Overview

overview

6

Static

static

1

Winhance.I...er.exe

windows10-2004-x64

6

Winhance.I...er.exe

windows11-ltsc_2024-x64

4

Analysis

  • user interaction
    yes
  • max time kernel
    89s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    31/08/2026, 13:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Winhance.Installer.exe
  • Size 61.5MB
  • Sample260831-q9extagg99
  • SHA256 0426d513b8840bc9e31589253a2c9d5ee56b146b2b5b0b4513bcbfbf4d40d46e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryinstallerpersistence

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 3 IoCs
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Modifies Control Panel 1 IoCs
    defense_evasion
  • Modifies registry class 15 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 7 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\Winhance.Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Winhance.Installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3440
    • C:\Users\Admin\AppData\Local\Temp\is-KDL5C.tmp\Winhance.Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-KDL5C.tmp\Winhance.Installer.tmp" /SL5="$5020C,63437149,821760,C:\Users\Admin\AppData\Local\Temp\Winhance.Installer.exe"
      2⤵
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2524
      • C:\Program Files\Winhance\Winhance.exe
        "C:\Program Files\Winhance\Winhance.exe"
        3⤵
        • Checks computer location settings
        • Drops file in Windows directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies Control Panel
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:1588
        • C:\Users\Admin\AppData\Local\Temp\9485650E-42E1-4569-B3D5-8FFA3FB40175\dismhost.exe
          C:\Users\Admin\AppData\Local\Temp\9485650E-42E1-4569-B3D5-8FFA3FB40175\dismhost.exe {383E1208-046D-4EED-A5E4-26DD1F41A9E6}
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          PID:680
        • C:\Users\Admin\AppData\Local\Temp\D327A9A9-17A4-4010-BB28-39389BAE4898\dismhost.exe
          C:\Users\Admin\AppData\Local\Temp\D327A9A9-17A4-4010-BB28-39389BAE4898\dismhost.exe {0FC4CBFB-0E9D-467D-9EFF-64038C45DCF2}
          4⤵
          • Drops file in Windows directory
          • Executes dropped EXE
          PID:4712
        • C:\Program Files\Winhance\winget-cli\winget.exe
          "C:\Program Files\Winhance\winget-cli\winget.exe" export -o "C:\Users\Admin\AppData\Local\Winhance\Cache\winget-packages.json" --accept-source-agreements --nowarn --disable-interactivity
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Modifies registry class
          • NTFS ADS
          PID:1040

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        CoreMessagingXP.dll
        • Path C:\Program Files\Winhance\CoreMessagingXP.dll
        • Size 1018KB
        • SHA256 8ac00a9529db523b75a7347ee6a425751a4e45057f1bcc64f1ff42a5fcb3b90e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MRM.dll
        • Path C:\Program Files\Winhance\MRM.dll
        • Size 298KB
        • SHA256 d3d8c55ab407b22f114ec10be4cb2557a07ca6879a8a9f850101670abfb84cb3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.InteractiveExperiences.Projection.dll
        • Path C:\Program Files\Winhance\Microsoft.InteractiveExperiences.Projection.dll
        • Size 1.5MB
        • SHA256 e9361adc351212233aa471be95d6d2a95224783b07b49dda7fba04502cee9fe1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Internal.FrameworkUdk.dll
        • Path C:\Program Files\Winhance\Microsoft.Internal.FrameworkUdk.dll
        • Size 905KB
        • SHA256 da7cccaa77fe16b6d289c7689a3f2cac13207a13a29e527287641ed7e43ba118
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.UI.Windowing.Core.dll
        • Path C:\Program Files\Winhance\Microsoft.UI.Windowing.Core.dll
        • Size 530KB
        • SHA256 7812fdf00c49c1b2fc3638e7b61ab0971aa167f057fc709e23d7384a17bd089f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.WinUI.dll
        • Path C:\Program Files\Winhance\Microsoft.WinUI.dll
        • Size 7.0MB
        • SHA256 ef8b21794f8ea32895b26f60ea64821becd9413450da186c3bd27a0ace571af8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Windows.AppLifecycle.Projection.dll
        • Path C:\Program Files\Winhance\Microsoft.Windows.AppLifecycle.Projection.dll
        • Size 40KB
        • SHA256 43a2b44f554bb8c7aa2b61f2af0e32fb44438c2c7672294cafff4ea6b5212a8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Windows.ApplicationModel.Resources.dll
        • Path C:\Program Files\Winhance\Microsoft.Windows.ApplicationModel.Resources.dll
        • Size 153KB
        • SHA256 bb2d7896d126a0531b73690e4a3120c84d52a0c4e88fe27272d36b6688bd9e55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Windows.SDK.NET.dll
        • Path C:\Program Files\Winhance\Microsoft.Windows.SDK.NET.dll
        • Size 24.9MB
        • SHA256 2e0b8c2a0b77aa6c2b54de2c3b114c4df33cc36298c3d770307362c7c70430fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.WindowsAppRuntime.dll
        • Path C:\Program Files\Winhance\Microsoft.WindowsAppRuntime.dll
        • Size 2.2MB
        • SHA256 638e3a1a01f9a16d4408fd9a042978e77f5ac145311133b6eff6cb34b55ad030
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.ui.xaml.dll
        • Path C:\Program Files\Winhance\Microsoft.ui.xaml.dll
        • Size 14.4MB
        • SHA256 66876ae07f910750e8650fb1f4f435e0890c598f165bfdcbdfbbc16f748bf251
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Program Files\Winhance\System.Collections.Concurrent.dll
        • Size 290KB
        • SHA256 4e1e0d5533482ca003e88d936a1bc5f6687b4730da21a6b95d1637ab08d80906
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Program Files\Winhance\System.Collections.dll
        • Size 290KB
        • SHA256 a57462b3c32583e56af7c1702e9a280084a33a3354f3658fbcce5173a17b235c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Program Files\Winhance\System.ComponentModel.dll
        • Size 30KB
        • SHA256 e207d0af30ae4f9f2665f4a4ce303c0c60a2d0a3b170e9d8960de02e7a6e2b3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Program Files\Winhance\System.Memory.dll
        • Size 158KB
        • SHA256 e6111b18cedbb219f96774e13c7ef62143979814473ba1512b915e625b9ae49c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Numerics.Vectors.dll
        • Path C:\Program Files\Winhance\System.Numerics.Vectors.dll
        • Size 15KB
        • SHA256 bcb693b057a9dcf2c9745633816d07dd1e68d38e45a59777b2345cee6a850235
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Program Files\Winhance\System.ObjectModel.dll
        • Size 78KB
        • SHA256 fe912dcd00fb0d53a8eae48547bfcc9537e3f03179f07fffbc372c1cd059af8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Program Files\Winhance\System.Private.CoreLib.dll
        • Size 15.3MB
        • SHA256 ede47f0d881557d10cb1d91adc27bcd60f8507cf61e63baec0e4ff0e6e04c0ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Program Files\Winhance\System.Private.Uri.dll
        • Size 250KB
        • SHA256 defee9d54e1158d96545c0407bb84755434352baecc2901950e39a500f662517
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.CompilerServices.Unsafe.dll
        • Path C:\Program Files\Winhance\System.Runtime.CompilerServices.Unsafe.dll
        • Size 15KB
        • SHA256 7cb7038275c7dbc335e6753b895482a0cee2375738af0f55f447e5897473ec21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Program Files\Winhance\System.Runtime.InteropServices.dll
        • Size 110KB
        • SHA256 2fcc6bfb33b5035bcd44c9e78364fd6564bea13450ba460507ca2c8b5d535f67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.dll
        • Path C:\Program Files\Winhance\System.Runtime.dll
        • Size 44KB
        • SHA256 ef420d075cc9ded625594a2639aecb5d4b6ddfae89a28a231ebb4990e876cbb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Program Files\Winhance\System.Security.Cryptography.dll
        • Size 2.4MB
        • SHA256 d14ad0e4ed056c70563d5294c659f5750da2f036210a0e6e32c99e3f1f03ef75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Program Files\Winhance\System.Threading.dll
        • Size 82KB
        • SHA256 d0ee84626b381f25eded96d5a8a249d18f6e7b7644261a6dcf59d1853508633b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinRT.Runtime.dll
        • Path C:\Program Files\Winhance\WinRT.Runtime.dll
        • Size 516KB
        • SHA256 bcf3a14e8712a90837fc5c0d8c8a24696af2bd7f74e9767597ec81ededfb23db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Winhance.Core.dll
        • Path C:\Program Files\Winhance\Winhance.Core.dll
        • Size 886KB
        • SHA256 dc37ef09c4a968e1db2bdc88e430e228d46498d9114903aeb270a1ab37a0c414
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Winhance.deps.json
        • Path C:\Program Files\Winhance\Winhance.deps.json
        • Size 111KB
        • SHA256 8630e1fa2405fd9793e11f69eac328e6c0c6fcea3572b9a50c58d0c3c70a0cd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Winhance.dll
        • Path C:\Program Files\Winhance\Winhance.dll
        • Size 2.1MB
        • SHA256 8c9523f9d3e59e7787d162a71db2bdb703ee5dd31b96c2f21a9dc3ef9a5ff1b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Winhance.exe
        • Path C:\Program Files\Winhance\Winhance.exe
        • Size 303KB
        • SHA256 9ca6bde5010cf48ee918e4c5eecc8d3b45a732ad758a3368eb578e43ecc845d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Winhance.runtimeconfig.json
        • Path C:\Program Files\Winhance\Winhance.runtimeconfig.json
        • Size 835B
        • SHA256 43289f7a9f6fc93d2f1f62fe7db2a153a6d50d4815370fac2e26072295e78418
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        clrjit.dll
        • Path C:\Program Files\Winhance\clrjit.dll
        • Size 2.1MB
        • SHA256 b8868b84474f8976d2e8864a7b6ff88ad3d96d18992a4d3d4de1093214520875
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        coreclr.dll
        • Path C:\Program Files\Winhance\coreclr.dll
        • Size 4.5MB
        • SHA256 1501951ac1e4141967c6d8f2ffbf59919953ec3a636046dc363b78facb64c77f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.UI.Xaml.dll.mui
        • Path C:\Program Files\Winhance\en-US\Microsoft.UI.Xaml.dll.mui
        • Size 25KB
        • SHA256 9e27aeea935102c755dce984b12570e1d65034823a7139ee4506497c0e2936f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hostfxr.dll
        • Path C:\Program Files\Winhance\hostfxr.dll
        • Size 371KB
        • SHA256 41cc9b89cf89684a277c50fbdb71c9894a499668f9564e8c9380272e4644e23a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hostpolicy.dll
        • Path C:\Program Files\Winhance\hostpolicy.dll
        • Size 370KB
        • SHA256 05e0542923271a909b3cfceea3d800ef96923a8b75ac39f3b99e87fe38024d00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        external-app-dotnet-runtime-6.d7d6fd4d.png.tmp
        • Path C:\ProgramData\Winhance\IconCache\external-app-dotnet-runtime-6.d7d6fd4d.png.tmp
        • Size 7KB
        • SHA256 2962abb351166b1e16628cfa52f7acb56496ac2961d746119bc1a9c32686d8e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        external-app-malwarebytes-firewall-control.91c15345.png.tmp
        • Path C:\ProgramData\Winhance\IconCache\external-app-malwarebytes-firewall-control.91c15345.png.tmp
        • Size 9KB
        • SHA256 70b95ff8f60f779276c8f5059a8ec12b5757f8ee9ff177483fe50caa10a118d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        external-app-parsec-usb.a457634a.png.tmp
        • Path C:\ProgramData\Winhance\IconCache\external-app-parsec-usb.a457634a.png.tmp
        • Size 4KB
        • SHA256 f8a7034d2b5ba895d2d88866be903e2e2f644bfe9ba631c97ae7337a726cf536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        windows-app-xbox.329ff1ff.light.png
        • Path C:\ProgramData\Winhance\IconCache\windows-app-xbox.329ff1ff.light.png
        • Size 718B
        • SHA256 ab2efcaef67311d23805ed94dca8c537f4c534ef219c9ee3a8ad88b45bc1536f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        WinhanceStartupLog.txt
        • Path C:\ProgramData\Winhance\Logs\WinhanceStartupLog.txt
        • Size 989B
        • SHA256 87776237ffe5901fd1f76419f7a620310a48b5baec3f10d01e7e9c052d3b95d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        WinhanceStartupLog.txt
        • Path C:\ProgramData\Winhance\Logs\WinhanceStartupLog.txt
        • Size 1KB
        • SHA256 5584ec29e71e44528ce20ea84e56dbc3985be5ba6856af90a1f9fa28b9c7ffaf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        rest_information
        • Path C:\Users\Admin\AppData\Local\Microsoft\WinGet\Settings\defaultState\rest_information
        • Size 1KB
        • SHA256 ffb992b3d67b815e7f346462650b2b5e2f328de181a888774a9973898f6637a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sources_metadata
        • Path C:\Users\Admin\AppData\Local\Microsoft\WinGet\Settings\defaultState\sources_metadata
        • Size 514B
        • SHA256 23fdb727faf8ff133f6fa545d3cee7320d41f5d0af8d2f3a21e9156e7a78eccf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sources_metadata
        • Path C:\Users\Admin\AppData\Local\Microsoft\WinGet\Settings\defaultState\sources_metadata
        • Size 526B
        • SHA256 9553df1c7c6acb6de4bad2864190fdece28f8185cef0b8e567c6b540d61a0187
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        source.msix.dnld.msix
        • Path C:\Users\Admin\AppData\Local\Microsoft\WinGet\State\defaultState\Microsoft.PreIndexed.Package\Microsoft.Winget.Source_8wekyb3d8bbwe\source.msix.dnld.msix
        • Size 3.4MB
        • SHA256 bd94162325f678672faf66269ef3b0525b433fdfcc9e51668b344725d063cfd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        APPX.65s_bhp_9qhnkw9c69gg89_s.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\APPX.65s_bhp_9qhnkw9c69gg89_s.tmp
        • Size 11KB
        • SHA256 738fb77d2b63a2e142163906ad850d7f8e65b1cfa0097c3f041bdec07c54b4ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        APPX.a91o1husrto8robrqocuyisah.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\APPX.a91o1husrto8robrqocuyisah.tmp
        • Size 2KB
        • SHA256 2e7814a98ecbc8d882da02ff6084392bbbb2e752e7a12dd31c0b6fe8afa9bd7d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        APPX.re8tcdmp91p80m6kaq5pa7ij.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\APPX.re8tcdmp91p80m6kaq5pa7ij.tmp
        • Size 11KB
        • SHA256 df2a118e7b441395252a1acb85f2df8c28ac830762796ebaf53c5bfd99baa2ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DismHost.exe
        • Path C:\Users\Admin\AppData\Local\Temp\D327A9A9-17A4-4010-BB28-39389BAE4898\DismHost.exe
        • Size 142KB
        • SHA256 e30508e2088bc16b2a84233ced64995f738deaef2366ac6c86b35c93bbcd9d80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {7106499E-2F66-4887-8B11-8B43E386A954}
        • Path C:\Users\Admin\AppData\Local\Temp\WinGet\defaultState\{7106499E-2F66-4887-8B11-8B43E386A954}
        • Size 7.9MB
        • SHA256 574198efd0a6cc20e6cd85e9127d98084db4c60bf59731869497aecd567707a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Winhance.Installer.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\is-KDL5C.tmp\Winhance.Installer.tmp
        • Size 3.3MB
        • SHA256 59e310801c26fd28f3fa6eab9e507067c655234b56069b4140966c27b547847b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dism.log
        • Path C:\Windows\Logs\DISM\dism.log
        • Size 2.1MB
        • SHA256 e399b99b329e1b1b168554ab6e5aaa9e62316b176b545bec61cad117ad82c7f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1588-1952-0x0000018D077F0000-0x0000018D07E44000-memory.dmp
        Download

        memory/1588-1581-0x0000018D077F0000-0x0000018D07E44000-memory.dmp
        Download

        memory/1588-1517-0x00007FFC95370000-0x00007FFC95380000-memory.dmp
        Download

        memory/1588-2830-0x0000018D077F0000-0x0000018D07E44000-memory.dmp
        Download

        memory/2524-1580-0x0000000000450000-0x00000000007B4000-memory.dmp
        Download

        memory/2524-836-0x0000000000450000-0x00000000007B4000-memory.dmp
        Download

        memory/2524-8-0x0000000000450000-0x00000000007B4000-memory.dmp
        Download

        memory/2524-1582-0x0000000000450000-0x00000000007B4000-memory.dmp
        Download

        memory/2524-9-0x0000000001390000-0x0000000001391000-memory.dmp
        Download

        memory/2524-5-0x0000000001390000-0x0000000001391000-memory.dmp
        Download

        memory/3440-7-0x0000000000450000-0x0000000000528000-memory.dmp
        Download

        memory/3440-1588-0x0000000000450000-0x0000000000528000-memory.dmp
        Download

        memory/3440-1-0x0000000000450000-0x0000000000528000-memory.dmp
        Download