552

          Credentials In Files

          1
          T1552.001

          Discovery

          Peripheral Device Discovery

          2
          T1120

          Query Registry

          2
          T1012

          System Information Discovery

          2
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          Lateral Movement

          Replication Through Removable Media

          1
          T1091

          Collection

          Data from Local System

          1
          T1005

          Command and Control

          Exfiltration

          Impact

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          patcher.exe
          • Path C:\905c0769f9a06c95a24ddf945\patcher.exe
          • Size 875KB
          • SHA256 bf409e2e64c7e5e1eda50d97c39cee146d8aba646d13eddde7a81f3db5365642
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          7z.exe$
          • Path C:\Program Files\7-Zip\7z.exe$
          • Size 1.4MB
          • SHA256 d381509a9f035f1d70f638cd92f33e96435794f278a3c14d211ada258ff7cdff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Uninstall.exe
          • Path C:\Program Files\7-Zip\Uninstall.exe
          • Size 889KB
          • SHA256 255be2e882e9b1b90726ce1b0677dffbc273ea741ee2d74f4e8b500a9c248014
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          IntegratedOffice.exe
          • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
          • Size 923KB
          • SHA256 19e72010b5a83f6f9d017e0b025738ffa03ed25e5c7898643a97f3d4a41da310
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          java-rmi.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
          • Size 898KB
          • SHA256 5ea42968b1d2ae68bc074cffc7a3958e3fa4d818342ec934fe18253ab8119ff6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          javah.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
          • Size 898KB
          • SHA256 511d7f9da91e5a8700c690a70628c65a963ebe39a09de51178115ec84075aa35
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          javap.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
          • Size 898KB
          • SHA256 3e46c9157f3bd7f77ea28543fa6e5d4445a877bdc55cc927d1bd2be0200ff59a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jcmd.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
          • Size 898KB
          • SHA256 59cff43c69ad15d69a4895ba37f76ae71419205bb31017e64f29f65ccc397c27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jconsole.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
          • Size 898KB
          • SHA256 f4ff116cb95e1d7daf992775a72fcf0a3e684f180e062cfa9308f2d582970491
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jdb.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
          • Size 898KB
          • SHA256 3d2c4650799c449468cfcc4ebbc6515377dddd5a608c5571655645a59dfd9314
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jdeps.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
          • Size 898KB
          • SHA256 b39ca0f0f08bde6caa62d3b6f8a9cbe9873a98edea5097d9fef1dbc8df0f140d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jhat.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
          • Size 898KB
          • SHA256 74c03721592b8f944c543a37a25b72160f3e13bb445de15443c788012df56ab7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jinfo.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
          • Size 898KB
          • SHA256 e838b365cb6e68fc1132c38c773bb5a0cd85a4b29ebd52a63bdd6a13faebd19a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jjs.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
          • Size 898KB
          • SHA256 c6c42502d98d4e42f426e900104d5999d2886f806d5893960989325107f5e6a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jmap.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
          • Size 898KB
          • SHA256 c47f93fe83f046a451b1f3aea7e684eccf9c0fe1aeca11a89177cf2684ce2465
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jps.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
          • Size 898KB
          • SHA256 7df9e77132130408b05d2333053b7dcf45565e2e25b4419cc577a963346cc5b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jrunscript.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
          • Size 898KB
          • SHA256 dc4b295c94424063dc53693f3150906e1743c8ee937b6c161e7eaa0c5ecc46b7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jsadebugd.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
          • Size 898KB
          • SHA256 00d2c025cc9ed14fef1052c082706a325caf9ca7702e6c6ceb6119cede7e5ff5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jstack.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
          • Size 898KB
          • SHA256 aaea6f920260e75076d36178ce0f557009cf2084893663351ea75c7921842049
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jstat.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
          • Size 898KB
          • SHA256 f72a041f7ce590e16a76ad7186971132d47682ba2e5b153115f1f7004e511172
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jstatd.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
          • Size 898KB
          • SHA256 3a35e0d47bf671a7fa77a87744b7ca4fd31825de4a39b90464f4888d97baa951
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          keytool.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
          • Size 898KB
          • SHA256 e66852fdbdc547a645124892273af67bd2de4dc93c4d1bf781019146eb0645a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          kinit.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
          • Size 898KB
          • SHA256 edd957c5e60571d236ca06e99be6535042784b6117918b131e831003fbe9cb3c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          klist.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
          • Size 898KB
          • SHA256 7729f3922aa19e5988af305e55045e43f4bec58732f4c262b6ee971afd65b46f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ktab.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
          • Size 898KB
          • SHA256 3f3cdb4ea0881b42ebad9d661c8e2c0a57dd573de1d980720d26f9b5dfdd6fc6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          native2ascii.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
          • Size 898KB
          • SHA256 0534f543f64dd3ac16edfcd1bed581092d025ae71ba5db3c692b79e735e941c0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          orbd.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
          • Size 898KB
          • SHA256 b524cef41bdc737475726bc4265ee8ebb92396467d297da0f805b4d7c8e14ffb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pack200.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
          • Size 898KB
          • SHA256 5dbd3755988e1bfbfdd9edb4610f4622538fbc9a99e731ba0b8c49bfd5272fa1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          policytool.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
          • Size 898KB
          • SHA256 eaf2c85ebd7f97d67fbcef07d7cce45964e2c069c67dad043c838db74951ac2d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          rmic.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
          • Size 898KB
          • SHA256 1ffc1df4dcbd655b36e6199ea31a9beced0b953ba85e71aad1a7aba2d8a8f249
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          rmid.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
          • Size 898KB
          • SHA256 a47c313b3e5052568bb0f71adf61fafe61db4150dd6cd1042e0a15b08cb2e6e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          rmiregistry.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
          • Size 898KB
          • SHA256 8e7a51c0d4848e6820576c374eb4d0fdd9c18bc3194f3352987cf8a3856c4a0d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          schemagen.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
          • Size 898KB
          • SHA256 6abe12f021bcb76bfed4d4dcd7920c86dc969a7c764e6f12223153e042fe49da
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          serialver.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
          • Size 898KB
          • SHA256 3d3abef7c2f431af37f699e818d0f012752160166d058288e95a1b66d6992707
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          servertool.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
          • Size 898KB
          • SHA256 0094dff48c9c89bfa253ef571cdadc7976f8b11564af98074680477cee81465e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tnameserv.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
          • Size 898KB
          • SHA256 314b253610ce844aed35c559b11841a1863bcb45f898b666d60458d5f8d7f71d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          wsgen.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
          • Size 898KB
          • SHA256 dff73f5115462dec2a94ad0381e4d0a17b12ed8e22ce7dd27b10c98e873a597c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          wsimport.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
          • Size 898KB
          • SHA256 cbcb1583a6def294b6c1405f44e0aa2b7d0df73ec96a3d6f6e7b45b67e4edb72
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          xjc.exe
          • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
          • Size 898KB
          • SHA256 baceb9382e864c7a857d40a9add4443c065d8733f436f2055fb1445385f6846f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SDXHelperBgt.exe
          • Path C:\Program Files\Microsoft Office\root\Office16\SDXHelperBgt.exe
          • Size 908KB
          • SHA256 77ee452a5dfe00928cc01daae5ce1d927affc3e43a44e185e5923cb5838d327a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SETLANG.EXE
          • Path C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE
          • Size 951KB
          • SHA256 3998788329f87d011a49f0d5e385fbe73acf1e3b55f1ec58b0827722ea77de74
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WORDICON.EXE
          • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE
          • Size 919KB
          • SHA256 5258f0d8d4e39e4cd87c8bb763c73c85c3333284b38415b0c03b6a0030903b23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msoev.exe
          • Path C:\Program Files\Microsoft Office\root\Office16\msoev.exe
          • Size 932KB
          • SHA256 6fcc389a53d2e86e4187225bd732a25322ad157486a0ebe3447f81eb00579d1e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Common.DBConnection64.exe
          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DBConnection64.exe
          • Size 921KB
          • SHA256 a8a359db8c035d76f1ced486e4aab65c790bb44c64cfe4c1240590a6fa04cb2b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Common.ShowHelp.exe
          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.ShowHelp.exe
          • Size 914KB
          • SHA256 9964f9d03f49bbfaf073379c7d4ae72a2cac6665af1e508f9ed748213b77e3c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msouc.exe
          • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\msouc.exe
          • Size 930KB
          • SHA256 d5722897579f27636604df60bc360b16869ae1ed68f8c67688a48734988c0a1e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          osmadminicon.exe
          • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmadminicon.exe
          • Size 936KB
          • SHA256 82b3b9bd780d2bbede44ce15ddde83ab30101222df39fb6dffd7d3cb28473df7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sscicons.exe
          • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\sscicons.exe
          • Size 954KB
          • SHA256 74b0d4c39a8763bf4bf7db0987307046317f95d8f3819067e15c6f6649665458
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          prep_Activatable Class_Hermes_perf.cache
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
          • Size 599B
          • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          InstallExpand.exe
          • Path C:\Users\Admin\Desktop\InstallExpand.exe
          • Size 1.2MB
          • SHA256 87322ff4fde7b96d0f7fa987dc787cb38d7b6f7c4da3741f409af1207c8d884c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/1724-60-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/2344-1461-0x0000022119000000-0x0000022119100000-memory.dmp
          Download

          memory/2344-1484-0x0000022119300000-0x0000022119320000-memory.dmp
          Download

          memory/2344-1462-0x0000022106F50000-0x0000022106F70000-memory.dmp
          Download

          memory/2344-1460-0x0000022106B70000-0x0000022106B90000-memory.dmp
          Download

          memory/2344-1454-0x0000022105470000-0x0000022105570000-memory.dmp
          Download

          memory/2344-1455-0x0000022105470000-0x0000022105570000-memory.dmp
          Download

          memory/2344-1453-0x0000022105470000-0x0000022105570000-memory.dmp
          Download

          memory/2796-40-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/2796-0-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/4872-1451-0x000001C6FB6E0000-0x000001C6FBB14000-memory.dmp
          Download