Overview

overview

8

Static

static

3

2026-07-12...ar.exe

windows10-2004-x64

8

2026-07-12...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 14:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-12_1db3e4229fe8232fcdabf04846ea4320_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
  • Size 3.8MB
  • Sample260712-relbsadt5v
  • SHA256 7cf6ddce26032d41ca1a23bff4a5e21ac5abd7326285430f464f1bcde547470c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_1db3e4229fe8232fcdabf04846ea4320_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-12_1db3e4229fe8232fcdabf04846ea4320_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3752
  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_1db3e4229fe8232fcdabf04846ea4320_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-12_1db3e4229fe8232fcdabf04846ea4320_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4140

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 4.3MB
        • SHA256 15a9b9b75d75c9db062066a0c3ad726793a2e835f30ed5a8905cc9e8f200e471
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 8.2MB
        • SHA256 f2db841996e9d6063d8ee318741aa84c2027fbc6d0d5bc0960b597f012c09795
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 7.5MB
        • SHA256 e8f06aa904aa9051434d6d01b478bb614a9f9887bd891760a510dc6f70fa5c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 7.8MB
        • SHA256 3da00bd6fc06a995012018cb2b015407577b0ffcc0c1b435b019d47147fe1d58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 7.6MB
        • SHA256 13f0ffc0a5631d98af097d6d2d64e61aa22242e0c582055e4989d1788cb395fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 11.6MB
        • SHA256 af711fbc9952d9257132c24b9ae4d6f164cc302f5a1d776791848079b9e72aea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 7.9MB
        • SHA256 71bce6a4d1a954c71392680b71ced2c7e44a711aa09993c915e2366a2d2a74c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 31.0MB
        • SHA256 fe694630fd05511ef7b0053d2104618d478e531846d9061c628cad81542e7e6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 9.6MB
        • SHA256 b17dd99ddfdffc65aa4788ee43a1c96779a01e8407bc41a2b689af281e902b2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 7.6MB
        • SHA256 56ff8dc4b9d312f330a0a64669b81c67b9948fa732df6fa03ae142dac83e15ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteGet.exe
        • Path C:\Program Files\CompleteGet.exe
        • Size 7.7MB
        • SHA256 7740da6757dcef4db510a85038851893194fa38d6b1d38cb39f01fd795851c22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 13.6MB
        • SHA256 9a8f63bf2588955d03ce3436e0abaafc566d2120cdd06b7fdac942720cba6970
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 9.2MB
        • SHA256 0b0f72138bf3995741b56fb90051c5d292f238a9bf1c3b60295e1711da2edaa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 11.0MB
        • SHA256 778455f78bed01a346cb24662a8ad610fe4e0905a3c926df22361de08ab0bc0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 9.8MB
        • SHA256 69ae74ac2bb928cb6c1f372a6e9bf21a15f70f690cc2a4d0fd38db67fc174317
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 9.1MB
        • SHA256 c0fdfdbf4dfa00a75bfb521f39d333c84fe3649b47b0bff0bc99ab5e6b8c8ca8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 9.4MB
        • SHA256 9771adc8ab891098e678500b7fa9da7dd709909ef3f347a3e26b29c99d0389fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 10.6MB
        • SHA256 e464147110d00c625c7d3fd7871f11a7f7fbbf778c7ad717fd8e7a472d135924
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 8.9MB
        • SHA256 94a24905eac8754d9c642ba8c0181b9597108333f67ca91192cbd00fdb6aef8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 7.5MB
        • SHA256 27e073b0d68872779084017a56c9a05f873c8b6b5472199fa4d11043703539df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 7.5MB
        • SHA256 889c18ad57a122378edc688a5f0f11b20086521a55a85c191b0351c13f18be10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 7.5MB
        • SHA256 c2dbc5f72116d835b6cfc9821cecf31e1527425793d570a2478251a1066eaa82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 7.6MB
        • SHA256 fc7ac2be0adb8f834d100b50cf0b8fbc972a9bad568f99217f471b2bbb12aba3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 7.5MB
        • SHA256 464697092d91a6b62ba13829a4ae2dc2a4c98ac3f042d98e443cea72a9e6c205
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 7.5MB
        • SHA256 9ab0d431abd751693e3e5c912847a6ae9bb6cd3de048e8e87efbec4ad092aeff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 7.5MB
        • SHA256 495f2961eafbb3cb3338558aabdcf0e2de703af5375c49aba80363b8994c0fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 7.8MB
        • SHA256 945534be8dcde5b0e8639d64aa1bbff3e306145a02a81c774654345f35ff7779
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 7.5MB
        • SHA256 ff3e69212ab54843adca11caa6a5f7a74d345261b25db02d662afaba22eb220c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 7.5MB
        • SHA256 941f9721a1bb90a4ec94933b6cef22701c000aa122aaf87c9e4d5f203535b0f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 7.7MB
        • SHA256 863324f3aabe40258a91231224d8a5e9aca0d91ac53c593e6943448ba42b868a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 7.5MB
        • SHA256 0d47b3ca4f4c72f01fd88ec51e06cc1dfdf79a8e6c9fc5d5a25a1a19e7323999
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 7.5MB
        • SHA256 6b9788497268075303fabc3d633483c8aa536dda0f027c9b1382ff6dbd3767d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 7.7MB
        • SHA256 bea087ea285a84c66c721447dfe916a066ef9c95974f0abe97bb79254834603d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 7.8MB
        • SHA256 28916757c2ffe96176dc39a1a02533f0d9c31c255b51ed4bdaf97a9fd7d0fcc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 8.0MB
        • SHA256 52716201c4458aec434d224c18ed2475e8ab148ad738b11f3d0e6a540736c34a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 7.5MB
        • SHA256 5ab99ff5ba2863ef9d694794af3f72db6928e6f5b69c488f3b4e6596ece8db85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 7.5MB
        • SHA256 a87df70e2aab3363b3cd0eec72882efae1bf85af40dbcada99ddf83b61411b86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 7.5MB
        • SHA256 fefa5409e586b21c0da4930c1b78336ac27d80fc3a92451e642cca49a910503b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 7.5MB
        • SHA256 18816c4c04c2a06ff596d5cc86e00ebee9032290b278c65f9354adced51a59f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 7.5MB
        • SHA256 9f67aafc25ba626c6b4294fd60ff614e7c6ead89e472fc2d48b5f1d2c6e50f30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 7.5MB
        • SHA256 af33e4c139abb8bf3181ca1ce1a133c8abda989bd2c1fbe1c81a94086feaa5f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 7.5MB
        • SHA256 8be9715cca86693d5ad4184da4f8045641c85f6cbadfea07e1a6dbe544c2cdeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 7.5MB
        • SHA256 55204ce0a470052481cb2fa5c59fa40a89d034e616070a675f181dac5c8f5b03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 7.5MB
        • SHA256 7f289a5f15642f3d7909f33a4c9dfa16af4b3f4aff911edd24ad708c59454872
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 7.5MB
        • SHA256 814b835e6da872aefff3095dc4f750b24b986b5d70fae076f8fd781684239623
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 7.5MB
        • SHA256 998c542573492dbc5406f50a6227e3fe696b06df9caea711d9751a6c26393f87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 7.5MB
        • SHA256 053c406b2be46ae79813ad3aac65090f9dcccde424542914fc7fb4355315718a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 7.5MB
        • SHA256 6c16ecb4988c59657cf8c5300e7f7ef0b87cdee518289fe610e78f0060dddef9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 7.5MB
        • SHA256 9b50c01b34ffce5d55bb347671364ecd68d9f83396bee932a0cf258e0992f593
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 7.5MB
        • SHA256 2c4ac0d4300030c42d03efdc418219a0793b0e076657c545f5b6c52674daea22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 7.5MB
        • SHA256 7ebe94ef61b75830480fd2bc317a98267f405efa166ec93fb74eb663338b26d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 7.5MB
        • SHA256 77eb7ad38037a4096a695863760cdc741a8764c06f4d9f820c8a625cde22324d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 7.5MB
        • SHA256 4238837392d44356252a0e2eca3cfa02412a988e9914aff76de657b4822efbd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 7.5MB
        • SHA256 03189776abfbc96a8c518519032c2ece914df9b986a35787e4d88328e41096bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 7.5MB
        • SHA256 1f3da69e365684ba671012b58e24b95060ecaa372b67c198b41c922cfad0e208
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 7.5MB
        • SHA256 f23e359c9a6bf0ea8f376e48dcc813423e915c6ac7b02e70f883dad75b0921a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 7.5MB
        • SHA256 e270c4503e6c309a42e38b7c23659df5917f8bcc819473afe09d03dc0fd93ce2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 7.5MB
        • SHA256 0a6ee20061ef450d687827d16931bdfdeb9f6b8c49b3f7bc2137746d8b2d1d55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 7.5MB
        • SHA256 423bf5d72cbe2ca6ec9d52ddbb0241ff3034c9b16b0524d46fbf2c067f55462d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 7.7MB
        • SHA256 55d9e246c572053d032fb58f7e33442531e471b96f491871693f34bc8d467477
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 7.6MB
        • SHA256 b544f16fb2f09945e7fd3bb32f69c5ea35c447baef735cadebde8562ee1ab33e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 7.6MB
        • SHA256 95c1171218e50278dd60bcabfacf0e0f44c4daa2e3f22cb1977ba05797d2bbb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 7.6MB
        • SHA256 5a2af870bece19bfe5d69b377e7560a9378709cc516c340fe65e5a050232c697
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3752-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3752-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4140-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download