Overview

overview

8

Static

static

3

2026-08-02...ry.exe

windows10-2004-x64

8

2026-08-02...ry.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    117s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 13:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-02_c0d47fdbe413df4b9745c1eeaf943355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
  • Size 7.2MB
  • Sample260802-q2ebbatfqa
  • SHA256 1d8910ed073edf87b2b321b7c2a30c6e5b2118a2f3a5971de4aa250c1b271bb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_c0d47fdbe413df4b9745c1eeaf943355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_c0d47fdbe413df4b9745c1eeaf943355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2672
  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_c0d47fdbe413df4b9745c1eeaf943355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-02_c0d47fdbe413df4b9745c1eeaf943355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3464

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 8.1MB
        • SHA256 48297deb36e9e80755870f6368505300a6ebb494d79f9924f0b35734285085bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 7.9MB
        • SHA256 30940c541a104c8b6e1e6a61f582ce8868ceefcd0e28a041ab6d4a204fa4170e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 14.4MB
        • SHA256 b8c6e65b0fe597d6fd47ac7a74a4ec630e0bf7ce361d13b2367d653e20b00c21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 14.7MB
        • SHA256 4535c1c38a5c322e057c018603b4c7c667d8fd7bc83b007a8400a815d0239789
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 14.4MB
        • SHA256 4b91c8928eb6030fc64dc6b57796aa68a267ce5070e02148030dd99c2472d0e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 18.5MB
        • SHA256 3e56c46e8615034be791f78f0d691258d9b99741ab2f3074541c5aa3bc1bc8ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 14.7MB
        • SHA256 818a6941683e6809cf3040c3e4563e14f541ef4c2fbc5ccc90e63b2929fb8d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 16.5MB
        • SHA256 5b98371a8721c85822129e92727c477b5d5a2aa3c9ec769a0ead8321d8199c8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 14.5MB
        • SHA256 e59bfed7de7c2a6040bac612429b8c8d7a77a3a2e14351aa755010c334d997d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 20.4MB
        • SHA256 3c4944c045aceff43a6e80a258215e84d8b0998d022b13ef3e044affe7a70a6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 16.1MB
        • SHA256 d53b9959121615ca0fab2c47ab340eba15a71ee963d85e57859e95d90216e523
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 17.8MB
        • SHA256 1f7b84d16c44a7823b6bec76025e35705732e6392b2d3c58eb70ebc8b0865459
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 16.7MB
        • SHA256 383ab12ae0b8a59631a10c07856b98aa398daa63e1347a186d7070cbababa790
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 16.0MB
        • SHA256 a41f49c88d51582d8794675e0dab1e5a86e985e8aaa769cc77316229ef464a61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 16.2MB
        • SHA256 75c1019c941e3f37224da38f76ddd35e2bfc597fc413b06c8dfc667fa25445b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 17.5MB
        • SHA256 041eb8a25f2eab8536b5e56b374f270b580b94035c5554c14fe2de0b511aa185
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 15.8MB
        • SHA256 23a46363c4f5343bd1780d358ebc44891a216537f90bbb9b3ac1f1cc7fcc426e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 14.4MB
        • SHA256 a63bb6c55c447611fc1c2d4b024c683e1e59396d217f8aae5099dd6a5e2297d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 14.4MB
        • SHA256 fbe945edeee847222b1187ad4e5198710b60f74e7bef8cf924619970ccecf243
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 14.4MB
        • SHA256 0a085983a162a8de7eff9eb42e4c7a69220a9a93dfc0ebfbc75daeb9e0a9636a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 14.4MB
        • SHA256 806f1ca014c3465b4f8bfc1231d57ff1ceabf5dcf48fedf4a15e713669f8c030
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 14.4MB
        • SHA256 01143105a704cdd5baeecd72dd6c3c2affc77c7c67483e3a2189bdfd7c7218fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 14.4MB
        • SHA256 45f0da3a0e4e2ce0d5fbbb65515f41d9b70b31fe0aa1d17f5c8437c0b45f5930
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 14.4MB
        • SHA256 948dc7466133ed96a852eb61252ef98a44a44e3370c6f6240654fe710e6a4bdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 14.7MB
        • SHA256 eb90fa2b4b460b09ed6f8cd8019b75f560bbf8c30d489bdd9e777c3c8dc0a8db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 14.4MB
        • SHA256 2cb1dbed899fe42755a523ea17e001045fc95f30eabcc2bd3f0dcce1f4c7ea34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 14.4MB
        • SHA256 03a8da96cecacca40eaa536340cc0de28b7577ca26670338599775e5e129d19f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 14.5MB
        • SHA256 07c722e5cef450e905b4b2e59474054559f2582646cc8bc85ef903f0120fdf89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 14.4MB
        • SHA256 a8223924617da3b9703a19b0a80317fdaf7558ff964054dd3b5b6a0ab771202c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 14.4MB
        • SHA256 236997c8030e9b91bca2183acead09e5d7cb12677fbe01f5acfc7a1908c03146
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 14.5MB
        • SHA256 3ce6c7501645837471ee3403e394f75deaa7c1fad0a2c08fd0e9f6d063a393b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 14.7MB
        • SHA256 c1a101e837c63b55c51a6ed654d19a2218b7efe3605c6533957bedaff30ed6b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 14.8MB
        • SHA256 994a95d33835580b012d9f09b872640c76c5c333b1bcb0eea56ebcb21b21847e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 14.4MB
        • SHA256 f730f670285ec341f8594802aa8de0630f6a3a9df6f3722c42dd4fe72eb9b890
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 14.4MB
        • SHA256 c8f028331b127491ae087b54e81b5b3210ed0b7dfb54d3e1f03873b035ce5f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 14.4MB
        • SHA256 8c49a3a4cb27ebf6a5a9c259ab2c8d021b3a7a6bd30101820236058058a92465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 14.4MB
        • SHA256 6c196ae66c408fefae8a7056e4ec033b57911b32ad51f4cea0ff9bd15a73b4e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 14.4MB
        • SHA256 ba78bd14dc8ac2f8ea4f33c407ba69473f969f3c69a72ed78ff920ee25ae5686
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 14.4MB
        • SHA256 72f0113b9243e03857be6e275d8fb65448cdd2762d80e3ef988de1405986c6d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 14.4MB
        • SHA256 434979cbc1a36c47b7870846fb0f5793ba596949fac8d552fbc2de5b1b62bbad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 14.4MB
        • SHA256 c37dec501514e3c5f7354b967d47f5b77d7808f3cf08779f02be61ae50dbfa2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 14.4MB
        • SHA256 09f76ff32bf5692787844d053ec78ac9140a83bb6949d9c827b9e493a4294a92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 14.4MB
        • SHA256 ffd8d2d6c9b166d368a992d28a4e9a0164ae00d2b51854b2fb1f079df3edcbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 14.4MB
        • SHA256 de26c572dbf46be750ebcd7d461d7a58038ed1e7387f315423e3a514e54f14da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 14.4MB
        • SHA256 49bb030bf95f6531841d5f7bb798e331d2196b6e83656b13a83bc01e0b2523a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 14.4MB
        • SHA256 ebffe20aef549e3e284a90f87715818f349bc6dbf733a502da3be4a3e0e23ca8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 14.4MB
        • SHA256 63e5fdf2268f977474074785277361b9a77f83faa6c03e356cdbc898d5625d79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 14.4MB
        • SHA256 f3d7e1a791d28f2a36555751d4237f84b0b37319d1e515e495a8b5546007d84e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 14.4MB
        • SHA256 7e8192b6b4ba547d697e72d22ecc33e93354a696176b4f815aaea5ab704d7f85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 14.4MB
        • SHA256 f052c8efc944f856f6d92f4d62236c52e6a821fde1c9528b64e62c9bde9d7151
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 14.4MB
        • SHA256 1ccda41c0ade6b4ba44ea438b10f15c71eed4699664af7e51294989b5e85a8f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 14.4MB
        • SHA256 0ea511bba4d48b79d47c9ea74ba6b9f26c8a580ced6ed48954144af9d0b10ac6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 14.4MB
        • SHA256 43fdf52fb70054a76654b09204caecaba69411dfaf160af8c0c0796061391fa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 14.4MB
        • SHA256 fa3d18de8cf392ff2cb0e186c4d1dd3207b18d30340668e88876b03ec97d0072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 14.4MB
        • SHA256 e5629eb0b9e296e946f1ebc5ce245e265c432842cf47cc921796f12bd9d8084d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 14.4MB
        • SHA256 face8a0c937ce1e9d19bc23638841d2ac22d42ed717836033803d0885add6e1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 14.4MB
        • SHA256 ba99f6cdaa6b7003be39cf2426a5b6721c3751689a5585d837a610fab965c735
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 14.4MB
        • SHA256 e771331afde45047e7bda425d30eac1041aba8e8b5e73c554ba3245ac47e59f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 14.5MB
        • SHA256 c80e0419dc09f6084878a43a47f1eea3b924faa28f35e11c9f1997c4276a2b61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 14.4MB
        • SHA256 f8141f644ad97956a35cf3d28095af98bb1a9acd7f156c33f7cead1830925e88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 14.5MB
        • SHA256 8447f3cc60d87e1fbd7193e53d66d47fa2683c79263ab6d4f6ff3ef353fd7a29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 14.4MB
        • SHA256 299c3433a90e21bde2972f97ce5f51ebce02be8f118f5a61be68fb430bf1148b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2672-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2672-29-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3464-65-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download