Overview

overview

8

Static

static

3

2026-08-13...ar.exe

windows10-2004-x64

8

2026-08-13...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 09:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 3.6MB
  • Sample260813-lj4e9saa26
  • SHA256 368e207520f37041f2ffabe8e9fc5c5bcb590df7d8f4d56b1624e63fba50368d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4236
  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-13_59c20af3ee03ea9caadff43550531450_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4772

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 4.3MB
        • SHA256 25a91b5e6cbd134e168586ff3c5fd92348295974536066c8769dd4348b0c47e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 7.2MB
        • SHA256 d47559729639dc60ee8c0084734fecf380b2b32b52ca0a4192902a7e64c21123
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 7.5MB
        • SHA256 7f8e41b4bc47e6d61004854ca2a73b456ee6873b57692a51c4fed7f0a4af7b15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 7.2MB
        • SHA256 fca3beea90e2629693482b479fcde5c5d77f815ea21f9ed804f0ca242c52afd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 11.3MB
        • SHA256 1997e4b01e3970581a8cc3e5123c81d12dc6e396a31c9f507bc1d7ca92667869
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 7.5MB
        • SHA256 a4be9d373392eeed02648b7bfb4bfa38e192bd79f968dad0f19aa334a6b17264
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 30.6MB
        • SHA256 73e6e91feb24be17c46456f86d7cb419cbfe7e4d4dcbc5b6d2247e57456d9f5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 9.3MB
        • SHA256 c14b14e5beb2b4c86cb4f03177d33efbcdd08eac98ec7c863f693d3d6739b18a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 9.3MB
        • SHA256 ae93205089aa565d0eaeaeec4913f336066252385f581a89a5c73df9466f4a71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 7.3MB
        • SHA256 eca1c790b105d439b3951e8cf339da0b119bc4691986d84dcba7c45975c27a40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 13.2MB
        • SHA256 feefb22bd2b1d9d5008b779686345837fc218e7c4442609478f98a1997a2e490
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 8.9MB
        • SHA256 7976b039c41f9b720d23132a2f9beddaaa5141c2a48e74dc0c6ef1573098e49f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 10.6MB
        • SHA256 722782a4d33597b3b3e0795f3a49603be024e6589efd3bd4a83a5ea6a983868b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 9.4MB
        • SHA256 688184ba87ffa267446dcb1813c461dc25a40d56855a22c351676d6ecdfafa99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 8.8MB
        • SHA256 2d69b30844336193ae81f287185d1e376f1cf796489d2a1fa1af74f78842327b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 9.0MB
        • SHA256 a924cfb422d37a245afbd69b20b9404381a1136e0fb65c8919c88bf89eda6f42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 10.2MB
        • SHA256 cbc31aaae8468f16a370a892f03d41420de21781e1c56dce66d7d120d3d4a84a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 8.6MB
        • SHA256 c4f5ade94c37bbc4e5c876527bbb2b1088be08b1bebb855d2e887ef7364f4984
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 7.2MB
        • SHA256 f577d3fa828dd6788b06ad64011989d56dacd9deb72844ef83f665260acbb29c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 7.2MB
        • SHA256 184641b58e238e4a2e86514ddaf282b326d31aac68c51e503bc6552926859cb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 3.6MB
        • SHA256 3cac93d55d72983ce3a51c7a2e04f825f1ca1b056aceac37907e2af66b4b8cdc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 7.2MB
        • SHA256 027c1e70662f5147f0fd77de9bf3fe0f82fbf9e51a11ec4edfbbae4930decd53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 7.2MB
        • SHA256 b8eff3019e7929268ae558ee56d6493455f48ae5ad3f3745a1542e7d3315f04c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 7.2MB
        • SHA256 5b9dc153e2c6b5c075d22192a3ede66fa5150d4ffc074e7749555e4181877290
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 7.5MB
        • SHA256 6d03aa7b16d24d401194792c16aadd325149255a7f1c4f55411c88e7c69aa231
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 7.2MB
        • SHA256 c8974dd81b35502eb559c37279471bea45e32ec6e13faa030ea4afd4d6d2753b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 7.2MB
        • SHA256 69b27a4d930f046a00e6a6640094a5620fb4b46748912ea2750f43f2cd72ef92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 7.3MB
        • SHA256 fc3dab441c5d376daa36c436a7322a5e9bb0e62bd1347559eb2202046de3cff2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 7.2MB
        • SHA256 03662458d4cb2e5f1a1064d66ba693f0b1a3e346cafe47601d742efc0ba15a42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 7.2MB
        • SHA256 e3606067a4f78f881cf08a441e42d5af6f99c991d234c462e07260022d470ac8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 7.3MB
        • SHA256 e5cc863a7933f7960685a8154ef83284b62b43e5ad313c8d10fc022ba5eb86cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 7.5MB
        • SHA256 c4fd2ece854fdf06bb629f5a67fa88a98e2cccb0ff07ec0c985861edb8876d07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 7.6MB
        • SHA256 202f2fcbb321a4decc4f893056ad785ce4a5af6f7fff915c338c041fd9528f2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 7.2MB
        • SHA256 8eea5a26af37c5a6864461a69b4bb4d765a333443759e6639b6d1cf5c5194cab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 7.2MB
        • SHA256 ba2ab3e6ee58a00758e4e152dff44caa90bd123070f58cdc4672e8ead786fb26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 7.2MB
        • SHA256 b5a8d8e9afa4bf5ede162cc26772606e1ad65e77476e7c36bd8c7cca3620eec9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 7.2MB
        • SHA256 f0f0be0b8947ced9ff0f84398aeb0316665780ec3d000a263692c73f97de5bca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 7.2MB
        • SHA256 9ccc1f544ef14453b6ee7e92549926a9995693ababeb0da4a1c448c9d8d46957
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 7.2MB
        • SHA256 a75ce8b37e18c94de19c9a2b0c96ada6ddde1cf5947dc58ba498ebebd5f9873f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 7.2MB
        • SHA256 e451cd09a2798cb581f0bf50b533cffb6d119d6aa1f0966e7d77403ced6e1794
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 7.2MB
        • SHA256 351d678289f242e0b48a375524f17022d50febb53dfd89663e76083f89424abb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 7.2MB
        • SHA256 c06d45a3c532ae7b38eada622d159ee38d1dc62ab3f5c3766213ed84a88cf103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 7.2MB
        • SHA256 473a119c1d2083b1a75fa9762358a258cd245c013dbdcb5ead3abf04e7d5f815
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 7.2MB
        • SHA256 35c90d950e18a4aa639f80494ac49d064c7f1f2d065d278668df97cb23cac5c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 7.2MB
        • SHA256 6635c5c9acf8a9162264e4756ee11432512d9c62166f0c0aa07a6610bc5a2239
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 7.2MB
        • SHA256 f94ecf70be7892c600ac3dd737bedb718ad7f64f5806b9b22591a436790219ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 7.2MB
        • SHA256 5ef1102eecd81601e836bcf2c8c602957ea1ddf61af9086384b237a43f67930d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 7.2MB
        • SHA256 1b94a7afdf7260a57e0c601f12f438ae89f211be5878051d941ffa6da6aa8d6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 7.2MB
        • SHA256 6fe9abadfe726f46bc697740daa41da98217fc629366c704e9fa88da74d146f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 7.2MB
        • SHA256 c3c0d54b32c8b1162f411f54dd21db6b6b9a0d867301a6bfcef8f3011af676ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 7.2MB
        • SHA256 ad5ec1745dc110ae31fb53940d00cec476eda37a20d668c372c6f999b27e42a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 7.2MB
        • SHA256 a679c7111963a782365640ff8edcbd0b134417b2e769ea573fc4c2c866bc590a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 7.2MB
        • SHA256 1cf1917becf61c4249842cb31427d65bd33635ee97dc596b538b819afea125af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 7.2MB
        • SHA256 67a6465bc3994814758d7b7187eabf98370ee136973d96125ae11ff8214e1f74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 7.2MB
        • SHA256 24c2f279509a6bbdb117cd1a74a74e298e0bf5e32c4ef8a81d2ac5d19ef893b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 7.2MB
        • SHA256 973923c02b33fa4697295b9643b2120cc994710f6edaa3ac59a54af0be979cae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 7.2MB
        • SHA256 ed28842f2ce3912e4a6162f78e7ddd3c830903eb1403ca8f183afd0061cb9c05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 7.2MB
        • SHA256 3f408cb9df129b5be46bd6f5c786af20aaa9ab703a549278fd9284ced1e29549
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 7.2MB
        • SHA256 16655c2858b449dba49f7a15015a103e1d29d8f0cb5233ae5bc306c54ce12f16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 7.3MB
        • SHA256 2dedc0d88e0c54106fce4c5d742f41941f6871f107d14991b41edb7c6a25f508
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 7.2MB
        • SHA256 0178502b63a842e10f3796d67eef4ed8cc5bb3b5d0e649c414c4aab0147ebc96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 3.7MB
        • SHA256 375de26cf081558d2bbe7b1a45e93485e9f055c5611547f0d55f2645a3d1be78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 7.2MB
        • SHA256 39de60c7ec2ca903219769ee1243e91bb5d005f66289a960d50d9ee802f7fa0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4236-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4236-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4772-2-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download