Analysis

  • max time kernel
    151s
  • max time network
    117s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 18:13

General

  • Target
    source_prepared.exe
  • Size 88.2MB
  • Sample260712-wtzvyahs2t
  • SHA256 bf55abc8e53fa262c6500ef34929e35e247b9e0a9e885d3f6ef1a405625b9739
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\source_prepared.exe
    "C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5380
    • C:\Users\Admin\AppData\Local\Temp\source_prepared.exe
      "C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1532
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:6056
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000004F4
      1⤵
        PID:5844

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            VCRUNTIME140.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\VCRUNTIME140.dll
            • Size 96KB
            • SHA256 d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _bz2.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\_bz2.pyd
            • Size 46KB
            • SHA256 6c41a618b4dec812f5cd434375f33052daada9f49c6d472e82bdec27c407cfc5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _ctypes.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\_ctypes.pyd
            • Size 57KB
            • SHA256 9e619adf436228c1c87e7909ca58575a02ef069d71045785b102e2a0f833b6a3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _lzma.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\_lzma.pyd
            • Size 84KB
            • SHA256 4ad51dac78f9192831ee9c6959ad3d67e0f66869bded3a91688b08c4ff2103f7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ada92cb5d92a588d1b93__mypyc.cp311-win_amd64.pyd

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\ada92cb5d92a588d1b93__mypyc.cp311-win_amd64.pyd
            • Size 66KB
            • SHA256 cfbe480b4f1770bf86862b074344ffd5e4e8d1fe3c160cd2f18d62e60b7c90a3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-console-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-console-l1-1-0.dll
            • Size 21KB
            • SHA256 88ace577a9c51061cb7d1a36babbbefa48212fadc838ffde98fdfff60de18386
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-datetime-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-datetime-l1-1-0.dll
            • Size 21KB
            • SHA256 1bd81dfd19204b44662510d9054852fb77c9f25c1088d647881c9b976cc16818
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-debug-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-debug-l1-1-0.dll
            • Size 21KB
            • SHA256 591358eb4d1531e9563ee0813e4301c552ce364c912ce684d16576eabf195dc3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-errorhandling-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-errorhandling-l1-1-0.dll
            • Size 21KB
            • SHA256 d56ce7b1cd76108ad6c137326ec694a14c99d48c3d7b0ace8c3ff4d9bcee3ce8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-fibers-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-fibers-l1-1-0.dll
            • Size 21KB
            • SHA256 91d249d7bc0e38ef6bcb17158b1fdc6dd8888dc086615c9b8b750b87e52a5fb3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-fibers-l1-1-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-fibers-l1-1-1.dll
            • Size 21KB
            • SHA256 fc9d86cec621383eab636ebc87ddd3f5c19a3cb2a33d97be112c051d0b275429
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-file-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-file-l1-1-0.dll
            • Size 25KB
            • SHA256 1ca895aba4e7435563a6b43e85eba67a0f8c74aa6a6a94d0fc48fa35535e2585
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-file-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-file-l1-2-0.dll
            • Size 21KB
            • SHA256 4cadbc0c39da7c6722206fdcebd670abe5b8d261e7b041dd94f9397a89d1990d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-file-l2-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-file-l2-1-0.dll
            • Size 21KB
            • SHA256 93c624b366ba16c643fc8933070a26f03b073ad0cf7f80173266d67536c61989
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-handle-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-handle-l1-1-0.dll
            • Size 21KB
            • SHA256 39095f59c41d76ec81bb2723d646fde4c148e7cc3402f4980d2ade95cb9c84f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-heap-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-heap-l1-1-0.dll
            • Size 21KB
            • SHA256 8f105771b236dbcb859de271f0a6822ce1cb79c36988dd42c9e3f6f55c5f7eb9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-interlocked-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-interlocked-l1-1-0.dll
            • Size 21KB
            • SHA256 53b25e753ca785bf8b695d89dde5818a318890211dc992a89146f16658f0b606
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-kernel32-legacy-l1-1-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-kernel32-legacy-l1-1-1.dll
            • Size 21KB
            • SHA256 a9b13a1cd1b8c19b0c6b4afcd5bb0dd29c0e2288231ac9e6db8510094ce68ba6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-libraryloader-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-libraryloader-l1-1-0.dll
            • Size 21KB
            • SHA256 7f39ba298b41e4963047341288cab36b6a241835ee11ba4ad70f44dacd40906c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-localization-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-localization-l1-2-0.dll
            • Size 21KB
            • SHA256 6ee44dd0d8510dc024c9f7c79b1b9fa88c987b26b6beb6653ddd11751c34e5dc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-memory-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-memory-l1-1-0.dll
            • Size 21KB
            • SHA256 0512a35316ec9180437f86696a84c5c06a7e4e82e050055a656e5bf9fca206f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-namedpipe-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-namedpipe-l1-1-0.dll
            • Size 21KB
            • SHA256 c05f1fffe3b5a2738ea54ce9485cca026fb9635f982626fba1e1dcc531897273
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-processenvironment-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-processenvironment-l1-1-0.dll
            • Size 21KB
            • SHA256 c4eca98c3c67b6395d5b005b00ac1eb0318b86b23aa71035a44c2b1602befba9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-processthreads-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-processthreads-l1-1-0.dll
            • Size 21KB
            • SHA256 5ccb89e93d67bc3288d4e84649c5346e66e15e3d7cd65d989daf3f4cb584be9a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-processthreads-l1-1-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-processthreads-l1-1-1.dll
            • Size 21KB
            • SHA256 4ad565a8ba3ef0ea8ab87221ad11f83ee0bc844ce236607958406663b407333e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-profile-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-profile-l1-1-0.dll
            • Size 21KB
            • SHA256 7809160932f44e59b021699f5bc68799eb7293ee1fa926d6fcca3c3445302e61
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-rtlsupport-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-rtlsupport-l1-1-0.dll
            • Size 21KB
            • SHA256 9dc1e91e71c7c054854bd1487cb4e6946d82c9f463430f1c4e8d1471005172b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-string-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-string-l1-1-0.dll
            • Size 21KB
            • SHA256 60fc31d2a0c634412f529dba76af3b9bf991352877c6dae528186d3935704cfd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-synch-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-synch-l1-1-0.dll
            • Size 21KB
            • SHA256 3a72b4f29f39a265d32ad12f0ce15dbf60129c840e10d84d427829ede45e78ad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-synch-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-synch-l1-2-0.dll
            • Size 21KB
            • SHA256 efc1e4460984a73cf47a3def033af1c8f3b1dbc1a56cd27781d3aacf3e3330cb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-sysinfo-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-sysinfo-l1-1-0.dll
            • Size 21KB
            • SHA256 b203d862ddef1dd62bf623fc866c7f7a9c317c1c2ae30d1f52cb41f955b5698e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-sysinfo-l1-2-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-sysinfo-l1-2-0.dll
            • Size 21KB
            • SHA256 2703635d835396afd0f138d7c73751afe7e33a24f4225d08c1690b0a371932c0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-timezone-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-timezone-l1-1-0.dll
            • Size 21KB
            • SHA256 33f4fddc181066fce06b2227bded813f95e94ed1f3d785e982c6b6b56c510c57
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-core-util-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-core-util-l1-1-0.dll
            • Size 21KB
            • SHA256 6eda016742a6171205a387a14b3c0b331841567740376f56768f8c151724207d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-conio-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-conio-l1-1-0.dll
            • Size 21KB
            • SHA256 b762061b688aae679afe788904d2c9970f74a7dac98f3b42463d08f25e483d3f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-convert-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-convert-l1-1-0.dll
            • Size 25KB
            • SHA256 ebb2ae5535a64f65daeab8235585114fc9dd2cf1a49f5852d446250b998b6ae4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-environment-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-environment-l1-1-0.dll
            • Size 21KB
            • SHA256 17d63275d00bdd8670422b95bd264c532998e0a1b041079e54fce4b6b7a55819
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-filesystem-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-filesystem-l1-1-0.dll
            • Size 21KB
            • SHA256 9a9e2a65a281644e368d0f272b95ba5f6b445d1c35910d06056c5ebeb77402db
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-heap-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-heap-l1-1-0.dll
            • Size 21KB
            • SHA256 bab9ac3ec83e380ae51e4295ef3bf2c738627812d3a49d1e713661abbc8dc57a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-locale-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-locale-l1-1-0.dll
            • Size 21KB
            • SHA256 bd14c67ea28e21d6257ad780a37122c9b5773f69e693f5db6bffaee4d839526e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-math-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-math-l1-1-0.dll
            • Size 29KB
            • SHA256 606d66d82db562ea7979179d06486a0f94d079941d26b80a1e2c49d29959df6f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-private-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-private-l1-1-0.dll
            • Size 73KB
            • SHA256 1bc82bed6143d2bf1b6b08a7809f4a5e29317d6fddd338a7da3c0223522e4bbf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-process-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-process-l1-1-0.dll
            • Size 21KB
            • SHA256 f6156b1020380ec4f0e48577ebedaaef5fb1ab1f337d8b4e72e6a33a7567a9cc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-runtime-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-runtime-l1-1-0.dll
            • Size 25KB
            • SHA256 c5902934d026d7e15fbe9917d474f3322846a41a25e66f4b2b1f758801879f4b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-stdio-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-stdio-l1-1-0.dll
            • Size 25KB
            • SHA256 a9c5a153d8c0286f9b41a2b1c65854ad9e6471b8755b7de87bae4470e60bcab6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-string-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-string-l1-1-0.dll
            • Size 25KB
            • SHA256 25b8f83a7767211b11132775a0e27a45aa4ec8ab4e6572599f9c172ae3606b40
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-time-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-time-l1-1-0.dll
            • Size 21KB
            • SHA256 7c7f6393f06de11750adb09cc5698ae55cd9fb27b2e51e207286feb1b5b2b156
            • MD5 SHA1 SHA512 SSDEEP TLSH

            api-ms-win-crt-utility-l1-1-0.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\api-ms-win-crt-utility-l1-1-0.dll
            • Size 21KB
            • SHA256 d8ba5f17b9ffcbf3aeaf3fa1da226832d2fa90f81acce0cd669464e76ce434ac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            base_library.zip

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\base_library.zip
            • Size 1.4MB
            • SHA256 a9af2d0beb96092103f33724394cda2a5deaf735ce385e54bbdd9c710cb657c9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            crypto_clipper.json

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\crypto_clipper.json
            • Size 273B
            • SHA256 758c623bb7d5512df8f7784351c766c9a403bca4e6936609f124b9564daea6d5
            • MD5 SHA1 SHA512 TLSH

            freetype.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\freetype.dll
            • Size 292KB
            • SHA256 50249f68b4faf85e7cd8d1220b7626a86bc507af9ae400d08c8e365f9ab97cde
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libffi-8.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\libffi-8.dll
            • Size 24KB
            • SHA256 4eb41bcf5e54017c4d8c6a7184f4633d9e6c10ca8f52ad21e3b752edd745d4ee
            • MD5 SHA1 SHA512 SSDEEP TLSH

            python3.DLL

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\python3.DLL
            • Size 64KB
            • SHA256 4055d1b9e553b78c244143ab6b48151604003b39a9bf54879dee9175455c1281
            • MD5 SHA1 SHA512 SSDEEP TLSH

            python311.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\python311.dll
            • Size 1.6MB
            • SHA256 3cac88119657daef7f79844aeb9da79b45c1f3bb2ea3468b0d4ed26067852194
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ucrtbase.dll

            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53802\ucrtbase.dll
            • Size 1.3MB
            • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/1532-1414-0x00007FFC90C90000-0x00007FFC90CA5000-memory.dmp

            memory/1532-1442-0x00007FFC860C0000-0x00007FFC86233000-memory.dmp

            memory/1532-1381-0x00007FFC96160000-0x00007FFC96174000-memory.dmp

            memory/1532-1380-0x00007FFC94CB0000-0x00007FFC94CDD000-memory.dmp

            memory/1532-1328-0x00007FFC98A40000-0x00007FFC98A4F000-memory.dmp

            memory/1532-1326-0x00007FFC98A50000-0x00007FFC98A74000-memory.dmp

            memory/1532-1382-0x00007FFC7DAA0000-0x00007FFC7DE15000-memory.dmp

            memory/1532-1383-0x00007FFC94C90000-0x00007FFC94CA9000-memory.dmp

            memory/1532-1384-0x00007FFC98800000-0x00007FFC9880D000-memory.dmp

            memory/1532-1385-0x00007FFC91A90000-0x00007FFC91ABE000-memory.dmp

            memory/1532-1387-0x00007FFC90670000-0x00007FFC90728000-memory.dmp

            memory/1532-1386-0x00007FFC7DE20000-0x00007FFC7E408000-memory.dmp

            memory/1532-1389-0x00007FFC94C80000-0x00007FFC94C8D000-memory.dmp

            memory/1532-1388-0x00007FFC98A50000-0x00007FFC98A74000-memory.dmp

            memory/1532-1390-0x00007FFC94C70000-0x00007FFC94C7B000-memory.dmp

            memory/1532-1391-0x00007FFC91A50000-0x00007FFC91A8F000-memory.dmp

            memory/1532-1392-0x00007FFC890D0000-0x00007FFC891EC000-memory.dmp

            memory/1532-1394-0x00007FFC91A10000-0x00007FFC91A46000-memory.dmp

            memory/1532-1393-0x00007FFC96160000-0x00007FFC96174000-memory.dmp

            memory/1532-1396-0x00007FFC92CA0000-0x00007FFC92CAB000-memory.dmp

            memory/1532-1397-0x00007FFC94C90000-0x00007FFC94CA9000-memory.dmp

            memory/1532-1399-0x00007FFC92C90000-0x00007FFC92C9C000-memory.dmp

            memory/1532-1400-0x00007FFC91A90000-0x00007FFC91ABE000-memory.dmp

            memory/1532-1401-0x00007FFC90C90000-0x00007FFC90CA5000-memory.dmp

            memory/1532-1398-0x00007FFC90CD0000-0x00007FFC90CE2000-memory.dmp

            memory/1532-1395-0x00007FFC7DAA0000-0x00007FFC7DE15000-memory.dmp

            memory/1532-1403-0x00007FFC90630000-0x00007FFC9064C000-memory.dmp

            memory/1532-1402-0x00007FFC90650000-0x00007FFC90662000-memory.dmp

            memory/1532-1404-0x00007FFC90610000-0x00007FFC9062E000-memory.dmp

            memory/1532-1406-0x00007FFC905F0000-0x00007FFC90608000-memory.dmp

            memory/1532-1405-0x00007FFC91A50000-0x00007FFC91A8F000-memory.dmp

            memory/1532-1410-0x00007FFC89DF0000-0x00007FFC89E3A000-memory.dmp

            memory/1532-1409-0x00007FFC91A10000-0x00007FFC91A46000-memory.dmp

            memory/1532-1411-0x00007FFC905B0000-0x00007FFC905C1000-memory.dmp

            memory/1532-1408-0x00007FFC905D0000-0x00007FFC905E4000-memory.dmp

            memory/1532-1407-0x00007FFC890D0000-0x00007FFC891EC000-memory.dmp

            memory/1532-1412-0x00007FFC8FF90000-0x00007FFC8FFBC000-memory.dmp

            memory/1532-1413-0x00007FFC91A00000-0x00007FFC91A0A000-memory.dmp

            memory/1532-1415-0x00007FFC90290000-0x00007FFC902A8000-memory.dmp

            memory/1532-1318-0x00007FFC7DE20000-0x00007FFC7E408000-memory.dmp

            memory/1532-1416-0x00007FFC89060000-0x00007FFC890CB000-memory.dmp

            memory/1532-1418-0x00007FFC8F420000-0x00007FFC8F44A000-memory.dmp

            memory/1532-1417-0x00007FFC90630000-0x00007FFC9064C000-memory.dmp

            memory/1532-1422-0x00007FFC89000000-0x00007FFC89023000-memory.dmp

            memory/1532-1423-0x00007FFC860C0000-0x00007FFC86233000-memory.dmp

            memory/1532-1421-0x00007FFC905F0000-0x00007FFC90608000-memory.dmp

            memory/1532-1420-0x00007FFC89030000-0x00007FFC8905E000-memory.dmp

            memory/1532-1424-0x00007FFC89DF0000-0x00007FFC89E3A000-memory.dmp

            memory/1532-1427-0x00007FFC90040000-0x00007FFC9004B000-memory.dmp

            memory/1532-1426-0x00007FFC905B0000-0x00007FFC905C1000-memory.dmp

            memory/1532-1431-0x00007FFC8FDC0000-0x00007FFC8FDCC000-memory.dmp

            memory/1532-1430-0x00007FFC91A00000-0x00007FFC91A0A000-memory.dmp

            memory/1532-1429-0x00007FFC88F60000-0x00007FFC88F72000-memory.dmp

            memory/1532-1433-0x00007FFC88F20000-0x00007FFC88F55000-memory.dmp

            memory/1532-1434-0x00007FFC89060000-0x00007FFC890CB000-memory.dmp

            memory/1532-1436-0x00007FFC8F420000-0x00007FFC8F44A000-memory.dmp

            memory/1532-1437-0x00007FFC88EF0000-0x00007FFC88F1C000-memory.dmp

            memory/1532-1435-0x00007FFC856E0000-0x00007FFC8579E000-memory.dmp

            memory/1532-1432-0x00007FFC90290000-0x00007FFC902A8000-memory.dmp

            memory/1532-1428-0x00007FFC8FF90000-0x00007FFC8FFBC000-memory.dmp

            memory/1532-1425-0x00007FFC88FE0000-0x00007FFC88FFB000-memory.dmp

            memory/1532-1419-0x00007FFC90610000-0x00007FFC9062E000-memory.dmp

            memory/1532-1439-0x00007FFC7D810000-0x00007FFC7DA9E000-memory.dmp

            memory/1532-1438-0x00007FFC89030000-0x00007FFC8905E000-memory.dmp

            memory/1532-1440-0x00007FFC89000000-0x00007FFC89023000-memory.dmp

            memory/1532-1441-0x00007FFC7CE80000-0x00007FFC7D807000-memory.dmp

            memory/1532-1443-0x00007FFC869F0000-0x00007FFC86A45000-memory.dmp

            memory/1532-1332-0x00007FFC98810000-0x00007FFC98829000-memory.dmp

            memory/1532-1444-0x00007FFC88FE0000-0x00007FFC88FFB000-memory.dmp

            memory/1532-1445-0x00007FFC7CBA0000-0x00007FFC7CE7F000-memory.dmp

            memory/1532-1446-0x00007FFC7A170000-0x00007FFC7C263000-memory.dmp

            memory/1532-1448-0x00007FFC860A0000-0x00007FFC860B7000-memory.dmp

            memory/1532-1447-0x00007FFC88F60000-0x00007FFC88F72000-memory.dmp

            memory/1532-1450-0x00007FFC88F20000-0x00007FFC88F55000-memory.dmp

            memory/1532-1449-0x00007FFC86010000-0x00007FFC86031000-memory.dmp

            memory/1532-1454-0x00007FFC855E0000-0x00007FFC85610000-memory.dmp

            memory/1532-1456-0x00007FFC88EF0000-0x00007FFC88F1C000-memory.dmp

            memory/1532-1459-0x00007FFC828A0000-0x00007FFC828E7000-memory.dmp

            memory/1532-1460-0x00007FFC82880000-0x00007FFC82899000-memory.dmp

            memory/1532-1458-0x00007FFC7D810000-0x00007FFC7DA9E000-memory.dmp

            memory/1532-1457-0x00007FFC84AE0000-0x00007FFC84AFA000-memory.dmp

            memory/1532-1463-0x00007FFC82860000-0x00007FFC8287D000-memory.dmp

            memory/1532-1464-0x00007FFC82780000-0x00007FFC82834000-memory.dmp

            memory/1532-1462-0x00007FFC82840000-0x00007FFC82853000-memory.dmp

            memory/1532-1461-0x00007FFC7CE80000-0x00007FFC7D807000-memory.dmp

            memory/1532-1465-0x00007FFC869F0000-0x00007FFC86A45000-memory.dmp

            memory/1532-1455-0x00007FFC828F0000-0x00007FFC82923000-memory.dmp

            memory/1532-1453-0x00007FFC85610000-0x00007FFC856AC000-memory.dmp

            memory/1532-1452-0x00007FFC856E0000-0x00007FFC8579E000-memory.dmp

            memory/1532-1468-0x00007FFC7CBA0000-0x00007FFC7CE7F000-memory.dmp

            memory/1532-1469-0x00007FFC7C790000-0x00007FFC7CB99000-memory.dmp

            memory/1532-1467-0x00007FFC810F0000-0x00007FFC81112000-memory.dmp

            memory/1532-1466-0x00007FFC7A170000-0x00007FFC7C263000-memory.dmp

            memory/1532-1470-0x00007FFC81020000-0x00007FFC810E8000-memory.dmp

            memory/1532-1451-0x00007FFC856B0000-0x00007FFC856D2000-memory.dmp

            memory/1532-1471-0x00007FFC860A0000-0x00007FFC860B7000-memory.dmp

            memory/1532-1487-0x00007FFC91A90000-0x00007FFC91ABE000-memory.dmp

            memory/1532-1497-0x00007FFC90C90000-0x00007FFC90CA5000-memory.dmp

            memory/1532-1493-0x00007FFC91A10000-0x00007FFC91A46000-memory.dmp

            memory/1532-1484-0x00007FFC7DAA0000-0x00007FFC7DE15000-memory.dmp

            memory/1532-1478-0x00007FFC7DE20000-0x00007FFC7E408000-memory.dmp

            memory/1532-1488-0x00007FFC90670000-0x00007FFC90728000-memory.dmp

            memory/1532-1479-0x00007FFC98A50000-0x00007FFC98A74000-memory.dmp

            memory/1532-1514-0x00007FFC98A50000-0x00007FFC98A74000-memory.dmp

            memory/1532-1526-0x00007FFC91A50000-0x00007FFC91A8F000-memory.dmp

            memory/1532-1525-0x00007FFC94C70000-0x00007FFC94C7B000-memory.dmp

            memory/1532-1534-0x00007FFC905D0000-0x00007FFC905E4000-memory.dmp

            memory/1532-1535-0x00007FFC89DF0000-0x00007FFC89E3A000-memory.dmp

            memory/1532-1543-0x00007FFC89000000-0x00007FFC89023000-memory.dmp

            memory/1532-1542-0x00007FFC89030000-0x00007FFC8905E000-memory.dmp

            memory/1532-1541-0x00007FFC8F420000-0x00007FFC8F44A000-memory.dmp

            memory/1532-1540-0x00007FFC89060000-0x00007FFC890CB000-memory.dmp

            memory/1532-1539-0x00007FFC90290000-0x00007FFC902A8000-memory.dmp

            memory/1532-1538-0x00007FFC91A00000-0x00007FFC91A0A000-memory.dmp

            memory/1532-1537-0x00007FFC8FF90000-0x00007FFC8FFBC000-memory.dmp

            memory/1532-1536-0x00007FFC905B0000-0x00007FFC905C1000-memory.dmp

            memory/1532-1527-0x00007FFC890D0000-0x00007FFC891EC000-memory.dmp

            memory/1532-1533-0x00007FFC905F0000-0x00007FFC90608000-memory.dmp

            memory/1532-1532-0x00007FFC90610000-0x00007FFC9062E000-memory.dmp

            memory/1532-1531-0x00007FFC90630000-0x00007FFC9064C000-memory.dmp

            memory/1532-1530-0x00007FFC90650000-0x00007FFC90662000-memory.dmp

            memory/1532-1529-0x00007FFC90C90000-0x00007FFC90CA5000-memory.dmp

            memory/1532-1528-0x00007FFC91A10000-0x00007FFC91A46000-memory.dmp

            memory/1532-1523-0x00007FFC90670000-0x00007FFC90728000-memory.dmp

            memory/1532-1519-0x00007FFC7DAA0000-0x00007FFC7DE15000-memory.dmp

            memory/1532-1524-0x00007FFC94C80000-0x00007FFC94C8D000-memory.dmp

            memory/1532-1522-0x00007FFC91A90000-0x00007FFC91ABE000-memory.dmp

            memory/1532-1521-0x00007FFC98800000-0x00007FFC9880D000-memory.dmp

            memory/1532-1520-0x00007FFC94C90000-0x00007FFC94CA9000-memory.dmp

            memory/1532-1518-0x00007FFC96160000-0x00007FFC96174000-memory.dmp

            memory/1532-1517-0x00007FFC94CB0000-0x00007FFC94CDD000-memory.dmp

            memory/1532-1516-0x00007FFC98810000-0x00007FFC98829000-memory.dmp

            memory/1532-1515-0x00007FFC98A40000-0x00007FFC98A4F000-memory.dmp