Analysis

  • user interaction
    yes
  • max time kernel
    127s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/04/2026, 22:42

General

  • Target
    XenoRAT-v1.8.7.rar
  • Size 5.3MB
  • Sample260430-2mnf8aav2t
  • SHA256 c85dec43b71f1667e3c6ffffd79410461eddd79733e90389066f38b70dbb7059
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\XenoRAT-v1.8.7.rar"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4592
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2972
    • C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\xeno rat server.exe
      "C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\xeno rat server.exe"
      1⤵
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:6100

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          sj.png

          • Path C:\Users\Admin\AppData\Local\Temp\7zE0F14AD78\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\sj.png
          • Size 1KB
          • SHA256 5bd80f95e6698c93044e18885ca1d234cc802b0b1e720d31e1d37b36eb6f4e5f
          • MD5 SHA1 SHA512 TLSH

          ad.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ad.png
          • Size 1KB
          • SHA256 6e45d3cec2a17a9b9353b68288934e7c4931a36ec271b595750bf8441afae019
          • MD5 SHA1 SHA512 TLSH

          ae.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ae.png
          • Size 687B
          • SHA256 6af9e1cb4e4c86a1d1b9f2fdb5c9a4eb554f4cfb674d8357f2e7e1086de4b4be
          • MD5 SHA1 SHA512 TLSH

          af.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\af.png
          • Size 1KB
          • SHA256 2e738e232ba262bd7b40d39f0a8ef1b68204381b0f5d97367c8b827aea9e83be
          • MD5 SHA1 SHA512 TLSH

          ag.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ag.png
          • Size 983B
          • SHA256 8cf632b5d10c24e29c68082bdba8737269f5160360985f9c306e8b20940552ac
          • MD5 SHA1 SHA512 TLSH

          ai.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ai.png
          • Size 1KB
          • SHA256 d95df82e43d2e94018a777083e68bb5a00260912037fc02243ddfe3a0a377f45
          • MD5 SHA1 SHA512 TLSH

          al.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\al.png
          • Size 757B
          • SHA256 2e005216be2a847983ebe9a5a4b4ff2936c9008cc7c925ed7059350d4fcf370d
          • MD5 SHA1 SHA512 TLSH

          am.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\am.png
          • Size 887B
          • SHA256 484fb381d03d5e519fab2c4dde2b78f13e67594713dcf4083a55d713a1eddae7
          • MD5 SHA1 SHA512 TLSH

          ao.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ao.png
          • Size 734B
          • SHA256 27e99589098bf031636fa0eae8ad7881e54181978135375c7f599f6e49fa8fa6
          • MD5 SHA1 SHA512 TLSH

          aq.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\aq.png
          • Size 793B
          • SHA256 956390e90c1a201ed454b741eead49964393c3026d5882c47b02f564c7c94564
          • MD5 SHA1 SHA512 TLSH

          ar.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ar.png
          • Size 830B
          • SHA256 8438d5e69e23edc2054c6ca8f5b5eae4bbda37adec341a2f63e44ec7af2ee3ae
          • MD5 SHA1 SHA512 TLSH

          as.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\as.png
          • Size 1KB
          • SHA256 4c4d9b46ee8b8648976fbf45f3baa20f1d2bd81d955f4ad12e5f185f0184bec0
          • MD5 SHA1 SHA512 TLSH

          at.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\at.png
          • Size 651B
          • SHA256 f9167d1381d27d03c461b8d467406b08b1ec1ca128ef455224a79a54ef1c4cba
          • MD5 SHA1 SHA512 TLSH

          au.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\au.png
          • Size 1KB
          • SHA256 515102fb7dab425bb3492eaa94e7ac51306d93d01dc8fa83aaf7ad9d3df00b62
          • MD5 SHA1 SHA512 TLSH

          aw.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\aw.png
          • Size 1KB
          • SHA256 88dfe3018ff9550227b65d71eb80ca826e77cd760b12790fcd84bb6c2a6ea79a
          • MD5 SHA1 SHA512 TLSH

          ax.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ax.png
          • Size 1KB
          • SHA256 f81df1b62a4476dbbc0237f024f18bb509c62037c319fb252b86d8de8d59d122
          • MD5 SHA1 SHA512 TLSH

          az.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\az.png
          • Size 1KB
          • SHA256 95df1829f101a8f4adc6e3e7f4e1f8d6224cc0b8127729032d645b26cca7b0fd
          • MD5 SHA1 SHA512 TLSH

          ba.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ba.png
          • Size 1KB
          • SHA256 7b523c68fefe0a7df99e8703980206e728d3c339e1326b70824292ce654097ff
          • MD5 SHA1 SHA512 TLSH

          bb.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bb.png
          • Size 963B
          • SHA256 a944e7cce43b21f0780eb94a8a1571ab233b2b73222cba01cfccaef9734a064f
          • MD5 SHA1 SHA512 TLSH

          bd.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bd.png
          • Size 764B
          • SHA256 02f8bff79a1eb5201547755ec8fc8611b605fa8a85c225c38de7578040976cca
          • MD5 SHA1 SHA512 TLSH

          be.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\be.png
          • Size 654B
          • SHA256 968ad30023dbefef58409fb7e86d7ff43f9207ad136444a4cddcf2a29a7602e9
          • MD5 SHA1 SHA512 TLSH

          bf.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bf.png
          • Size 766B
          • SHA256 053a5ac85416b8c8355ba613b79325ff8734f3ac16305616ac2bcfcde95a8fe6
          • MD5 SHA1 SHA512 TLSH

          bg.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bg.png
          • Size 765B
          • SHA256 963e10d9f42d27225a514bc1fb89aeb77ab258cb278e4850b2207d80d572ae74
          • MD5 SHA1 SHA512 TLSH

          bh.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bh.png
          • Size 747B
          • SHA256 ab9af1e42b20793174222b3755837cf06b574dba14b9c939db7ef01dc4ccb277
          • MD5 SHA1 SHA512 TLSH

          bi.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bi.png
          • Size 1KB
          • SHA256 0bf069eadc836e452702cb7217a85bcf4df656702155c96414b272bab0321a8b
          • MD5 SHA1 SHA512 TLSH

          bj.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bj.png
          • Size 853B
          • SHA256 5bcaef0b2129ee077c6a45fad9614b1c20fa7087e20a9a85e4146dbe47cab7b0
          • MD5 SHA1 SHA512 TLSH

          bl.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bl.png
          • Size 1KB
          • SHA256 750e0d9fb423608a1de413c843cbec1ac8d2e3e82d6a2531afcf2a472f899515
          • MD5 SHA1 SHA512 TLSH

          bm.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bm.png
          • Size 1KB
          • SHA256 42bd53dba164f119c44148e6c9bc28c0b92220800a007d499f253d1ae438c72d
          • MD5 SHA1 SHA512 TLSH

          bn.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bn.png
          • Size 1KB
          • SHA256 5e9484dbc8a347b857258606d4705394f7ba8aa6f10b53b5dc58e55524ad39a7
          • MD5 SHA1 SHA512 TLSH

          bo.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bo.png
          • Size 1015B
          • SHA256 ce52a198a07350d5d0fcdd55e914aea5ad81d2ec10e39e76b32255631017f838
          • MD5 SHA1 SHA512 TLSH

          bq.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bq.png
          • Size 1002B
          • SHA256 a9d2823ef28a3f87d60526f7d71ca2df41dab1ab0adaab11409e05e8e5207971
          • MD5 SHA1 SHA512 TLSH

          br.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\br.png
          • Size 1KB
          • SHA256 ba2c9ed05d5e1d7c6b8a460f1f21d6630938d179eb38a2e59a5841ec5afea543
          • MD5 SHA1 SHA512 TLSH

          bs.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bs.png
          • Size 877B
          • SHA256 8c6827bd280ef162aff6b42c25416a61daf36c0982862dc5cac9d31480f79ab0
          • MD5 SHA1 SHA512 TLSH

          bt.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bt.png
          • Size 1KB
          • SHA256 5cb7a5818b14e0d879a9b91aeecd9c64c6dab2f468a8147b86b117f6cd43d311
          • MD5 SHA1 SHA512 TLSH

          bw.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bw.png
          • Size 851B
          • SHA256 ba18f482f566315edc8db6e8874fdec95731f9e46cda105092080ca02f0c2540
          • MD5 SHA1 SHA512 TLSH

          by.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\by.png
          • Size 1002B
          • SHA256 25a1fb58dec67ada5090771415da58ea598ae629f28e52420ba53f5f59d0504d
          • MD5 SHA1 SHA512 TLSH

          bz.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\bz.png
          • Size 1KB
          • SHA256 91327f9a8a46a2a660f70fd22ad589b9ae07b8617ee21d24dc0360d6b00ff0b2
          • MD5 SHA1 SHA512 TLSH

          ca.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ca.png
          • Size 747B
          • SHA256 7b4509c54260961e637aa3e44c3c911631137ce300ebcea5cac297286023ec93
          • MD5 SHA1 SHA512 TLSH

          cc.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cc.png
          • Size 961B
          • SHA256 0156d11191c6c7cf9164cfadb164b07d15ccc2b4e07182714d0c44a7f29a8451
          • MD5 SHA1 SHA512 TLSH

          cd.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cd.png
          • Size 1KB
          • SHA256 0890c7a0ca097f03cb9c09f24ab2e55a1ab234635eaf0b6c2e98e0afaf60e43c
          • MD5 SHA1 SHA512 TLSH

          cf.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cf.png
          • Size 1KB
          • SHA256 5ad829236ef89cc8d9d8ff4bae28cc4066186d3520194bc91ae3d2e050308e33
          • MD5 SHA1 SHA512 TLSH

          cg.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cg.png
          • Size 918B
          • SHA256 1003afdd38cdfa5c45aa8977b8f0906260ebb4d4063cf5bbf2bdeba4b797f694
          • MD5 SHA1 SHA512 TLSH

          ch.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ch.png
          • Size 554B
          • SHA256 4c1725303c045742c8521d0d534bd4246f909f9c289e861c0edacbe0b97ca118
          • MD5 SHA1 SHA512 TLSH

          ci.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ci.png
          • Size 862B
          • SHA256 fcca98be86a64a9ec6263fbcc5d5e2597a29e97217a1828080c868d8a470d548
          • MD5 SHA1 SHA512 TLSH

          ck.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\ck.png
          • Size 1KB
          • SHA256 b6d57adbb3af27167f9f3ec627e62241ee43ad2d9a7e8e2d67351d2e7cbc2ad0
          • MD5 SHA1 SHA512 TLSH

          cl.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cl.png
          • Size 795B
          • SHA256 f3fea7c8853556f3400d6b92e1aada01c8798db5a53f46aa4ac7fd83562d0df4
          • MD5 SHA1 SHA512 TLSH

          cm.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cm.png
          • Size 887B
          • SHA256 e7372b1387febacd6e1612ff16f6fce0d178d7c5e0cc3e766002f147a4aef2d7
          • MD5 SHA1 SHA512 TLSH

          cn.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cn.png
          • Size 606B
          • SHA256 fa710c79afe55745037b1a612d07da1ba8769f873d831c2a23e9bd9551506766
          • MD5 SHA1 SHA512 TLSH

          co.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\co.png
          • Size 755B
          • SHA256 c2f4b317bf02f350ec7bb702aac74773e507b7fd98355fb627a78dc151f49174
          • MD5 SHA1 SHA512 TLSH

          cr.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cr.png
          • Size 1KB
          • SHA256 b647da7d99324398f05ace095cdf649af7a8d0b8215a6d6e87c014ec086e1c11
          • MD5 SHA1 SHA512 TLSH

          cu.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cu.png
          • Size 1008B
          • SHA256 20fc676b177ba0c1b33cd0050827b4e4e89ce64392b0809a592805941690912f
          • MD5 SHA1 SHA512 TLSH

          cv.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cv.png
          • Size 1KB
          • SHA256 ff4e1b3f2aa07112bb91273661e2befcbab62ee5e97787102c8e740f5129d471
          • MD5 SHA1 SHA512 TLSH

          cw.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cw.png
          • Size 849B
          • SHA256 7d27a58f38f1a3797f66cf2a698ee8dde6ff4d62c9ca92372597c1a91c92636f
          • MD5 SHA1 SHA512 TLSH

          cx.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cx.png
          • Size 1KB
          • SHA256 6e6277b289069be927bbef8105762c0803eed6eda2aac7c9c2a3d996e60ecae2
          • MD5 SHA1 SHA512 TLSH

          cy.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cy.png
          • Size 713B
          • SHA256 b8d7915e9134ab5755d7433ba275ff6f9089c61e3cdf053efb4e519bc0ce716b
          • MD5 SHA1 SHA512 TLSH

          cz.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\cz.png
          • Size 782B
          • SHA256 2d31ccabf409c6862326dcd33da1a56a159ff863f50663c0b8104178dcbf45cf
          • MD5 SHA1 SHA512 TLSH

          de.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\de.png
          • Size 685B
          • SHA256 78c21cd2704d967df4a1878d68ae58c2d33dca5a5934fcddddac481ed41021ec
          • MD5 SHA1 SHA512 TLSH

          dj.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\dj.png
          • Size 995B
          • SHA256 e8016ba146e5b60c9097931ed7c1fbe4e31157e2eb31e00abef2bdd398ab44b0
          • MD5 SHA1 SHA512 TLSH

          dk.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\dk.png
          • Size 838B
          • SHA256 729184946d1a715e93f7c233d84b17d5dd0a3fa8bfca00492c5a865fe1486eac
          • MD5 SHA1 SHA512 TLSH

          dm.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\dm.png
          • Size 1KB
          • SHA256 7a18f7bb30f6ce5bf6687b74ad2949ebe593e40e3ad9afcc8a4ebd7c0820ec67
          • MD5 SHA1 SHA512 TLSH

          do.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\do.png
          • Size 1KB
          • SHA256 26a9ed70888a4b210c3156ad824bd311acc88804eab16550064a3fa35085efa5
          • MD5 SHA1 SHA512 TLSH

          dz.png

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\country_flags\dz.png
          • Size 863B
          • SHA256 d297f66008e4139b075b44d24db12de9d2aa0e6605cde4202f9683c7dac750ec
          • MD5 SHA1 SHA512 TLSH

          xeno rat server.exe

          • Path C:\Users\Admin\Desktop\XenoRAT-v1.8.7\XenoRAT-v1.8.7\xeno rat server.exe
          • Size 2.0MB
          • SHA256 fbe6285d36fb5dce1d59610d3ff45bade866ce5e1d30854b95ead1ff40b699fb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/2972-551-0x000002E8F4670000-0x000002E8F46A0000-memory.dmp

          memory/4592-550-0x000001CD1DD80000-0x000001CD1DDB0000-memory.dmp

          memory/6100-557-0x0000024C50AF0000-0x0000024C50B0A000-memory.dmp

          memory/6100-554-0x0000024C361D0000-0x0000024C363D2000-memory.dmp

          memory/6100-555-0x0000024C50D20000-0x0000024C50D30000-memory.dmp

          memory/6100-556-0x0000024C38180000-0x0000024C38194000-memory.dmp

          memory/6100-558-0x0000024C50AD0000-0x0000024C50AE2000-memory.dmp

          memory/6100-621-0x0000024C54E60000-0x0000024C54E82000-memory.dmp

          memory/6100-622-0x0000024C36710000-0x0000024C36740000-memory.dmp

          memory/6100-623-0x0000024C53080000-0x0000024C53132000-memory.dmp

          memory/6100-628-0x0000024C53130000-0x0000024C53254000-memory.dmp

          memory/6100-629-0x0000024C50CC0000-0x0000024C50CDA000-memory.dmp