Overview

overview

7

Static

static

3

2026-11-12...il.exe

windows10-2004-x64

7

2026-11-12...il.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 02:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-12_54547472f57663bbb5443415ebdc4316_amadey_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
  • Size 3.5MB
  • Sample261113-dedeaafv8l
  • SHA256 cfcbb320d3035951449da4e01738a2b9b58843a4844c7137449345c0861344fa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoveryransomwarespywarestealer

Malware Config

Signatures

  • Executes dropped EXE 22 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 31 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 3 IoCs
  • Direct Volume Access: Opens a physical disk for reading 1 TTPs 1 IoCs

    Opens a raw handle to a physical disk, which bypasses file system access controls and is used for disk inspection, anti-VM checks and privilege checks.

    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 8 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 39 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 45 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-12_54547472f57663bbb5443415ebdc4316_amadey_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-12_54547472f57663bbb5443415ebdc4316_amadey_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil.exe"
    1⤵
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3920
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of AdjustPrivilegeToken
    PID:1636
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    PID:2760
  • C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv
    1⤵
      PID:1884
    • C:\Windows\system32\fxssvc.exe
      C:\Windows\system32\fxssvc.exe
      1⤵
      • Executes dropped EXE
      • Modifies data under HKEY_USERS
      • Suspicious use of AdjustPrivilegeToken
      PID:3308
    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      PID:2088
    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      PID:556
    • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
      "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
      1⤵
      • Executes dropped EXE
      PID:4520
    • C:\Windows\System32\msdtc.exe
      C:\Windows\System32\msdtc.exe
      1⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Drops file in Windows directory
      PID:4664
    • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
      "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
      1⤵
      • Executes dropped EXE
      PID:4212
    • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
      C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
      1⤵
      • Executes dropped EXE
      PID:4848
    • C:\Windows\SysWow64\perfhost.exe
      C:\Windows\SysWow64\perfhost.exe
      1⤵
      • Executes dropped EXE
      PID:4968
    • C:\Windows\system32\locator.exe
      C:\Windows\system32\locator.exe
      1⤵
      • Executes dropped EXE
      PID:2628
    • C:\Windows\System32\SensorDataService.exe
      C:\Windows\System32\SensorDataService.exe
      1⤵
      • Executes dropped EXE
      • Checks SCSI registry key(s)
      PID:416
    • C:\Windows\System32\snmptrap.exe
      C:\Windows\System32\snmptrap.exe
      1⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      PID:4408
    • C:\Windows\system32\spectrum.exe
      C:\Windows\system32\spectrum.exe
      1⤵
      • Executes dropped EXE
      • Checks SCSI registry key(s)
      PID:312
    • C:\Windows\System32\OpenSSH\ssh-agent.exe
      C:\Windows\System32\OpenSSH\ssh-agent.exe
      1⤵
      • Executes dropped EXE
      PID:616
    • C:\Windows\system32\TieringEngineService.exe
      C:\Windows\system32\TieringEngineService.exe
      1⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      PID:4836
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc
      1⤵
        PID:4356
      • C:\Windows\system32\AgentService.exe
        C:\Windows\system32\AgentService.exe
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:5084
      • C:\Windows\System32\vds.exe
        C:\Windows\System32\vds.exe
        1⤵
        • Executes dropped EXE
        PID:1180
      • C:\Windows\system32\vssvc.exe
        C:\Windows\system32\vssvc.exe
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:3320
      • C:\Windows\system32\wbengine.exe
        "C:\Windows\system32\wbengine.exe"
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:4892
      • C:\Windows\system32\wbem\WmiApSrv.exe
        C:\Windows\system32\wbem\WmiApSrv.exe
        1⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        PID:1008
      • C:\Windows\system32\SearchIndexer.exe
        C:\Windows\system32\SearchIndexer.exe /Embedding
        1⤵
        • Executes dropped EXE
        • Direct Volume Access: Opens a physical disk for reading
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4296
        • C:\Windows\system32\SearchProtocolHost.exe
          "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
          2⤵
          • Modifies data under HKEY_USERS
          PID:3908
        • C:\Windows\system32\SearchFilterHost.exe
          "C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 896
          2⤵
          • Modifies data under HKEY_USERS
          PID:4876

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            elevation_service.exe
            • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
            • Size 2.7MB
            • SHA256 fe885071bac39fd1f78904147903c2d1c62649d99bde2b6205f95bb44f8fbf50
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            maintenanceservice.exe
            • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
            • Size 1.4MB
            • SHA256 33231d4f7624d46566f7e2cc17f5653ac28d43d916502106fcd776aa410bd496
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            7z.exe
            • Path C:\Program Files\7-Zip\7z.exe
            • Size 1.7MB
            • SHA256 42c28d1480a7c20dac048085256ab2636cc75a2d38395d01fc838da22444da30
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            7zFM.exe
            • Path C:\Program Files\7-Zip\7zFM.exe
            • Size 1.5MB
            • SHA256 20a4fa11d18d30d3cf06ac7ab3b096a85ca24665f6788b4577533067653b39e5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            7zG.exe
            • Path C:\Program Files\7-Zip\7zG.exe
            • Size 1.2MB
            • SHA256 9c76713cf0d95bdeb5cd9551ff038b126666ccfaa5bbe398f4cf4f4ebd252dc8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Uninstall.exe
            • Path C:\Program Files\7-Zip\Uninstall.exe
            • Size 1.2MB
            • SHA256 fe067523d5780c7bd8bae811f74c7cd2fa67e1945a380d0b9aaabddba91f94ae
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            AppVShNotify.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
            • Size 1.4MB
            • SHA256 48958ee11a4ed08b0d457dd9a0b63bb22ba33f46f5c51c7072d4f1c4e5ed9db7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            IntegratedOffice.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
            • Size 4.6MB
            • SHA256 26f3d886898d9efc33f7359887a99dae5ade19f473f8eb48c239206f91633f63
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            MavInject32.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
            • Size 1.5MB
            • SHA256 a78ad043b7402a24c7aa1466b8ca06b27bd8307bd66bf071ce2a0c47f2ac68fb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            OfficeC2RClient.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
            • Size 24.0MB
            • SHA256 f3882e8cefe9e25e8de7aa3d35f9c1666a3909fb8fed23fdb2d7d2964c347332
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            appvcleaner.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
            • Size 2.7MB
            • SHA256 9e6a56a4cc49b41dbe3a8bc4c7c04a8b1d8e2fe75adb68fc1f91379d03e0b1f2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            LICLUA.EXE
            • Path C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE
            • Size 1.1MB
            • SHA256 de2eb7a9ccda5aefbaf07c3f334e77b8e4ee3758282a69bbb19c7374a58a9c3e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            OSE.EXE
            • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
            • Size 1.4MB
            • SHA256 51f89f459b623cc935805f89048e04deb5fe90692f143fcdf78a129f783c9a26
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VSTOInstaller.exe
            • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
            • Size 1.3MB
            • SHA256 f80eeabc62cb0493d2d232f15be7c86ede0799eef3e060e64add893079cca426
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrmstp.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
            • Size 6.6MB
            • SHA256 b35d73c380b72451bc7d3abab013a38d1d15cdb3023a811ce07e72b7e779a874
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            setup.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
            • Size 6.6MB
            • SHA256 a61733f3706c819533df82d433b144c8122dfb9aa3fed7c13bff96c3ca9be061
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_pwa_launcher.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
            • Size 2.3MB
            • SHA256 3e5bc1c72a0c03986a6197bf6bc29ceb30f3805d6578bc8b2cc72fbb8f02cf8f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevated_tracing_service.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
            • Size 4.0MB
            • SHA256 68aeec9aad84de16df3e89eb56dc5a1a367e8e5794b19c6c1526f6a8baafea17
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevation_service.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            • Size 2.8MB
            • SHA256 71f09c1db210358a52fe75e76d9ca3cd2d301785813c3023c18eb1ee444e487d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            notification_helper.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
            • Size 2.2MB
            • SHA256 445598c7ed2da65f877d85b8c9b9ae8096fc10ea61826a0dd559c5f329078626
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            os_update_handler.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
            • Size 2.4MB
            • SHA256 7b55d75dacb99ece5262e5c5a49f69e7b9305aa64d84d9a3b3038c109f0f462a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_proxy.exe
            • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
            • Size 2.0MB
            • SHA256 6410913b12684965125230d78693957a9651ea6438f1b12b0539ff455e5b9548
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            appletviewer.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
            • Size 1.2MB
            • SHA256 c0abd39b7089e2b885422cd70d7d8bd3fefa632f5e5b0fce0d4081a93ec45db5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            extcheck.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
            • Size 1.2MB
            • SHA256 e86d5e99ef538569d39738cc621a5b473376f5091ae4176722ffe99bb32e2880
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            idlj.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
            • Size 1.2MB
            • SHA256 d2b1f1209fbd9c72a47fa4b4713b860c50c7563a4849a9e30abeed83e350c6df
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jabswitch.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
            • Size 1.2MB
            • SHA256 db314f279a56f02451f03bfad9e0f0df0132d8c68e4ec91f69871cf494aab67f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jar.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
            • Size 1.2MB
            • SHA256 04b737e6232aa0d7e0567dfd4c07751944652d321cda1d5ce926f75c8759e6b8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jarsigner.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
            • Size 1.2MB
            • SHA256 38e2fea4544cef959631708ed2631969c630509b02539d36fca01daac60053cb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java-rmi.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
            • Size 1.2MB
            • SHA256 6ede11f7b3df44108e9845c53bf49bfe9bce14931189a355324c082f109dbd89
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
            • Size 1.4MB
            • SHA256 5fda06f8c50750e148872dbae2e10a94adb0849c712d6f016fdb37f624c58a5c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javac.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
            • Size 1.2MB
            • SHA256 92eacd3327ee90a11a35b8402d69ee84ffc7c5e2206967557ecd435c99f89f75
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javadoc.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
            • Size 1.2MB
            • SHA256 b20c7ccfc34ceb1dae9b7c9300193e1aed388f87f5ac804051db1868c0dfb5c2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javafxpackager.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
            • Size 1.3MB
            • SHA256 6b0af05d37e53dacbdebdf78feabfd7a535b3b70f186b24dcd09ef81380cc45e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javah.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
            • Size 1.2MB
            • SHA256 f45930b908b930ff55f8b3e1256662af68ed1c8b91e6532de61edbc19d4129f2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javap.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
            • Size 1.2MB
            • SHA256 36b8347c5573f7bcd3ae9fe1832fbba6c0a970e93e0f2485c3c41d52f1b12308
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javapackager.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
            • Size 1.3MB
            • SHA256 7421de490d14c13b6c112e5a5ad91eb200763531432ff814b3cf41cfe9baf3ad
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            wmpnetwk.exe
            • Path C:\Program Files\Windows Media Player\wmpnetwk.exe
            • Size 1.5MB
            • SHA256 6d5b19f76e7b070d84279ecc0a5483faecba599006ffa5470549ed50ec6c1fa6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dotnet.exe
            • Path C:\Program Files\dotnet\dotnet.exe
            • Size 1.3MB
            • SHA256 0b38f282dc01149f9605810731f5ce78b8b8b9ab5ea0e984e0513e555f8cd7e2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            av360.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\bundles\av360.html
            • Size 2KB
            • SHA256 1ae30acb33c0074ba7a8a52cbf1658ea18effb07954b8deb0a685e77a7031f51
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            luminati.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\bundles\luminati.html
            • Size 1KB
            • SHA256 aa4678d7d9b67a73b87cf2f6835fb4527611eac7a94ba730b40ce671e205a43b
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            opera.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\bundles\opera.html
            • Size 2KB
            • SHA256 f4a3bf2f7721c64b9db371e991df3a247b6a8d105afbb2b85c2078212e8dbba9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            buttons.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\components\buttons.html
            • Size 1KB
            • SHA256 28793923904936ff72a5e04f40b3d485289c9847734eff2b913528ebe25e481f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            caption.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\components\caption.html
            • Size 1KB
            • SHA256 2cb9e49ae7ce2312f179194264e374d66ab871f23b97301565271ca42c221619
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Montserrat-Regular.eot
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\fonts\Montserrat-Regular.eot
            • Size 314KB
            • SHA256 057bc6c47c47aaccdf31adc48a6b401f6090a02c28e354099eff80907dc2af32
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Outfit-Bold.eot
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\fonts\Outfit-Bold.eot
            • Size 54KB
            • SHA256 e3da9d49e49dd06b2bde5968053b03cb48e1198d09ffb3acb8f01d40e221d8a8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Outfit-Regular.eot
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\fonts\Outfit-Regular.eot
            • Size 53KB
            • SHA256 b888638bd97d85422e9cfbe13a063648456482f4f9c0feb142ffa4d989dccf8e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Roboto-Regular.eot
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\fonts\Roboto-Regular.eot
            • Size 176KB
            • SHA256 6cedf381d59fa4caabfb836e9a3720420645cbcea32491a5ac5f07cf274ceac6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            av360.jpg
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\av360.jpg
            • Size 21KB
            • SHA256 8f32aca9b0613a95120c666901cdc1c5a037b18f21e59fa4b1a7993d1a1753e5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            checkbox-blue-on.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\checkbox-blue-on.png
            • Size 445B
            • SHA256 8b8f0ad0cdf07227f759cb18c64ff64ae72fcbfc7916524acb355d889ddece3f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            clocks.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\clocks.png
            • Size 1KB
            • SHA256 f337a0d867f651929612ea5900d9ef8c8b24757b94bb5f3bd4aec4d0f8d93297
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            close-gray.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\close-gray.png
            • Size 271B
            • SHA256 2d445a49383ef3d251935caebe0a7b178f0bd69b20e54a44f67394409b6141a7
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            close-white.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\close-white.png
            • Size 193B
            • SHA256 47da256cd5948d2bf95add2cc0873325003f27b723701e8d69eb466955a13336
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            logo-blue.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\logo-blue.png
            • Size 4KB
            • SHA256 5a683c38d8dc12ed44465390adc5a29a268a6a529d23941ef09a6e8fd0aa9b0b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            logo-white-220.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\logo-white-220.png
            • Size 2KB
            • SHA256 e562b4aeffd21943b0d536c2992abae0e6a08b7fa8a74cd656b5c1716adbe530
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            logo-white.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\logo-white.png
            • Size 1KB
            • SHA256 1b7ef989b42d558f4c37b6ab93bc033cad206aaf4926e0d4f95814ff81822a94
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            opera.jpg
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\opera.jpg
            • Size 20KB
            • SHA256 c1a1005cf855c47d9141e07e877810e908a2db348d9e2f0ddfe9faf8a48a455f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            point.png
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\imgs\point.png
            • Size 159B
            • SHA256 0914121c7693afd3b625929d540acb7942401d6f46736e6cb8bbf59276d7a1b6
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            installer.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\installer.html
            • Size 2KB
            • SHA256 1746b47c78e679dc8589222c5e4d342561295e8d6fcf0560bd8f8847df797fd4
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            installer.js
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\installer.js
            • Size 8KB
            • SHA256 e1a964cf70577738c30f4e7022a317959a42aa8f6be46af8566fbf2efcbc2eb7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            cancel.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\pages\cancel.html
            • Size 2KB
            • SHA256 3c32d442868ca536149f3e1e62197dd7cf0d7cee45a40ac6adabbc258bcf2115
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            finish.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\pages\finish.html
            • Size 3KB
            • SHA256 b1203135cec993ba0fef656c40eaefcd85f27162420fb3b803e6444b26b4c3bf
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            install.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\pages\install.html
            • Size 1KB
            • SHA256 1781ffb245b4f4764a2d414a663b4e15bf79212dc26e4550168f95d752bfea9d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            main.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\pages\main.html
            • Size 3KB
            • SHA256 f798af14f122d4ee9bcf926b044fac6e06b810c628772b81ac17b1c90291ae59
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            ready.html
            • Path C:\Users\Admin\AppData\Local\Temp\openpdf_inst\html\pages\ready.html
            • Size 2KB
            • SHA256 f0317bda048cf011ac708daa3b31f3bef54924fd1f742e8263845679490d1279
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            perfhost.exe
            • Path C:\Windows\SysWOW64\perfhost.exe
            • Size 1.2MB
            • SHA256 5d6a22f230ea5b4d7bfcd7d63058e0cdc003d20cc7c055640a9fdbdce6c81987
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            AgentService.exe
            • Path C:\Windows\System32\AgentService.exe
            • Size 1.7MB
            • SHA256 738c1098ce0c80cf3c9be4e9fd8cf8213be33b447dad0d0d94913bc235d10549
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            DiagnosticsHub.StandardCollector.Service.exe
            • Path C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
            • Size 1.3MB
            • SHA256 4079056556f0003b73a377cbafcd2da2552fce41f755de89620d83b9cba0de34
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            FXSSVC.exe
            • Path C:\Windows\System32\FXSSVC.exe
            • Size 1.2MB
            • SHA256 aa8a2e4b3cfd6223dbc7263ce654a81f330b0778e1cfb7dec4ef0820dc39d4e3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Locator.exe
            • Path C:\Windows\System32\Locator.exe
            • Size 1.2MB
            • SHA256 7688b111848be3c6b7b691bf14692cb3debcf6ad69c7f6c67b06e28ae124a811
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ssh-agent.exe
            • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
            • Size 1.5MB
            • SHA256 7a0b1fba0457d9f78e2531d3c5f2a639ce0553851bec115b41f981c60e6db4a5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            PerceptionSimulationService.exe
            • Path C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe
            • Size 1.3MB
            • SHA256 f7bca1001c28e74b5ede28937556645437a688c22b5c19a36e3f542841688429
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SearchIndexer.exe
            • Path C:\Windows\System32\SearchIndexer.exe
            • Size 1.4MB
            • SHA256 5b8f811aec03116ce4e87f988a82824fc060884fc93afdb49e499f6eaebc14bc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SensorDataService.exe
            • Path C:\Windows\System32\SensorDataService.exe
            • Size 1.8MB
            • SHA256 c0fddef73e6da68aec79a47fdc32670f1095505b4089ef641afa739215b840c5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Spectrum.exe
            • Path C:\Windows\System32\Spectrum.exe
            • Size 1.4MB
            • SHA256 2454cd068cd579c97f2bb30407a1a320333606ef64814ab675b843af865d6d1f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            TieringEngineService.exe
            • Path C:\Windows\System32\TieringEngineService.exe
            • Size 1.5MB
            • SHA256 0847be2c88832068b900fc7fb3195ad2d10d60c56b0be239a7e33ce3594e5be2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VSSVC.exe
            • Path C:\Windows\System32\VSSVC.exe
            • Size 2.0MB
            • SHA256 c2d7518b9c6bdbd3b4c6a41ccd99c4c10e1b4657b399aec6ba8ab581c0325f1e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            alg.exe
            • Path C:\Windows\System32\alg.exe
            • Size 1.3MB
            • SHA256 a705efec5726d94bccf70491aeaa1542645ab8625fa3ece5b222861a002bcb09
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            msdtc.exe
            • Path C:\Windows\System32\msdtc.exe
            • Size 1.3MB
            • SHA256 d421baf559558704bb165e2542c9bbbef10ceb48e8bf6251dde2a920cd0b4f52
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            snmptrap.exe
            • Path C:\Windows\System32\snmptrap.exe
            • Size 1.2MB
            • SHA256 df30b4398f235cfb53697fbefcf4b74632a4b692b8e0dede337fbd35c630c5af
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vds.exe
            • Path C:\Windows\System32\vds.exe
            • Size 1.3MB
            • SHA256 b275da1aec2b023ae8dde89f4a6854f576bdc0e7495f7af1c40e662af206022b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            WmiApSrv.exe
            • Path C:\Windows\System32\wbem\WmiApSrv.exe
            • Size 1.4MB
            • SHA256 cf44156ee781babde2a1f78a2aebcd13de95c3c0536da369929f4f16f139c5fa
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            wbengine.exe
            • Path C:\Windows\System32\wbengine.exe
            • Size 2.1MB
            • SHA256 766b00aa574a7d4ec99d063df471f7b434bf176ab216732b9e13723cce85efb9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            AppVClient.exe
            • Path C:\Windows\system32\AppVClient.exe
            • Size 1.3MB
            • SHA256 cd4a290b431d61ea04ad828ba4ef25403119f89e2a641f690629a6772efe95b8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SgrmBroker.exe
            • Path C:\Windows\system32\SgrmBroker.exe
            • Size 1.5MB
            • SHA256 d3674b30fbbf402f0068829395f647180e233e4d04fe987f2503204040ea2e1e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            msiexec.exe
            • Path C:\Windows\system32\msiexec.exe
            • Size 1.2MB
            • SHA256 ce7c924a6e97485b7172a9b2d477275185e0e899ea997c14c8ade05f1a999e54
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/312-165-0x00000000006D0000-0x0000000000730000-memory.dmp
            Download

            memory/312-510-0x0000000140000000-0x0000000140169000-memory.dmp
            Download

            memory/312-174-0x0000000140000000-0x0000000140169000-memory.dmp
            Download

            memory/312-171-0x00000000006D0000-0x0000000000730000-memory.dmp
            Download

            memory/416-142-0x00000000006C0000-0x0000000000720000-memory.dmp
            Download

            memory/416-148-0x00000000006C0000-0x0000000000720000-memory.dmp
            Download

            memory/416-528-0x00000000006C0000-0x0000000000720000-memory.dmp
            Download

            memory/416-530-0x0000000140000000-0x00000001401D7000-memory.dmp
            Download

            memory/416-151-0x0000000140000000-0x00000001401D7000-memory.dmp
            Download

            memory/416-271-0x0000000140000000-0x00000001401D7000-memory.dmp
            Download

            memory/556-187-0x0000000140000000-0x00000001402D4000-memory.dmp
            Download

            memory/556-73-0x0000000140000000-0x00000001402D4000-memory.dmp
            Download

            memory/556-64-0x0000000000890000-0x00000000008F0000-memory.dmp
            Download

            memory/556-70-0x0000000000890000-0x00000000008F0000-memory.dmp
            Download

            memory/616-188-0x0000000140000000-0x0000000140241000-memory.dmp
            Download

            memory/616-623-0x0000000140000000-0x0000000140241000-memory.dmp
            Download

            memory/616-178-0x0000000000C70000-0x0000000000CD0000-memory.dmp
            Download

            memory/616-184-0x0000000000C70000-0x0000000000CD0000-memory.dmp
            Download

            memory/1008-258-0x00000000006D0000-0x0000000000730000-memory.dmp
            Download

            memory/1008-262-0x0000000140000000-0x0000000140205000-memory.dmp
            Download

            memory/1008-679-0x0000000140000000-0x0000000140205000-memory.dmp
            Download

            memory/1180-216-0x0000000000B50000-0x0000000000BB0000-memory.dmp
            Download

            memory/1180-222-0x0000000000B50000-0x0000000000BB0000-memory.dmp
            Download

            memory/1180-676-0x0000000140000000-0x0000000140147000-memory.dmp
            Download

            memory/1180-226-0x0000000140000000-0x0000000140147000-memory.dmp
            Download

            memory/1636-111-0x0000000140000000-0x00000001401E9000-memory.dmp
            Download

            memory/1636-12-0x0000000000500000-0x0000000000560000-memory.dmp
            Download

            memory/1636-21-0x0000000140000000-0x00000001401E9000-memory.dmp
            Download

            memory/1636-18-0x0000000000500000-0x0000000000560000-memory.dmp
            Download

            memory/2088-61-0x0000000140000000-0x00000001402E9000-memory.dmp
            Download

            memory/2088-58-0x0000000000810000-0x0000000000870000-memory.dmp
            Download

            memory/2088-173-0x0000000140000000-0x00000001402E9000-memory.dmp
            Download

            memory/2088-52-0x0000000000810000-0x0000000000870000-memory.dmp
            Download

            memory/2628-140-0x0000000140000000-0x00000001401D4000-memory.dmp
            Download

            memory/2628-137-0x0000000000500000-0x0000000000560000-memory.dmp
            Download

            memory/2628-261-0x0000000140000000-0x00000001401D4000-memory.dmp
            Download

            memory/2760-25-0x00000000006A0000-0x0000000000700000-memory.dmp
            Download

            memory/2760-31-0x00000000006A0000-0x0000000000700000-memory.dmp
            Download

            memory/2760-33-0x0000000140000000-0x00000001401E8000-memory.dmp
            Download

            memory/3308-36-0x0000000140000000-0x0000000140135000-memory.dmp
            Download

            memory/3308-37-0x0000000000D80000-0x0000000000DE0000-memory.dmp
            Download

            memory/3308-45-0x0000000000D80000-0x0000000000DE0000-memory.dmp
            Download

            memory/3308-49-0x0000000000D80000-0x0000000000DE0000-memory.dmp
            Download

            memory/3308-48-0x0000000140000000-0x0000000140135000-memory.dmp
            Download

            memory/3320-234-0x00000000006F0000-0x0000000000750000-memory.dmp
            Download

            memory/3320-677-0x0000000140000000-0x00000001401FC000-memory.dmp
            Download

            memory/3320-237-0x0000000140000000-0x00000001401FC000-memory.dmp
            Download

            memory/3920-60-0x0000000000400000-0x0000000000784000-memory.dmp
            Download

            memory/3920-8-0x00000000024C0000-0x0000000002527000-memory.dmp
            Download

            memory/3920-1-0x00000000024C0000-0x0000000002527000-memory.dmp
            Download

            memory/3920-0-0x0000000000400000-0x0000000000784000-memory.dmp
            Download

            memory/4212-112-0x0000000140000000-0x000000014020E000-memory.dmp
            Download

            memory/4212-108-0x00000000006F0000-0x0000000000750000-memory.dmp
            Download

            memory/4212-102-0x00000000006F0000-0x0000000000750000-memory.dmp
            Download

            memory/4212-225-0x0000000140000000-0x000000014020E000-memory.dmp
            Download

            memory/4296-305-0x0000000001DB0000-0x0000000001DC0000-memory.dmp
            Download

            memory/4296-265-0x0000000000820000-0x0000000000880000-memory.dmp
            Download

            memory/4296-680-0x0000000140000000-0x0000000140179000-memory.dmp
            Download

            memory/4296-642-0x000000000D0F0000-0x000000000D0F8000-memory.dmp
            Download

            memory/4296-273-0x0000000000820000-0x0000000000880000-memory.dmp
            Download

            memory/4296-272-0x0000000140000000-0x0000000140179000-memory.dmp
            Download

            memory/4296-324-0x000000000A1F0000-0x000000000A1F8000-memory.dmp
            Download

            memory/4296-289-0x0000000001B00000-0x0000000001B10000-memory.dmp
            Download

            memory/4408-160-0x00000000006F0000-0x0000000000750000-memory.dmp
            Download

            memory/4408-409-0x0000000140000000-0x00000001401D5000-memory.dmp
            Download

            memory/4408-163-0x0000000140000000-0x00000001401D5000-memory.dmp
            Download

            memory/4520-88-0x0000000140000000-0x0000000140214000-memory.dmp
            Download

            memory/4520-81-0x00000000016B0000-0x0000000001710000-memory.dmp
            Download

            memory/4520-75-0x00000000016B0000-0x0000000001710000-memory.dmp
            Download

            memory/4520-86-0x00000000016B0000-0x0000000001710000-memory.dmp
            Download

            memory/4520-83-0x0000000140000000-0x0000000140214000-memory.dmp
            Download

            memory/4664-209-0x0000000140000000-0x00000001401F8000-memory.dmp
            Download

            memory/4664-90-0x0000000000C60000-0x0000000000CC0000-memory.dmp
            Download

            memory/4664-99-0x0000000140000000-0x00000001401F8000-memory.dmp
            Download

            memory/4664-96-0x0000000000C60000-0x0000000000CC0000-memory.dmp
            Download

            memory/4836-199-0x0000000140000000-0x0000000140221000-memory.dmp
            Download

            memory/4836-634-0x0000000140000000-0x0000000140221000-memory.dmp
            Download

            memory/4836-196-0x0000000000500000-0x0000000000560000-memory.dmp
            Download

            memory/4848-114-0x0000000000B30000-0x0000000000B90000-memory.dmp
            Download

            memory/4848-236-0x0000000140000000-0x00000001401EA000-memory.dmp
            Download

            memory/4848-120-0x0000000000B30000-0x0000000000B90000-memory.dmp
            Download

            memory/4848-123-0x0000000140000000-0x00000001401EA000-memory.dmp
            Download

            memory/4876-658-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-656-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-644-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-645-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-649-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-648-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-647-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-646-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-651-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-653-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-654-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-657-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-650-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-652-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-655-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-659-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-660-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-661-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-662-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4876-663-0x00000221BA960000-0x00000221BA970000-memory.dmp
            Download

            memory/4892-250-0x0000000140000000-0x0000000140216000-memory.dmp
            Download

            memory/4892-246-0x0000000000BA0000-0x0000000000C00000-memory.dmp
            Download

            memory/4892-240-0x0000000000BA0000-0x0000000000C00000-memory.dmp
            Download

            memory/4892-678-0x0000000140000000-0x0000000140216000-memory.dmp
            Download

            memory/4968-249-0x0000000000400000-0x00000000005D6000-memory.dmp
            Download

            memory/4968-129-0x0000000000400000-0x00000000005D6000-memory.dmp
            Download

            memory/5084-214-0x0000000140000000-0x00000001401C0000-memory.dmp
            Download

            memory/5084-212-0x00000000004F0000-0x0000000000550000-memory.dmp
            Download

            memory/5084-210-0x0000000140000000-0x00000001401C0000-memory.dmp
            Download

            memory/5084-207-0x00000000004F0000-0x0000000000550000-memory.dmp
            Download

            memory/5084-201-0x00000000004F0000-0x0000000000550000-memory.dmp
            Download