Overview

overview

8

Static

static

3

2026-08-16...uc.exe

windows10-2004-x64

8

2026-08-16...uc.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/08/2026, 09:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-16_fe0e26a0d2b988907d146be5017aabe2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
  • Size 12.3MB
  • Sample260816-lbb12sthpe
  • SHA256 65b7ce2afbbbb3265c1abf6e4142745bf6302ce55902706f4fd8d8581e60b5ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_fe0e26a0d2b988907d146be5017aabe2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-16_fe0e26a0d2b988907d146be5017aabe2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3592
  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_fe0e26a0d2b988907d146be5017aabe2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-16_fe0e26a0d2b988907d146be5017aabe2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2336

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 12.6MB
        • SHA256 95d8ea24a38aa8c991ba605bb6e171366953dd8577af6be77670f50033efe1c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 12.3MB
        • SHA256 60976d0d6fc48d6540ede6a3ff5e8c7e9c59f872e5cc23d8d56c0d5e69f069cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 28.7MB
        • SHA256 72e908cdaa0e90d16df9d79fc97c877c9970ed5c29ca3f9d34c94ce65320ffc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 24.9MB
        • SHA256 d77bf5f59da49ce26b03e644f646a0813442ff7f34af547cf239277c8084e25a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 48.1MB
        • SHA256 541f43e0bbafbb4ef482852a3869ccfc03c740182a0bb8e25234ead4a35aecca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 14.4MB
        • SHA256 86bcc1227e8ff7fa1941ad2ece3fa2cdd1a657235224fc6f83bd215782b5bbad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 24.7MB
        • SHA256 abae77533e10deb32b21d3104f26ea5f9d17cd3acc34b734fb50002399f6b750
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 30.7MB
        • SHA256 d71700619c70dcaa5b791be0764be589a5f36fb9cc81b80a063537d6b41dc571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 26.3MB
        • SHA256 fe81ef68938ab6d058c0f5cbbb87cf6caf7cca6abd798f13fb17b7d59564caa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 28.1MB
        • SHA256 00a853be0706f455db06c6742f3e9cd1641fa177af6a242413caaf4240a006a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 26.9MB
        • SHA256 d68d99978b52965b4e3def489b71d44721e7375aaf9391071ab3585a0306f179
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 26.2MB
        • SHA256 791d009e8e5a487f1813dd2848b6fff130169389802b372389deedc9a017ebb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 26.4MB
        • SHA256 1fa83bf8928f7faa842a1c191c613cea993f91912b04a68d6926808d9dc8e0bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 27.7MB
        • SHA256 dcfd7862f398e5e005a85c17bacb83db68dd7d04fad91d54bbaf3d05c769ce52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 26.0MB
        • SHA256 827462fe847ead987c7bc66e04f1b9ce76d2ae5b705c43a4c93cc5c9822512a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 24.6MB
        • SHA256 90555950184294d83b5e09fbbb206ac7215741e6b18135269b691fe3eb461059
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 24.6MB
        • SHA256 7166ca9f2dee516925064733798e2e9a36cdcfad271bf2b089abfaf8989ee47f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 24.6MB
        • SHA256 7cc8d35500082c21011ad503893d46ecff5bc61ceca60e71e9a9436ccb26a24e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 24.6MB
        • SHA256 fc18bd4c9cafd7b5bf415eacdca7d60525008649bb66468aa30f47a64691133e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 24.6MB
        • SHA256 4188ef20aaba1673393e793370339832ef3ecc91465b96712ca9a42e3be1e956
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 24.6MB
        • SHA256 781972a0fb7ed966282709b40e3661885724d6e0d8a09d2db487ac4bf9acf121
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 24.6MB
        • SHA256 5bfe61877641b042db2d34578132dfbfe5fae31db9ca315a0667964bdc859415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 24.9MB
        • SHA256 49032d655a7395feb3b434830f523129dc9a8206765f5ff9152186b35dc6f78a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 24.6MB
        • SHA256 9b5a1e7d42b859ca033d9ef5f31688720f42afd37331ac80dad9df87e4e9f478
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 24.6MB
        • SHA256 b357fed6b27764520dd366b8ba538eb7e834e3fc44b351d4ca27bf48be9793f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 24.8MB
        • SHA256 e3e83a27fab62cd8aa9a96148eeb4dde4f5ef24dce62a75230985b21c7fddae4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 128KB
        • SHA256 018b597827351ef5fba9c0e1d321cfa9b45d887ff0f8d5607452eb75d8626cb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 24.6MB
        • SHA256 733d3d75fe57b5480428c150a4a80b31bbed13d426f28383af2ea16096feac6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 24.8MB
        • SHA256 8991ceae579e2a77e37d9665304ab40ef260f376241898cbb4ce0cc4416f1270
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 24.9MB
        • SHA256 ee6a86ea3c6474d70c9e8f3c0a0b1144571d1f6543b57b7871c75b25a28df876
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 25.1MB
        • SHA256 026fad34888d26c12681a8fb0b03d53ff2bfccfe36d05e19777df3a08410bc84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 24.6MB
        • SHA256 c16969379d743f85fc1aac506806f6b988d4721992cfa08d6f75d90501af7b28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 24.6MB
        • SHA256 166a0657f7f14ac916dbf7f33a71c66fba030873f21cfeec3d23a99925173ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 24.6MB
        • SHA256 2021bae2fc46930ad319c7a3fee4bb8bdb7cb7b813e8079dcf5d18c6a7502e34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 24.6MB
        • SHA256 6c4bfb83a96b6c5bb3db95635c031ab30d39a143a533143d8953676c7af4745d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 24.6MB
        • SHA256 979cf0d058df6f8390f6d53b3de0cbf6164ccd412bdbc689393532d8679fc556
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 24.6MB
        • SHA256 aa4d221b3e479cbf24c2a887d83fe8381ffde3e1bc733c903c0ea9041a22398f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 24.6MB
        • SHA256 637aa9a128e6b26edba2f7b17902cf723122e8ff29abd94326b9543455f7c9dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 24.6MB
        • SHA256 6e75e74f0245e478bddd09d628a9d496c156659b0f74bddca1f6222154a93539
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 24.6MB
        • SHA256 744c96d31be4322db7b532af76347e6aee36e2b380db5391741415e7fdec4e0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 24.6MB
        • SHA256 9534020ce08414032cee4615f7cee2f99636f35636fdf562f3f486e252851c4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 24.6MB
        • SHA256 c5e7c3156e3b22366fa013e955c4b1b4eccc1054f506c2341b0ed9f9e20072d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 24.6MB
        • SHA256 25e3f449c6fc0f884e141bd602a38e4e81c02bcfb02f962b883c73f9178dfb9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 24.6MB
        • SHA256 594e0e15c3d6a97c0b28027f712c6d1737ff5ae1e8175da503f175c8c8044f7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 24.6MB
        • SHA256 94cf7868aa5c0f757b5cde26b4a3ce6c13ff6796560b8140f539c64d351140a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 24.6MB
        • SHA256 d9bba1d5ae21e5e1bddf0a7f7f67f134ba1e388dd0f3dc2e2a057266daabe06d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 24.6MB
        • SHA256 1fb3029db321be38866af02ee30c27832da80fd8f3d4f8c7992e8a26279ffd0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 24.6MB
        • SHA256 8f0a5810893a646224e082d9043fed1b526e086f7f61c5ddea74eb8a31d7b0ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 24.6MB
        • SHA256 8cb05a74ea34e771a2fddad8dee6ca0ca2fa877c26e45fffca1e2566f041b7d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 24.6MB
        • SHA256 3610930d8bbb54c09217b711fd8f9a759032a8b4a774b5d230b3ed9a4b78003e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 24.6MB
        • SHA256 a5b1ee524b397bc935c5132081a6002c2323366bfa5f9f8d9e6a23e142c9fa3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 24.6MB
        • SHA256 57ea9021f05b2c72d3eae735a5559f70b4a0b1c64dd035bce61df13626b4e28b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 24.6MB
        • SHA256 f65785f2bcb1809f2776e57a64b05c41e9dfc5335676db7e4ab0cbe8b5e3ccd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 24.6MB
        • SHA256 a9a89653abaf21bd2d844b7f1f4f62668742bc5f6826e2a4331537e009315547
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 24.6MB
        • SHA256 03cd888638748f0d25d7c24fe70d41ae10a513059ba7f6588150e2a73257080b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 24.6MB
        • SHA256 f288913629c2c0a959156217439ead6992533b998051c490ffb6bb70b0682fc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 24.6MB
        • SHA256 813cb48d7ecb573836c07a061373e01ec4996e7d28e02fe0cb612f50c0e46959
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 24.6MB
        • SHA256 1fe05492f686ddcf86a5f8239550c2446c6cb78f9dbd05e099d2d4313e540689
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 24.6MB
        • SHA256 d29f445069901d0a6f7996405614dbbaaf56ba7d08e1e9046e98591e347ce2bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 24.7MB
        • SHA256 aa37b7ed1b6314688355001a172237be367acd5619e52d678ef4726880767cbf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 24.7MB
        • SHA256 896719298b1e5dc8d2a84107ca331e52addb11a3e466415667a197601b5f95b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 24.7MB
        • SHA256 a8953340f1aeccaf8d75608aac478738a7be23b2708914da028485062360c907
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 24.7MB
        • SHA256 4962d52bf5cb8f356e36f7e6f18c8717be9ffd032a2d2703d389fdaa5f29eb48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2336-18-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3592-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3592-1-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download