Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/07/2026, 03:57

General

  • Target
    2026-07-14_51e9f2345f62cca097653cadc352e977_icedid_stealc_vidar.exe
  • Size 752KB
  • Sample260714-ejch8af16z
  • SHA256 e4ebbb5d132fc61f7a4824de532ea9a75f33b0de88387a0d1e7e518e05e7bff5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 7 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_51e9f2345f62cca097653cadc352e977_icedid_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_51e9f2345f62cca097653cadc352e977_icedid_stealc_vidar.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4300
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4080
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    PID:3700
  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1804
  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:3520
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:1352
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:1268

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        elevation_service.exe

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
        • Size 2.7MB
        • SHA256 effb6c3db88d0e7ddef5bb7116b1d39eacfeef9dbbc841b46c58590be68a7e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 849KB
        • SHA256 36de59a1b8abf57acbe0c7cc1d26300823a8ea60d1102fd77d7d00ce3de3e4a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7z.exe

        • Path C:\Program Files\7-Zip\7z.exe
        • Size 1.1MB
        • SHA256 353136c3e77a4e647210283de8f3e0f89f9e3f9f9b965b357f273aa7977f0bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7zFM.exe

        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 1.5MB
        • SHA256 5449bb98a2c698f6eda71a9ee3c908f6de4959fb022ba16e1b77c601537134db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7zG.exe

        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 1.3MB
        • SHA256 57cd96f73faeb2b60b3d78a410406346ed88982693af3472b25ac84c2a147a8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uninstall.exe

        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 603KB
        • SHA256 ea6ef7502976b0d2f5e85a419e12362bb9bc170407ae196fdc5f39aaeda3d315
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppVShNotify.exe

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 863KB
        • SHA256 c726fd22cc0b6c9000912a6235344e30a2e733eb945d4ccec68ee622b9f77606
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IntegratedOffice.exe

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 4.7MB
        • SHA256 03c7cc449216a1a1656cd4dd12f304c8884f3eae6a04161b0742dc6b95d941f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MavInject32.exe

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 932KB
        • SHA256 88e4c8fe4de1f7985eaf4ec6bb56c1234d4fdb03141c02c855656903f0a0dafa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OfficeC2RClient.exe

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 24.0MB
        • SHA256 3ea22a5cce38d84422655fda7b17bbdb795ff8309d0860e715921fdf4ab97b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        appvcleaner.exe

        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 2.7MB
        • SHA256 1e939b56327f60be2c2b0a619ccd5b49b7c9e7407120dab680404a4b3f0072c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICLUA.EXE

        • Path C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE
        • Size 1.1MB
        • SHA256 361fb93d7b45b70007d46257573dcef58b535c8f14b57e02cbd8fb8eb28773bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OSE.EXE

        • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
        • Size 829KB
        • SHA256 21da5f1bf544b6fbd3ebe5ca4dd6990e9d6d0eab52a0a4d4949e13dad8acf07d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VSTOInstaller.exe

        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 679KB
        • SHA256 978126a15f3b95cbcad209da128fe62ea1dfb585b4e7bca00ad8d99fd89d679b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrmstp.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 6.6MB
        • SHA256 5f9424b9f45e9f9fd96bf3589f918b75c89682bdaa24f6cc51d72f3f0f2f0353
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 6.6MB
        • SHA256 5dbb6ff4e0f6d02f9c9bcb7e481b280380e8d6caf4d30f842347152b2a2b8819
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_pwa_launcher.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 2.3MB
        • SHA256 32215626309df788fd2f5606e06c5ab8b04de175d452d24045cbeb10d91d4479
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevated_tracing_service.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 4.0MB
        • SHA256 1df0d85afd1fd440244fed4d03aae8023a675fa92c1f57e3b18bec8144567852
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevation_service.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 2.8MB
        • SHA256 1f35d5fe8451565f987264eaf036193b9a01b19fd920858bd977db8fcd178252
        • MD5 SHA1 SHA512 SSDEEP TLSH

        notification_helper.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 2.2MB
        • SHA256 5ccd4845723c082481bb5a5f01de4e589ecfd1986b3423bdf3d1a6ed835c69fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        os_update_handler.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 2.4MB
        • SHA256 3b3d9fd17679075c4ac390e9f71eb7e65f2235c333c5c76fee37889a3ad01338
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_proxy.exe

        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 2.0MB
        • SHA256 544f66361df24364b00d37ee222bb0b3667ad1435737e3554794161308573de9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        appletviewer.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 602KB
        • SHA256 f5e43cbdbdc856d5faee42afcf619383231e8db208ff0a128aa2e0fafce65912
        • MD5 SHA1 SHA512 SSDEEP TLSH

        extcheck.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 602KB
        • SHA256 feca6ddfd0598da0eba548c4ee5604992754bffc448cb67dd89d9ecfb80632f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        idlj.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 602KB
        • SHA256 5d0dd43cdbcf257fbfff804206371e097b392469b684e29ab379996b14ce5136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jabswitch.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 622KB
        • SHA256 18d57bce4e971addac6ee1798c2e370345ff50ea3ea67427d2c4e1f02210648f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jar.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 602KB
        • SHA256 2bc0d5ca9c3fe8be2918811883bcee198015cd780cda711383916ef966838582
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jarsigner.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 602KB
        • SHA256 8c5991829f23f06b152dee20be9ea53f82e8bf6fae75667bdc5d77b284276481
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java-rmi.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 602KB
        • SHA256 9bb280c5a8d56e44fafb4ae9f0e96d07a0f101528dd12144de8cdbe5ee324958
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 863KB
        • SHA256 d0153483cbf06a99041c9b35f6a8b18959b47f90e67e6d4bd01e13aae08255fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javac.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 602KB
        • SHA256 956d8aa6ed3ce53a1a807995485488ed9b41c778c8802fa2c6396b24917bc851
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javadoc.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 602KB
        • SHA256 d92900dc9e3e19a7bc503664068c92ed8f3fc05a6fd8b19279b6de5b10802b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javafxpackager.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 740KB
        • SHA256 d773d91758815c1b14d480cca25ade667e4b60ba6bcec9332f6571dd818e8cda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javah.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 602KB
        • SHA256 3ea42eed76584f221587107d620091e51aeabfc0bdef1d6d17597824b3bca023
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javap.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 602KB
        • SHA256 6d12f41e03b3bcfc96963ff29aa05b142ec28d2dd28f6b7c429438563fa595da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javapackager.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 740KB
        • SHA256 799916b341711154f9d5505088708a7f181904d49120b39e566bf2d9d060c01c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javaw.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 863KB
        • SHA256 9da2737c3e57ff190e416fa8088a621458abbe156960e258443a5cff65bbb0ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javaws.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 1.0MB
        • SHA256 7e1cd235e1ff89bf6efdb9b2342ec198084e524bab2c8e37b5030abe4f0df23b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jcmd.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 602KB
        • SHA256 58686ebb67247bf259e66f80a0a2aea5f967bcc7e454764a88b3d552cc708d4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jconsole.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 602KB
        • SHA256 47a6b41a85d47b7097c9b79fb0ca86a4e69b5bba226bf8e55960059fa5a0d65a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jdb.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 602KB
        • SHA256 43f541fd14d150c807722f497de83c2005bac941e2000d8d71ca937f23822f2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jdeps.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 602KB
        • SHA256 4659efe67cef614d7a42174a1088d74f7411fea9627f7439969a901fe92062bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jhat.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 602KB
        • SHA256 1248e35ede0136ba8dcf4c1b628f03b8238632c927750b0181dd4812872452fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jinfo.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 602KB
        • SHA256 e4e0fdb936afc935934bfed8acba4972f2df1e9a8761a345d5d5c11fca0c9da9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jjs.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 602KB
        • SHA256 c44a4dc93fb7b3707c42fadfefaf1032bece967096672ffa2314c0cbf3bd4324
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jmap.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 602KB
        • SHA256 13d3d65b8bddd7c93e8b78dd02ced370664d613a0785c697a4ec9ef7fc5ec2aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jps.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 602KB
        • SHA256 c10e769f8d33a926513f0ce62f31f27f1dde1d33e61d5779c1fb4cc48302c704
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jrunscript.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 602KB
        • SHA256 c23a3ddce88dfbed175212e1e494106a61aa6ea05614f72dbcfe2f93455f387a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jsadebugd.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 602KB
        • SHA256 b85a5e589d212c34264ea890c3489c1bacc87a3f7e75f1986ffc4304be37f519
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jstack.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 602KB
        • SHA256 d21990a4f84450bf053f62be1b84ab53cb716e249abec951d1e98ca360d54845
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jstat.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 602KB
        • SHA256 cbb0e37f2c48d771a0195f011e56d925bd909888b49955027eb07386eee9997c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jstatd.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 602KB
        • SHA256 da3f925caf37d07411f3c934296fd5134ac5a8606e49364e78be577a54099f72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        keytool.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 602KB
        • SHA256 47bfa8e19de3f648f7513b1c18fc11707e42c7beb486c295c7e006a3efb58eb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kinit.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 602KB
        • SHA256 2b881149b6492989a86e5f365db43411711c72478e5563bc6d49684aad280f8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        klist.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 602KB
        • SHA256 770e14bdf58aca0f8c73de7894137dd53aa99ade2fafa6598c7131ac3b32c1a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ktab.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 602KB
        • SHA256 55aa835dfc8369414bd941382deb2f5d573fc55ff51fab338ad7655970c18ab9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        native2ascii.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 602KB
        • SHA256 53c63e245aa6688855d99199db7548cb97eb4c2bc09f7251b5b23dae0afd1fa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        orbd.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 602KB
        • SHA256 f15f8bc3b2db17c219c3989830dffac0b2453fd9cafcff95635f39774e926610
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pack200.exe

        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 602KB
        • SHA256 0b3bf2edd52e9c3787a4367ebde73f6a9f689cf468bde7fece7483cb9248eeb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dotnet.exe

        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 722KB
        • SHA256 f84574ce771e2cef184696e5c95a1c812a38c7b0709e329c1bc066649aa20d94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DiagnosticsHub.StandardCollector.Service.exe

        • Path C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
        • Size 681KB
        • SHA256 02475081d8ede95c0e193b65fcfb8ba26e6c689fa7b8591bab2aad7997135d52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        alg.exe

        • Path C:\Windows\System32\alg.exe
        • Size 682KB
        • SHA256 9e1c0ac05da48abe132558f83bbc86cef0b41dc368e888041e2432d664f476aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AppVClient.exe

        • Path C:\Windows\system32\AppVClient.exe
        • Size 1.3MB
        • SHA256 d307c6e955ee3fb5ea40f4c6107c9eb38835b0d1f77d423737cecfb1f4261a07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1268-66-0x0000024126BF0000-0x0000024126C56000-memory.dmp

        memory/1268-65-0x0000024126A70000-0x0000024126BED000-memory.dmp

        memory/1268-67-0x0000024126BF0000-0x0000024126C56000-memory.dmp

        memory/1352-62-0x00007FF6F5E60000-0x00007FF6F5FC8000-memory.dmp

        memory/1352-60-0x000001E2ADB10000-0x000001E2ADB76000-memory.dmp

        memory/1352-53-0x000001E2ADB10000-0x000001E2ADB76000-memory.dmp

        memory/1352-55-0x000001E2ADB10000-0x000001E2ADB76000-memory.dmp

        memory/1352-54-0x00007FF6F5E60000-0x00007FF6F5FC8000-memory.dmp

        memory/1804-39-0x00000112E4430000-0x00000112E4496000-memory.dmp

        memory/1804-37-0x00000112E4430000-0x00000112E4496000-memory.dmp

        memory/1804-36-0x00000112E41E0000-0x00000112E435D000-memory.dmp

        memory/3520-45-0x00000296FF2D0000-0x00000296FF44D000-memory.dmp

        memory/3520-47-0x00000296FF520000-0x00000296FF586000-memory.dmp

        memory/3520-46-0x00000296FF520000-0x00000296FF586000-memory.dmp

        memory/3700-73-0x00007FF7A7F60000-0x00007FF7A8044000-memory.dmp

        memory/3700-28-0x000001590D980000-0x000001590D9E6000-memory.dmp

        memory/3700-29-0x000001590D980000-0x000001590D9E6000-memory.dmp

        memory/3700-30-0x00007FF7A7F60000-0x00007FF7A8044000-memory.dmp

        memory/4080-13-0x0000022C7CE40000-0x0000022C7CEA6000-memory.dmp

        memory/4080-14-0x0000022C7CE40000-0x0000022C7CEA6000-memory.dmp

        memory/4080-12-0x0000022C7CE40000-0x0000022C7CEA6000-memory.dmp

        memory/4080-71-0x00007FF798580000-0x00007FF798667000-memory.dmp

        memory/4080-11-0x00007FF798580000-0x00007FF798667000-memory.dmp

        memory/4300-25-0x00007FF6DEF40000-0x00007FF6DF060000-memory.dmp

        memory/4300-3-0x000001AC71FF0000-0x000001AC72056000-memory.dmp

        memory/4300-24-0x000001AC71FF0000-0x000001AC72056000-memory.dmp

        memory/4300-0-0x000001AC71FF0000-0x000001AC72056000-memory.dmp

        memory/4300-1-0x00007FF6DEF40000-0x00007FF6DF060000-memory.dmp

        memory/4300-2-0x000001AC71FF0000-0x000001AC72056000-memory.dmp