Overview

overview

7

Static

static

3

2026-10-10...nj.exe

windows10-2004-x64

7

2026-10-10...nj.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/10/2026, 02:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-10_cc5fee394fc6cbbd98a7e6f11add17cc_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
  • Size 6.2MB
  • Sample261011-chh89stygv
  • SHA256 92146955d1c3681225c642aab911c8ec98c18674ecf9a2a72d35401ebec0c0ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryspywarestealertrojanupx

Malware Config

Signatures

  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Drops file in System32 directory 40 IoCs
  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies system certificate store 2 TTPs 1 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 44 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-10_cc5fee394fc6cbbd98a7e6f11add17cc_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-10_cc5fee394fc6cbbd98a7e6f11add17cc_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"
    1⤵
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies trusted root certificate store through registry
    • Reads the TCP/IP host and domain name from the registry
    • Checks processor information in registry
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:848
    • C:\Users\Admin\AppData\Local\Temp\2026-10-10_cc5fee394fc6cbbd98a7e6f11add17cc_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
      C:\Users\Admin\AppData\Local\Temp\2026-10-10_cc5fee394fc6cbbd98a7e6f11add17cc_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
      2⤵
      • Loads dropped DLL
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Reads the TCP/IP host and domain name from the registry
      • Checks SCSI registry key(s)
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5144
      • C:\Users\Admin\AppData\Local\Temp\steamsysinfo.exe
        C:\Users\Admin\AppData\Local\Temp\steamsysinfo.exe -steamid 0 -buildid 1788652215 -logdir C:\Users\Admin\AppData\Local\Temp\logs -nocrashdialog -query 1 -out-file C:\Users\Admin\AppData\Local\Temp\74B4.tmp
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4476
      • C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe
        C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe -nocrashdialog "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=5144" "-buildid=1788652215" "-steamid=0" "-logdir=C:\Users\Admin\AppData\Local\Temp\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Users\Admin\AppData\Local\Temp\clientui" "-steampath=C:\Users\Admin\AppData\Local\Temp\2026-10-10_cc5fee394fc6cbbd98a7e6f11add17cc_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling "--log-file=C:\Users\Admin\AppData\Local\Temp\logs\cef_log.txt" --disable-quick-menu --disable-component-update "--gaia-url=http://disabled.invalid" "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=WinRetrieveSuggestionsOnlyOnDemand,SpareRendererForSitePerProcess,DcheckIsFatal,BlockPromptsIfIgnoredOften,WebUsbDeviceDetection,ValveFFmpegAllowLowDelayHEVC"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • Checks processor information in registry
        • Enumerates system info in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:9428
        • C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe
          "C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe" --type=gpu-process --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1852,i,11558023265531902853,17369663303109566455,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=1340 --mojo-platform-channel-handle=1848 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2720
        • C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe
          "C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=2152,i,11558023265531902853,17369663303109566455,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=2164 --mojo-platform-channel-handle=2160 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Time Discovery
          PID:13944
        • C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe
          "C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=2248,i,11558023265531902853,17369663303109566455,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=2272 --mojo-platform-channel-handle=2268 /prefetch:13
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:13608
        • C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe
          "C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --gaia-url=http://disabled.invalid --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4144,i,11558023265531902853,17369663303109566455,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4164 --mojo-platform-channel-handle=4160 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:8324
        • C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe
          "C:\Users\Admin\AppData\Local\Temp\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=5140,i,11558023265531902853,17369663303109566455,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5200 --mojo-platform-channel-handle=5196 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          PID:5668
      • C:\Users\Admin\AppData\Local\Temp\bin\gldriverquery64.exe
        .\bin\gldriverquery64.exe
        3⤵
        • Executes dropped EXE
        PID:8076
      • C:\Users\Admin\AppData\Local\Temp\bin\gldriverquery.exe
        .\bin\gldriverquery.exe
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3116
      • C:\Users\Admin\AppData\Local\Temp\bin\vulkandriverquery64.exe
        .\bin\vulkandriverquery64.exe
        3⤵
        • Executes dropped EXE
        PID:944
      • C:\Users\Admin\AppData\Local\Temp\bin\vulkandriverquery.exe
        .\bin\vulkandriverquery.exe
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1244
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004EC
    1⤵
      PID:7784
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
      1⤵
        PID:14616
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
        1⤵
        • Modifies data under HKEY_USERS
        PID:14236

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            elevation_service.exe
            • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
            • Size 2.9MB
            • SHA256 c6813c3d16e6a7d100ae7006a6b4c72f84281a9d87236200ea18c17629e3f7e2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            maintenanceservice.exe
            • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
            • Size 1017KB
            • SHA256 217e9133823f11215b0584222c1fec7be434a32d562f4fbe0f8dfe9465c3c9c7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevation_service.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            • Size 3.0MB
            • SHA256 5088274f9bd9a53d9078c3b6136fe6b9817659a49342c27a46d1f852f52bf51a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            MsSense.exe
            • Path C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe
            • Size 1.2MB
            • SHA256 5b43aea0dee4d287e8e8ccb9dc2e14a401aa0c436ce8d25c1409969e8f238888
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            7c01f44d-22c5-4aa6-95fd-0fd84cab2f12.tmp
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\7c01f44d-22c5-4aa6-95fd-0fd84cab2f12.tmp
            • Size 2KB
            • SHA256 6cc557069af9b98bd5c3b363b36ac7e511f73cff0f3a1c112667989ca3b71a30
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            7dc7a564-9fb9-4d1b-8619-c5f8429e145e.tmp
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\7dc7a564-9fb9-4d1b-8619-c5f8429e145e.tmp
            • Size 1KB
            • SHA256 b94ba61af9de7fba145ebb74d4ec04a5254a80876891dcd6ae84cbe85fe4057a
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            9379bdc1-2d00-4c2b-b838-51d9068318bb.tmp
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\9379bdc1-2d00-4c2b-b838-51d9068318bb.tmp
            • Size 2KB
            • SHA256 cf399a57d87ad57ab3444bbe85fa8073896cc4c1ced6a0a3848f1f6441f66ae9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            data_0
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_2
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_3
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            temp-index
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\temp-index
            • Size 384B
            • SHA256 5642feb7cc69f43ab9c448c5337fad7dee16023a4b3130b8c56cf64ea671b914
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            the-real-index
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index
            • Size 48B
            • SHA256 b02ff0049e5e9939a567f3ceb1aded3092953b9e4c012a471e714842b33f9d17
            • MD5 SHA1 SHA512
            Submit Download

            data_1
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\DawnWebGPUCache\data_1
            • Size 264KB
            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            SCT Auditing Pending Reports
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\SCT Auditing Pending Reports
            • Size 2B
            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
            • MD5 SHA1 SHA512
            Submit Download

            TransportSecurity
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
            • Size 188B
            • SHA256 4a6755ba2b3e62a2ed0c812b9f1ee88ee960a62edd5f9dfb32f4e9a84cbee59e
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            b94b08b3-a1aa-4988-9c2b-bdaf4aad9767.tmp
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\b94b08b3-a1aa-4988-9c2b-bdaf4aad9767.tmp
            • Size 188B
            • SHA256 40eeb8433dbe3d6210f413bbcf2798850b4146c3dffda8d860c93e8c1b27c0e9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Preferences
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences
            • Size 7KB
            • SHA256 90ecf4ea4de783074db7224044c67a43f535cab84648f660a0c64896599df4e2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            CURRENT
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Site Characteristics Database\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512
            Submit Download

            MANIFEST-000001
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Sync Data\LevelDB\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512
            Submit Download

            f7195eb6-c58f-43a6-9c9b-6253c4530ed5.tmp
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\f7195eb6-c58f-43a6-9c9b-6253c4530ed5.tmp
            • Size 7KB
            • SHA256 bd300407295f81d306ba0001ac9ce370edc6394d99d659b9b7dae585572d0e63
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Local State
            • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
            • Size 890B
            • SHA256 8abc31a68d38b4977088bf02f2d8daa451e83f27c5684a59908dbfc3c42bd6cb
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            SDL3.dll
            • Path C:\Users\Admin\AppData\Local\Temp\SDL3.dll
            • Size 2.9MB
            • SHA256 e453238bb31d593a87e7de87f1f5985fa11d2f9ed12a83fc65c9a52857a30118
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chromehtml.DLL
            • Path C:\Users\Admin\AppData\Local\Temp\bin\chromehtml.DLL
            • Size 1.6MB
            • SHA256 801849f46eda2b405f722af36b8bc9eb99e7aa4c9b79528acb7e3ce4033e4fbb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            filesystem_stdio.dll
            • Path C:\Users\Admin\AppData\Local\Temp\bin\filesystem_stdio.dll
            • Size 258KB
            • SHA256 d551f864ef465b4632ee2943b649157bc1f8b150da928022bdd4943779b13d95
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vgui2_s.DLL
            • Path C:\Users\Admin\AppData\Local\Temp\bin\vgui2_s.DLL
            • Size 4.0MB
            • SHA256 5c47ddabf2dd087d7bcc35ca558759e45f1c83fe874f122ec168a041e8e502f5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            config.vdf
            • Path C:\Users\Admin\AppData\Local\Temp\config\config.vdf
            • Size 117B
            • SHA256 a3d8a2cba6e356e02c0f33b50e3a9e61d2f9dfb6a26b5983e30e7786da95dba7
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            config.vdf.async5144.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\config\config.vdf.async5144.tmp
            • Size 1KB
            • SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            config.vdf.async5144.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\config\config.vdf.async5144.tmp
            • Size 12KB
            • SHA256 854b31ff986a2f5bf3e74c942b324b95483060a547c9d22f1ccec6620a58b08a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            config.vdf.async5144.tmp
            • Path C:\Users\Admin\AppData\Local\Temp\config\config.vdf.async5144.tmp
            • Size 1KB
            • SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            crashhandler64.dll
            • Path C:\Users\Admin\AppData\Local\Temp\crashhandler64.dll
            • Size 485KB
            • SHA256 8b501830a276920a8b77935489a2603d38418f71e3569aa72e12a1553d959bcb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libavcodec-62.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libavcodec-62.dll
            • Size 7.2MB
            • SHA256 59cd1cab28cc8cbffd0b6cf0afc7c2b00ee650c3d25eaa2847347c7fe3188305
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libavfilter-11.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libavfilter-11.dll
            • Size 1.0MB
            • SHA256 2d97b666632dde8c8f29ce55999e77318c5852cfb88564f6c39ee5d3c651a790
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libavformat-62.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libavformat-62.dll
            • Size 2.2MB
            • SHA256 3f2bfa0c595523aca218d00302a7ba6be2b2123ad3f777c5bb04dd2d9497426a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libavutil-60.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libavutil-60.dll
            • Size 2.3MB
            • SHA256 93c6c86eb17cf92d0c18a93f55fef2904142f9bcfbd97278052e6ebc0a71fa4b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libpyrowave-shared-0.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libpyrowave-shared-0.dll
            • Size 2.2MB
            • SHA256 9a5641669a35ef320bc8c8c59ef44ed6f57d783d5f64dd4bf3382e435cc553f9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libswresample-6.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libswresample-6.dll
            • Size 805KB
            • SHA256 d9f663184904ad342c2f4a28b8f5d431856f24b32a5c83b231759c75ed38dcd6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libswscale-9.dll
            • Path C:\Users\Admin\AppData\Local\Temp\libswscale-9.dll
            • Size 2.2MB
            • SHA256 e54dbe70f94dd1a4b66c75270a6641c03b2174be0ecd345843316ab080dad70a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bootstrap_log.txt
            • Path C:\Users\Admin\AppData\Local\Temp\logs\bootstrap_log.txt
            • Size 13KB
            • SHA256 44621a11cf1ee07942988648bdc65a5267814dc2d99bcf15ed0969fa7d923d8d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            service_log.txt
            • Path C:\Users\Admin\AppData\Local\Temp\logs\service_log.txt
            • Size 622B
            • SHA256 86a6ad9172a7d8a54ef52e39aeb1ec2e318a174a9dfd2b806fc3dd69f7c11cee
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            service_log.txt
            • Path C:\Users\Admin\AppData\Local\Temp\logs\service_log.txt
            • Size 1KB
            • SHA256 fd512e3d5a8b8860660c83ea209a99619f123d169a3d7369c5ffedbf40b91c33
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            bins_codecs_win64.zip.vz.35b83f52f249adff8541b3e60d2a6319d5b87d7b_7157231
            • Path C:\Users\Admin\AppData\Local\Temp\package\bins_codecs_win64.zip.vz.35b83f52f249adff8541b3e60d2a6319d5b87d7b_7157231
            • Size 6.8MB
            • SHA256 8eb9769a5d6ae5b2de8ea3f8abd9dfef6c8f293fa71f3b09f2ecd44de17a9352
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bins_hardware_all.zip.vz.dcb53dfc4c4bccf27b728f25623a5616a02476be_300230
            • Path C:\Users\Admin\AppData\Local\Temp\package\bins_hardware_all.zip.vz.dcb53dfc4c4bccf27b728f25623a5616a02476be_300230
            • Size 293KB
            • SHA256 729e8ed9778e0b2c2b59584cdc8279c4d1d4d327a9ce6da633c759a6cb1f8a60
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bins_hardware_win64.zip.827a01a60b8b7fd6c3df0f00c938f6c97b03276b
            • Path C:\Users\Admin\AppData\Local\Temp\package\bins_hardware_win64.zip.827a01a60b8b7fd6c3df0f00c938f6c97b03276b
            • Size 8.1MB
            • SHA256 0c6dbf35a61502b59da0477e09aa212b0acf0ef542815eb5f357feb264dadc62
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bins_misc_win64.zip.vz.e2637e9bd96e34cf631207ff3d7bfd52384d6404_12169864
            • Path C:\Users\Admin\AppData\Local\Temp\package\bins_misc_win64.zip.vz.e2637e9bd96e34cf631207ff3d7bfd52384d6404_12169864
            • Size 11.6MB
            • SHA256 954f93cc81ea2e09f032e886dc91ec986d81d9d8a30f771ab27357814625e2fb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bins_webhelpers_win64.zip.vz.25a2b2f7ff8960a3452872f2df4399e8bfbf315c_2722442
            • Path C:\Users\Admin\AppData\Local\Temp\package\bins_webhelpers_win64.zip.vz.25a2b2f7ff8960a3452872f2df4399e8bfbf315c_2722442
            • Size 2.6MB
            • SHA256 a775e183d51d18fd0db5fcab7c58ee8539614bfc7dcdca58c156e8148c1799cd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bins_win64.zip.vz.3e6ac61bd8898dfa1b77c3cb3c20764b7844e8f1_35119276
            • Path C:\Users\Admin\AppData\Local\Temp\package\bins_win64.zip.vz.3e6ac61bd8898dfa1b77c3cb3c20764b7844e8f1_35119276
            • Size 33.5MB
            • SHA256 90bbf86f1cf8dd35cc367306046bff86f45f9561373481b22f3c757f6cb6085f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            public_all.zip.vz.5d83c6bb185da9ee8d436a321494c116cefe0b76_24176105
            • Path C:\Users\Admin\AppData\Local\Temp\package\public_all.zip.vz.5d83c6bb185da9ee8d436a321494c116cefe0b76_24176105
            • Size 23.1MB
            • SHA256 f2a43136a474aabd52fbf7f6655be6cd32e8448c1b8d0b38046119c6254c377a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            resources_all.zip.vz.ef4c575e0ebeda2c391b9e56182d51ce688f222e_3488108
            • Path C:\Users\Admin\AppData\Local\Temp\package\resources_all.zip.vz.ef4c575e0ebeda2c391b9e56182d51ce688f222e_3488108
            • Size 3.3MB
            • SHA256 e3b3d053d2a4ac25a2d6175bb5df98726c046393090d8c7bbffcc85e03a297f1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            resources_hidpi_all.zip.vz.3de815c3117712cb9eeb7ea4c8b275faf481dcfd_56342
            • Path C:\Users\Admin\AppData\Local\Temp\package\resources_hidpi_all.zip.vz.3de815c3117712cb9eeb7ea4c8b275faf481dcfd_56342
            • Size 55KB
            • SHA256 e9cfba9af633e9d216a0cde97b1177d4cbca2a1aca7e83aaf38655dbd9be4b7d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            resources_misc_all.zip.vz.e86a975545f3ab21a77373870cb311ef93934b8c_2224876
            • Path C:\Users\Admin\AppData\Local\Temp\package\resources_misc_all.zip.vz.e86a975545f3ab21a77373870cb311ef93934b8c_2224876
            • Size 2.1MB
            • SHA256 5e9ca0aac16b4d5caa2ac77ab2ce239e8dbcabe5ba6f0565112239ebb127ab2b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steam_client_metrics.bin
            • Path C:\Users\Admin\AppData\Local\Temp\package\steam_client_metrics.bin
            • Size 3KB
            • SHA256 00729b7a24a2c2865ab04e119264b4809924714eef570f2f8012da90420d6096
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            steam_client_win64.installed
            • Path C:\Users\Admin\AppData\Local\Temp\package\steam_client_win64.installed
            • Size 499KB
            • SHA256 71b2abeb69609e1dbc264d50498ef35fd50d22555ac3d40316142d1ce89a7cf3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steam_client_win64.manifest
            • Path C:\Users\Admin\AppData\Local\Temp\package\steam_client_win64.manifest
            • Size 7KB
            • SHA256 ee29f4f7f5195bb184d883146d72d4eb05a92f6f10cffc8d176d2410c52af93a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steam_win64_steamrow.zip.vz.74f1ab66a8ecc7020a85ddaf8edd13c706cc158f_2148691
            • Path C:\Users\Admin\AppData\Local\Temp\package\steam_win64_steamrow.zip.vz.74f1ab66a8ecc7020a85ddaf8edd13c706cc158f_2148691
            • Size 2.0MB
            • SHA256 df0118e429eeffdad00ee295d1e0903af6daface256003746677be49a15e4c26
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steamui_websrc_all.zip.vz.8d4ad4b95383e93b525740841be877fb5112dc08_26806575
            • Path C:\Users\Admin\AppData\Local\Temp\package\steamui_websrc_all.zip.vz.8d4ad4b95383e93b525740841be877fb5112dc08_26806575
            • Size 25.6MB
            • SHA256 e3bc556732dade8cc71134b4daf5447cb8d0b1936d555215df8e0f4746ed847c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steamui_websrc_movies_all.zip.40e78cdda48e9a8a74baf614e0cdc7a6b96d26d1
            • Path C:\Users\Admin\AppData\Local\Temp\package\steamui_websrc_movies_all.zip.40e78cdda48e9a8a74baf614e0cdc7a6b96d26d1
            • Size 10.4MB
            • SHA256 885a32533327f0fd5ea98e6c6f13552e965cab4852dad7ce9ccf3d929d726b5b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steamui_websrc_sounds_all.zip.vz.5ba6acd8f4dfe4b93437895b20344fab5bb3ff96_3714779
            • Path C:\Users\Admin\AppData\Local\Temp\package\steamui_websrc_sounds_all.zip.vz.5ba6acd8f4dfe4b93437895b20344fab5bb3ff96_3714779
            • Size 3.5MB
            • SHA256 ac62e3d0e6213bcbdcfe973c624eda0486977dccdc4098c10b60b62e894ea93b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            strings_all.zip.vz.fab19042231d3ce5bf830364d59f0f7fddb427cd_2078909
            • Path C:\Users\Admin\AppData\Local\Temp\package\strings_all.zip.vz.fab19042231d3ce5bf830364d59f0f7fddb427cd_2078909
            • Size 2.0MB
            • SHA256 5793e1b9af785316acb86eff9b0057480bacc24d8b4c87e85f5b1ac95218faf3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            strings_en_all.zip.071a3f6839c3b8d574731101f2862d5ed72ab2e4
            • Path C:\Users\Admin\AppData\Local\Temp\package\strings_en_all.zip.071a3f6839c3b8d574731101f2862d5ed72ab2e4
            • Size 111KB
            • SHA256 fe73301f09a423c3114575b54b929c5cc0d1aacc80f1067259e551ffd1c82a07
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            tenfoot_images_all.zip.vz.193cb8c4eb4446698ea2c0a9e8c4e6b6a623dac7_5572671
            • Path C:\Users\Admin\AppData\Local\Temp\package\tenfoot_images_all.zip.vz.193cb8c4eb4446698ea2c0a9e8c4e6b6a623dac7_5572671
            • Size 5.3MB
            • SHA256 e1fee3beffa9d08a415a35ddc7d3141af6c44269c67e67aa0a3eea6e56889bd7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            btnOvrOffTop.tga_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\graphics\btnOvrOffTop.tga_
            • Size 444B
            • SHA256 ecd13153d9d438809a38de30f3abbb0f6f92837a7e3cacb442a9a9309bcd78d9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            [email protected]_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\graphics\[email protected]_
            • Size 15KB
            • SHA256 d3af480fe975487ea4754c88dd56df0d4cfe68633eb9abb2458f42ae3df34479
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            [email protected]_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\graphics\[email protected]_
            • Size 92KB
            • SHA256 f200aca23ac6739a6d521298094972383f835d8fcac24b7bdef820181ae8c37a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            icon_button_news.tga_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\graphics\icon_button_news.tga_
            • Size 20KB
            • SHA256 42c410136a35b64c7e0a410b1d2fd2e2712782039cd7237615219ea57d7c40fa
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            tabStdTop.tga_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\graphics\tabStdTop.tga_
            • Size 48B
            • SHA256 5caa5fa3e79dcd8ec5ec20256ed7c77efaae77e0ae8d89e4a974c484cb177d84
            • MD5 SHA1 SHA512
            Submit Download

            steam_updating.ico_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\public\steam_updating.ico_
            • Size 47KB
            • SHA256 5aaca90948de8f7d11264ed608a2f96acba061e6463d337d658b00ed1c552449
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steam_updating_posix.tga_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\public\steam_updating_posix.tga_
            • Size 64KB
            • SHA256 fd2abb8945c06a6b9c5444baf6ea523b52bf7a03a58b34ebe0a6a110630ed5f8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            filter_banned_thai.txt.gz_
            • Path C:\Users\Admin\AppData\Local\Temp\package\tmp\resource\filter_banned_thai.txt.gz_
            • Size 23B
            • SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
            • MD5 SHA1 SHA512
            Submit Download

            steambootstrapper_english.txt
            • Path C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_english.txt
            • Size 4KB
            • SHA256 fbc09c1b9a55d04b57be8fb2ad5ab58b38f76054ecd3d1b70440a2d08191b05b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steamsysinfo.exe
            • Path C:\Users\Admin\AppData\Local\Temp\steamsysinfo.exe
            • Size 1.4MB
            • SHA256 907ca4dbc4736ce61798021a7b1d0f4579d8165c8a4124c1db2a18b5dbc92f71
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            steamui.dll
            • Path C:\Users\Admin\AppData\Local\Temp\steamui.dll
            • Size 18.1MB
            • SHA256 cb387adefbbac64a3c1490d4275d00daf3a1e0219b4580726ef7681db7429278
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            tier0_s64.dll
            • Path C:\Users\Admin\AppData\Local\Temp\tier0_s64.dll
            • Size 879KB
            • SHA256 30f7bb8d9b86006852493c26124ba253bd9e7ffd40a8b3c7254f86a9032c3be3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            video64.dll
            • Path C:\Users\Admin\AppData\Local\Temp\video64.dll
            • Size 5.1MB
            • SHA256 d5b40072bf91ffb22cc6ebbf59b7b13241d4a02845329f0a4d44453381106fe5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vstdlib_s64.dll
            • Path C:\Users\Admin\AppData\Local\Temp\vstdlib_s64.dll
            • Size 476KB
            • SHA256 99efb4c2ad47f90c803b5ee0bd6424916b28facb9fa2568845b1b1f58a36062a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            9ad4b08227843b8.bin
            • Path C:\Users\Admin\AppData\Roaming\9ad4b08227843b8.bin
            • Size 12KB
            • SHA256 0331448f7ce3318a6ced81745a37c3b6b2b801e24e3476e6032dc3fc84b52358
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            perfhost.exe
            • Path C:\Windows\SysWow64\perfhost.exe
            • Size 778KB
            • SHA256 10ace0525ff31a16f4f273299eba17119aa8b1c0ed8118637f9a9f3f571eb030
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            GameInputSvc.exe
            • Path C:\Windows\System32\GameInputSvc.exe
            • Size 832KB
            • SHA256 7ca703eee87481caddd69444d6073debeed2e7e2642de4d7ce72392c213dfac9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ReFsDedupSvc.exe
            • Path C:\Windows\System32\ReFsDedupSvc.exe
            • Size 2.8MB
            • SHA256 f13b71330b97551543316ea580866aa16de589378786b7254abba246ea1a8363
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SensorDataService.exe
            • Path C:\Windows\System32\SensorDataService.exe
            • Size 1.9MB
            • SHA256 6605057c058100429a1dffd4f7c46b763f28a916f9264d5de0983c31ed858a47
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            alg.exe
            • Path C:\Windows\System32\alg.exe
            • Size 948KB
            • SHA256 cf3f4212ca27b7b4f377ce66da08c634185dfc7ab1662102f34406e68ba3e9de
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            msdtc.exe
            • Path C:\Windows\System32\msdtc.exe
            • Size 932KB
            • SHA256 b459de26be3cbb42ec820a9155513165d408d6ff18fc9ea6f2a3208edd8091a0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            snmptrap.exe
            • Path C:\Windows\System32\snmptrap.exe
            • Size 804KB
            • SHA256 3eee05804085aecd655409b8ffc6f16fb4c1b802513f17f056f4dc4a1c88e767
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            AppVClient.exe
            • Path C:\Windows\system32\AppVClient.exe
            • Size 1.5MB
            • SHA256 5f540e1449677301ca02253c1a24e0a74286c89737ff0ebf29e2f77c546b56df
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            PerceptionSimulationService.exe
            • Path C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
            • Size 1000KB
            • SHA256 0346705b24148bbb2da9000c798906c63b754ba9187512026ccdbdfe32c96113
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            SgrmBroker.exe
            • Path C:\Windows\system32\Sgrm\SgrmBroker.exe
            • Size 1.1MB
            • SHA256 bef4102a27d68be9f0e51b806db1244f71cb80576f5a4906b8d02a162b60d729
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            locator.exe
            • Path C:\Windows\system32\locator.exe
            • Size 796KB
            • SHA256 ad4163b1b5636f8308d6563d1ae9e3a5e82ba6f19eeed8ae852e1903bc9b46b7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            msiexec.exe
            • Path C:\Windows\system32\msiexec.exe
            • Size 940KB
            • SHA256 c139ecaf67f18b512997a039fa30d39a9daeffd3918cc47e3c09b13648dd928c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            OSE.EXE
            • Path \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
            • Size 997KB
            • SHA256 a2fe86dce172d05b08b9dca13c0de74385795772fa06acd8bec4e78429c406fd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/848-3-0x0000027598940000-0x00000275989C3000-memory.dmp
            Download

            memory/848-6654-0x0000027598940000-0x00000275989C3000-memory.dmp
            Download

            memory/848-0-0x00000275986C0000-0x000002759882D000-memory.dmp
            Download

            memory/848-1-0x0000027598940000-0x00000275989C3000-memory.dmp
            Download

            memory/848-2-0x0000027598940000-0x00000275989C3000-memory.dmp
            Download

            memory/5144-6951-0x00000199BCE20000-0x00000199BD1AE000-memory.dmp
            Download

            memory/5144-7046-0x00000199BCE20000-0x00000199BD1AE000-memory.dmp
            Download

            memory/5144-6656-0x00000199BB4C0000-0x00000199BB543000-memory.dmp
            Download

            memory/5144-6658-0x00000199BB4C0000-0x00000199BB543000-memory.dmp
            Download

            memory/5144-6657-0x00000199BB4C0000-0x00000199BB543000-memory.dmp
            Download

            memory/5144-7073-0x00000199BCE20000-0x00000199BD1AE000-memory.dmp
            Download

            memory/5144-6728-0x00000199BCE20000-0x00000199BD1AE000-memory.dmp
            Download

            memory/13608-6806-0x00007FFA35620000-0x00007FFA35621000-memory.dmp
            Download

            memory/13608-6807-0x00007FFA34310000-0x00007FFA34311000-memory.dmp
            Download