Analysis

  • max time kernel
    299s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/09/2026, 22:53

General

  • Target
    Launcher.exe
  • Size 340KB
  • Sample260928-2txngavgpg
  • SHA256 4df431a310decb20c30727bd69784db99b7a655fac9d984472adfde8b8485046
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Modifies Control Panel 1 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Launcher.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4668
    • C:\Users\Admin\AppData\Local\Temp\Syn3Updater.exe
      "C:\Users\Admin\AppData\Local\Temp\Syn3Updater.exe" /launcher /updated
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Modifies Control Panel
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:528

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        launcherPrefs.json

        • Path C:\ProgramData\CyanLabs\Syn3Updater\launcherPrefs.json
        • Size 74B
        • SHA256 5e52d977d9defb566a355b8fd38a0551cb64d429d36e007dfe2d569516135bb1
        • MD5 SHA1 SHA512 TLSH

        AsyncAwaitBestPractices.dll

        • Path C:\Users\Admin\AppData\Local\Temp\AsyncAwaitBestPractices.dll
        • Size 18KB
        • SHA256 57a3e23d4effc95c52bd81c65d9686ae019b2a66e0606f0a07d42a6bdbbb905c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AsyncAwaitBestPractices.MVVM.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\AsyncAwaitBestPractices.MVVM.dll
        • Size 13KB
        • SHA256 0689fae0006b9bf2f64093e3567ac5a923773c408d9803118f01f473210395ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FluentWPF.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\FluentWPF.dll
        • Size 223KB
        • SHA256 8e136ec981ed7d7abf0c8153db901fcd9e7a311a61e209d88a9ca2b51fc17838
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GraphQL.Client.Abstractions.Websocket.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\GraphQL.Client.Abstractions.Websocket.dll
        • Size 9KB
        • SHA256 f09df158d6ef58bf3876f407f0ac705d4dc655658fe7d7d962ab373e053c2af1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GraphQL.Client.Abstractions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\GraphQL.Client.Abstractions.dll
        • Size 16KB
        • SHA256 0accc3a7d29f3eb6481c65d1803d560ee719e331fdb2a21fbf69957fc5c96a7e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GraphQL.Client.Serializer.Newtonsoft.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\GraphQL.Client.Serializer.Newtonsoft.dll
        • Size 12KB
        • SHA256 4baaee3cf20e7a316da882a1cedb58d68c4ff02cb56b7f0f086eea2d3b465d31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GraphQL.Client.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\GraphQL.Client.dll
        • Size 45KB
        • SHA256 a20d2bf4964286c33be237b28a77a2f5c63b94b6284d90156fb76916cd1f34f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GraphQL.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\GraphQL.Primitives.dll
        • Size 11KB
        • SHA256 acbbae3b51e8c3118b86a71f510ff626f3d18a99765621de81e99709cc5e9df8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        HtmlToXamlConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\HtmlToXamlConverter.dll
        • Size 73KB
        • SHA256 87a0dd5be39d1931d2230043c3ac5591445e7b03008567449ad93b5cf885b9dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ICSharpCode.SharpZipLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\ICSharpCode.SharpZipLib.dll
        • Size 200KB
        • SHA256 c287e9b07a8251828f35914364c89a37db606b0c1d64457f9eb8fa2258f0dee3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\ar.json
        • Size 20KB
        • SHA256 28be5f448bab81118ce335d94d164cf848454046c30e5075bf298c9d13026e3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\bg.json
        • Size 25KB
        • SHA256 d4916c6f7bc3ec466c1c2f65f1f500481d00d359914cc1564b689b458d4fde51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\ca.json
        • Size 18KB
        • SHA256 bffc8c8921cca1810d6a778c8581ff455f74f9c048c3c85dedca2e3d281a5169
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\cs.json
        • Size 18KB
        • SHA256 8c0a7af115f34d00241f64a9903ebe37b9c90ac1c13782e3fcb6b62bf624e3ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\da.json
        • Size 18KB
        • SHA256 3b68449fa35fc50a9d6d74ae5f9b2bf3a2029f3a4c878923b15a0e2e9ab6f9f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\de.json
        • Size 20KB
        • SHA256 5f576c008ec96ec68155d3219fd2be8adf807ddf89af558e0ef790d99626df60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\el.json
        • Size 26KB
        • SHA256 6c5a175e825b467116d6adfaf24cdd89d223ec77775303f375f2bae10b290b96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\en-US.json
        • Size 17KB
        • SHA256 ea9efadf64888899c51f9ef354cec57d84476bb2d8512307683db66ba3700fcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\es.json
        • Size 18KB
        • SHA256 feaefdfcc645112460e74774e1ca5a013c224f14fc6111aa748767f14ebcdb88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\fi.json
        • Size 18KB
        • SHA256 02af3833402499e62569d35e1028fa61904cec2e33999f52d79982a1ba867b1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\fr.json
        • Size 18KB
        • SHA256 e2abc4b4d60ebb1d738bf5424a1dd940e0e4f0052290fcb383c80895dd9918f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\hr.json
        • Size 18KB
        • SHA256 1c6ae7443a16e833d0643d106c0c8a21275d9fb82b99e2aa43fb4d354dd3da76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\hu.json
        • Size 20KB
        • SHA256 acf7b45d721a738080bda8b86da5ad4d41e710408c7ef00acc11b30f61778b39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\it.json
        • Size 18KB
        • SHA256 d8032a4e7270b43d654b386bece7fabdaf684d3cd454b0cc1393a72e34c1cd2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ku.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\ku.json
        • Size 20KB
        • SHA256 79b0c3c42e381620c24e5c68022f594e71e497b7157a04524a91df135776c950
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\nl.json
        • Size 19KB
        • SHA256 70c530bbecf1aa4c08815cef01574ce5eb6549873f86d3e69c09470fe30702d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        no.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\no.json
        • Size 17KB
        • SHA256 c891940df03b3f431b9063235f2bfbe3e4039eebb80d6b9d306c63ba2ab98b86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\pl.json
        • Size 18KB
        • SHA256 ab8ec7efbe4d149f04b5f43313b854c36f8ea5fc377389a9ff2405f0fe5a9e5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-br.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\pt-br.json
        • Size 18KB
        • SHA256 601bccb3f7911015ee540de19ec625f08cedecb75f05259a9b162da8e87eb426
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\pt.json
        • Size 18KB
        • SHA256 587ea1f96dc2f0cadcd970856c9d74b3f257e031eb860dbffa35f23d7978a378
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\ro.json
        • Size 19KB
        • SHA256 bbd4d26b020c390f8bee3950ff62db6aebd67a12553eecdf2935f63bd529c334
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\ru.json
        • Size 26KB
        • SHA256 6b51a2e620a754d5b1b9d4b972798fdcef1b8e4b41629d5b1b652042c50f84e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\sk.json
        • Size 18KB
        • SHA256 5fb754d52a9321d60dadac9722cc0c820836ea6290b5be4121043b5749052570
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\sv.json
        • Size 18KB
        • SHA256 e5a7a50c18125bd9a32b10a8a06e7b0eb37f256ee914b0504b9303efbeab6229
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\th.json
        • Size 19KB
        • SHA256 89a1ec942040c6829c812547936720c0c61813c4e4176c26af213de7a8d07351
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\tr.json
        • Size 19KB
        • SHA256 18fc6da73b45fbf96910acd66498f9cb391e8f13fef92290db267b25af623a26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\vi.json
        • Size 21KB
        • SHA256 0b2299076ef506721d3d1a217643f6c219f543fabe233ad087f796500870f783
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\zh-CN.json
        • Size 17KB
        • SHA256 7f31d2a558fcbaead03fe5f0af7beb84b2c5e9d322c4b7cd33acd60e68ba5eea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-Hans.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\zh-Hans.json
        • Size 16KB
        • SHA256 5f0e6f51533224d1ff837340e20670ceb82301a3c31673bc6a72d247153f61db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-Hant.json

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Languages\zh-Hant.json
        • Size 15KB
        • SHA256 4d0bbd8b982c57dbb892188483e9a6ddc56771ad65245dc07e38091219f4957c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Launcher.exe

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Launcher.exe
        • Size 341KB
        • SHA256 7eb4245e1166be997096be57a7761bc83b7e9968d504d8c83d8775ca95fbd4a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MahApps.Metro.IconPacks.Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\MahApps.Metro.IconPacks.Core.dll
        • Size 19KB
        • SHA256 b6156814d7014a38587991b19eec9228439bc0b2558cfa9bedb4e72ac611fccb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MahApps.Metro.IconPacks.VaadinIcons.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\MahApps.Metro.IconPacks.VaadinIcons.dll
        • Size 564KB
        • SHA256 2f7f03b46abb9b240b66c187d1e21afe650718430cfcaaefddeda47fb187f40f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ModernWpf.Controls.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\ModernWpf.Controls.dll
        • Size 685KB
        • SHA256 4f0f01f5adae9c9d48dd5adfc077b9a54dd72de7a061a14ad291383a3a752220
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ModernWpf.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\ModernWpf.dll
        • Size 893KB
        • SHA256 87ff72b784d9f9ea4fd14f6410eda1d23b388f6951f8649aa5a474e51e4d7830
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.AsyncEx.Context.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.AsyncEx.Context.dll
        • Size 13KB
        • SHA256 3a17edb81e4f6addfa32fa9d23afefbb0cadbdcd138b7f153e2be33d5097fdce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.AsyncEx.Coordination.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.AsyncEx.Coordination.dll
        • Size 40KB
        • SHA256 2ef53250402f5721795aa01eb2216d717e000deacdb1677228e723411dea2d4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.AsyncEx.Interop.WaitHandles.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.AsyncEx.Interop.WaitHandles.dll
        • Size 8KB
        • SHA256 47167222e130131eb83babfe35d0b2a585ab293b7b18f9cdde68db3f1cff208c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.AsyncEx.Oop.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.AsyncEx.Oop.dll
        • Size 6KB
        • SHA256 68750cb34911a56bee5ae3c133dccc92f1d8901dad59e295de70481f7cbbe4ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.AsyncEx.Tasks.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.AsyncEx.Tasks.dll
        • Size 35KB
        • SHA256 59a2fe3c8c1d95d9f8cdb3f99875dcbff769dded6e660cda4696f64237318ec4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.Cancellation.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.Cancellation.dll
        • Size 8KB
        • SHA256 6cb66c1761663d6cbdd838ed644069a98ea968f9388a369393a247ac35c3bb48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.Collections.Deque.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.Collections.Deque.dll
        • Size 16KB
        • SHA256 8f2f2999f24e2f31648a1fefb83273bd3f38afa97b6c8787b4b0a87fce110716
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Nito.Disposables.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Nito.Disposables.dll
        • Size 10KB
        • SHA256 a454b07c1ae5355b49e9fb38e87af6a94a7102995bcaccdc31d44a52b9b4a9d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Ookii.Dialogs.Wpf.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Ookii.Dialogs.Wpf.dll
        • Size 100KB
        • SHA256 afb70c199f3835386a86806bce62a730a65b88e57c2dc1a05793e0c21b9528bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        QRCoder.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\QRCoder.dll
        • Size 123KB
        • SHA256 2abf42160302b0f44ea7dcc2e1c1ef910106df8835b0d94f9ced9428655b89e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Syn3Updater.exe

        • Path C:\Users\Admin\AppData\Local\Temp\temp\Syn3Updater.exe
        • Size 627KB
        • SHA256 52f6ba18cc9125c6fb821b15d90dbb41581b92fa8d66fcce892ff7ac7a113718
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Buffers.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Buffers.dll
        • Size 20KB
        • SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.CodeDom.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.CodeDom.dll
        • Size 27KB
        • SHA256 9dbce659a0ef6fd19709fe1d5b2a78be451daf28000274fcbc1cbe080ce71365
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Immutable.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Collections.Immutable.dll
        • Size 175KB
        • SHA256 67730917b4e856e37a9d78245527584087fac6b20a7377677b2f444cd15db918
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Memory.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Memory.dll
        • Size 137KB
        • SHA256 8e76318e8b06692abf7dab1169d27d15557f7f0a34d36af6463eff0fe21213c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.WebSockets.Client.Managed.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Net.WebSockets.Client.Managed.dll
        • Size 70KB
        • SHA256 31430f928bb5eadd8de1d2ee2617c4462b564674f71b209bdd77de1b2209aa3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Numerics.Vectors.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Numerics.Vectors.dll
        • Size 113KB
        • SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Reactive.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Reactive.dll
        • Size 1.2MB
        • SHA256 b64119431cd2fbadc20a15ae900c6fb2215738f605d577480797a82bf86af6f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.CompilerServices.Unsafe.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Runtime.CompilerServices.Unsafe.dll
        • Size 16KB
        • SHA256 66409f670315afe8610f17a4d3a1ee52d72b6a46c544cec97544e8385f90ad74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.Tasks.Extensions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.Threading.Tasks.Extensions.dll
        • Size 25KB
        • SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ValueTuple.dll

        • Path C:\Users\Admin\AppData\Local\Temp\temp\System.ValueTuple.dll
        • Size 24KB
        • SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/528-357-0x000001D1EB8A0000-0x000001D1EB8B0000-memory.dmp

        memory/528-376-0x000001D1EEC60000-0x000001D1EEC72000-memory.dmp

        memory/528-434-0x000001D1EB8A0000-0x000001D1EB8B0000-memory.dmp

        memory/528-433-0x000001D1EF850000-0x000001D1EF858000-memory.dmp

        memory/528-429-0x000001D1EF830000-0x000001D1EF83A000-memory.dmp

        memory/528-431-0x000001D1EF840000-0x000001D1EF850000-memory.dmp

        memory/528-427-0x000001D1EF940000-0x000001D1EF958000-memory.dmp

        memory/528-425-0x000001D1EFB60000-0x000001D1EFC34000-memory.dmp

        memory/528-424-0x000001D1EF820000-0x000001D1EF828000-memory.dmp

        memory/528-422-0x000001D1EF7F0000-0x000001D1EF7F8000-memory.dmp

        memory/528-356-0x000001D1EB3A0000-0x000001D1EB442000-memory.dmp

        memory/528-421-0x000001D1EF7E0000-0x000001D1EF7E8000-memory.dmp

        memory/528-360-0x000001D1EB8B0000-0x000001D1EB8EE000-memory.dmp

        memory/528-362-0x000001D1EEAA0000-0x000001D1EEB86000-memory.dmp

        memory/528-363-0x000001D1EE9B0000-0x000001D1EE9D6000-memory.dmp

        memory/528-364-0x000001D1EB910000-0x000001D1EB918000-memory.dmp

        memory/528-365-0x000001D1ED320000-0x000001D1ED32A000-memory.dmp

        memory/528-367-0x000001D1EEA30000-0x000001D1EEA3A000-memory.dmp

        memory/528-374-0x000001D1EEA80000-0x000001D1EEA8A000-memory.dmp

        memory/528-420-0x000001D1EF9C0000-0x000001D1EFA72000-memory.dmp

        memory/528-372-0x000001D1EEA50000-0x000001D1EEA5A000-memory.dmp

        memory/528-370-0x000001D1EEA40000-0x000001D1EEA48000-memory.dmp

        memory/528-368-0x000001D1EEA60000-0x000001D1EEA7A000-memory.dmp

        memory/528-416-0x000001D1EF790000-0x000001D1EF79A000-memory.dmp

        memory/528-380-0x000001D1EF1E0000-0x000001D1EF29A000-memory.dmp

        memory/528-382-0x000001D1EF860000-0x000001D1EF8F4000-memory.dmp

        memory/528-384-0x000001D1EF580000-0x000001D1EF58C000-memory.dmp

        memory/528-418-0x000001D1EF7C0000-0x000001D1EF7CA000-memory.dmp

        memory/4668-1-0x000001C546800000-0x000001C546810000-memory.dmp

        memory/4668-10-0x000001C54A000000-0x000001C54A012000-memory.dmp

        memory/4668-0-0x000001C52B240000-0x000001C52B29A000-memory.dmp

        memory/4668-351-0x000001C54A050000-0x000001C54A072000-memory.dmp

        memory/4668-2-0x000001C546800000-0x000001C546810000-memory.dmp

        memory/4668-4-0x000001C548CA0000-0x000001C548CAE000-memory.dmp

        memory/4668-3-0x000001C548CD0000-0x000001C548D08000-memory.dmp

        memory/4668-5-0x000001C549F30000-0x000001C549FE0000-memory.dmp

        memory/4668-6-0x000001C54A0E0000-0x000001C54A1DA000-memory.dmp

        memory/4668-7-0x000001C548D10000-0x000001C548D1A000-memory.dmp

        memory/4668-8-0x000001C546800000-0x000001C546810000-memory.dmp