Analysis

  • max time kernel
    148s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/07/2026, 14:37

General

  • Target
    54321.exe
  • Size 27.6MB
  • Sample260702-ry7n5af15s
  • SHA256 8e72c29fec0a2d086a88a0107acdfd273fcaa81b24a88336dfc86210c659f368
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: LunaStealer

    LunaStealer is an infostealer written in Python and packaged with Pyinstaller.

  • LunaStealer is a stealer written in Python and packaged with Pyinstaller 2 IoCs
  • Loads dropped DLL 37 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54321.exe
    "C:\Users\Admin\AppData\Local\Temp\54321.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Users\Admin\AppData\Local\Temp\54321.exe
      "C:\Users\Admin\AppData\Local\Temp\54321.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1872
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:5752

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          81d243bd2c585b0f4821__mypyc.cp311-win_amd64.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\81d243bd2c585b0f4821__mypyc.cp311-win_amd64.pyd
          • Size 66KB
          • SHA256 bbaafce7d0dcd33588bfc5e7fc0095a2a5ab92efe69b91a750be45096b36dfd2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\VCRUNTIME140.dll
          • Size 116KB
          • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _bz2.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\_bz2.pyd
          • Size 48KB
          • SHA256 72476f3cdd0b41d9d91764c5ec25a8bf93bf34ca552c4b53e89091ebe54c1cd9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\_ctypes.pyd
          • Size 58KB
          • SHA256 b55cf9c9222d64755ea351f7346697e993f0fb96085247d5d406598ce9424323
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _lzma.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\_lzma.pyd
          • Size 86KB
          • SHA256 2fedd80b3ced31bcf1575a034a75c31abdecf77347c27ce5d32b73239433eb31
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-console-l1-1-0.dll
          • Size 22KB
          • SHA256 bcd87e2b039cebf8045023611ccd2272ebcae4f81f686dc7d289289d600f0ed0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-datetime-l1-1-0.dll
          • Size 22KB
          • SHA256 856c6b13b29376c8b99faede4d652b829df963020d9129f117939dfea9f3d8fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-debug-l1-1-0.dll
          • Size 22KB
          • SHA256 be42004523f35da5cb2fed1a7d25f5b7221314894f3f34e9678c220bbb9e3bc2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 22KB
          • SHA256 d36b34cad567f962b5ff8ca27d67fc9bd6c40eef0e7bc2be6fae2c4e7333dc07
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-fibers-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-fibers-l1-1-0.dll
          • Size 22KB
          • SHA256 a0c4c198b854aefd5eb8a4dd098992933f32073cc654f3309e7b458c78230a83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-file-l1-1-0.dll
          • Size 26KB
          • SHA256 d9b85ab140988dc4b67c8af6099c18998bf7f65c82caf0ff0868d927201dc2f3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-file-l1-2-0.dll
          • Size 22KB
          • SHA256 d984ca3c1da8349125edb4c02926b8ad8a0576c1ba29098a4dc4119d473f9ee9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-file-l2-1-0.dll
          • Size 22KB
          • SHA256 a276616f42a235007fcae4361b786a071619ab5a40d2b20aeaeaf36421526dd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-handle-l1-1-0.dll
          • Size 22KB
          • SHA256 6464f569344d07303f48faae4603ad1b683385a3b4b43fea1fbb7fa9d6a322d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-heap-l1-1-0.dll
          • Size 22KB
          • SHA256 280ee7fde0de5364d91a4b3a90dfd98eab88ea903b7e550103533bc08cbd968d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 22KB
          • SHA256 fe8fe4fd93b8b05d056f684c4b0eef2321713e202a440a7eb08f69be098fb036
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 22KB
          • SHA256 9de9d8573fd4901591ae2f91f41c7dbd6fd1505c37ee6bd1f86698586a66e24e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-localization-l1-2-0.dll
          • Size 22KB
          • SHA256 42cd0246b1cce2df9046febb125a7ec12514afb753e88aeb297e599a81def50f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-memory-l1-1-0.dll
          • Size 22KB
          • SHA256 6e069b59d3beadccdcdfe7f76c3b84478df2e16e8ac987906bfe52acb115cf83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 22KB
          • SHA256 09b00f5df6b5b2e928e342db1073d36b40c143a7f23e8ab282906849200eb4f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 22KB
          • SHA256 d43e261b8e53986d984f7d8b8f70fb35abeb20fc3e4a0363a38c0cf62112a0cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 22KB
          • SHA256 8d8eb7744eb6063d73c1cc5bd2c8c4977ed407811a43ba4b134ec3fcca341c45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 22KB
          • SHA256 bf199f2aaef7224aff722314c4f18ea097fdb4cdc5f1f7647385ef1e5a0e4ec3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-profile-l1-1-0.dll
          • Size 22KB
          • SHA256 31727ede79a7e4d0fbea63e135d7e3cba58c87c022649e778882f3824ac97c20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 22KB
          • SHA256 ec81a95aade9e70901c7d4933c3882e875aeb1788e358b394610c434db352976
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-string-l1-1-0.dll
          • Size 22KB
          • SHA256 ea726c1418006660bf1820d9ca16e015cddc220447bf64bf0f2fde7d5da9a1f8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-synch-l1-1-0.dll
          • Size 22KB
          • SHA256 cbd1722300af072b0484f8120df6fad49b1ad2ba758a9f36fb5668875f223990
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-synch-l1-2-0.dll
          • Size 22KB
          • SHA256 1081b36b09061df5470488d22eec7eb897d918343a1fdb332d331dff45b1c406
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 22KB
          • SHA256 d858e53c0b2712589affb4ab13a9ec5f53b27dfc576a35188e0ae751aec154f2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-timezone-l1-1-0.dll
          • Size 22KB
          • SHA256 ff8b688a6eb243271e80a441bafbe755f7c4653243380d3a1788d303ef000caa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-core-util-l1-1-0.dll
          • Size 22KB
          • SHA256 d22b1b0a70fdd2e7b3ddbbeebc8df8d218833c9c69e0dccde132d06303135440
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-conio-l1-1-0.dll
          • Size 22KB
          • SHA256 c2c927ece8725c4d5c2b078a3b1bd629f06da8b90e6034661bc404005d84704b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-convert-l1-1-0.dll
          • Size 26KB
          • SHA256 ecc57bc5b10438d7cf01d9a998f3794e7bedbdd3029c1aca86b55d636daa686b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-environment-l1-1-0.dll
          • Size 22KB
          • SHA256 9abd3272aa6fd6f884859a8a123c71baf9e849f231fa6cb7fb84d26a9636cf62
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 22KB
          • SHA256 aed931f9ca191452a9168ea3bd7b921225e15d722eb9c586d6b3e33d65216183
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-heap-l1-1-0.dll
          • Size 22KB
          • SHA256 dfbd9ae0a1940aa552130d4d1379d1913bff90f693c07f86db0f63ae576c354a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-locale-l1-1-0.dll
          • Size 22KB
          • SHA256 acda65c61155ba420e1cf36437d3000388c4e6eaacc903274c03f476a3c3f99c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-math-l1-1-0.dll
          • Size 30KB
          • SHA256 c9ab02f8e34ea2bd9f91a40dbf679c9ba7d86f0785c46ad2a3637e95d759a8cc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-private-l1-1-0.dll
          • Size 74KB
          • SHA256 3c35a1577112f05616206f60f6671529af54337e858ae2e0ee8c46847099757c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-process-l1-1-0.dll
          • Size 22KB
          • SHA256 4bb0a5de69d7a6eda8d1e08e0b7af9b5e18ac9bff10e1e02e691cde8da36d71a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 26KB
          • SHA256 b00871f9e3f5d9f50bb2d9cfdd8990abffa35fa898b32decc0b469ac53f72a0c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 26KB
          • SHA256 3f8c47f6c4a99394a328505e9f8631fe45029d7168552f3028375adf71868c0e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-string-l1-1-0.dll
          • Size 26KB
          • SHA256 22cd3ab63679fdf67e467d5f8e3d3c842d309876450fe0a39e935e4927cd4907
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-time-l1-1-0.dll
          • Size 22KB
          • SHA256 723a0b0c18111d7f588ac9182438dbe0336dd45db22bf1c05002624ced8df07c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\api-ms-win-crt-utility-l1-1-0.dll
          • Size 22KB
          • SHA256 07296d403e31637c3f42f8ded4246e17ed0d75604340937ef1df05d5f87a2309
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\base_library.zip
          • Size 1.4MB
          • SHA256 cf15fe5803690eb54f0cbacc6c42fca3fbd735f324401b4c361db01258cb87d7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libcrypto-3.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\libcrypto-3.dll
          • Size 1.6MB
          • SHA256 785c8dde9803f8e1b279895c4e598a57dc7b01e0b1a914764fcedef0d7928b4e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libffi-8.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\libffi-8.dll
          • Size 29KB
          • SHA256 7d08df2c496c32281bf9a010b62e8898b9743db8b95a7ebee12d746c2e95d676
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libssl-3.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\libssl-3.dll
          • Size 222KB
          • SHA256 41448b8365b3a75cf33894844496eb03f84e5422b72b90bdcb9866051939c601
          • MD5 SHA1 SHA512 SSDEEP TLSH

          luna.aes

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\luna.aes
          • Size 49KB
          • SHA256 53344391165cd28b96f969bf73aa2ba3bf47d5d0645a9d337dd231fac9739a72
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pyexpat.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\pyexpat.pyd
          • Size 87KB
          • SHA256 23dc21d24cc0262d5d7463fb6010962c5d668d0fd8dbafd39665e7d7f8426f34
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python3.DLL

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\python3.DLL
          • Size 65KB
          • SHA256 db84bc052cfb121fe4db36242ba5f1d2c031b600ef5d8d752cf25b7c02b6bac6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python311.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\python311.dll
          • Size 1.6MB
          • SHA256 b5ff3eed100d81d560144d68b551a729849815ec771a689a572f1fba01e04f86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          select.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\select.pyd
          • Size 25KB
          • SHA256 d91960ca1d3bec46a2c7e6edb878918cf6e33a386d3c9f8c51c4d3aa09c138ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI26682\ucrtbase.dll
          • Size 1.1MB
          • SHA256 6dea28951eb6c593dafb26dc69e499ae283a939f46e3a00690dbcca954ce10ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/1872-283-0x00007FFADEEB0000-0x00007FFADF3D9000-memory.dmp

          memory/1872-292-0x00007FFAF5D10000-0x00007FFAF5D4F000-memory.dmp

          memory/1872-260-0x00007FFAF5FD0000-0x00007FFAF5FFE000-memory.dmp

          memory/1872-259-0x00007FFAF77A0000-0x00007FFAF77AD000-memory.dmp

          memory/1872-258-0x00007FFAF9BA0000-0x00007FFAF9BAD000-memory.dmp

          memory/1872-209-0x00007FFAF9830000-0x00007FFAF985D000-memory.dmp

          memory/1872-206-0x00007FFAF9860000-0x00007FFAF9879000-memory.dmp

          memory/1872-203-0x00007FFAF9BB0000-0x00007FFAF9BBF000-memory.dmp

          memory/1872-256-0x00007FFAF97F0000-0x00007FFAF9826000-memory.dmp

          memory/1872-201-0x00007FFAF9880000-0x00007FFAF98A4000-memory.dmp

          memory/1872-261-0x00007FFADF3E0000-0x00007FFADF9D2000-memory.dmp

          memory/1872-264-0x00007FFAF9880000-0x00007FFAF98A4000-memory.dmp

          memory/1872-192-0x00007FFADF3E0000-0x00007FFADF9D2000-memory.dmp

          memory/1872-263-0x00007FFAF5ED0000-0x00007FFAF5EFC000-memory.dmp

          memory/1872-265-0x00007FFAF5E90000-0x00007FFAF5EC3000-memory.dmp

          memory/1872-266-0x00007FFAF9860000-0x00007FFAF9879000-memory.dmp

          memory/1872-267-0x00007FFAF5DC0000-0x00007FFAF5E8D000-memory.dmp

          memory/1872-268-0x00007FFAF9830000-0x00007FFAF985D000-memory.dmp

          memory/1872-269-0x00007FFADEEB0000-0x00007FFADF3D9000-memory.dmp

          memory/1872-270-0x0000017B11750000-0x0000017B11C79000-memory.dmp

          memory/1872-271-0x00007FFAF77B0000-0x00007FFAF77C9000-memory.dmp

          memory/1872-272-0x00007FFAF5DA0000-0x00007FFAF5DB5000-memory.dmp

          memory/1872-273-0x00007FFAF5D80000-0x00007FFAF5D92000-memory.dmp

          memory/1872-274-0x00007FFAF5D60000-0x00007FFAF5D74000-memory.dmp

          memory/1872-275-0x00007FFAF5FD0000-0x00007FFAF5FFE000-memory.dmp

          memory/1872-276-0x00007FFAF5D50000-0x00007FFAF5D5B000-memory.dmp

          memory/1872-277-0x00007FFAF5D10000-0x00007FFAF5D4F000-memory.dmp

          memory/1872-278-0x00007FFAF1150000-0x00007FFAF126C000-memory.dmp

          memory/1872-279-0x00007FFAF5E90000-0x00007FFAF5EC3000-memory.dmp

          memory/1872-280-0x00007FFAF5CE0000-0x00007FFAF5CFB000-memory.dmp

          memory/1872-281-0x00007FFAF5DC0000-0x00007FFAF5E8D000-memory.dmp

          memory/1872-282-0x00007FFAF5C50000-0x00007FFAF5C73000-memory.dmp

          memory/1872-284-0x00007FFAF0FD0000-0x00007FFAF114E000-memory.dmp

          memory/1872-262-0x00007FFAF5F00000-0x00007FFAF5FBE000-memory.dmp

          memory/1872-286-0x00007FFAF5C10000-0x00007FFAF5C46000-memory.dmp

          memory/1872-285-0x0000017B11750000-0x0000017B11C79000-memory.dmp

          memory/1872-288-0x00007FFAF43C0000-0x00007FFAF43CB000-memory.dmp

          memory/1872-289-0x00007FFAF43A0000-0x00007FFAF43B2000-memory.dmp

          memory/1872-290-0x00007FFAF2470000-0x00007FFAF247C000-memory.dmp

          memory/1872-291-0x00007FFAF0FA0000-0x00007FFAF0FCA000-memory.dmp

          memory/1872-287-0x00007FFAF5DA0000-0x00007FFAF5DB5000-memory.dmp

          memory/1872-257-0x00007FFAF77B0000-0x00007FFAF77C9000-memory.dmp

          memory/1872-293-0x00007FFADEC20000-0x00007FFADEEA4000-memory.dmp

          memory/1872-294-0x00007FFAF5CE0000-0x00007FFAF5CFB000-memory.dmp

          memory/1872-295-0x00007FFAF5C50000-0x00007FFAF5C73000-memory.dmp

          memory/1872-296-0x00007FFAF0FD0000-0x00007FFAF114E000-memory.dmp

          memory/1872-297-0x00007FFAF5C10000-0x00007FFAF5C46000-memory.dmp

          memory/1872-304-0x00007FFAF77B0000-0x00007FFAF77C9000-memory.dmp

          memory/1872-298-0x00007FFADF3E0000-0x00007FFADF9D2000-memory.dmp

          memory/1872-320-0x00007FFAF0FA0000-0x00007FFAF0FCA000-memory.dmp

          memory/1872-321-0x00007FFADEC20000-0x00007FFADEEA4000-memory.dmp

          memory/1872-344-0x00007FFADF3E0000-0x00007FFADF9D2000-memory.dmp

          memory/1872-393-0x00007FFAF97F0000-0x00007FFAF9826000-memory.dmp

          memory/1872-392-0x00007FFAF9830000-0x00007FFAF985D000-memory.dmp

          memory/1872-391-0x00007FFAF9860000-0x00007FFAF9879000-memory.dmp

          memory/1872-398-0x00007FFAF5F00000-0x00007FFAF5FBE000-memory.dmp

          memory/1872-409-0x00007FFAF5CE0000-0x00007FFAF5CFB000-memory.dmp

          memory/1872-411-0x0000017B11750000-0x0000017B11C79000-memory.dmp

          memory/1872-408-0x00007FFAF1150000-0x00007FFAF126C000-memory.dmp

          memory/1872-401-0x00007FFAF5DC0000-0x00007FFAF5E8D000-memory.dmp

          memory/1872-412-0x00007FFADEEB0000-0x00007FFADF3D9000-memory.dmp

          memory/1872-419-0x00007FFAF0FA0000-0x00007FFAF0FCA000-memory.dmp

          memory/1872-420-0x00007FFADEC20000-0x00007FFADEEA4000-memory.dmp

          memory/1872-418-0x00007FFAF2470000-0x00007FFAF247C000-memory.dmp

          memory/1872-417-0x00007FFAF43A0000-0x00007FFAF43B2000-memory.dmp

          memory/1872-416-0x00007FFAF43C0000-0x00007FFAF43CB000-memory.dmp

          memory/1872-415-0x00007FFAF5C10000-0x00007FFAF5C46000-memory.dmp

          memory/1872-414-0x00007FFAF0FD0000-0x00007FFAF114E000-memory.dmp

          memory/1872-413-0x00007FFAF5C50000-0x00007FFAF5C73000-memory.dmp

          memory/1872-407-0x00007FFAF5D10000-0x00007FFAF5D4F000-memory.dmp

          memory/1872-406-0x00007FFAF5D50000-0x00007FFAF5D5B000-memory.dmp

          memory/1872-405-0x00007FFAF5D60000-0x00007FFAF5D74000-memory.dmp

          memory/1872-404-0x00007FFAF5D80000-0x00007FFAF5D92000-memory.dmp

          memory/1872-403-0x00007FFAF5DA0000-0x00007FFAF5DB5000-memory.dmp

          memory/1872-388-0x00007FFADF3E0000-0x00007FFADF9D2000-memory.dmp

          memory/1872-397-0x00007FFAF5FD0000-0x00007FFAF5FFE000-memory.dmp

          memory/1872-396-0x00007FFAF77A0000-0x00007FFAF77AD000-memory.dmp

          memory/1872-395-0x00007FFAF9BA0000-0x00007FFAF9BAD000-memory.dmp

          memory/1872-394-0x00007FFAF77B0000-0x00007FFAF77C9000-memory.dmp

          memory/1872-410-0x00007FFAF5ED0000-0x00007FFAF5EFC000-memory.dmp

          memory/1872-400-0x00007FFAF5E90000-0x00007FFAF5EC3000-memory.dmp

          memory/1872-390-0x00007FFAF9BB0000-0x00007FFAF9BBF000-memory.dmp

          memory/1872-389-0x00007FFAF9880000-0x00007FFAF98A4000-memory.dmp