Analysis

  • max time kernel
    150s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 08:54

General

  • Target
    2026-07-30_5649c02a0b615b6e26192fd7a60988d5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 13.3MB
  • Sample260730-kvc7sayscs
  • SHA256 ab70fe0f4e67889d69a97647399796d4c0b9dfb3e4b53240de8e4c233c434d15
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 26 IoCs
  • UPX packed file 47 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_5649c02a0b615b6e26192fd7a60988d5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_5649c02a0b615b6e26192fd7a60988d5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1968
    • C:\Users\Admin\AppData\Local\Temp\2026-07-30_5649c02a0b615b6e26192fd7a60988d5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-30_5649c02a0b615b6e26192fd7a60988d5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\MSVCP140.dll
        • Size 564KB
        • SHA256 74892d9b4028c05debaf0b9b5d9dc6d22f7956fa7d7eee00c681318c26792823
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _brotli.cp311-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\_brotli.cp311-win_amd64.pyd
        • Size 268KB
        • SHA256 d65da4cc650f740153c540a64771a2bb0b5ac55667bb1469b26697eca5b09532
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\_bz2.pyd
        • Size 48KB
        • SHA256 6b75a6fb3b26eb235fb494f75214e320ebf0f1b0ed5a8d56e8fe614a3d5d6fbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _cffi_backend.cp311-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\_cffi_backend.cp311-win_amd64.pyd
        • Size 71KB
        • SHA256 1f30616ecbed7fbe34b7fd2d9e6d38df71a41c0e0464d8aef6732b7809ee1fdc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\_ctypes.pyd
        • Size 58KB
        • SHA256 a3c40f3dd137a57a0675cfcc1f8afbdba5b22a127149f42a12a3a0336c343574
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\_decimal.pyd
        • Size 106KB
        • SHA256 289b1e4fd264954fcb83cc6818b1c4a72ef57dd5980e88c296e839dd7e3b634e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\_hashlib.pyd
        • Size 35KB
        • SHA256 68035dfdd863337a8e8357ba281e0a343e2d8dabbe599d5a033460db66c2d877
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-console-l1-1-0.dll
        • Size 11KB
        • SHA256 2afbfa1d77969d0f4cee4547870355498d5c1da81d241e09556d0bd1d6230f8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-datetime-l1-1-0.dll
        • Size 11KB
        • SHA256 77577f35d3a61217ea70f21398e178f8749455689db52a2b35a85f9b54c79638
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-debug-l1-1-0.dll
        • Size 11KB
        • SHA256 45e48320abe6e3c6079f3f6b84636920a367989a88f9ba6847f88c210d972cf1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 11KB
        • SHA256 accdd7455fb6d02fe298b987ad412e00d0b8e6f5fb10b52826367e7358ae1187
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-file-l1-1-0.dll
        • Size 14KB
        • SHA256 7cb0396229c3da434482a5ef929d3a2c392791712242c9693f06baa78948ef66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 7a3c5167731238cf262f749aa46ab3bfb2ae1b22191b76e28e1d7499d28c24b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 349a79fa1572e3538dfbb942610d8c47d03e8a41b98897bc02ec7e897d05237e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-handle-l1-1-0.dll
        • Size 11KB
        • SHA256 c78a1217f8dcb157d1a66b80348da48ebdbbedcea1d487fc393191c05aad476d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-heap-l1-1-0.dll
        • Size 11KB
        • SHA256 2e981ee04f35c0e0b7c58282b70dcc9fc0318f20f900607dae7a0d40b36e80af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 11KB
        • SHA256 b02324c49dd039fa889b4647331aa9ac65e5adc0cc06b26f9f086e2654ff9f08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 12KB
        • SHA256 08484ed55e43584068c337281e2c577cf984bb504871b3156de11c7cc1eec38f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-localization-l1-2-0.dll
        • Size 13KB
        • SHA256 059cb23fdcf4d80b92e3da29e9ef4c322edf6fba9a1837978fd983e9bdfc7413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-memory-l1-1-0.dll
        • Size 11KB
        • SHA256 dadbd2204b015e81f94c537ac7a36cd39f82d7c366c193062210c7288baa19e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 11KB
        • SHA256 b57e70798af248f91c8c46a3f3b2952effae92ca8ef9640c952467bc6726f363
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 12KB
        • SHA256 aa415db99828f30a396cbd4e53c94096db89756c88a19d8564f0eed0674add43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 13KB
        • SHA256 c9a686030e073975009f993485d362cc31c7f79b683def713e667d13e9605a14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 25a99bdf8bf4d16077dc30dd9ffef7bb5a2ceaf9afcee7cf52ad408355239d40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-profile-l1-1-0.dll
        • Size 10KB
        • SHA256 42f4e84073cf876bbab9dd42fd87124a4ba10bb0b59d2c3031cb2b2da7140594
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 11KB
        • SHA256 02d987eba4a65509a2df8ed5dd0b1a0578966e624fcf5806614ece88a817499f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-string-l1-1-0.dll
        • Size 11KB
        • SHA256 9447218cc4ab1a2c012629aaae8d1c8a428a99184b011bcc766792af5891e234
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-synch-l1-1-0.dll
        • Size 13KB
        • SHA256 a31a15bed26232a178ba7ecb8c8aa9487c3287bb7909952fc06ed0d2c795db26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 1c72ac404781a9986d8edeb0ee5dd39d2c27ce505683ca3324c0eccd6193610a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 12KB
        • SHA256 19c78ef5ba470c5b295dddee9244cbd07d0368c5743b02a16d375bfb494d3328
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 3d798b9c345a507e142e8dacd7fb6c17528cc1453abfef2ffa9710d2fa9e032c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-core-util-l1-1-0.dll
        • Size 11KB
        • SHA256 5eb724c51eecba9ac7b8a53861a1d029bf2e6c62251d00f61ac7e2a5f813aaa3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 b119adad588ebca7f9c88628010d47d68bf6e7dc6050b7e4b787559f131f5ede
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 6c008be766c44bf968c9e91cddc5b472110beffee3106a99532e68c605c78d44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 aa3e3e99964d7f9b89f288dbe30ff18cbc960ee5add533ec1b8326fe63787aa3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 974af1f1a38c02869073b4e7ec4b2a47a6ce8339fa62c549da6b20668de6798c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 8166321f14d5804ce76f172f290a6f39ce81373257887d9897a6cf3925d47989
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 edc1699e9995f98826df06d2c45beb9e02aa7817bae3e61373096ae7f6fa06e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 f6a93fe6b57a54aac46229f2ed14a0a979bf60416adb2b2cfc672386ccb2b42e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 19KB
        • SHA256 5b3e29116383ba48a2f46594402246264b4cb001023237ebbf28e7e9292cdb92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 191f53988c7f02dd888c4fbf7c1d3351570f3b641146fae6d60acdae544771ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 4390c389bbbf9ec7215d12d22723efd77beb4cd83311c75ffe215725ecfd55dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 6f6f6e857b347f70ecc669b4df73c32e42199b834fe009641d7b41a0b1c210af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 45e0835b1d3b446fe2c347bd87922c53cfb6dd826499e19a1d977bf4c11b0e4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 b48310b0837027f756d62c37ea91af988baa403cbcbd01cb26b6fdae21ea96a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 c81c4bba4e5f205359ad145963f6fbd074879047c66569f52b6d66711108e1ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\base_library.zip
        • Size 1.4MB
        • SHA256 1b7d326bad406e96a4c83b5a49714819467e3174ed0a74f81c9ebd96d1dd40b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\libcrypto-1_1.dll
        • Size 1.1MB
        • SHA256 50a0af02ad8587121b17bead69f1c40a8d9967864c5251f051a8c3e13c91bfe6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\libffi-8.dll
        • Size 29KB
        • SHA256 a174a301f6de532aa75bcae9bb038efa29debcc02e70b283bf87ae54d55a729b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\libssl-1_1.dll
        • Size 204KB
        • SHA256 dd8beaac4140778f75cccb97cb0569aef8bb982f384c7523489af67f6dbab697
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\python3.DLL
        • Size 65KB
        • SHA256 520169aa6cf49d7ee724d1178de1be0e809e4bdcf671e06f3d422a0dd5fd294a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python311.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\python311.dll
        • Size 1.6MB
        • SHA256 d5e66e1e8f36b300d6db8be823f9a2014f37ffe33464164406d1ff5bcc6e1fb5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\select.pyd
        • Size 25KB
        • SHA256 34fe224542ca4cb29ff3e7b059ea82419eae885b81c35072e4d4dc3c99b9a7d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\ucrtbase.dll
        • Size 987KB
        • SHA256 10521fe73fe05f2ba95d40757d9f676f2091e2ed578da9d5cdef352f986f3bcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI19682\unicodedata.pyd
        • Size 295KB
        • SHA256 d059991fd9d3344fe3a3b8395f6ce9ff21710b2f01bfc2f81d636782f36829d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2992-166-0x00007FFB81F90000-0x00007FFB8204F000-memory.dmp

        memory/2992-169-0x00007FFB8AF40000-0x00007FFB8AF4B000-memory.dmp

        memory/2992-155-0x00007FFB8C5B0000-0x00007FFB8C5C9000-memory.dmp

        memory/2992-157-0x00007FFB925A0000-0x00007FFB925AD000-memory.dmp

        memory/2992-151-0x00007FFB8C630000-0x00007FFB8C65D000-memory.dmp

        memory/2992-171-0x00007FFB87E20000-0x00007FFB87E44000-memory.dmp

        memory/2992-150-0x00007FFB8C660000-0x00007FFB8C679000-memory.dmp

        memory/2992-89-0x00007FFB79C00000-0x00007FFB7A1E9000-memory.dmp

        memory/2992-99-0x00007FFB94990000-0x00007FFB9499F000-memory.dmp

        memory/2992-97-0x00007FFB8C8E0000-0x00007FFB8C903000-memory.dmp

        memory/2992-161-0x00007FFB8AF50000-0x00007FFB8AF7E000-memory.dmp

        memory/2992-160-0x00007FFB79C00000-0x00007FFB7A1E9000-memory.dmp

        memory/2992-164-0x00007FFB82050000-0x00007FFB82108000-memory.dmp

        memory/2992-163-0x000001F753E60000-0x000001F7541D8000-memory.dmp

        memory/2992-162-0x00007FFB79880000-0x00007FFB79BF8000-memory.dmp

        memory/2992-165-0x00007FFB8C8E0000-0x00007FFB8C903000-memory.dmp

        memory/2992-156-0x00007FFB839B0000-0x00007FFB83A72000-memory.dmp

        memory/2992-167-0x00007FFB8C590000-0x00007FFB8C5A4000-memory.dmp

        memory/2992-154-0x00007FFB8C5D0000-0x00007FFB8C5FF000-memory.dmp

        memory/2992-168-0x00007FFB8D980000-0x00007FFB8D98D000-memory.dmp

        memory/2992-152-0x00007FFB8C600000-0x00007FFB8C62C000-memory.dmp

        memory/2992-170-0x00007FFB8C600000-0x00007FFB8C62C000-memory.dmp

        memory/2992-175-0x00007FFB81DE0000-0x00007FFB81EFC000-memory.dmp

        memory/2992-174-0x00007FFB839B0000-0x00007FFB83A72000-memory.dmp

        memory/2992-173-0x00007FFB8C5B0000-0x00007FFB8C5C9000-memory.dmp

        memory/2992-172-0x00007FFB8C5D0000-0x00007FFB8C5FF000-memory.dmp

        memory/2992-178-0x000001F753E60000-0x000001F7541D8000-memory.dmp

        memory/2992-177-0x00007FFB79880000-0x00007FFB79BF8000-memory.dmp

        memory/2992-176-0x00007FFB8AF50000-0x00007FFB8AF7E000-memory.dmp

        memory/2992-179-0x00007FFB82050000-0x00007FFB82108000-memory.dmp

        memory/2992-180-0x00007FFB81F90000-0x00007FFB8204F000-memory.dmp

        memory/2992-181-0x00007FFB8C590000-0x00007FFB8C5A4000-memory.dmp

        memory/2992-182-0x00007FFB8D980000-0x00007FFB8D98D000-memory.dmp

        memory/2992-202-0x00007FFB87E20000-0x00007FFB87E44000-memory.dmp

        memory/2992-183-0x00007FFB79C00000-0x00007FFB7A1E9000-memory.dmp

        memory/2992-201-0x00007FFB81DE0000-0x00007FFB81EFC000-memory.dmp

        memory/2992-191-0x00007FFB8C5B0000-0x00007FFB8C5C9000-memory.dmp