Resubmissions

28/05/2026, 15:51

260528-tasw6sdz8r7

28/05/2026, 15:51

260528-tajy9sdz7m

12/04/2026, 08:50

260412-krn5wagt9n

02/02/2026, 03:18

260202-dtxrgaby8g

07/12/2025, 15:36

251207-s1xglsvkbs

15/06/2024, 01:00

240615-bcw3hatbqa7

Analysis

  • max time kernel
    77s
  • max time network
    98s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    15/06/2024, 01:00

General

  • Target
    Roblox-Cookie-Logger-main/Arctic.exe
  • Size 17.4MB
  • Sample240615-bcw3hatbqa
  • SHA256 3e81ac827824478a5532846c42bdbf5d469beab9793092542419d0c5ebcf52ac
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 57 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe
    "C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4952
    • C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe
      "C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4760
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:3748
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:800

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            _Salsa20.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Cipher\_Salsa20.pyd
            • Size 14KB
            • SHA256 0418ccbd95db8f96e043c9972de10350f864951a25137f77b6e4c22a7b3d3315
            • MD5 SHA1 SHA512 SSDEEP

            _raw_cbc.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Cipher\_raw_cbc.pyd
            • Size 14KB
            • SHA256 acf1d16f3ad979ce6591c5758de2f4faf748a4a38d184ff86062fb35716ca339
            • MD5 SHA1 SHA512 SSDEEP

            _raw_cfb.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Cipher\_raw_cfb.pyd
            • Size 14KB
            • SHA256 fea87430ecf6d7b6b87a7e592e9e9333ee5de3d34968a058e23db46ff8d70328
            • MD5 SHA1 SHA512 SSDEEP

            _raw_ctr.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Cipher\_raw_ctr.pyd
            • Size 15KB
            • SHA256 cfce1c8fa046535cd0f62a8639445e4b3e1d9c4af5c96cc67257c0e39bd2dd44
            • MD5 SHA1 SHA512 SSDEEP

            _raw_ecb.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Cipher\_raw_ecb.pyd
            • Size 13KB
            • SHA256 974b1278a0bab19b066a4a18c6418e558a485cbdbd8de08a5c7f8bcee1f01620
            • MD5 SHA1 SHA512 SSDEEP

            _raw_ofb.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Cipher\_raw_ofb.pyd
            • Size 14KB
            • SHA256 5f89c248f38ccabd90da592090102add6844ec3e4959657bb1fd39b0f9c2a3b8
            • MD5 SHA1 SHA512 SSDEEP

            _BLAKE2s.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Hash\_BLAKE2s.pyd
            • Size 15KB
            • SHA256 611c49223c54f1316bc92d5cfd598c37077663efd11d98f0830e3796038938bc
            • MD5 SHA1 SHA512 SSDEEP

            _MD5.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Hash\_MD5.pyd
            • Size 16KB
            • SHA256 0e5cb860210e2592e5bcdba048b64bff973e152ae3e8b37dab1bebd34f959b8b
            • MD5 SHA1 SHA512 SSDEEP

            _SHA1.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Hash\_SHA1.pyd
            • Size 17KB
            • SHA256 57ca95d67546ae5a39d0ae707a75cdf0ac4226e4bd069261875c4a26429e351e
            • MD5 SHA1 SHA512 SSDEEP

            _SHA256.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Hash\_SHA256.pyd
            • Size 18KB
            • SHA256 3fe74f1bff5ee00df8492488035a91ef8a9b5639932f778d384daee0ac00e91b
            • MD5 SHA1 SHA512 SSDEEP

            _ghash_clmul.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Hash\_ghash_clmul.pyd
            • Size 14KB
            • SHA256 0d2a0cee2efeba596974b2b14283f2e536b9c0b5e6bcd2c5e17cc2ea1fa9b856
            • MD5 SHA1 SHA512 SSDEEP

            _ghash_portable.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Hash\_ghash_portable.pyd
            • Size 14KB
            • SHA256 7731b0df740cd8b1dc36d464ed7a47fee6f8a1f88ed4213039ee9ab2d8955dce
            • MD5 SHA1 SHA512 SSDEEP

            _scrypt.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Protocol\_scrypt.pyd
            • Size 14KB
            • SHA256 5f31f9765099a6a3c577b11e065ef9891c5c36dd029a54e5d24558007ba4f15b
            • MD5 SHA1 SHA512 SSDEEP

            _cpuid_c.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Util\_cpuid_c.pyd
            • Size 13KB
            • SHA256 12d3ae38023d63ff5ea7b6ac6f26ef1f67aedef94503a991f2cda084ec6152a1
            • MD5 SHA1 SHA512 SSDEEP

            _strxor.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\Crypto\Util\_strxor.pyd
            • Size 13KB
            • SHA256 e21b65565bd68cf2ac82b7f7e629c51361bbff7c5fb2a666daea038c9ebcf5eb
            • MD5 SHA1 SHA512 SSDEEP

            VCRUNTIME140.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\VCRUNTIME140.dll
            • Size 94KB
            • SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
            • MD5 SHA1 SHA512 SSDEEP

            _bz2.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\_bz2.pyd
            • Size 47KB
            • SHA256 2e798ad2ea8e4058a6da7cca0f7111f52c2d880092449244e2f9d960a7a235af
            • MD5 SHA1 SHA512 SSDEEP

            _cffi_backend.cp39-win_amd64.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\_cffi_backend.cp39-win_amd64.pyd
            • Size 71KB
            • SHA256 fa472ede1ed7a73ba13fb63bb14ec5b32b8445070ef8b2f12a5509a25c7d487d
            • MD5 SHA1 SHA512 SSDEEP

            _ctypes.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\_ctypes.pyd
            • Size 56KB
            • SHA256 e9010fcdcab116c429775030b8f3879a04399e73e5bd71d68c0ed8acb33f21d6
            • MD5 SHA1 SHA512 SSDEEP

            _lzma.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\_lzma.pyd
            • Size 85KB
            • SHA256 0efbee39cd16ef121e2c04e78ee42770d4905d0cf262bda1d6d2fe2c8656a494
            • MD5 SHA1 SHA512 SSDEEP

            _socket.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\_socket.pyd
            • Size 40KB
            • SHA256 72099dd9990c125e6b2cc1a3a6d7958edc7316c485bd3789da9a865a5b3f3956
            • MD5 SHA1 SHA512 SSDEEP

            _sqlite3.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\_sqlite3.pyd
            • Size 44KB
            • SHA256 98b60fc1a194b859f2fc9a148c7a29e7d684cde6024d0ba91de029030781538d
            • MD5 SHA1 SHA512 SSDEEP

            base_library.zip

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\base_library.zip
            • Size 765KB
            • SHA256 321e76698a876b3869f00efecfcf1971a73eb8473d6e0b4757717825e4a70fac
            • MD5 SHA1 SHA512 SSDEEP

            libffi-7.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\libffi-7.dll
            • Size 23KB
            • SHA256 1a106569ac0ad3152f3816ff361aa227371d0d85425b357632776ac48d92ea8a
            • MD5 SHA1 SHA512 SSDEEP

            pyexpat.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\pyexpat.pyd
            • Size 86KB
            • SHA256 82909bbf92179b79619565a9013adb96f549089ee80d25005aeb4d9cb5fd062b
            • MD5 SHA1 SHA512 SSDEEP

            python3.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\python3.dll
            • Size 58KB
            • SHA256 be0b573bc6f005235354c246e1f9f626793687f50ad632feb2e767398f414fe3
            • MD5 SHA1 SHA512 SSDEEP

            python39.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\python39.dll
            • Size 1.5MB
            • SHA256 8bb31916d8495625a7e280763e10346852b7bb76729a8c850929b015f4ef3378
            • MD5 SHA1 SHA512 SSDEEP

            pythoncom39.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\pythoncom39.dll
            • Size 193KB
            • SHA256 df2e479149d90827723d4829485c50879fe2878c6d7fb6a4b0315082cc1534e3
            • MD5 SHA1 SHA512 SSDEEP

            pywintypes39.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\pywintypes39.dll
            • Size 63KB
            • SHA256 b3a79b8e5dee8641173e2b4f70981dd12cc6d740a82eac7f05c8dc17af239341
            • MD5 SHA1 SHA512 SSDEEP

            select.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\select.pyd
            • Size 22KB
            • SHA256 42217cf3a9e2849f10f4c7e303edff315952d581db18fb604e855dc71845c4e5
            • MD5 SHA1 SHA512 SSDEEP

            sqlite3.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\sqlite3.dll
            • Size 628KB
            • SHA256 15cf99c8d458384957dce22867c71a60f564780a62b0a0a182535454343e5c71
            • MD5 SHA1 SHA512 SSDEEP

            tinyaes.cp39-win_amd64.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\tinyaes.cp39-win_amd64.pyd
            • Size 19KB
            • SHA256 49d4dff20f47ad831d7aff9215b95a283f56f1bc3fb2ca24c48418ad8f92ad4f
            • MD5 SHA1 SHA512 SSDEEP

            win32api.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI49522\win32api.pyd
            • Size 47KB
            • SHA256 1d1eef92c404309918cb951836ae7099145c4c7c4ddf84ce19a8cd4b9dde1c03
            • MD5 SHA1 SHA512 SSDEEP

            memory/4760-236-0x00007FFBADB90000-0x00007FFBADBA2000-memory.dmp

            memory/4760-251-0x00007FFBADBB0000-0x00007FFBADBC6000-memory.dmp

            memory/4760-175-0x00007FFBADEE0000-0x00007FFBAE36F000-memory.dmp

            memory/4760-178-0x00007FFBAE4E0000-0x00007FFBAE518000-memory.dmp

            memory/4760-182-0x00007FFBAE970000-0x00007FFBAE98C000-memory.dmp

            memory/4760-183-0x00007FFBAE4D0000-0x00007FFBAE4DE000-memory.dmp

            memory/4760-181-0x00007FFBB13F0000-0x00007FFBB140A000-memory.dmp

            memory/4760-170-0x00007FFBAE660000-0x00007FFBAE67D000-memory.dmp

            memory/4760-171-0x00007FFBADD60000-0x00007FFBADEDF000-memory.dmp

            memory/4760-163-0x00007FFBAE520000-0x00007FFBAE5DC000-memory.dmp

            memory/4760-161-0x00007FFBAE5E0000-0x00007FFBAE610000-memory.dmp

            memory/4760-158-0x00007FFBAE680000-0x00007FFBAE6AA000-memory.dmp

            memory/4760-194-0x00007FFBAE4B0000-0x00007FFBAE4BE000-memory.dmp

            memory/4760-154-0x00007FFBAE6B0000-0x00007FFBAE6E7000-memory.dmp

            memory/4760-152-0x00007FFBAE770000-0x00007FFBAE79E000-memory.dmp

            memory/4760-148-0x00007FFBAE970000-0x00007FFBAE98C000-memory.dmp

            memory/4760-144-0x00007FFBB13F0000-0x00007FFBB140A000-memory.dmp

            memory/4760-224-0x00007FFBADD00000-0x00007FFBADD11000-memory.dmp

            memory/4760-223-0x00007FFBADD20000-0x00007FFBADD2E000-memory.dmp

            memory/4760-222-0x00007FFBADD30000-0x00007FFBADD3E000-memory.dmp

            memory/4760-221-0x00007FFBADD40000-0x00007FFBADD4F000-memory.dmp

            memory/4760-220-0x00007FFBADD50000-0x00007FFBADD5E000-memory.dmp

            memory/4760-219-0x00007FFBAE420000-0x00007FFBAE42F000-memory.dmp

            memory/4760-218-0x00007FFBAE680000-0x00007FFBAE6AA000-memory.dmp

            memory/4760-145-0x00007FFBB2310000-0x00007FFBB231E000-memory.dmp

            memory/4760-137-0x00007FFBB1560000-0x00007FFBB1571000-memory.dmp

            memory/4760-208-0x00007FFBAE430000-0x00007FFBAE440000-memory.dmp

            memory/4760-207-0x00007FFBAE440000-0x00007FFBAE452000-memory.dmp

            memory/4760-206-0x00007FFBAE6B0000-0x00007FFBAE6E7000-memory.dmp

            memory/4760-205-0x00007FFBAE460000-0x00007FFBAE470000-memory.dmp

            memory/4760-204-0x00007FFBAE470000-0x00007FFBAE480000-memory.dmp

            memory/4760-138-0x00007FFBB1530000-0x00007FFBB1556000-memory.dmp

            memory/4760-139-0x00007FFBB38F0000-0x00007FFBB38FF000-memory.dmp

            memory/4760-196-0x00007FFBAE480000-0x00007FFBAE48F000-memory.dmp

            memory/4760-195-0x00007FFBAE490000-0x00007FFBAE4A1000-memory.dmp

            memory/4760-193-0x00007FFBAE4C0000-0x00007FFBAE4CF000-memory.dmp

            memory/4760-228-0x00007FFBA8C70000-0x00007FFBA8FE7000-memory.dmp

            memory/4760-229-0x0000027B2AF00000-0x0000027B2B277000-memory.dmp

            memory/4760-232-0x00007FFBADD60000-0x00007FFBADEDF000-memory.dmp

            memory/4760-231-0x00007FFBAE520000-0x00007FFBAE5DC000-memory.dmp

            memory/4760-230-0x00007FFBADCE0000-0x00007FFBADCF5000-memory.dmp

            memory/4760-226-0x00007FFBADC90000-0x00007FFBADCBD000-memory.dmp

            memory/4760-225-0x00007FFBADCC0000-0x00007FFBADCD1000-memory.dmp

            memory/4760-227-0x00007FFBADBD0000-0x00007FFBADC87000-memory.dmp

            memory/4760-235-0x00007FFBADBB0000-0x00007FFBADBC6000-memory.dmp

            memory/4760-234-0x00007FFBAE4E0000-0x00007FFBAE518000-memory.dmp

            memory/4760-233-0x00007FFBAE660000-0x00007FFBAE67D000-memory.dmp

            memory/4760-127-0x00007FFBADEE0000-0x00007FFBAE36F000-memory.dmp

            memory/4760-237-0x00007FFBADB70000-0x00007FFBADB84000-memory.dmp

            memory/4760-238-0x00007FFBADB50000-0x00007FFBADB66000-memory.dmp

            memory/4760-239-0x00007FFBADA30000-0x00007FFBADB48000-memory.dmp

            memory/4760-240-0x00007FFBADA10000-0x00007FFBADA2C000-memory.dmp

            memory/4760-241-0x00007FFBAD9F0000-0x00007FFBADA03000-memory.dmp

            memory/4760-246-0x00007FFBADBD0000-0x00007FFBADC87000-memory.dmp

            memory/4760-245-0x00007FFBAD980000-0x00007FFBAD98E000-memory.dmp

            memory/4760-244-0x00007FFBADC90000-0x00007FFBADCBD000-memory.dmp

            memory/4760-243-0x00007FFBAD990000-0x00007FFBAD9CF000-memory.dmp

            memory/4760-242-0x00007FFBAD9D0000-0x00007FFBAD9E5000-memory.dmp

            memory/4760-250-0x00007FFBAD970000-0x00007FFBAD97D000-memory.dmp

            memory/4760-249-0x00007FFBAD950000-0x00007FFBAD966000-memory.dmp

            memory/4760-248-0x0000027B2AF00000-0x0000027B2B277000-memory.dmp

            memory/4760-247-0x00007FFBA8C70000-0x00007FFBA8FE7000-memory.dmp

            memory/4760-252-0x00007FFBAD920000-0x00007FFBAD94A000-memory.dmp

            memory/4760-179-0x00007FFBB1520000-0x00007FFBB152F000-memory.dmp

            memory/4760-253-0x00007FFBAD900000-0x00007FFBAD918000-memory.dmp

            memory/4760-254-0x00007FFBAD780000-0x00007FFBAD78D000-memory.dmp

            memory/4760-257-0x00007FFB9CBB0000-0x00007FFB9CED4000-memory.dmp

            memory/4760-258-0x00007FFBADA30000-0x00007FFBADB48000-memory.dmp

            memory/4760-259-0x00007FFBAD9F0000-0x00007FFBADA03000-memory.dmp

            memory/4760-276-0x00007FFBAE4D0000-0x00007FFBAE4DE000-memory.dmp

            memory/4760-295-0x00007FFBAD990000-0x00007FFBAD9CF000-memory.dmp

            memory/4760-292-0x00007FFBADCC0000-0x00007FFBADCD1000-memory.dmp

            memory/4760-291-0x00007FFBADCE0000-0x00007FFBADCF5000-memory.dmp

            memory/4760-290-0x00007FFBADD00000-0x00007FFBADD11000-memory.dmp

            memory/4760-289-0x00007FFBADD20000-0x00007FFBADD2E000-memory.dmp

            memory/4760-288-0x00007FFBADD30000-0x00007FFBADD3E000-memory.dmp

            memory/4760-287-0x00007FFBADD40000-0x00007FFBADD4F000-memory.dmp

            memory/4760-286-0x00007FFBADD50000-0x00007FFBADD5E000-memory.dmp

            memory/4760-285-0x00007FFBAE420000-0x00007FFBAE42F000-memory.dmp

            memory/4760-284-0x00007FFBAE430000-0x00007FFBAE440000-memory.dmp

            memory/4760-283-0x00007FFBAE440000-0x00007FFBAE452000-memory.dmp

            memory/4760-282-0x00007FFBAE460000-0x00007FFBAE470000-memory.dmp

            memory/4760-281-0x00007FFBAE470000-0x00007FFBAE480000-memory.dmp

            memory/4760-280-0x00007FFBAE480000-0x00007FFBAE48F000-memory.dmp

            memory/4760-279-0x00007FFBAE490000-0x00007FFBAE4A1000-memory.dmp

            memory/4760-278-0x00007FFBAE4B0000-0x00007FFBAE4BE000-memory.dmp

            memory/4760-277-0x00007FFBAE4C0000-0x00007FFBAE4CF000-memory.dmp

            memory/4760-271-0x00007FFBAE520000-0x00007FFBAE5DC000-memory.dmp

            memory/4760-270-0x00007FFBAE5E0000-0x00007FFBAE610000-memory.dmp

            memory/4760-264-0x00007FFBB13F0000-0x00007FFBB140A000-memory.dmp

            memory/4760-260-0x00007FFBADEE0000-0x00007FFBAE36F000-memory.dmp

            memory/4760-275-0x00007FFBB1520000-0x00007FFBB152F000-memory.dmp

            memory/4760-262-0x00007FFBB1530000-0x00007FFBB1556000-memory.dmp

            memory/4760-313-0x00007FFBADC90000-0x00007FFBADCBD000-memory.dmp

            memory/4760-310-0x00007FFBAE660000-0x00007FFBAE67D000-memory.dmp

            memory/4760-308-0x00007FFBAE5E0000-0x00007FFBAE610000-memory.dmp

            memory/4760-307-0x00007FFBAE680000-0x00007FFBAE6AA000-memory.dmp

            memory/4760-306-0x00007FFBAE6B0000-0x00007FFBAE6E7000-memory.dmp

            memory/4760-305-0x00007FFBAE770000-0x00007FFBAE79E000-memory.dmp

            memory/4760-304-0x00007FFBAE970000-0x00007FFBAE98C000-memory.dmp

            memory/4760-303-0x00007FFBB2310000-0x00007FFBB231E000-memory.dmp

            memory/4760-302-0x00007FFBB13F0000-0x00007FFBB140A000-memory.dmp

            memory/4760-301-0x00007FFBB38F0000-0x00007FFBB38FF000-memory.dmp

            memory/4760-300-0x00007FFBB1530000-0x00007FFBB1556000-memory.dmp

            memory/4760-299-0x00007FFBB1560000-0x00007FFBB1571000-memory.dmp

            memory/4760-298-0x00007FFBADEE0000-0x00007FFBAE36F000-memory.dmp

            memory/4760-329-0x00007FFBAD990000-0x00007FFBAD9CF000-memory.dmp

            memory/4760-335-0x00007FFB9CBB0000-0x00007FFB9CED4000-memory.dmp

            memory/4760-334-0x00007FFBAD780000-0x00007FFBAD78D000-memory.dmp

            memory/4760-333-0x00007FFBAD900000-0x00007FFBAD918000-memory.dmp

            memory/4760-332-0x00007FFBAD920000-0x00007FFBAD94A000-memory.dmp

            memory/4760-331-0x00007FFBA8C70000-0x00007FFBA8FE7000-memory.dmp

            memory/4760-330-0x00007FFBAD950000-0x00007FFBAD966000-memory.dmp

            memory/4760-328-0x00007FFBAD9D0000-0x00007FFBAD9E5000-memory.dmp

            memory/4760-327-0x00007FFBAD9F0000-0x00007FFBADA03000-memory.dmp

            memory/4760-326-0x00007FFBADA10000-0x00007FFBADA2C000-memory.dmp

            memory/4760-325-0x00007FFBADA30000-0x00007FFBADB48000-memory.dmp

            memory/4760-324-0x00007FFBADB50000-0x00007FFBADB66000-memory.dmp

            memory/4760-323-0x00007FFBADB70000-0x00007FFBADB84000-memory.dmp

            memory/4760-322-0x00007FFBADB90000-0x00007FFBADBA2000-memory.dmp

            memory/4760-321-0x00007FFBADBB0000-0x00007FFBADBC6000-memory.dmp

            memory/4760-320-0x00007FFBAD970000-0x00007FFBAD97D000-memory.dmp

            memory/4760-319-0x00007FFBADBD0000-0x00007FFBADC87000-memory.dmp

            memory/4760-318-0x00007FFBAD980000-0x00007FFBAD98E000-memory.dmp

            memory/4760-317-0x00007FFBAE4E0000-0x00007FFBAE518000-memory.dmp

            memory/4760-316-0x00007FFBADD60000-0x00007FFBADEDF000-memory.dmp

            memory/4760-315-0x00007FFBAE520000-0x00007FFBAE5DC000-memory.dmp