Overview

overview

8

Static

static

3

2026-08-14...ar.exe

windows10-2004-x64

8

2026-08-14...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/08/2026, 01:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-14_3bee4bba6dd250494abe6c6e3e802527_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 6.4MB
  • Sample260814-b61b1sseqe
  • SHA256 52aa610d738c86006f3c26e5bfc64adc04f4d01ad3a8821fa856e59125f0ec59
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-14_3bee4bba6dd250494abe6c6e3e802527_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-14_3bee4bba6dd250494abe6c6e3e802527_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4572
  • C:\Users\Admin\AppData\Local\Temp\2026-08-14_3bee4bba6dd250494abe6c6e3e802527_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-14_3bee4bba6dd250494abe6c6e3e802527_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3856

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 6.9MB
        • SHA256 0003dd58018daff000f0a67ad74f5a0e075e89ab1e720cf3fd5863a178cedbd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 7.3MB
        • SHA256 b47255d917ac70f6ed1471e33f6fa3185c5929c7b3db9068ca38e32cd6b4ce4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 6.4MB
        • SHA256 c7d5dfbf5187803979a17d0a618e55118864142807625b5e0beabda9cdaa96eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 6.5MB
        • SHA256 a786ea55d7bf959174550b1c07f8ea8727157aa65df3c32b166be5095b049f4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 18.8MB
        • SHA256 e42cdb538d27b1565e4366002d7c961bcaf212ee11207491c5df51300c90b6b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 14.5MB
        • SHA256 c96a16149c410c77c08d1f148b5ab2e585424021f62b64971aa6170e4e677c31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 16.2MB
        • SHA256 b6638a36f70cde8e62d95474c4168368856cde449ee8798fae8d9f553e00cbe9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 15.0MB
        • SHA256 44791c68f4be7f594247b560e96706fda28d0b23cfc3275349a7e8864ec58de3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 14.4MB
        • SHA256 9f6673f185c463ad27562657284d5540f0a3b2c84c4dc15bd2e5440f79711ee7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 14.6MB
        • SHA256 777b008fc72bb53a4b8abcb4576782e9c445922aa8028abc5b89894df56f5cbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 15.8MB
        • SHA256 a9949dcb1f9d7e1bda470152658bab882aed87e6db0bf55ddffa22d2c9fb98e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 14.2MB
        • SHA256 c76c57f73f31f13080e2049319b90288387d6d59ad0564a1daba1dedce4b01af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 12.8MB
        • SHA256 dd63524ebeb3c3e4b708fddfb1523e2329525e9eb03e982e6cd2ec2daccff49a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 12.8MB
        • SHA256 68da7fc040b42ad551b7a2c4c53c8186273036fa752f02bd171f2f3031f295c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 12.8MB
        • SHA256 8075177c5b68dd7fd4dee9d01ed84eb2242a6c2c7e3e7b6d0bb3cebd58be9b2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 12.8MB
        • SHA256 018e90f455e98c38bc1426f24f726d135bda599e8f34bbbbbb0986d6d3f71737
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 12.8MB
        • SHA256 0bcc789208b64328a9737d38897549a845fc3dd4c79def5d8ef919f1710865a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 12.8MB
        • SHA256 5c7a0bb4ca98cd4effff1810424032c14a5de293b28baa5e0195056b888e1437
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 12.8MB
        • SHA256 03c7bc5eaab8b4ccbe837b3e8e02fa0b717ebed4cb01ba86b3b6a0531d4062cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 13.0MB
        • SHA256 9d35ec2d18ead521e6365e5b82c4d99054612c1b86472513a621717ffa8758b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 12.8MB
        • SHA256 2ebd3311f1cdc2f31a1dc70d207031b0b58957dbadfc4b1a9e71ab011a5b7bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 12.8MB
        • SHA256 25048b99044e739ef1d78b712e7a41ff3a7dfeb5cad5582b7d26806ed8f3751d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 12.9MB
        • SHA256 42fce85e8e447ae038524a09ac982fa61d006033479e4b8361eb6553b6950624
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 12.8MB
        • SHA256 74df7b529cb549db555f092fc2c2ec77d7173813d9a81350f4704b0bda6ecc31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 12.8MB
        • SHA256 153998e44e5843efc75a04a41e4091970c99c1ac44aca7626a350769cb0d90ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 12.9MB
        • SHA256 9c043639e3630dc61b43f3ec9c223c95a90eb269a691685deb63d3b073a93e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 13.0MB
        • SHA256 10115690780bce0ace2cbb748388f70a4b646b0ee49f09973ef48b449d716a18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 13.2MB
        • SHA256 1740f52bd996ee5122ba06e8b6ef6d19e77313eb65bd8f431bef0a6dffef3916
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 12.8MB
        • SHA256 2e72584b841de3b047571a10863331b7fb5a7eb40ebd379fc05cdb3addbb152c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 12.8MB
        • SHA256 47b449c1daf1cb67b9fe119ae00cde98c0cec646ee5a142e7929c9e16c3d1be5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 12.8MB
        • SHA256 662bd4230e83f5b525392342afa73fa458f90cca1ab6b76552d5004e6a4d6db3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 12.8MB
        • SHA256 26dd9c0d027bd0f0146a3bce6ed6ad24e7923c81daf4c6543955bbe36f3a646a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 12.8MB
        • SHA256 c258ab96d785b50d0f37f088e738ad838c1ade1b088da65ae2ca5b254a99da44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 12.8MB
        • SHA256 1e7ae06cada4c0205ae006db0d954ecbb96deafd8c4b1acd1316ba9072971b83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 12.8MB
        • SHA256 f45422ea735b68e920a28f27dd140ed5d9b4e45110d642d391226977c288efd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 12.8MB
        • SHA256 d1d5a75614724d72140dc5e2acf5b199e11863a8efeba77e6d186bb33740a34a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 12.8MB
        • SHA256 c7ebaae4cc9d5117a7382e9d8b85aa95fbadde0c64939b6a185a6bec2aca44f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 12.8MB
        • SHA256 5475db1600f3ef7a6d6299bc759e7f6660bf339a8a43d78df7a4122377a32eea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 12.8MB
        • SHA256 e3bcaddf76c63c1a640a5f342a2eb1089990ba46627f074a9ce8987c81f79bab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 12.8MB
        • SHA256 70640e99414d8065616df51d9929bf96699b12b39a92267f6fd4796a4aa4cad6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 12.8MB
        • SHA256 95b8e7cec8d4337355ce9a89f5c04bab011fdadc05d068f875ee9e42a967dc7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 12.8MB
        • SHA256 3266f54712f5c8e692e9160a4e981cc09e5f54f068f1039411252dd302f24455
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 12.8MB
        • SHA256 59536e465a369385d34e674396ee5980fe1fc4c61e342176b57468ef1fe95842
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 12.8MB
        • SHA256 f2b1347f80f2f4f99231835250e996579ac2ccb808c975810d5059580ea853ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 12.8MB
        • SHA256 59088b3ccd8482983d63c702cfe1c8503a386fbcc92aec2c15d188bd3cf88625
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 12.8MB
        • SHA256 4d01ad00949a62f1fcef5c99177ee974552ea93f68a6bcc114385a41fa64f4fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 12.8MB
        • SHA256 de7bef5971827d132026d0ef5c58244a1abda88e9a680e6e5068be88dccba0b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 12.8MB
        • SHA256 d17bdae2d4bf5bd66ec2f03ee449e427f5f3f5549c9a4751b71bcb7a7983929b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 12.8MB
        • SHA256 80a2675cc14094b47693d48d332175f63c36923d743722e2f5546ba57a3d9ab5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 12.8MB
        • SHA256 7555eb3e69c6cfc42b9276c0c8b4ea90b22ab63b47787d098b883f14a222d663
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 12.8MB
        • SHA256 0cbba50459f8f15840fec1045d3865e380de39ac285794739f154f89233be925
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 12.8MB
        • SHA256 c0efecf340d44af6bb954d04828a95313d5dca54eca7e22db4f029a3074ea07a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 12.8MB
        • SHA256 3437fdc97318593381d92fc3dc6d44a500c77018b5179ba1c9312e1f47b28ca8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 12.8MB
        • SHA256 9e0a7a8433f5d83381700a9dcbe0a1843cb6994d651892f7c2041d30821e65f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 12.8MB
        • SHA256 28f07eba1b7f062f397aec5ae41d9d53fa7514c031dd5a6222de8b2bb6013da7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 12.8MB
        • SHA256 9de1ac10216ad325cad9ceaba5d43b1b3333e7de3004cd2642d94c4f3a987842
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 12.8MB
        • SHA256 05bf2c1fb02f111149a16c5e0fb0e4bfe82516ef7759f4ad58277e20d7bb20d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 13.0MB
        • SHA256 17f2561c0ff55b1eca9c3f75eca6cb46901aa907d12d9291e6a568557d07c244
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 12.9MB
        • SHA256 a5e2838c1ef8116a1fb264ce01a5c0d5fadfd11e587558068e3a340eece3c4ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 12.8MB
        • SHA256 a395db640ef0de2a9d356a4a655ea6703ca30216ef34bc295fd25906c1298e11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 12.8MB
        • SHA256 915589a66cc38cf421bf68fbb90229caf0d464acfd4e694a769c6a160f7fdfdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 12.8MB
        • SHA256 da55713fc4b51741d9170d671b08420143fe880395c66ab3c3a150182dc37b90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 6.4MB
        • SHA256 52aa610d738c86006f3c26e5bfc64adc04f4d01ad3a8821fa856e59125f0ec59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/3856-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4572-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/4572-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download