Overview

overview

8

Static

static

3

2026-08-03...wk.exe

windows10-2004-x64

8

2026-08-03...wk.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/08/2026, 17:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_9f7b7b3631018084e44de3bbed5243bb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
  • Size 8.3MB
  • Sample260803-vxjsfstgnd
  • SHA256 3e61a859a4d3cef547b29ca7de061633e6afb03b17c0b15099352a7b41fe7414
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_9f7b7b3631018084e44de3bbed5243bb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_9f7b7b3631018084e44de3bbed5243bb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:6000
  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_9f7b7b3631018084e44de3bbed5243bb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-03_9f7b7b3631018084e44de3bbed5243bb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:808

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 8.6MB
        • SHA256 3e78e623d210d7fa62b291dba7c4d65e4773a3a709e3a2ca14a22f5226d24c58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 16.6MB
        • SHA256 2cbd6a44a16fa2e70e1100894096e207cb571ce1b70e288cee3ea423d31b365d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 20.6MB
        • SHA256 2194dd1b35943c933f823aa38f79e6262e4c6c70d083d14013b65dbc6bd4654e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 16.9MB
        • SHA256 a373063ca300cb01237bd2bc54bb7a57405c1e4db0d1293e4703b8b46b88e193
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 40.0MB
        • SHA256 d3cdecebed03dd535b4a6a1ade2ef8cc7d6c1f855e20d454392d7f01fa5b14ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 10.4MB
        • SHA256 f94611fa4113f4e2f79f686cb7c8e273db6a9ddbe32b384129655b053f794b01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 16.6MB
        • SHA256 35f03fbcefe89afe597675e099e3e4bf0ee53abba2603c2fd6af8a05e5b42037
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 22.6MB
        • SHA256 0025da9107ea65f0574a71bd599b4997c5d2f190f3916aa8ebaae5fbb6dfdb01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 18.3MB
        • SHA256 e5ae28c22f85ca5c110639f233c00a20e8c76b42466149700a621becdf4ec8b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 20.0MB
        • SHA256 7b8f8b9916bd391d2efa03ff706e0d0a05ec00c76bbf267e13da06ce2719abdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 18.8MB
        • SHA256 ce5761930c941c9b7952c9001971ab2080e0551e75e032a1b4d0f115d618bf03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 18.2MB
        • SHA256 3a56480fe3c6ace5e6c49a857488be539b0e1339cd2582c9ab37a54cb8eba6dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 18.4MB
        • SHA256 3f17bde540d0bac8eeb7c39ddcd4cfc50d3ce3e343beb9adc641bc933259d5b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 19.6MB
        • SHA256 394ff94d3438e66b9922c67ea1884117c2f36d8bf8ad27714c3d6db1a0f15c61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 16.6MB
        • SHA256 3b8d322977ff2692e5ccf44d714f2169fb4239905035086b1593b1a8dc2da4e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 16.6MB
        • SHA256 118c164c36e9921eaa118fa9232c63941e2cb19dca9814ac64371ad6a189398a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 16.6MB
        • SHA256 a21ac8f76cc2c438e06dd7b366801d9939fa28781f387155705c4639308e623a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 16.6MB
        • SHA256 87a1ff56aa467f77982db3d3ca676f3aac06855d8a7a9388e38041bfcfb6f2f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 16.6MB
        • SHA256 ebe6b76997d85f61367f5650e330b7243c00670c655b7ca40f208520f29e8d60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 16.6MB
        • SHA256 b3ee4a6223df162ad9b9b075f6e60548dbf1c413d3135fdf5e8e17eb21861da3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 16.6MB
        • SHA256 9b65e7c4084f4c297cf8cb16e5b06e40ee46b79d67f4cb1d37385813cb465c22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 16.8MB
        • SHA256 f2a8506107de3f8dbaa10e46df5479ebb25ec0e5403d348c0c3a924557cb2b9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 16.6MB
        • SHA256 1fdcd867e816f2d89e2a31f2105b2204d2dc6c5b832a656b6879aad14c3c2092
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 16.6MB
        • SHA256 7c9fc4240fc80e74ce25d846a8606f4b476c34d4c7f3beb8b10bc02720f2f3f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 16.7MB
        • SHA256 ff89b9145e2659cb5fe7340184e0707857ca43476a9c05f33662a30cc1d00d83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 16.6MB
        • SHA256 a655dc7990323b6040368f6e0985d80dd76e1da9f13caf9e02ecb4cc0c6bbf79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 16.6MB
        • SHA256 8df2318375e4e8bf9fb1d586c7f605fe72f196533f25607dd57c5be6342144cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 16.7MB
        • SHA256 c59528f5c380ac67030973dfefdb03341b19fb3e64f12602ce44d996be3faa4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 16.8MB
        • SHA256 0ffe1e048ea8b15b91da1a8b870d4d54b970099556603c79d0534148e11d00ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 17.0MB
        • SHA256 cb3c87b721eaa4746bce96febc778513516d08100dc4c9448b3d197e69322df8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 16.6MB
        • SHA256 5874e28cb174a5d7dee5ae4adfaecdfcd9e3f90f758145dcdec7eeeb1404ace7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 16.6MB
        • SHA256 661bacaf5599f121c576f2710c377b020021f4a209df36f88210fd7baa9ea4ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 16.6MB
        • SHA256 9f1a13a15d169c880bc943020304ccf1e56af7c53224a7c8768d346641d52e2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 16.6MB
        • SHA256 7c83c0a801585283213fe91f4d15b9c21c4e9cdb6a35d11aa0f61636e27ac912
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 16.6MB
        • SHA256 f83da51a6a0f0a1fc0c09ce5bc5a3c9c0e82e00c6569367adbbf5c1427d83555
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 16.6MB
        • SHA256 6e64a35adb76ca0054ea3c5a3a340acf5c56ce0568c584100c2adae42e74d6e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 16.6MB
        • SHA256 19a1d0a6297150659e3d8a47067246c9d0efc5a27e457b7ed15d0ba4b932eaba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 16.6MB
        • SHA256 4f8136f839ee866adbb75bcf7d948de8b90ea1c340c73f8bbb20fbb2dbdaec46
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 16.6MB
        • SHA256 7dde01e011c653722209f326efa81fbc9c974ae388dad98256024f5f0db0b392
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 16.6MB
        • SHA256 a8e45d2f48d70f3a2e8b648c893f9b48bf5616fd1187a72a3b9c30ff0abe38fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 16.6MB
        • SHA256 19ed7281bf994263cc0206dbee0b38b75db7506ffefd4eb73d91ae5728a237ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 16.6MB
        • SHA256 afc91554b35e56127bb9f675f2c320cd2cbd18f635b09dbda37db5eaa32fb6b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 16.6MB
        • SHA256 54f374ff7a19716b7859985833903fba9f9913ee2f5e91332ec2e16203c04d32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 16.6MB
        • SHA256 23de799cedf8145e3a1b3a1521b54d405669432eee0858a3d796c8ce1ff8ade8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 16.6MB
        • SHA256 32d034649b73a1674bba9463a2acf162fba024028b5bdf4056dc7e395e473e0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 16.6MB
        • SHA256 e095b33e68fa628cbf74119d5d156cad36aa38bdada920cd459832d2ac6a0708
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 16.6MB
        • SHA256 4b5ae8c17e8dab34092d96c251b5eb9658590f40efbf942c66e48fa586137ec2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 16.6MB
        • SHA256 7de2077e37083556436ce3c63f84566746c1b2733de9abc2e0133c1b9fbc4468
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 16.6MB
        • SHA256 5635f8ead8a4aad75f5f02ee0f69c7028ed254a3644887fc5012c3f84ba9f0d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 16.6MB
        • SHA256 510f7a7fbc4664eb4b8e4fca1d00c2724570a2e6164a9eb13c493c3c872e5dba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 16.6MB
        • SHA256 62e77129fb2317c6d787487726d2545697d09ab357999a932cc3becb1b855fd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 16.6MB
        • SHA256 70588fb170aaa67103f0be50b44b5dd725c2009878b601978518dd86bde34bac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 16.6MB
        • SHA256 0060028757a59ae539b65cdd06f302e2b59cb08f6653bca631b7364dc2cd7649
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 16.6MB
        • SHA256 e3b6f29f69b915b02924e185ccdc7ae4aaa3389df8b075856c37bcfe584f6025
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 16.6MB
        • SHA256 77ac36a423040f3a85385421878bf8ed32a6d749385ea18e9d21c4a4f73d1c02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 16.6MB
        • SHA256 cc415eaaed887314540a0b3b4a661d3cf69e4808b95eb96370f1ce34d4bf4ddd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 16.6MB
        • SHA256 700c78fdb2b2886258e48d717b5c009bdf01fb312e9caab55f5207e3673f3e9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 16.6MB
        • SHA256 bf12417bfe7bf09e98bf0df629c39c824b9632bfb5704b0e60257c7a468751fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 16.6MB
        • SHA256 1a549f8252dca653f7d6a45af72479357846c2c84370b4e167bbf6433769ed50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 16.6MB
        • SHA256 241042f78dc18ebbc064e4ccb83c2d2b5a556b5c13e91fbd6f5c857c2ceb521f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 16.6MB
        • SHA256 242480f16a1e06d25470872e2128800a6425114fe94f82978f4ae25d49d5a3bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 16.6MB
        • SHA256 e4b68578736faf14d7890f9bf9a62c22ca398fb4afb4ed1dd030914a98477697
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/808-8-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/6000-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/6000-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download