C execute exe. Rekall forensic. procdump. csrss.exe execute. framework mem.