Analysis

  • max time kernel
    150s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 08:57

General

  • Target
    2026-09-10_efa03b6cd92707961c3ef9f5e6e82f85_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 57.0MB
  • Sample260910-kw2a1aal2x
  • SHA256 d82f045e6f07ee043ce205422a0cf5390a9b19e0aa4c245a3e6e233884e4486c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 35 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-10_efa03b6cd92707961c3ef9f5e6e82f85_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-10_efa03b6cd92707961c3ef9f5e6e82f85_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1124
    • C:\Users\Admin\AppData\Local\Temp\2026-09-10_efa03b6cd92707961c3ef9f5e6e82f85_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-10_efa03b6cd92707961c3ef9f5e6e82f85_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:3480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_bz2.pyd
        • Size 48KB
        • SHA256 7fbac6a7f6288ca56e2381972afc3de06189a904c2594ebd3078c085af2211ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_ctypes.pyd
        • Size 59KB
        • SHA256 50e11752d3b7429493ea618433b41c6ee99df2342a44d12e39af83306712f742
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\_lzma.pyd
        • Size 86KB
        • SHA256 7c9132b77a11d9722deeb793269a9847b0160ce3a65b6cd2616c53b75b37c67f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 89dd6fbea61edb8f1c934b7e5e822b4ce9bea939ff585c83c197e06a1fd8311a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 10cd6bf518350f93ab4643f701efdac851cdd7a26a0d8bcabfbb2bd273e1f529
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 d3fad206a52d9b1dd954c37a45e63e691ebc7bfe8af27a87553203fb445224ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 2859fe2fe069e5f4300dd0106733750b1c8c67ee5d8788c4556b7d21c6da651d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 fd7c5503aa81dea1de9baee318e6a53663f7a4634f42e116e83c6a0f36d11143
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 eb50cc53863c5a1c0b2fe805d9ecefef3f2dbd0e749a6cc142f89406f4ffdb10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 202b77cd363fce7c09d9a59b5779f701767c8734cc17bbe8b9ece5a0619f2225
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 f4811f251c49c9ae75f9fe25890bacede852e4f1bfdc6685f49096253a43f007
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 8e910589f3f9a27ed6ce1d4f2d579b4ef99cfa80c0bf6f59b48ba6556e1578a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 ef6657aac4aa97a57e034fd5baf4490706128ffafce7c285dc8736b1f7ee4d09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 e2d698823ba78b85d221744f38d3f9e8acccd0eedbb62c13e7d0dff4a04bd2b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 4863006b0c2aa2a39dff2050b64fbbe448b3e28a239e9e58a9a6d32f5f5a3549
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 040e1572da9a980392184b1315f27ebcdaf07a0d94ddf49cbd0d499f7cdb099a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 ff611cc2cb492c84748fa148eda80dec0cb23fc3b71828475ecea29597c26cd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 d7511eb9191a63eb293af941667aa2318fa6da79f06119b280e0b11e6b6b1d25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 070d8827798ee2aa4c2dc70d7faef8ef680eca4c46ecc2dad3ce16380cab1f82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 4297033ef8061c797127f0382df24f69264dca5c14d4f5b6cd2bcca33e26c1f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 b3c0356f64e583c8aca3b1284c6133540a8a12f94b74568fb78ddc36eac6ab15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 f6eb755c146d0a0ebf59d24fb9e1e87dc0220b31b33c6acbc8bebaf31493c785
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 5f16a1131c8f00ebbe3c4b108bd772071a2d9b4ca01b669b8aeb3ffb43dabcda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 71c0c7c163d1a3d35e74f8d7299eb38ef7268af1fa276e9a3966761212c570f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 1dda55027f7d215442e11c88a82c95f312673b7e7454569e5c969c1c24047915
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 0ea1cf78c0be94554ff7cd17a9c863c951c1e1eaa54191d7f2b0e043697c8d00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 9b82643497092524e0aed6cfbaf7467849cde82292313bbd745c61ed2fd32ea8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 1290d332718c47961052ebc97a3a71db2c746a55c035a32b72e5ff00eb422f96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 cdf7915f619a728fb64c257bfaa8257ee2353bf3c0b88214d5624931a1ac247b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 b529fed3875c6f4eecf2d9c012bc0e27cb2d124c2dd1da155f8337b4cb002030
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 6438c683e376583f6368c582ce3caab274cf3f7d7320e7f6cda427ba338847ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 612df2aaf3435c2be575581d1b2deddcef33f1b53179acff3e4ac24a0fcd3d50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 ca3e5b21f83d87a958ba7934c5e4d8e7939b2e9013fe2deaeba1f9088b4277bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 d2ed53111a652fde26c08504803f76301fce2fba04f33a7f250b5b2569e4f240
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 d42b2d466a81e8e64d8132fad0f4df61d33875449ead8d4f76732b04f74bbce6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 b8fdf7893ff152a08fbc4d3f962905da3161b0b9fe71393ab68c56199277e322
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-private-l1-1-0.dll
        • Size 74KB
        • SHA256 3ca858c49a9efca9bea5a26cf3a83a3f1fec8aa429be11dea6cf6edb17eb3819
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 fe005d1a7908e36d4fd6cb2711de251462c9bebf99e4060687df11bd0bbedc8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 d5b5c4ee347678e60af236c5e6fd6b47ad5786e080d14fdb11af0aa5740e7760
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 2a6f53be6e8b8fabbf8fcc2ac1224f70628f4ab35e0b36612a6728df7685d56a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 6c24d050afc07bc5d2ba5eb07840345569b52e97442bcc7c4413fccedc11e6c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 fe94985959fe310cafa1eb3e32f28001ef03afefd32497d0c099eb9393bf6f4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 33af8b4a4f1f9a76d5d59fdf634bb469ca9a830133a293a5eef1236b27e37e63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\base_library.zip
        • Size 1.3MB
        • SHA256 2b8b36bd4b1b0ee0599e5d519a91d35d70f03cc09270921630168a386b60ac71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\libcrypto-3.dll
        • Size 1.6MB
        • SHA256 9000e335744818665b87a16a71da5b622b5052b5341f1d6ce08ff8346d2bf3e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\libffi-8.dll
        • Size 29KB
        • SHA256 11ee9c7fb70c3756c0392843245935517171b95cc5ba0d696b2c1742c8d46fb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\libssl-3.dll
        • Size 223KB
        • SHA256 49ba508dc66c46b9e904bb5fe50cf924465eff803a9f1e4260e752b0231efcc1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\pyexpat.pyd
        • Size 87KB
        • SHA256 c55c1314e8deb33798b5a6c250ebe65a8c13f848ed2f317408264bab76e5a514
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\python3.DLL
        • Size 66KB
        • SHA256 a5bb3eb6fdfd23e0d8b2e4bccd6016290c013389e06daae6cb83964fa69e2a4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\python312.dll
        • Size 1.8MB
        • SHA256 6fc80ae7e001ddba48a4aa4f4a356754c6a19015307119b8f7edc6c099aa7eb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\select.pyd
        • Size 25KB
        • SHA256 2d8b7dfbf30db52a6acb231753ceb94f28c9f09e61758e0a12155de33b8bbfb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\tcl86t.dll
        • Size 651KB
        • SHA256 4df650d37c0e1413d0858517fc2d703e81d820ccb89d7d292b65d225413e3de7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\tk86t.dll
        • Size 647KB
        • SHA256 be8af6b18e3c08129dbb9880e13afddaa435d1d0364a6dd01fd4cad9ff49f51e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI11242\ucrtbase.dll
        • Size 1.1MB
        • SHA256 4e9e93fd6486571e1b5dce381fa536fb6c5593584d3330368ccd47ee6107bf52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3480-1121-0x00007FF9C9560000-0x00007FF9C9579000-memory.dmp

        memory/3480-1154-0x00007FF9BAC50000-0x00007FF9BAED3000-memory.dmp

        memory/3480-1069-0x00007FF9CD1A0000-0x00007FF9CD1B9000-memory.dmp

        memory/3480-1066-0x00007FF9CD1C0000-0x00007FF9CD1CF000-memory.dmp

        memory/3480-1064-0x00007FF9CD290000-0x00007FF9CD2B5000-memory.dmp

        memory/3480-1119-0x00007FF9CCBD0000-0x00007FF9CCBDD000-memory.dmp

        memory/3480-1120-0x00007FF9C8720000-0x00007FF9C8755000-memory.dmp

        memory/3480-1056-0x00007FF9BB940000-0x00007FF9BC018000-memory.dmp

        memory/3480-1122-0x00007FF9CCBC0000-0x00007FF9CCBCD000-memory.dmp

        memory/3480-1124-0x00007FF9C9490000-0x00007FF9C949D000-memory.dmp

        memory/3480-1123-0x00007FF9BB940000-0x00007FF9BC018000-memory.dmp

        memory/3480-1127-0x00007FF9BB410000-0x00007FF9BB4DD000-memory.dmp

        memory/3480-1126-0x00007FF9CD290000-0x00007FF9CD2B5000-memory.dmp

        memory/3480-1130-0x000001344DCD0000-0x000001344E1F2000-memory.dmp

        memory/3480-1133-0x00007FF9C8B70000-0x00007FF9C8B86000-memory.dmp

        memory/3480-1132-0x00007FF9C8DC0000-0x00007FF9C8DED000-memory.dmp

        memory/3480-1131-0x00007FF9CD1A0000-0x00007FF9CD1B9000-memory.dmp

        memory/3480-1129-0x00007FF9BAEE0000-0x00007FF9BB402000-memory.dmp

        memory/3480-1128-0x00007FF9CD1C0000-0x00007FF9CD1CF000-memory.dmp

        memory/3480-1125-0x00007FF9C8300000-0x00007FF9C8333000-memory.dmp

        memory/3480-1135-0x00007FF9C8390000-0x00007FF9C83A2000-memory.dmp

        memory/3480-1134-0x00007FF9CCBD0000-0x00007FF9CCBDD000-memory.dmp

        memory/3480-1138-0x00007FF9D2B80000-0x00007FF9D2B94000-memory.dmp

        memory/3480-1137-0x00007FF9D2BA0000-0x00007FF9D2BB4000-memory.dmp

        memory/3480-1136-0x00007FF9C8720000-0x00007FF9C8755000-memory.dmp

        memory/3480-1140-0x00007FF9CD430000-0x00007FF9CD54B000-memory.dmp

        memory/3480-1139-0x00007FF9CCBC0000-0x00007FF9CCBCD000-memory.dmp

        memory/3480-1142-0x00007FF9CD410000-0x00007FF9CD427000-memory.dmp

        memory/3480-1141-0x00007FF9D1580000-0x00007FF9D15A2000-memory.dmp

        memory/3480-1147-0x00007FF9CD3B0000-0x00007FF9CD3CE000-memory.dmp

        memory/3480-1146-0x00007FF9C8300000-0x00007FF9C8333000-memory.dmp

        memory/3480-1145-0x00007FF9CD3D0000-0x00007FF9CD3E1000-memory.dmp

        memory/3480-1144-0x00007FF9C1E50000-0x00007FF9C1E9A000-memory.dmp

        memory/3480-1143-0x00007FF9CD3F0000-0x00007FF9CD409000-memory.dmp

        memory/3480-1153-0x000001344DCD0000-0x000001344E1F2000-memory.dmp

        memory/3480-1072-0x00007FF9C8DC0000-0x00007FF9C8DED000-memory.dmp

        memory/3480-1152-0x00007FF9BAEE0000-0x00007FF9BB402000-memory.dmp

        memory/3480-1151-0x00007FF9BC640000-0x00007FF9BC664000-memory.dmp

        memory/3480-1150-0x00007FF9C7480000-0x00007FF9C74A7000-memory.dmp

        memory/3480-1149-0x00007FF9D1570000-0x00007FF9D157B000-memory.dmp

        memory/3480-1148-0x00007FF9BB410000-0x00007FF9BB4DD000-memory.dmp

        memory/3480-1155-0x00007FF9C2310000-0x00007FF9C2328000-memory.dmp

        memory/3480-1166-0x00007FF9C8300000-0x00007FF9C8333000-memory.dmp

        memory/3480-1184-0x00007FF9C2310000-0x00007FF9C2328000-memory.dmp

        memory/3480-1183-0x00007FF9BAC50000-0x00007FF9BAED3000-memory.dmp

        memory/3480-1182-0x00007FF9BC640000-0x00007FF9BC664000-memory.dmp

        memory/3480-1181-0x00007FF9C7480000-0x00007FF9C74A7000-memory.dmp

        memory/3480-1180-0x00007FF9D1570000-0x00007FF9D157B000-memory.dmp

        memory/3480-1179-0x00007FF9CD3B0000-0x00007FF9CD3CE000-memory.dmp

        memory/3480-1178-0x00007FF9CD3D0000-0x00007FF9CD3E1000-memory.dmp

        memory/3480-1177-0x00007FF9C1E50000-0x00007FF9C1E9A000-memory.dmp

        memory/3480-1176-0x00007FF9CD3F0000-0x00007FF9CD409000-memory.dmp

        memory/3480-1175-0x00007FF9CD410000-0x00007FF9CD427000-memory.dmp

        memory/3480-1174-0x00007FF9D1580000-0x00007FF9D15A2000-memory.dmp

        memory/3480-1173-0x00007FF9CD430000-0x00007FF9CD54B000-memory.dmp

        memory/3480-1172-0x00007FF9D2B80000-0x00007FF9D2B94000-memory.dmp

        memory/3480-1171-0x00007FF9D2BA0000-0x00007FF9D2BB4000-memory.dmp

        memory/3480-1170-0x00007FF9C8390000-0x00007FF9C83A2000-memory.dmp

        memory/3480-1169-0x00007FF9C8B70000-0x00007FF9C8B86000-memory.dmp

        memory/3480-1168-0x00007FF9BAEE0000-0x00007FF9BB402000-memory.dmp

        memory/3480-1167-0x00007FF9BB410000-0x00007FF9BB4DD000-memory.dmp

        memory/3480-1165-0x00007FF9C9490000-0x00007FF9C949D000-memory.dmp

        memory/3480-1164-0x00007FF9CCBC0000-0x00007FF9CCBCD000-memory.dmp

        memory/3480-1163-0x00007FF9C9560000-0x00007FF9C9579000-memory.dmp

        memory/3480-1162-0x00007FF9C8720000-0x00007FF9C8755000-memory.dmp

        memory/3480-1161-0x00007FF9CCBD0000-0x00007FF9CCBDD000-memory.dmp

        memory/3480-1160-0x00007FF9C8DC0000-0x00007FF9C8DED000-memory.dmp

        memory/3480-1159-0x00007FF9CD1A0000-0x00007FF9CD1B9000-memory.dmp

        memory/3480-1158-0x00007FF9CD1C0000-0x00007FF9CD1CF000-memory.dmp

        memory/3480-1157-0x00007FF9CD290000-0x00007FF9CD2B5000-memory.dmp

        memory/3480-1156-0x00007FF9BB940000-0x00007FF9BC018000-memory.dmp

        memory/3480-1185-0x000001344DCD0000-0x000001344E1F2000-memory.dmp