Overview

overview

8

Static

static

3

2026-08-28...ar.exe

windows10-2004-x64

8

2026-08-28...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/08/2026, 23:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-28_020c3f4c878d413eaa4c4c8b6cd37910_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 6.9MB
  • Sample260828-3f7rystycs
  • SHA256 5ecdfcb5b879e5c5449751db6792548223e9a3c46e13b337709144ecb533d8a7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-28_020c3f4c878d413eaa4c4c8b6cd37910_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-28_020c3f4c878d413eaa4c4c8b6cd37910_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2744
  • C:\Users\Admin\AppData\Local\Temp\2026-08-28_020c3f4c878d413eaa4c4c8b6cd37910_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-28_020c3f4c878d413eaa4c4c8b6cd37910_akira_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:248

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 7.8MB
        • SHA256 7035b1644dc185d49cdd24fd9e612729307bc132a5797bdb97a131df0e1139c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 7.6MB
        • SHA256 be16c1a585cc2465f715693b708e163b5e8cd0bc2be64ee74f46a9c763efccd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 6.9MB
        • SHA256 355efbc31b0b710060f8069008d16aaf6d076a663b8726c19026bab07eb7ebd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 14.1MB
        • SHA256 73b6a7da6d46f1cd2a23199eb585dcbac0337b886f02293951736abbf7f7fb5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 13.9MB
        • SHA256 c29b02a9199b3279ccb31fd4da7928c6b8953c886f9e51486dea1737eaf43fff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 17.9MB
        • SHA256 1ff8a591097a90528c5131033bf8c83a79a9d70cea65e77313b803454eebc78c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 14.2MB
        • SHA256 2d173a1d6b438e0aae052b965c78b5fd8009fa75d2e6d9950cb65c0d1a2ef363
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 15.9MB
        • SHA256 ebf7697048e91ae92b4f343331d4368a65e2586b3b04f9efe43e34eda785816b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 13.9MB
        • SHA256 5e3f0717efde85ab49d96a3db74cb95cf5d3c611a281786a154b78103cde8c19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 19.9MB
        • SHA256 a16fd02349e7a6eaf4a09e438f42155c8ec5ac5fdc6fe687c0ce8549c102e57f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 15.5MB
        • SHA256 296874a1375cd31491476a2b68485c17ba23173f44cfea0cd581a2c8d9d1559b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 17.3MB
        • SHA256 ed7afdc5970c39c3e10440a97e3dd6da9b3206011e883b61aefa28c810c65085
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 16.1MB
        • SHA256 3f287ba53da89e8be235aa95896c8e4ed8912ccaf173be8713698a01e09454ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 15.4MB
        • SHA256 9c1d845f44264b883c8f4650e0761283bb83183c971c4fff78a2b9098f0872d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 15.7MB
        • SHA256 2f4e134fc521d125e2ddd2384f4a3451871dc01d3a5b90aa728da4095c7ca1fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 16.9MB
        • SHA256 6aba1cf4caf12b423b9d61fdebe8785122f6842bd6be69f453faa12f3466ade6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 15.2MB
        • SHA256 e726ac3022241497ea6d889de37d692d77a0738f8a353d78523be9a37c27c505
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 13.8MB
        • SHA256 3e6e6be5bade797e55b0c244817e79639ff53ab9f7909bbcb570b2ee9cacc977
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 13.8MB
        • SHA256 3a48963eb8f8798cd3201662b0fa2c8495b8c42bbd8ead0b982c7ce177991de5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 13.8MB
        • SHA256 d11e4152a633b806b4cc3be0fb27aa02d98cd4fef82692e4ce8b36976514aa08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 13.9MB
        • SHA256 164210d964c8132e040d23ee8d24ca57d3fab92c22219e62e61f93e3e39f0259
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 13.8MB
        • SHA256 4f6ec961ad2795cfda997ec266e98f71d615d6e9ed7b6727547a259d1f26ddd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 13.8MB
        • SHA256 70ca19c6041fda685915d842557c7da2571a784f8c3d05a2d8e022e374af12f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 13.8MB
        • SHA256 099d9093804e47469bf96496a37764f00538ef2e4cddeaf2c6c5bc35fbcbfc42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 14.1MB
        • SHA256 ad8daf4811884fd6320a18c65f7c16491cb87897dfe12c501bebbc72688c5658
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 13.8MB
        • SHA256 c4fb81eb5029d2ae502ab0d3850a051bed8b9d653e78bc4293451fb4a8fccc14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 13.8MB
        • SHA256 622c5977bbfd93143ed4c3ea9d5addd96a451d22cea3bf744e44bf667397e1f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 14.0MB
        • SHA256 97cdede814149366074831e7d697384a072ccffc8db3487dfbe40bd30dff2a78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 13.8MB
        • SHA256 fa513bea838ecdc2aa3b2cbe7a62c4d5ff6c35a025bcbe47007b7bc4a68eb189
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 13.8MB
        • SHA256 5964590b202f5cc7f2858b150f3fe901b1e1190336139821a86c4f68e1b915d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 14.0MB
        • SHA256 f9c74db21d0dfbca70430f5a2aa7303f5b707142dffcd7c320b64787549db907
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 14.1MB
        • SHA256 fc745a5ed46677a99993ef5a4bcfa6603c60b7ffb8f536188b6e65eac050ccd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 14.3MB
        • SHA256 bdb6cfaf921a6c92b13f494393a05a4a7a8ae420ef3e0de9a7be1b2ab7ea71e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 13.8MB
        • SHA256 9c8ce3bfaab16c655bf4d96b889559323b6232920bc22a0b09da4a78bc8d91c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 13.8MB
        • SHA256 5b4a5b3771c501acc133e2d0a59f6885138e9a703964ef292b5d86ae0d632c10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 13.8MB
        • SHA256 9c564b3f3850fe1717d379cac8606d4cc27e92fa2c671b549b554a84dae00711
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 13.8MB
        • SHA256 2a2f328bf01318877fad0f549844b2ee86144283ac38aad6bd2375b85ad3c193
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 13.8MB
        • SHA256 fcff991d9d9b0add7d6f1c4f54e30d1d3dc70e199035584d806e713f475184fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 13.8MB
        • SHA256 3b997733ad25d29e30ae4adeed442399b47db1fb00dfe682dc3869ce2b3307f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 13.8MB
        • SHA256 321c4a6dfc4a98d19a5c8dc70da614cf9a4974ec2d210cf71afa570995512274
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 13.8MB
        • SHA256 75c8ac28002449ec240737f20af6f9b3e42bc3009e1a5a19f50cecde5d54634d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 13.8MB
        • SHA256 ae0f7536fda2d1cb82a603a9b402beeaa253655e1e3d470054281b9a2ffec092
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 13.8MB
        • SHA256 3b4bd1afa3f175ae9c26e964fd9f6386c43b7a3a876a1a9eda3b7545e719613c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 13.8MB
        • SHA256 ca6cb4ee85f8c8f971cc212bd1a7bb00616d548ea3e6238fc744de3c10de3946
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 13.8MB
        • SHA256 5aed971036a654463cc801e5a2c2734e6b162ad8e3b78d899dbe6c8f91da6663
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 13.8MB
        • SHA256 924b09d271a77e0bb109edea269adce75383c5c8b2e7b99b0da851d5fbd2e8f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 13.8MB
        • SHA256 4708f7afa2d0d77409434ed84e5694ede451cc0b74c5f6bb3a0eb4a1a2612b44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 13.8MB
        • SHA256 69b9ba391c923bd0f05b3ceb013cffc005d68678e0d1540d40cc5607159a5dff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 13.8MB
        • SHA256 26dff74609aedaad7b80500479b1b35d8ced2ff84af86bbed13a8bec25ffb2d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 13.8MB
        • SHA256 05bd859fda6b17c483fe8a36d31306ab0dbf81618f437c4e1beafd77aed15ac4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 13.8MB
        • SHA256 3e009a5c87a7007e70797f8bb8f9067ef3ce5a9858738854ab929f1a7feacd3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 13.8MB
        • SHA256 c8c2460a0f0fe4af3ef1e7b4827933bf74a6f64a3e8497f2c063c3bbbd046d78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 13.8MB
        • SHA256 2482c684bf53cf9e6c60ce65c70826c63317708d7239bd3d2916164d026f7ff2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 13.8MB
        • SHA256 b89c175bc9952d07cc73aebe9274eef3f4f243a4a55a6c94e9b3868d4e742e9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 13.8MB
        • SHA256 ea0ebc7eac88791bcbbe3ddb178e45edb44aadc30ffe6f515ffdf58c3d47d033
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 13.8MB
        • SHA256 5b4aa76376615509cd725ab952d21dd6d78b027ac57f57e6dccf991987c10a8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 13.8MB
        • SHA256 f0df690a8fac9707ec5f8d2602aecaa04b080c16cd4a41a6ea9d10ae3cfff5fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 13.8MB
        • SHA256 4653573f47d0d028777fae327c0c231cd7c4b3923deae0ac947827d4d92f3a60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 13.9MB
        • SHA256 3fae8b7b604f0a08db3b8b54c8724ad0e224c0503293983d24dca8dfde720283
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 13.9MB
        • SHA256 aa93b3e95e15840411c0817c378e70182478cc2e89df4dac797bc14fac88462b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 13.9MB
        • SHA256 7690ebfc9471ee056aa8c290a5a727f4614f7b69b3aa6141fcb133a3c53e201f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 13.9MB
        • SHA256 dc845cc4ca7979e5eea1ece57abbda597b78baacaee4fbb3fd2aa771b2ae079c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/248-45-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2744-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2744-6-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download