Overview

overview

6

Static

static

1

0702.mp4

windows10-2004-x64

6

0702.mp4

windows11-ltsc_2024-x64

1

Analysis

  • geolocation tags

    asiadelhiinindia
  • user interaction
    yes
  • max time kernel
    358s
  • max time network
    376s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/08/2026, 01:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0702.mp4
  • Size 209.8MB
  • Sample260806-bqqsmsfb26
  • SHA256 f7eafe12cef79768b59ae2976e71609ad5a34dbc98f5dfc093882771cef2b9f3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Modifies data under HKEY_USERS 7 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files\VideoLAN\VLC\vlc.exe
    "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\0702.mp4"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:4676
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4896,i,14260820523211750637,3401462437974273821,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
    1⤵
      PID:1584
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:1840
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,7570973857769534436,5624818527141905731,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:14
        1⤵
          PID:4876
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --metrics-shmem-handle=5936,i,9990134688135400932,4321267512798429949,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:1
          1⤵
            PID:4444
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --metrics-shmem-handle=5908,i,9659033848129283997,6210575314027723635,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:1
            1⤵
              PID:3896
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --metrics-shmem-handle=6196,i,7065927553461104983,1044476733239368778,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
              1⤵
                PID:1656
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --metrics-shmem-handle=6268,i,8454316915676579174,5984977285434960364,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:1
                1⤵
                  PID:4564
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6252,i,16153688956797722679,2698544547843752365,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
                  1⤵
                    PID:2564
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6276,i,17712088947894154027,7852066159394715081,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
                    1⤵
                      PID:4076
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6280,i,8758686260000899084,16038976216472977144,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
                      1⤵
                        PID:4316
                      • C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                        1⤵
                          PID:1688
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                          1⤵
                          • Modifies data under HKEY_USERS
                          PID:1088
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --metrics-shmem-handle=6076,i,9350432661229618221,12399367554894747280,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:1
                          1⤵
                            PID:5600
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,8748129979854480179,4643716342425312123,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
                            1⤵
                              PID:2956
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --metrics-shmem-handle=5444,i,16675025229536921674,9589646881615066835,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:1
                              1⤵
                                PID:6120
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --metrics-shmem-handle=5536,i,14723355759875959057,17441430731405487950,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
                                1⤵
                                  PID:4648
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5452,i,17364325966608535167,12703528830971653484,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
                                  1⤵
                                    PID:5488
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --metrics-shmem-handle=5556,i,16626096798390035933,16303434853471471260,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
                                    1⤵
                                      PID:5932
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4600,i,8505826832151811543,17044934805263160670,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
                                      1⤵
                                        PID:1456
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --metrics-shmem-handle=5396,i,16609148817876943480,15766341682813176953,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1
                                        1⤵
                                          PID:4388
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=25 --metrics-shmem-handle=4812,i,10699255635516639320,11017542795781027390,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:9
                                          1⤵
                                            PID:5420
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --metrics-shmem-handle=6464,i,6440868030175232437,3297400116221722265,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:1
                                            1⤵
                                              PID:4408
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=27 --metrics-shmem-handle=6564,i,4204114744531735533,14361527335568082722,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
                                              1⤵
                                                PID:264
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3740,i,14199581056683038583,10447129202607136391,262144 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:10
                                                1⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:3000
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6444,i,4460873619404387229,1245388098413212043,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:12
                                                1⤵
                                                  PID:4196
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=30 --metrics-shmem-handle=5492,i,10060100065678768622,11855135512690956290,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
                                                  1⤵
                                                    PID:2596
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --metrics-shmem-handle=6204,i,5622523387763079092,15805694208708962980,2097152 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
                                                    1⤵
                                                      PID:3484
                                                    • C:\Windows\system32\svchost.exe
                                                      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                      1⤵
                                                        PID:5936
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=2720,i,9001375460350998509,657090821110116438,524288 --field-trial-handle=1948,i,4506556738866879338,11536893227000918714,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:14
                                                        1⤵
                                                          PID:1244

                                                        Network

                                                              MITRE ATT&CK Matrix

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              memory/4676-0-0x00007FFD5BBED000-0x00007FFD5BBEF000-memory.dmp
                                                              Download

                                                              memory/4676-1-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-2-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-3-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-4-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-9-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-11-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-10-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-12-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-14-0x00007FFD75CE0000-0x00007FFD75D14000-memory.dmp
                                                              Download

                                                              memory/4676-16-0x00007FFD77BE0000-0x00007FFD77BF8000-memory.dmp
                                                              Download

                                                              memory/4676-27-0x00007FFD69FA0000-0x00007FFD69FB1000-memory.dmp
                                                              Download

                                                              memory/4676-33-0x00007FFD63130000-0x00007FFD63160000-memory.dmp
                                                              Download

                                                              memory/4676-32-0x00007FFD67920000-0x00007FFD67938000-memory.dmp
                                                              Download

                                                              memory/4676-23-0x00007FFD5B530000-0x00007FFD5B73B000-memory.dmp
                                                              Download

                                                              memory/4676-31-0x00007FFD67B10000-0x00007FFD67B21000-memory.dmp
                                                              Download

                                                              memory/4676-30-0x00007FFD67E20000-0x00007FFD67E3B000-memory.dmp
                                                              Download

                                                              memory/4676-29-0x00007FFD68040000-0x00007FFD68051000-memory.dmp
                                                              Download

                                                              memory/4676-28-0x00007FFD682C0000-0x00007FFD682D1000-memory.dmp
                                                              Download

                                                              memory/4676-26-0x00007FFD6AC10000-0x00007FFD6AC28000-memory.dmp
                                                              Download

                                                              memory/4676-24-0x00007FFD67980000-0x00007FFD679C1000-memory.dmp
                                                              Download

                                                              memory/4676-15-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-13-0x00007FF7B3D00000-0x00007FF7B3DF8000-memory.dmp
                                                              Download

                                                              memory/4676-22-0x00007FFD6AC30000-0x00007FFD6AC41000-memory.dmp
                                                              Download

                                                              memory/4676-21-0x00007FFD6BDE0000-0x00007FFD6BDFD000-memory.dmp
                                                              Download

                                                              memory/4676-25-0x00007FFD67D60000-0x00007FFD67D81000-memory.dmp
                                                              Download

                                                              memory/4676-20-0x00007FFD75DA0000-0x00007FFD75DB1000-memory.dmp
                                                              Download

                                                              memory/4676-19-0x00007FFD77690000-0x00007FFD776A7000-memory.dmp
                                                              Download

                                                              memory/4676-18-0x00007FFD77710000-0x00007FFD77721000-memory.dmp
                                                              Download

                                                              memory/4676-17-0x00007FFD777B0000-0x00007FFD777C7000-memory.dmp
                                                              Download

                                                              memory/4676-35-0x00007FFD61090000-0x00007FFD610F7000-memory.dmp
                                                              Download

                                                              memory/4676-38-0x00007FFD60A40000-0x00007FFD60A97000-memory.dmp
                                                              Download

                                                              memory/4676-37-0x00007FFD67900000-0x00007FFD67911000-memory.dmp
                                                              Download

                                                              memory/4676-36-0x00007FFD61010000-0x00007FFD6108C000-memory.dmp
                                                              Download

                                                              memory/4676-34-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-60-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-93-0x00007FFD5B940000-0x00007FFD5BBF6000-memory.dmp
                                                              Download

                                                              memory/4676-112-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-191-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-269-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-295-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-324-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download

                                                              memory/4676-350-0x00007FFD5A480000-0x00007FFD5B530000-memory.dmp
                                                              Download