She cross-checked the timestamps. The dump had been created at 03:14:07 on a night the monitoring system reported nothing unusual — no spikes, no anomalous traffic. The process that produced the dump was a little-known diagnostics service, PID 8947, part of a legacy maintenance suite named 2pe: Two Phase Executor. The name matched the file prefix. The number coincidence nagged her: 2pe8947_1.dmp.