Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    16/05/2026, 15:01

General

  • Target
    2026-05-16_7c98daa198f69b939d6678fa239260bd_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 25.9MB
  • Sample260516-sdzy8afs3v
  • SHA256 6f6dbe0ef847dd8a20352a9c394f4fa1abccc68fd7be2b0e9b1d5614c5f7f8ca
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 61 IoCs
  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-05-16_7c98daa198f69b939d6678fa239260bd_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-05-16_7c98daa198f69b939d6678fa239260bd_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1028
    • C:\Users\Admin\AppData\Local\Temp\2026-05-16_7c98daa198f69b939d6678fa239260bd_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-05-16_7c98daa198f69b939d6678fa239260bd_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      • Checks SCSI registry key(s)
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:492
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:5352

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\VCRUNTIME140.dll
          • Size 96KB
          • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\_ctypes.pyd
          • Size 119KB
          • SHA256 92d7954d9099762d81c1ae2836c11b6ba58c1883fde8eeefe387cc93f2f6afb4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-console-l1-1-0.dll
          • Size 9KB
          • SHA256 73715f2cc30bf814414d43e42731219bf1b7149d7fd1e5bb73de1fa0c4e61cf4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-datetime-l1-1-0.dll
          • Size 8KB
          • SHA256 06784d44a0fcaa3bb1077eb12b3554d5e38c092ee5de19259564382564e9e4a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-debug-l1-1-0.dll
          • Size 8KB
          • SHA256 1f4d569bde931df66d612b534552c6eb6b4e4aac7e4471830751ab56eae1c72e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 8KB
          • SHA256 0ff48ed7a99b57c58e5ce22c16a31250dca3161793565cf829f771f705e83b05
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-file-l1-1-0.dll
          • Size 12KB
          • SHA256 607796ccaa750fb08d91ce532b10267517545a3808778fe49f4d53d878a5da70
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-file-l1-2-0.dll
          • Size 8KB
          • SHA256 a5340ae160d3c0a512c1ce17f078fe2088449f494af5a4e26a65bcdbd809ee37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-file-l2-1-0.dll
          • Size 8KB
          • SHA256 6331b535dd164db67e791f6a3c494a00bb842bc35facea7677c680b918740ac3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-handle-l1-1-0.dll
          • Size 8KB
          • SHA256 9efb7278af938584e6b00d90b0b149b442d50ec89d5d95ff22c02bbe5ad0e766
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-heap-l1-1-0.dll
          • Size 9KB
          • SHA256 0f5e9c1a3e75a6d1ab131a64186e67676019874202eef2e49e32fb99c89143fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 8KB
          • SHA256 3039b9d2a7b1b573da7751fefb7e73507e82b0da7e8a9f377bde73beb3a375db
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 9KB
          • SHA256 cde47a621f3f8aad0235d6de6558470d6bd56411af361a66ef7d4ff9c4729a61
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-localization-l1-2-0.dll
          • Size 11KB
          • SHA256 0e9c3050cc40e4a2b5ee0baf50765e2c71ed38fcea58d1e0148c27ee24477023
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-memory-l1-1-0.dll
          • Size 9KB
          • SHA256 a9ff59ef59a380ca69af4a4a3916e7ed28a651ac2e984b7c77d95688a3e87c6e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 8KB
          • SHA256 76713157cceca852867720157336f7d03aa03cd3cb99f46c030706de4a7a069d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 9KB
          • SHA256 ddfd3459a4bac19734672e312aa7facaa5893335424cf2a78281b3746fac1600
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 10KB
          • SHA256 f629e725febd28d91bae316c0a8b8ea9d6daf7e79dd8b481722051011e7b7ed5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 9KB
          • SHA256 0ebc082ce3c7d6eefc02942db2a5d0cf20ac6a849418db012e4c177a02a95225
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-profile-l1-1-0.dll
          • Size 8KB
          • SHA256 2beb5622cb1ea280fee996943d7268e62bde60fab0b16f972a02e9bd00c98dfc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 9KB
          • SHA256 df9ee0ee19dc1d9462c56776375bcfb237e00bd5ca32985751e686849c50b666
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-string-l1-1-0.dll
          • Size 8KB
          • SHA256 9b19dcc27e76f2ae4a5363729591a0b4f840e19608d9135c5c832d84c5ff68e9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-synch-l1-1-0.dll
          • Size 10KB
          • SHA256 c134204adf2003d890ff376fc97c5a7edd5f683a6315e1326155a84b68ca90c4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-synch-l1-2-0.dll
          • Size 9KB
          • SHA256 5e4a26023f5805c42fd81fb6530f8a734cc2ebaf93cf589f7f9890f5e2eff5b5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 9KB
          • SHA256 6261b5b24d4073287d1be9a2a0567cd0357caa731e1f27bb82c638a13c91540f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-timezone-l1-1-0.dll
          • Size 9KB
          • SHA256 38c56fccbe6e13f9fb280cc57a15c873e0fe26fc339b70476afeeebdac653265
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-core-util-l1-1-0.dll
          • Size 8KB
          • SHA256 6eca98a678968784392e7369e837cbfdeb7939e2102a4aafe36a5453da2e764d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-conio-l1-1-0.dll
          • Size 9KB
          • SHA256 8302130ffec1bf2d409e50f543bdc54365d7e4a4f94b3f611cbbfdceb3ef1167
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-convert-l1-1-0.dll
          • Size 12KB
          • SHA256 f4e13c67d3827a5253b756ddd858d9a4fd9030411d6c018c76d5afce782823a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-environment-l1-1-0.dll
          • Size 9KB
          • SHA256 4e774b5030933e9bc6342202c6f0656ae28cf3f84c5c3e11590aed3dab6d6105
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 10KB
          • SHA256 ab7ba150e42e6eca154163eae5ca5f64dab444e804e8a9583430d74751a8dc75
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-heap-l1-1-0.dll
          • Size 9KB
          • SHA256 02dff54ccdfa23f87622d1ac58aec8d0d5ae7fb25baa7291754666953b9f69c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-locale-l1-1-0.dll
          • Size 9KB
          • SHA256 2803a2ddad40e21973eb0d931b44ddd57c50c10380619a94791296d7529b217a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-math-l1-1-0.dll
          • Size 17KB
          • SHA256 b1578c7ec398d691f5905cec3d3c1f01c7ff94b9d72a33d6eb612d380d8dc4e8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-process-l1-1-0.dll
          • Size 9KB
          • SHA256 8dbbe94afac78d50dabf61a1a49e022c7f5a061d40a3c4db973b9187c0cfdaea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 13KB
          • SHA256 546024b963cb165d6e425bb2a28148295e63834e44469ca5d45eb5fdfcafdd07
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 14KB
          • SHA256 a5f6a870e6482e8cb1b5fe0c5c1326057a54637e425d11ff945d8212deafa482
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-string-l1-1-0.dll
          • Size 14KB
          • SHA256 51fde19cf46b6fcc61330f4ab972633abfc2ef3fc32a51949457e18b24f2c06d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-time-l1-1-0.dll
          • Size 11KB
          • SHA256 411f635327ae68f62e2df496c612420e5e07b484a9a7cc16fd55f1cd75326b5a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\api-ms-win-crt-utility-l1-1-0.dll
          • Size 9KB
          • SHA256 ceea3a1878efdf37735d607b756450d49bff5a0e7aeb0a19f9c21c809fbeda6a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\base_library.zip
          • Size 859KB
          • SHA256 8fdc0140c555cee25802a451e3bb64862d76a105de11daba11f6298c6c597eb1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          freetype.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\freetype.dll
          • Size 639KB
          • SHA256 1c487392d6d06970ba3c7b52705881f1fb069f607243499276c2f0c033c7df6f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libcrypto-1_1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libcrypto-1_1.dll
          • Size 3.3MB
          • SHA256 9c0a0a11629cced6a064932e95a0158ee936739d75a56338702fed97cb0bad55
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libffi-7.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libjpeg-9.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libjpeg-9.dll
          • Size 238KB
          • SHA256 3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libmodplug-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libmodplug-1.dll
          • Size 259KB
          • SHA256 0c1a9032812ec4c20003a997423e67b71ecb5e59d62cdc18a5bf591176a9010e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libogg-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libogg-0.dll
          • Size 25KB
          • SHA256 57abc4f6a9accdd08bf9a2b022a66640cc626a5bd4dac6c7c4f06a5df61ee1fe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libopus-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libopus-0.dll
          • Size 359KB
          • SHA256 771cae79410f7fcc4f993a105a18c4ed9e8cbddd6f807a42228d95f575808806
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libopusfile-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libopusfile-0.dll
          • Size 45KB
          • SHA256 ccaaca81810bd2d1cab4692b4253a639f8d5516996db0e24d881efd3efdcc6a4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libpng16-16.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libpng16-16.dll
          • Size 206KB
          • SHA256 e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libssl-1_1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libssl-1_1.dll
          • Size 682KB
          • SHA256 ed1c8769f5096afd000fc730a37b11177fcf90890345071ab7fbceac684d571f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libtiff-5.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libtiff-5.dll
          • Size 422KB
          • SHA256 ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libwebp-7.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\libwebp-7.dll
          • Size 437KB
          • SHA256 9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50
          • MD5 SHA1 SHA512 SSDEEP TLSH

          portmidi.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\portmidi.dll
          • Size 41KB
          • SHA256 c9f8d9043ac1570b10f104f2d00aec791f56261c84ee40773be73d0a3822e013
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python3.DLL

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\python3.DLL
          • Size 63KB
          • SHA256 5d78cd1365ea9ae4e95872576cfa4055342f1e80b06f3051cf91d564b6cd09f5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python310.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\python310.dll
          • Size 4.3MB
          • SHA256 058925e4bbfcb460a3c00ec824b8390583baef0c780a7c7ff01d43d9eec45f20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI10282\ucrtbase.dll
          • Size 983KB
          • SHA256 5c3f675445a98c9e2176b0811646cf326f694909b1108940a63fd5538c06f229
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/492-249-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-237-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-225-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-241-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-213-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-205-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-229-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-217-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-201-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-197-0x00007FF8E9910000-0x00007FF8E9B7C000-memory.dmp

          memory/492-199-0x0000000068B40000-0x0000000068B7C000-memory.dmp

          memory/492-200-0x0000000062E80000-0x0000000062EA4000-memory.dmp

          memory/492-198-0x000000006A880000-0x000000006A8A7000-memory.dmp

          memory/1028-0-0x00007FF647F80000-0x00007FF647FDA000-memory.dmp