Overview

overview

6

Static

static

1

SpotifySetup.exe

windows10-2004-x64

6

SpotifySetup.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    53s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 18:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SpotifySetup.exe
  • Size 1.0MB
  • Sample260813-wye2bscg65
  • SHA256 54dda0a405e88b0ce11f786da6f47df3d2f5986c5b627ae6599dce6257625620
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Executes dropped EXE 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Modifies registry class 9 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe
    "C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe"
    1⤵
    • Downloads MZ/PE file
    • Suspicious use of WriteProcessMemory
    PID:4248
    • C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exe
      SpWebInst0.exe /webinstall
      2⤵
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:5184
      • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
        Spotify.exe /INSTALLCOMPLETE
        3⤵
        • Executes dropped EXE
        PID:5900
        • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
          C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.96.518 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ffc0b675448,0x7ffc0b675454,0x7ffc0b675460
          4⤵
            PID:3572
          • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
            "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2252,i,3683484288659573704,2552678099847586443,262144 --field-trial-handle=2584,i,3432888936420011456,17848781344601353090,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2588,i,15061555746690716260,15165285568003984885,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=2592 --mojo-platform-channel-handle=2580 /prefetch:2
            4⤵
              PID:2668
            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
              "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=2420,i,3785764577725546196,17583700672613489969,524288 --field-trial-handle=2584,i,3432888936420011456,17848781344601353090,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2588,i,15061555746690716260,15165285568003984885,4 --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=2624 --mojo-platform-channel-handle=2620 /prefetch:11
              4⤵
              • System Time Discovery
              PID:1612
            • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
              "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=2940,i,2974622448148670924,1428666521450435194,524288 --field-trial-handle=2584,i,3432888936420011456,17848781344601353090,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2588,i,15061555746690716260,15165285568003984885,4 --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=3148 --mojo-platform-channel-handle=3144 /prefetch:13
              4⤵
                PID:4376
              • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --enable-blink-features=DocumentPictureInPictureCefOptions --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=6340,i,15704130104235757289,13166083641429170548,2097152 --field-trial-handle=2584,i,3432888936420011456,17848781344601353090,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2588,i,15061555746690716260,15165285568003984885,4 --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=6564 --mojo-platform-channel-handle=6560 /prefetch:1
                4⤵
                  PID:2676
                • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                  "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=2624,i,1500605144779537695,6546671819603831979,524288 --field-trial-handle=2584,i,3432888936420011456,17848781344601353090,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2588,i,15061555746690716260,15165285568003984885,4 --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=5296 --mojo-platform-channel-handle=2420 /prefetch:11
                  4⤵
                  • System Time Discovery
                  PID:2796
                • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                  "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-severity=disable --user-agent-product="Chrome/146.0.7680.179 Spotify/1.2.96.518" --metrics-shmem-handle=7584,i,15752822464432825989,1813309081887839824,524288 --field-trial-handle=2584,i,3432888936420011456,17848781344601353090,262144 --disable-features=AutofillActorMode,BackForwardCache,FullscreenBubbleShowOrigin,GlicActorUi,HardwareMediaKeyHandling,LensOverlay,PartitionAllocDanglingPtr,PartitionAllocUnretainedDanglingPtr,StorageNotificationService --variations-seed-version --pseudonymization-salt-handle=2588,i,15061555746690716260,15165285568003984885,4 --trace-process-track-uuid=3190708993808206286 --enable-logging=handle --log-file=7588 --mojo-platform-channel-handle=7592 /prefetch:14
                  4⤵
                    PID:5564
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
              1⤵
                PID:2536
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                1⤵
                  PID:1200
                • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                  "C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --autostart --minimized
                  1⤵
                    PID:1796
                    • C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                      C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" --url=https://crashdump.spotify.com:443/ --annotation=platform=win64 --annotation=product=spotify --annotation=version=1.2.96.518 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ffc0b675448,0x7ffc0b675454,0x7ffc0b675460
                      2⤵
                        PID:2704

                    Network

                          MITRE ATT&CK Enterprise v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          data_1
                          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnGraphiteCache\data_1
                          • Size 264KB
                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_0
                          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_0
                          • Size 8KB
                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_2
                          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_2
                          • Size 8KB
                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_3
                          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\DawnWebGPUCache\data_3
                          • Size 8KB
                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          index
                          • Path C:\Users\Admin\AppData\Local\Spotify\Browser\Shared Dictionary\cache\index
                          • Size 24B
                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                          • MD5 SHA1 SHA512
                          Submit Download

                          CURRENT
                          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\CURRENT
                          • Size 16B
                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                          • MD5 SHA1 SHA512
                          Submit Download

                          MANIFEST-000001
                          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Extension Rules\MANIFEST-000001
                          • Size 41B
                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                          • MD5 SHA1 SHA512
                          Submit Download

                          SCT Auditing Pending Reports
                          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Network\SCT Auditing Pending Reports
                          • Size 2B
                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                          • MD5 SHA1 SHA512
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences
                          • Size 7KB
                          • SHA256 4a7d22e61f59a6bdc81fb3fe278784c1b4a03d67d5e759b0c46f64450d0f3480
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences~RFe5b5b2c.TMP
                          • Path C:\Users\Admin\AppData\Local\Spotify\Default\Preferences~RFe5b5b2c.TMP
                          • Size 7KB
                          • SHA256 2737ccead3383ebcdfa1f4bb5a3f08d3582fa18dbacae477f23081c54b31b912
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Local State
                          • Path C:\Users\Admin\AppData\Local\Spotify\Local State
                          • Size 2KB
                          • SHA256 68997d124d3698c0f62b2eee29a05fc57a8baaa827516002fd35ed98f6155c3c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Local State
                          • Path C:\Users\Admin\AppData\Local\Spotify\Local State
                          • Size 3KB
                          • SHA256 616a76d5f696f05f54508c57f1c55de32c7cd45af15b06a1376930251222cd45
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Local State~RFe5a7958.TMP
                          • Path C:\Users\Admin\AppData\Local\Spotify\Local State~RFe5a7958.TMP
                          • Size 1008B
                          • SHA256 d328e4710d5dbe3dfbee36a4c9744f57c85ed2f575471f35929dda2c37eacb0e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          settings.dat
                          • Path C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad\settings.dat
                          • Size 56B
                          • SHA256 52fc0c1fafd0dede4fe5448f587ad7035e7b92f0825b006098dc17a07cb65341
                          • MD5 SHA1 SHA512
                          Submit Download

                          000002.dbtmp
                          • Path C:\Users\Admin\AppData\Local\Spotify\public.ldb\000002.dbtmp
                          • Size 16B
                          • SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
                          • MD5 SHA1 SHA512
                          Submit Download

                          login.spa
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\Apps\login.spa
                          • Size 3.9MB
                          • SHA256 ab20e5730ce3e31c1b8f0ba62fab40a20205d9faf2c8c748d0f02330c181609b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Spotify.dll
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.dll
                          • Size 40.5MB
                          • SHA256 e3fb0cf4b033c7fd689e5a1486c3fec298c263f73868b6085ab4671b35ad538d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Spotify.exe
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe
                          • Size 2.8MB
                          • SHA256 31a16d06a39339c3b9befef9089b17e4a45b946bccae668b569157ee244b2a7c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          chrome_100_percent.pak
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_100_percent.pak
                          • Size 705KB
                          • SHA256 2c7dd3dc856c0389e56690e6c1bd3c509be950b95831972d5b4a78422cc14a3b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          chrome_200_percent.pak
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_200_percent.pak
                          • Size 1.2MB
                          • SHA256 b65200138ef17d5a462da4f11ed93e98a779efa8260454a6d4266205ebbd4caf
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          chrome_elf.dll
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\chrome_elf.dll
                          • Size 2.4MB
                          • SHA256 24eafefff6b2d53bc408ee41b0607229c111afa07dbdc04d71ad5a25b43027c2
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          crash_reporter.cfg
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\crash_reporter.cfg
                          • Size 632B
                          • SHA256 33f70749cdc5ecd6bb047147a2e767d7a279c631f6524ebb1b1df60e6bf93d6e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          d3dcompiler_47.dll
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\d3dcompiler_47.dll
                          • Size 4.5MB
                          • SHA256 3b01ff1bc4a18b63a790c5f6de8e17573de4c5280570ad8677a7767fad304af2
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          icudtl.dat
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\icudtl.dat
                          • Size 10.3MB
                          • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          libEGL.dll
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\libEGL.dll
                          • Size 504KB
                          • SHA256 f9ee6e166b95763900af0937ada47b11c5d1129f49f7dfeadaa18fb10d0b1efd
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          libglesv2.dll
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\libglesv2.dll
                          • Size 7.5MB
                          • SHA256 630a0e4217d83078b074a1d66e4a4723f9e4f310b24ba0e6a8c3092837b851d1
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          en-US.pak
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en-US.pak
                          • Size 577KB
                          • SHA256 76572fbc138ae74d2f2ecdb3dc8924d54f92745db7ee8eb8e8ad7dc4eb576825
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          en.mo
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\en.mo
                          • Size 16KB
                          • SHA256 ea9d1bcb4a56f14a2fe7e4b214e3826c4619e6abe55cc90f42b6af579c06d83b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          zh-Hant.mo
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\locales\zh-Hant.mo
                          • Size 16KB
                          • SHA256 75cdeb4157d44565f56e900476bf34b7760a148a3bfdb826045adff24e96615a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          resources.pak
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\resources.pak
                          • Size 17.8MB
                          • SHA256 e3a6200122f362e77bee9418fec7469202c81852807f7dd70b021ed600374215
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          v8_context_snapshot.bin
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\v8_context_snapshot.bin
                          • Size 16.8MB
                          • SHA256 148fb1b705a31315ee286cfc344c9e0279d0cd43d386ae4f381e7846a34e434b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          vk_swiftshader.dll
                          • Path C:\Users\Admin\AppData\Roaming\Spotify\vk_swiftshader.dll
                          • Size 5.2MB
                          • SHA256 a92fba6360ddc71779d8ec480f21d4959f5f6c10db24741e19c6ddb0d6ffe85e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          memory/1612-450-0x000002962B0F0000-0x000002962D9A4000-memory.dmp
                          Download

                          memory/1796-578-0x000001EA431B0000-0x000001EA45A64000-memory.dmp
                          Download

                          memory/2796-620-0x0000028BE8EE0000-0x0000028BEB794000-memory.dmp
                          Download

                          memory/4376-406-0x00007FFC272B0000-0x00007FFC272B1000-memory.dmp
                          Download

                          memory/4376-407-0x00007FFC280A0000-0x00007FFC280A1000-memory.dmp
                          Download

                          memory/5900-446-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-341-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-342-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-611-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-344-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-634-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-638-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-457-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download

                          memory/5900-654-0x00000199D7100000-0x00000199D99B4000-memory.dmp
                          Download