Overview

overview

8

Static

static

3

2026-08-12...ar.exe

windows10-2004-x64

8

2026-08-12...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/08/2026, 07:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
  • Size 4.8MB
  • Sample260812-hvpvgaxyhz
  • SHA256 562a805bc1203fa8c09a5ef373af50cada796bc4d24b48ab92b5b31227ab3a8a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4124
  • C:\Users\Admin\AppData\Local\Temp\2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-12_f13a32da7eeb84f7ada0ed5657b57531_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3504

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 5.3MB
        • SHA256 3a63aab66beba36aa9a879c1333b34765037dbbce2fac6fae7aef0cb0d095e39
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 5.7MB
        • SHA256 4589d638224ad421befbd4967c75adbc22fb1e58df729edd5bd38ed8bdd0696a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 10.3MB
        • SHA256 4a5bb7bcf284e58f588be1b3d93290fa6f92172035f27864466fa9573da0f339
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 9.9MB
        • SHA256 ef3cc5b7ffd9cfa5790f253c82826305e726f7f17bc77168251b59fd7a5367b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 9.6MB
        • SHA256 ba6f18d2cca26e91b08cabe124b85e393efbd2a5054a2aaf384d82ffe34db673
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 13.7MB
        • SHA256 b27bb6e1b64f91f10891e785e3a70709792a4b982ba2841bd78a2dbc9da3176b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 768KB
        • SHA256 32a4edcc850e91e49004e89b1caaea00d041d8b04cde89ebaa58552b8c82481d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 33.1MB
        • SHA256 347efd5d7179cd34c48b2817f61709ce1cec023e623bc90c34f5c30083b40243
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 6.9MB
        • SHA256 168e2d87686627a2e56cf1867ef17f82c4e271a6a7e63bd94fd482032e0041bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 9.7MB
        • SHA256 2afabc6e3517aaca853aec33c95e6eb72154af09ebf61ad337a09afab5ba30a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 15.7MB
        • SHA256 9b74cdb3c8666b0c8b4a0622384a20626967db1b1bc61c905ebb4aee0931ad10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 11.3MB
        • SHA256 71cf8aa8eb5b40a8539ab84c48ff7f0ee703d082a153ce9cd6bdfe3cc634d3ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 13.1MB
        • SHA256 4935313aa923406e3b97b97cf145ddbd8b99057ed4d7ba7331c090bce375fee3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 11.9MB
        • SHA256 706767899ec6770738993403ab7055e1724d8565007e38229071cb60104f79e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 11.2MB
        • SHA256 edf2c495a0c8d0af9824c8d48244b5678c788f3f0e364ed30a8f82732b9c76de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 11.5MB
        • SHA256 c6876f1b498bbb407752cdc486f394d8e46bcbcd9b13e7d239c8bf559c0e88eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 12.7MB
        • SHA256 18741e504062a4f18e61c7a175a0833b5199b0b43bef0a2018d260b5addf881b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 11.0MB
        • SHA256 ef00af37e26d71c2b30e4acf0ec77b2859593d8d5e115b24c4365b2174116f40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 9.6MB
        • SHA256 21485d5448d3c9dcaeb28f61110c53b87892e8e6c03b7bd271ad453c3ef1de09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 9.6MB
        • SHA256 19f18a1b199546d425ac705bf4e132cc5223c072f2a8652ede65af787bf3d1e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 9.6MB
        • SHA256 0190c4bd2d0233bc85daef3c5bfaf9685ab36e2d0550e8456da94b9f08ae982f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 9.6MB
        • SHA256 1c1a5857cd1995c278e449b200c34ce2b8cb2f3c0c02532d6e645b908760c367
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 9.6MB
        • SHA256 11af185ff0bcfefda37cd0a8406db043452e85751aafa3b5c4cf76f1780cf549
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 9.6MB
        • SHA256 8df1178609a7fc0cb61c4597a2d3b3b96db5064a2a403afcdf0925e39795a818
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 9.6MB
        • SHA256 276b2c33d4c7c02322fc453e1a42ee7679d13636e149136a57b73c875044be42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 9.9MB
        • SHA256 e486d3eed5200d97d469d3618393531cb34ce8727744e8a709d35a9b79dc9489
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 9.6MB
        • SHA256 6e87903374f1d6f36b1c1f400d5165f6e131cf9a64fa1fff212081bef8b98541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 9.6MB
        • SHA256 33ca5bce063bf252b1cc761fe27e346a57b70c5e47238de5502a526f56b57e57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 9.8MB
        • SHA256 67729bbc743b01063d027fa0cb6461fe93c8a3af28614f7a8ff55a0ae4af0524
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 9.6MB
        • SHA256 818fddd45fd18a00389dd05bad931403e112b1aedca0351f092317149d3a5536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 9.6MB
        • SHA256 c8b70e8784e0ec48e91a451631eb8695e560809fab147d46d4166b3dcccc2bec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 9.8MB
        • SHA256 a4cf59d8cd1f7032c5496e84078fbf4cd0b728e929cfcb4c7e9db672c815207d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 9.9MB
        • SHA256 089665870c125525b89f0df59bde2e09d0a8194b83e9b6b943aa5e14b367e51e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 10.1MB
        • SHA256 6dca174a756c11eab46a790ff9966f499562777d373996df135062b225ee6ec6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 9.6MB
        • SHA256 a75278754efc18b2cb0ed4c1de73e8282bfb3b51d65a270bc42d5cae4a0dc742
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 9.6MB
        • SHA256 90360118e9b7ec948a90a8dcd96fdccd59087c875989f8b3335ebca2d9f9e766
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 9.6MB
        • SHA256 f405e9ffda42ebad36ad90890e691ed5fa8c37d4a39edd5992e1bada9a4a33d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 9.6MB
        • SHA256 14f3b40a9bfa0d6507dfbc1fccdc05a499483293e3b33c068aed92315826a52a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 9.6MB
        • SHA256 651ca0f2162bc837495fc5699df95ae85b97ee35d5ac63b608f29406d4b22298
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 9.6MB
        • SHA256 eb58f0747257696df7cf00d4582c5f3ee3a4e2fc6cb18cf4a91197f86d13ff82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 9.6MB
        • SHA256 3a028bdf26ef44018bf11aa03342049b5dcd2480353b8cfc1f34c0e6ea093474
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 9.6MB
        • SHA256 b0a7a2702bda93d48c6094446f3972d9410a98b398841eb9662ce5fc37d7701f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 9.6MB
        • SHA256 7af6d16280a3d8c00594a8bac4639f42591154ed2f0c2709751c10985375dedc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 9.6MB
        • SHA256 a636ae89edc1de42416f5f21aca83a3222f0cdedca464185b9c861b010a43108
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 9.6MB
        • SHA256 d6235edf7026858b0e6eeaa9973e7190803ecdb7f22d48cd490b282ab6b05bc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 9.6MB
        • SHA256 3a29aaaf397665d33a487f59e8115006932aa62acb559f0d7fe05824200455ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 9.6MB
        • SHA256 bf054ae8b5a6aed520a42f1bee2f2b93868329a6f2892f7bb1f39412214ada71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 9.6MB
        • SHA256 215ed968b725e1df75ff720860e22818d189568557a9cf556a957d8faf91c9ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 9.6MB
        • SHA256 021b9066182ed1600d145a1f44aeb502097f6cb270f28f9513dc463a58033c95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 9.6MB
        • SHA256 a98ab81382eddeaa1f3b5e6bb3b42d6623ea7af869b21a954f41c4b7435f5503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 9.6MB
        • SHA256 3aaffe1d74a8f2e6a6d7bbe3194562a1ea457ee41beb10bac248c4593f42f5a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 9.6MB
        • SHA256 eb197464e29de939781c251aa0117920452503210370644bccac51e7c1682ceb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 9.6MB
        • SHA256 1709c620a9624e6972d91d6a239134d13bad5c9a84544a1d9bf41b8c918fb581
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 9.6MB
        • SHA256 094a49cbf45d6162e55e6e7e472d48307e44d528ed61b0a44f4f4b6262054617
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 9.6MB
        • SHA256 ffb6b121d79b3631e5f1f71de51b51bf182b92ead99d3335cb8fcc77d33e476d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 9.6MB
        • SHA256 af6946961c3e8c082b3a940d783d5dca0b9c5a364cdf61993235663ae058d1f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 9.6MB
        • SHA256 fe5cb936e55b966f0b806d2b011122402d31042fc81fd18c1fef52118f707b8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 9.6MB
        • SHA256 3bc91b3c0d8dea8d67bca10b0538d4a91904c18e8d8b7295475abe54959fa5fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 9.6MB
        • SHA256 ea2f4178e21b499368471236937354120886a7b28f275e3bbe396858ecd1cbe4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 9.7MB
        • SHA256 740322309047990a7980798c077b40eb0115a4b845699ae0e4d924310111b25f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 9.7MB
        • SHA256 3d7e5928b1a1adc9e80324e908e01d45fb1c6462c2d498a177eac48b7834a52e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 9.7MB
        • SHA256 fbf2cd84f08cb5d26af20a7c0b1831b38697aff2b3fd29082cba5940f0795b5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 9.7MB
        • SHA256 e650584a5911de3640d202baf775906b99cf5a864667dc36e7805e07ea95a0c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3504-12-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4124-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4124-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download