memory dump was able to recover copies of the login password in a session with Cyberlink Internet Services AG (i.e., IP address 62.12.173.139 on port 443) .