Overview

overview

9

Static

static

3

2026-07-30...at.exe

windows10-2004-x64

9

2026-07-30...at.exe

windows11-ltsc_2024-x64

9

Analysis

  • max time kernel
    137s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 17:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-30_8ff932ae4fa2327d55d5e34a10bf9d83_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
  • Size 3.2MB
  • Sample260730-vwpbjsch46
  • SHA256 4644f30e839e9afb0a960ab4a3988e29a8831f98bb21c0cbcb8942544079772e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • Detects executables packed with Goliath 1 IoCs
  • Detects executables packed with Themida 1 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 3 IoCs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE 14 IoCs
  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped DLL 5 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 48 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • ConfuserEx .NET packer 1 IoCs

    Detects ConfuserEx .NET packer.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 1 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • Modifies trusted root certificate store through registry 1 TTPs 11 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 9 IoCs
  • Modifies system certificate store 2 TTPs 11 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_8ff932ae4fa2327d55d5e34a10bf9d83_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_8ff932ae4fa2327d55d5e34a10bf9d83_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe"
    1⤵
    • Downloads MZ/PE file
    • Drops file in Drivers directory
    • Checks BIOS information in registry
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:3336
  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5152
  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4168
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:1536
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:3876
  • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
    C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
    1⤵
    • Executes dropped EXE
    PID:4148
  • C:\Windows\SysWow64\perfhost.exe
    C:\Windows\SysWow64\perfhost.exe
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    PID:5884
  • C:\Windows\System32\ReFsDedupSvc.exe
    C:\Windows\System32\ReFsDedupSvc.exe
    1⤵
    • Executes dropped EXE
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:4472
  • C:\Windows\System32\SensorDataService.exe
    C:\Windows\System32\SensorDataService.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Checks SCSI registry key(s)
    PID:5988
  • C:\Windows\System32\OpenSSH\ssh-agent.exe
    C:\Windows\System32\OpenSSH\ssh-agent.exe
    1⤵
    • Executes dropped EXE
    PID:796
  • C:\Windows\system32\AgentService.exe
    C:\Windows\system32\AgentService.exe
    1⤵
    • Executes dropped EXE
    • Suspicious use of AdjustPrivilegeToken
    PID:3932
  • C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\SearchIndexer.exe /Embedding
    1⤵
    • Executes dropped EXE
    • Enumerates connected drives
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2152
    • C:\Windows\System32\SearchProtocolHost.exe
      "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3989226554-2204910950-1522900112-10001_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3989226554-2204910950-1522900112-10001 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
      2⤵
        PID:824
      • C:\Windows\System32\SearchProtocolHost.exe
        "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
        2⤵
        • Modifies data under HKEY_USERS
        PID:616
      • C:\Windows\System32\SearchFilterHost.exe
        "C:\Windows\System32\SearchFilterHost.exe" 944 3056 2968 928 {7FC3863B-7471-4B10-84E3-A5C2E0330618}
        2⤵
        • Modifies data under HKEY_USERS
        PID:3104
      • C:\Windows\System32\SearchFilterHost.exe
        "C:\Windows\System32\SearchFilterHost.exe" 944 3016 3028 928 {06DC0F6A-A3E7-4365-A8E8-F674FE2E6361}
        2⤵
        • Modifies data under HKEY_USERS
        PID:5480
      • C:\Windows\System32\SearchProtocolHost.exe
        "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
        2⤵
        • Modifies data under HKEY_USERS
        PID:5424
      • C:\Windows\System32\SearchFilterHost.exe
        "C:\Windows\System32\SearchFilterHost.exe" 944 3056 2968 928 {7FC3863B-7471-4B10-84E3-A5C2E0330618}
        2⤵
          PID:612
        • C:\Windows\System32\SearchFilterHost.exe
          "C:\Windows\System32\SearchFilterHost.exe" 944 3016 3028 928 {06DC0F6A-A3E7-4365-A8E8-F674FE2E6361}
          2⤵
            PID:3288
        • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
          1⤵
          • Drops file in Drivers directory
          • Executes dropped EXE
          • Impair Defenses: Safe Mode Boot
          • Loads dropped DLL
          • Drops file in Program Files directory
          • Modifies trusted root certificate store through registry
          • Modifies Internet Explorer settings
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Modifies system certificate store
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2168
          • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Drops file in System32 directory
            PID:5080
          • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
            2⤵
              PID:4884
          • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
            1⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Event Triggered Execution: Netsh Helper DLL
            PID:5920
          • C:\Windows\system32\DrvInst.exe
            DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "0000000000000114" "Service-0x0-3e7$\Default" "00000000000000DC" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
            1⤵
              PID:4240
            • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
              "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
              1⤵
                PID:6092
              • C:\Windows\system32\DRIVERS\MbamElam.sys
                C:\Windows\system32\DRIVERS\MbamElam.sys
                1⤵
                  PID:1060
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness
                  1⤵
                    PID:980
                  • C:\Windows\system32\DRIVERS\mbamswissarmy.sys
                    C:\Windows\system32\DRIVERS\mbamswissarmy.sys
                    1⤵
                      PID:1536
                    • C:\Windows\system32\DRIVERS\MbamChameleon.sys
                      C:\Windows\system32\DRIVERS\MbamChameleon.sys
                      1⤵
                        PID:5952

                      Network

                            MITRE ATT&CK Enterprise v16

                            Reconnaissance

                            Resource Development

                            Initial Access

                            Execution

                            Persistence

                            Event Triggered Execution

                            1
                            T1546

                            Netsh Helper DLL

                            1
                            T1546.007

                            Privilege Escalation

                            Event Triggered Execution

                            1
                            T1546

                            Netsh Helper DLL

                            1
                            T1546.007

                            Defense Evasion

                            Impair Defenses

                            1
                            T1562

                            Safe Mode Boot

                            1
                            T1562.009

                            Modify Registry

                            2
                            T1112

                            Subvert Trust Controls

                            2
                            T1553

                            Install Root Certificate

                            2
                            T1553.004

                            Credential Access

                            Credentials from Password Stores

                            1
                            T1555

                            Credentials from Web Browsers

                            1
                            T1555.003

                            Unsecured Credentials

                            1
                            T1552

                            Credentials In Files

                            1
                            T1552.001

                            Discovery

                            Peripheral Device Discovery

                            2
                            T1120

                            Query Registry

                            5
                            T1012

                            System Information Discovery

                            5
                            T1082

                            System Location Discovery

                            1
                            T1614

                            System Language Discovery

                            1
                            T1614.001

                            Lateral Movement

                            Collection

                            Data from Local System

                            1
                            T1005

                            Command and Control

                            Exfiltration

                            Impact

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            elevation_service.exe
                            • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                            • Size 2.7MB
                            • SHA256 bc2d122d4a981b486ad11a9cf90bb2697345cb3bf974e190b5489e240deb45ca
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            maintenanceservice.exe
                            • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
                            • Size 1.6MB
                            • SHA256 d7cdf69dc69f5a1e619de7f2f63095090b6a976789f9086ec881a859ce705f85
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            7z.exe
                            • Path C:\Program Files\7-Zip\7z.exe
                            • Size 1.9MB
                            • SHA256 d19d99edc13af57fd2b2f112f01990ce18765e4d31f59346d7118e1644c93cb2
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            7zFM.exe
                            • Path C:\Program Files\7-Zip\7zFM.exe
                            • Size 1.5MB
                            • SHA256 5606a7f8dd3629d938ae6b2b5a73a54b876305b02d3e409f1cd168dc36b25aef
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            7zG.exe
                            • Path C:\Program Files\7-Zip\7zG.exe
                            • Size 1.2MB
                            • SHA256 5b61b225d8942d894b99d5f0d6fea11a3fd245f95ab3007316b6e676bfd7f44e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Uninstall.exe
                            • Path C:\Program Files\7-Zip\Uninstall.exe
                            • Size 1.4MB
                            • SHA256 65cef41b9b445775be2f9163733a6f92a817f89fbbccc9660d543eb274aaab21
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            AppVShNotify.exe
                            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
                            • Size 1.6MB
                            • SHA256 4cc89e317370b0383e9252ae5afb5dc1f550734ff2db5d379767d0ef4d616b40
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            IntegratedOffice.exe
                            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
                            • Size 4.6MB
                            • SHA256 99f38c3abbe9f5b50bc775e5d3a7a3eb443b7c7dfa1c8d9f5e6d4536df898426
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            MavInject32.exe
                            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
                            • Size 1.7MB
                            • SHA256 ea5b29a6bfc4926de5ac43abb59d875ae1d79bd33d4ca49d1228e5478692e1b6
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            OfficeC2RClient.exe
                            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
                            • Size 24.0MB
                            • SHA256 3ffc9afda123e8ba004364c54058decb0555bc9764e5d28bbc6818f44840cf3d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            appvcleaner.exe
                            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
                            • Size 2.7MB
                            • SHA256 0c00016b9f911cb39ff7fa5816eb6cd8948d7d9b84a3aedc75025acee3b75ffe
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            LICLUA.EXE
                            • Path C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE
                            • Size 1.1MB
                            • SHA256 c776f7155f0cad9c7a0f70ea2f786a2c3f910d6ebaef9afbbf5423ffbbe8d743
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            OSE.EXE
                            • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
                            • Size 1.6MB
                            • SHA256 cbe0849a0c722d1b6cab2f5167bd6f14b49b7f6fe9635828808960cf989b42a2
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            VSTOInstaller.exe
                            • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
                            • Size 1.5MB
                            • SHA256 29161cbc23247b1197dd7969c1ac7ca199f08211e09338d2b822405e0e749607
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            chrmstp.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
                            • Size 6.6MB
                            • SHA256 1c40ec2c043396aff57102b3658538126fd82a8a97e4b3ca63b3b528b121af08
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            setup.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
                            • Size 6.6MB
                            • SHA256 e0e0253b062a0ed5e91730529f46296c55c9a6a4ad61a521a4c25c4096fbaea1
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            chrome_pwa_launcher.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
                            • Size 2.3MB
                            • SHA256 cfc3e28b27a2505dc3b59c9a90c3318eb672d39c6f8f5e88b185e9793d579257
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            elevated_tracing_service.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
                            • Size 4.0MB
                            • SHA256 95bbf432c35871bd3c4b892a42548a6be63064ce12d6e2697afc9fc4b8e524a8
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            elevation_service.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                            • Size 2.8MB
                            • SHA256 4c478f16d1458ba31fc14d39147410a21a84dbbcd92884469163e75768f7be19
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            notification_helper.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
                            • Size 2.2MB
                            • SHA256 219e9f671b942c22b0839efd0efef99ea389df1506e2e79140c62b79795e93bb
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            os_update_handler.exe
                            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
                            • Size 2.4MB
                            • SHA256 7a9e59fb6a5bb216b59724194f3e7b9f0280e86c6d35fd0efa3bfd488d4099ca
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            chrome_proxy.exe
                            • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
                            • Size 2.0MB
                            • SHA256 c7548c244f7e40c4ca721772a5a2f021407306dfeeb2a045f129aeb3449b4811
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            appletviewer.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
                            • Size 1.4MB
                            • SHA256 2a95f3254b8aad38c2abd082a1391cf600e086a924d1ee3bd9c4a71dcacb5701
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            extcheck.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
                            • Size 1.4MB
                            • SHA256 34f31d270e727726e5fa02146023de32b4945920a48cd097ff60a7ca6e6603c5
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            idlj.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
                            • Size 1.4MB
                            • SHA256 7851647bed67a329e217094d53bb1b2141b265c247a7b20e5519e5be90c3967d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jabswitch.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
                            • Size 1.4MB
                            • SHA256 318edb76c9227266598de805a013d31efd36f3062bdb80d9a93b390870384206
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jar.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
                            • Size 1.4MB
                            • SHA256 1c702c1d4cc28138494f448988bb11039cd4a87a102711cbf13b5d8e863efbbd
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jarsigner.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
                            • Size 1.4MB
                            • SHA256 46054efc9a4976859a546fc87b05b2849e1d0e68e950e5b461d1519de7748233
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            java-rmi.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
                            • Size 1.4MB
                            • SHA256 db14577d9dfcebe9dcc81887c0f03204640c95571b3b6aefbe5211678b2f8393
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            java.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
                            • Size 1.6MB
                            • SHA256 a85e4932878681e958b4fbcffbc67c91b8a42d65b9d866959e5ec8707cf8b204
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javac.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
                            • Size 1.4MB
                            • SHA256 f8cccb8b19f3db3f693d07a9518400aa8c52944702b6e9367c0e8c703166723a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javadoc.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
                            • Size 1.4MB
                            • SHA256 3184b0e41cfedd6abc1ecdacc31f3b05e55ff6cb8dd6613641b11fb0dfa99f29
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javafxpackager.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
                            • Size 1.5MB
                            • SHA256 987a9b826e6dc1d8f7cc85791b2e8b208f56d013fb067926a86a31a8e066ad0c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javah.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
                            • Size 1.4MB
                            • SHA256 84a0126bf70f49d2ec63940ceb8080a8f16de9b9cb41e906166ec25b4826863d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javap.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
                            • Size 1.4MB
                            • SHA256 84956419b7a107a160274437f60ab8a36a78ead37ae3eeaaef84577cc3f192b3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javapackager.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
                            • Size 1.5MB
                            • SHA256 05828c570cf03abb3f62fccf8fba124a6ef22478cc309e4bc02ac4f16d20b563
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javaw.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
                            • Size 1.6MB
                            • SHA256 bdf78d21e62d6d664bb745c26d2a453c4bdd33f63593b2e8a66efe33cb0512d1
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            javaws.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
                            • Size 1.8MB
                            • SHA256 ce0960dca03a9a6bf0d0c9c080a9cfc6ed482b67b2ddf2866836a74258e91f29
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jcmd.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
                            • Size 1.4MB
                            • SHA256 afc4356ce16b32dfb49a55503bfabd5c40f2c974d9838480333ab3caa403f03b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jconsole.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
                            • Size 1.4MB
                            • SHA256 47095b9680bd52a5380a0cf0f63f4d42c360d96b06088b0e32c2b8d4b180525b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jdb.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
                            • Size 1.4MB
                            • SHA256 3c2ab7b1552179f0d7ccf6432434a1bd151cdd5f99b9a735d834c590718995df
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jdeps.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
                            • Size 1.4MB
                            • SHA256 e608c81212d0700722c04aff223ec1422a9176c98e38af32970b05edc69d7fc9
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jhat.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
                            • Size 1.4MB
                            • SHA256 91c6ca51edbb0b08a4b7418d0c15a799cd547d8a1d0e991ec0bd41a665938d9f
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            jinfo.exe
                            • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
                            • Size 1.4MB
                            • SHA256 a0de61d4b7e469a69855c122e9d5f216a2020407f22035b1a390bdbcbd077c16
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            MBAMInstallerService.exe
                            • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
                            • Size 10.6MB
                            • SHA256 d10e04217f81b44667c6237971f1f2843d132220c8712e8a855436e9f1f73baa
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            mbtun.inf
                            • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
                            • Size 1KB
                            • SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            MsSense.exe
                            • Path C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe
                            • Size 1.8MB
                            • SHA256 76aad7a14740c76f04dd0b3f26b36dde855ffcccbf07136ff1a34046385e8d52
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            NisSrv.exe
                            • Path C:\Program Files\Windows Defender\NisSrv.exe
                            • Size 3.5MB
                            • SHA256 22c18a534c6710ba5ca465bff67e003993fc9b69357e4b14ef8854f2778326b3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            wmpnetwk.exe
                            • Path C:\Program Files\Windows Media Player\wmpnetwk.exe
                            • Size 1.4MB
                            • SHA256 ce65a85645db28f0a67836684d1540bbc066e1fbaf192a5107f5a7af006e8efc
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            dotnet.exe
                            • Path C:\Program Files\dotnet\dotnet.exe
                            • Size 1.5MB
                            • SHA256 10d22bb736cac4c53c6861c61cabd23d923820b05e19c63481ee5dd3f60be92d
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            7z.dll
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\7z.dll
                            • Size 1.6MB
                            • SHA256 bb01c6fbb29590d6d144a9038c2a7736d6925a6dbd31889538af033e03e4f5fa
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            MBAMService.exe
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\MBAMService.exe
                            • Size 11.0MB
                            • SHA256 fd7a1428221fe7de747930cb3d9f2991610e2b1d809a0abc1f26590db5f5986c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            MBAMWsc.exe
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\MBAMWsc.exe
                            • Size 4.2MB
                            • SHA256 7878a9b10903b8c0def49015deefd48a3ea0e46c0f5ac9ae755336994e020152
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Malwarebytes_Assistant.runtimeconfig.json
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json
                            • Size 615B
                            • SHA256 61fca252e8e336706f4c153c16100b7b621f9092ed09bb6959e406ab5bb21e85
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            mbae.sys
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\mbae.sys
                            • Size 155KB
                            • SHA256 c990dd89b65d35d6c9b34e21c78d96e206ec3bcdd934716ee61ff79da0fa5251
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            mbamelam.cat
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\mbamelam.cat
                            • Size 11KB
                            • SHA256 64416d564725416c6869ea951878a2734b1f6940b11f7961a897c45f0d8c6625
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            mbamelam.inf
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\mbamelam.inf
                            • Size 2KB
                            • SHA256 e26c2d3347e5f077da92713c9df3cd3eae438fb7e29810bd5c3afe567d2d3125
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            mbamelam.sys
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\mbamelam.sys
                            • Size 21KB
                            • SHA256 ded569e249e590314d095f740c6b8934a5a797e4f3edbe0f78eac9d333f12a2a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            srvversion.dat
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\ctlrpkg\srvversion.dat
                            • Size 9B
                            • SHA256 af0cac103fb816b5059d8775d63406a2f410a8ed70826978cddc6d88d8ddc668
                            • MD5 SHA1 SHA512
                            Submit Download

                            MBAMCoreV5.dll
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\dbclspkg\MBAMCoreV5.dll
                            • Size 8.7MB
                            • SHA256 b226e4e93acba45a3e6c0ee06d6fa1c62fac91ae37c86595ab395088ab9edbc4
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            .version
                            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_15dac7ee8c3b11f1815ac2afdf444b08\dotnetpkgtmp\shared\Microsoft.WindowsDesktop.App\10.0.8\.version
                            • Size 50B
                            • SHA256 42559a4970a981aa61f3ed59ad44d05214fcc5eb97c35d06a88102a0b747a45f
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            AeConfig.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                            • Size 47KB
                            • SHA256 6c9d2e02b00cc6da9bc86336304beaa44f82d68505a7e17b149ee1291d652680
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            LicenseConfig.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                            • Size 12KB
                            • SHA256 94a9fbe8dd9a14a2f148f4ea9011a1c75f45d80efaffe245c8d41e044c052173
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            MwacControllerConfig.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
                            • Size 2KB
                            • SHA256 f7816c61c597aca81656df42a6b1e066591b482a5ba255d55c6f2e01b2daa2db
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            ScanConfig.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                            • Size 5KB
                            • SHA256 bd32cdd81b8e4294976beb71181243419b002d4ec07472afb079c2917ae5c713
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            SpConfigFile.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
                            • Size 12KB
                            • SHA256 8e7786b01593f0ea66c9411215f5dc76a16ddb878d8bce5f66d10e253a9406a3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            TelemCtrlConfig.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                            • Size 1KB
                            • SHA256 60f4808db3466f0797738d0a655e720bc7533a86714f5f8a7af53fd71a640a6a
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            UpdateControllerConfig.json
                            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                            • Size 1KB
                            • SHA256 5de592ee863e73a3fd41eedf5cac839901fd048ed92067fb071ceca9981e5f1b
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Windows.db
                            • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
                            • Size 1.1MB
                            • SHA256 a575f1cca26f0b1e87be5c9caec7817995983caca83097ee9deaf4441b2ea56b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Windows.db-wal
                            • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
                            • Size 1.5MB
                            • SHA256 abd3a5c0acaf5f176f70bd42632652fc85449655f015983a2b4359980bcb7d9b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            perfhost.exe
                            • Path C:\Windows\SysWOW64\perfhost.exe
                            • Size 1.4MB
                            • SHA256 22194801c6ea9bba17d3a82c5ef983a3b100182085175cf6a6f1349f5d8fe6ce
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            AgentService.exe
                            • Path C:\Windows\System32\AgentService.exe
                            • Size 1.4MB
                            • SHA256 4679789ec2502a4bd0b447ece27d7039e48ad1d74a3ba081e9a0743e40fd42a9
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            mbtun.inf_amd64_add82795013a7c3b.ini
                            • Path C:\Windows\System32\DriverStore\FileRepository\mbtun.inf_amd64_add82795013a7c3b.ini
                            • Size 409B
                            • SHA256 16f2064b45797d641df5b6467e3462ff5803b44942572a6055d6b7bb7158b7cb
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            ssh-agent.exe
                            • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
                            • Size 1.9MB
                            • SHA256 f1697ae92ab2b25d99a9a4b0585a22601327a007ebf1f7f54ee463194b9f3c28
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            ReFsDedupSvc.exe
                            • Path C:\Windows\System32\ReFsDedupSvc.exe
                            • Size 2.6MB
                            • SHA256 5d90bf0c4ed71472e1333b95bce399b828da359a2f9e11353660229e67ab0d9a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            SearchIndexer.exe
                            • Path C:\Windows\System32\SearchIndexer.exe
                            • Size 1.4MB
                            • SHA256 ac0f53acb29abbae6dd21d532f458266778564bfa9ea41eda7006457caf5ed1c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            SensorDataService.exe
                            • Path C:\Windows\System32\SensorDataService.exe
                            • Size 1.7MB
                            • SHA256 2bc5368efcce0af7a0234997bccdda1307c65559a9cbe4bcec51619eddd172e1
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            mb_5E68.tmp
                            • Path C:\Windows\Temp\mb_5E68.tmp
                            • Size 107KB
                            • SHA256 ad820dd54edb13e255d34eafacd71f278d6514e2f7e4c2970401f922a774ceb0
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            AppVClient.exe
                            • Path C:\Windows\system32\AppVClient.exe
                            • Size 1.3MB
                            • SHA256 c7a39825628fcb83dca3514c2bcf7fee426d9cbf1520d1f6eab5b6b6fa0959e7
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            PerceptionSimulationService.exe
                            • Path C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
                            • Size 1.6MB
                            • SHA256 80935ea4148d0abb1a2d91622f851627060d6c710dd41631c9d4a446fab303ac
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            SgrmBroker.exe
                            • Path C:\Windows\system32\Sgrm\SgrmBroker.exe
                            • Size 1.8MB
                            • SHA256 0fb70c3e99872364b06cd9c669ec5f681699b4b9dcbabf05c94d52806d50e887
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            memory/796-267-0x0000000140000000-0x0000000140211000-memory.dmp
                            Download

                            memory/796-113-0x0000000000CF0000-0x0000000000D50000-memory.dmp
                            Download

                            memory/796-119-0x0000000000CF0000-0x0000000000D50000-memory.dmp
                            Download

                            memory/796-111-0x0000000140000000-0x0000000140211000-memory.dmp
                            Download

                            memory/1536-37-0x0000000140000000-0x00000001401A8000-memory.dmp
                            Download

                            memory/1536-44-0x00000000017A0000-0x0000000001800000-memory.dmp
                            Download

                            memory/1536-38-0x00000000017A0000-0x0000000001800000-memory.dmp
                            Download

                            memory/1536-56-0x00000000017A0000-0x0000000001800000-memory.dmp
                            Download

                            memory/1536-73-0x0000000140000000-0x00000001401A8000-memory.dmp
                            Download

                            memory/2152-147-0x0000000000620000-0x0000000000680000-memory.dmp
                            Download

                            memory/2152-300-0x0000000140000000-0x0000000140172000-memory.dmp
                            Download

                            memory/2152-140-0x0000000140000000-0x0000000140172000-memory.dmp
                            Download

                            memory/2152-141-0x0000000000620000-0x0000000000680000-memory.dmp
                            Download

                            memory/3336-0-0x0000000000400000-0x0000000000740000-memory.dmp
                            Download

                            memory/3336-402-0x0000000000400000-0x0000000000740000-memory.dmp
                            Download

                            memory/3336-85-0x0000000000400000-0x0000000000740000-memory.dmp
                            Download

                            memory/3336-8-0x00000000025D0000-0x0000000002637000-memory.dmp
                            Download

                            memory/3336-1-0x00000000025D0000-0x0000000002637000-memory.dmp
                            Download

                            memory/3876-58-0x0000000000870000-0x00000000008D0000-memory.dmp
                            Download

                            memory/3876-49-0x0000000140000000-0x00000001401A2000-memory.dmp
                            Download

                            memory/3876-50-0x0000000000870000-0x00000000008D0000-memory.dmp
                            Download

                            memory/3876-168-0x0000000140000000-0x00000001401A2000-memory.dmp
                            Download

                            memory/3932-135-0x0000000140000000-0x0000000140168000-memory.dmp
                            Download

                            memory/3932-124-0x0000000140000000-0x0000000140168000-memory.dmp
                            Download

                            memory/3932-125-0x0000000000CA0000-0x0000000000D00000-memory.dmp
                            Download

                            memory/3932-131-0x0000000000CA0000-0x0000000000D00000-memory.dmp
                            Download

                            memory/3932-133-0x0000000000CA0000-0x0000000000D00000-memory.dmp
                            Download

                            memory/4148-172-0x0000000140000000-0x000000014019E000-memory.dmp
                            Download

                            memory/4148-70-0x00000000006C0000-0x0000000000720000-memory.dmp
                            Download

                            memory/4148-64-0x00000000006C0000-0x0000000000720000-memory.dmp
                            Download

                            memory/4148-62-0x0000000140000000-0x000000014019E000-memory.dmp
                            Download

                            memory/4168-123-0x0000000140000000-0x00000001402D4000-memory.dmp
                            Download

                            memory/4168-26-0x00000000006E0000-0x0000000000740000-memory.dmp
                            Download

                            memory/4168-34-0x0000000140000000-0x00000001402D4000-memory.dmp
                            Download

                            memory/4168-32-0x00000000006E0000-0x0000000000740000-memory.dmp
                            Download

                            memory/4472-202-0x0000000140000000-0x00000001402C9000-memory.dmp
                            Download

                            memory/4472-93-0x0000000000770000-0x00000000007D0000-memory.dmp
                            Download

                            memory/4472-87-0x0000000000770000-0x00000000007D0000-memory.dmp
                            Download

                            memory/4472-86-0x0000000140000000-0x00000001402C9000-memory.dmp
                            Download

                            memory/4472-331-0x0000000000770000-0x00000000007D0000-memory.dmp
                            Download

                            memory/4472-333-0x0000000140000000-0x00000001402C9000-memory.dmp
                            Download

                            memory/5152-14-0x0000000000D80000-0x0000000000DE0000-memory.dmp
                            Download

                            memory/5152-21-0x0000000000D80000-0x0000000000DE0000-memory.dmp
                            Download

                            memory/5152-20-0x0000000000D80000-0x0000000000DE0000-memory.dmp
                            Download

                            memory/5152-13-0x0000000140000000-0x00000001402E9000-memory.dmp
                            Download

                            memory/5152-110-0x0000000140000000-0x00000001402E9000-memory.dmp
                            Download

                            memory/5480-328-0x0000020027950000-0x0000020027BDB000-memory.dmp
                            Download

                            memory/5884-177-0x0000000000400000-0x000000000056A000-memory.dmp
                            Download

                            memory/5884-75-0x0000000000400000-0x000000000056A000-memory.dmp
                            Download

                            memory/5884-81-0x00000000009B0000-0x0000000000A17000-memory.dmp
                            Download

                            memory/5884-76-0x00000000009B0000-0x0000000000A17000-memory.dmp
                            Download

                            memory/5988-98-0x0000000140000000-0x00000001401BA000-memory.dmp
                            Download

                            memory/5988-99-0x0000000000840000-0x00000000008A0000-memory.dmp
                            Download

                            memory/5988-285-0x0000000140000000-0x00000001401BA000-memory.dmp
                            Download

                            memory/5988-280-0x0000000000840000-0x00000000008A0000-memory.dmp
                            Download

                            memory/5988-237-0x0000000140000000-0x00000001401BA000-memory.dmp
                            Download

                            memory/5988-105-0x0000000000840000-0x00000000008A0000-memory.dmp
                            Download