Overview

overview

7

Static

static

3

SecuriteIn...65.exe

windows10-2004-x64

7

SecuriteIn...65.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/06/2026, 16:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Variant.Barys.508189.92481565.exe
  • Size 555KB
  • Sample260608-txbleacz2r
  • SHA256 aba177f7474cff25ec56a8d1b8f0b80c9104c2d9e8b6e4eebb9dcd5e625b10c5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
collectiondiscoveryspywarestealer

Malware Config

Signatures

  • Reads WinSCP keys stored on the system 2 TTPs

    Tries to access WinSCP stored sessions.

    spywarestealer
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Accesses Microsoft Outlook profiles 1 TTPs 39 IoCs
    collection
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs
  • outlook_office_path 1 IoCs
  • outlook_win_path 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Barys.508189.92481565.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Barys.508189.92481565.exe"
    1⤵
    • Accesses Microsoft Outlook profiles
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    • outlook_office_path
    • outlook_win_path
    PID:3880
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-fre --no-default-browser-check --no-first-run --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr"
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1856
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcdc3dc728,0x7ffcdc3dc734,0x7ffcdc3dc740
        3⤵
          PID:5032
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --metrics-shmem-handle=1688,i,11197442032846417679,4117712991290705260,262144 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:2
          3⤵
            PID:3848
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --force-high-res-timeticks=disabled --metrics-shmem-handle=1956,i,10481044515029404260,2303475430299137833,524288 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3
            3⤵
            • System Time Discovery
            PID:1264
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --force-high-res-timeticks=disabled --metrics-shmem-handle=2100,i,7921375369895530519,1579187455976989076,524288 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:8
            3⤵
              PID:764
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2888,i,15274103104203684065,8952296892939489277,2097152 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:1
              3⤵
                PID:3392
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2896,i,1360977370058856437,6103253186377966629,2097152 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:1
                3⤵
                  PID:3772
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3140,i,8704074690110983124,7394041070233752073,2097152 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=3320 /prefetch:1
                  3⤵
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  PID:4704
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3156,i,14965095961169508676,4773226522266758984,2097152 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:2
                  3⤵
                    PID:3356
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3752,i,8717190917867419689,589550278050676233,2097152 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:1
                    3⤵
                      PID:3412
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4132,i,12937996228201901287,4305559503748985633,2097152 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:2
                      3⤵
                        PID:3992
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr" --force-high-res-timeticks=disabled --metrics-shmem-handle=4208,i,14833822535072954355,4022728966091135080,524288 --field-trial-handle=2020,i,14799401904105834255,14426610622717603024,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
                        3⤵
                          PID:3552
                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                      1⤵
                        PID:1892

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Crashpad\settings.dat
                            • Size 40B
                            • SHA256 4cc963b0135e54e638ed4eadd24bba76dd8bdc9f2de81b80eca5435a91adf6ab
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\data_0
                            • Size 44KB
                            • SHA256 17425a4f7ba3913d9f3968712ab722dca02359e603015d852b4f171decc32fd9
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\data_1
                            • Size 264KB
                            • SHA256 398bca07280357b73f398a0d724e2d569cc099eade018874e9dd1ac228bf488b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\data_2
                            • Size 1.0MB
                            • SHA256 c51a4ce88c2eea81bc6b420105af62e40b679d9b7493b72653a419e26641f3cc
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\data_3
                            • Size 4.0MB
                            • SHA256 da6bbab2d61acb95356650fa6410085e70d28600ea7bda68b5ad8d0ce3dd391b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000001
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\f_000001
                            • Size 35KB
                            • SHA256 05ca651d79533d86b2d96123ba884140ddfbc8dc04f02e1e81bcf70e78209f1f
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000002
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\f_000002
                            • Size 68KB
                            • SHA256 6cb2b7b885f4b1e09aa5fc5187589e0d011150c6b2b3a6140ef616f890581004
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Cache\Cache_Data\index
                            • Size 256KB
                            • SHA256 e70c7a44e66c025cb9ad6bb16ffd3af0eae8a333d8661708580e236d1a2f409c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            ba678a2fbd8c358c_0
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Code Cache\js\ba678a2fbd8c358c_0
                            • Size 298B
                            • SHA256 622909a447f1d687474486c111542a423b48327de929e5179dc9af1183b1a89c
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Code Cache\wasm\index-dir\the-real-index
                            • Size 48B
                            • SHA256 c5b67ba2886cdd7eeed62530f82f0eb31c88101f4796b331142da342847234f4
                            • MD5 SHA1 SHA512
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\DawnGraphiteCache\index
                            • Size 256KB
                            • SHA256 9ad532d584daeda344bf164ef7fca2b2674c34c6e6593f7e639c96333500bb43
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\DawnWebGPUCache\index
                            • Size 256KB
                            • SHA256 cf74906e8ca94a9c72b36ba7e4c0deebde568afd0f081ba0c1e304945845ceda
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\GPUCache\index
                            • Size 256KB
                            • SHA256 ecdc7a20d09a4ddb48f4856537f3d7774f3901e7c2119e163acba63770640afa
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            MANIFEST-000001
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Local Storage\leveldb\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512
                            Submit Download

                            SCT Auditing Pending Reports
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512
                            Submit Download

                            README
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\README
                            • Size 180B
                            • SHA256 c43668eec4a8d88a5b3a06a84f8846853fe33e54293c2db56899a5a5dfb4d944
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            2cc80dabc69f58b6_0
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                            • Size 472B
                            • SHA256 7433e2de592bac3d53e34206cd580d140d107eae0defa146b238d209d3b34c87
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            4cb013792b196a35_0
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                            • Size 10KB
                            • SHA256 a99acceb13eb9a30ce2abec2430fdc88a126b9411e5eb7e15312fd6b2a88fd0b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            4cb013792b196a35_1
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                            • Size 6KB
                            • SHA256 dd618b52eda57ef47dcdb654e9dbe4c1085ff7219e45a78b6f98730ae601017c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Service Worker\ScriptCache\index-dir\the-real-index
                            • Size 72B
                            • SHA256 e0fac8e85e14bb9e3191879cf6b4c61e988ed0d9dd79abf703e7bd0015d03271
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Shared Dictionary\cache\index
                            • Size 24B
                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Shared Dictionary\cache\index-dir\the-real-index
                            • Size 48B
                            • SHA256 6e9f0444d257b0d9afc3a645d5ba816793e6ad9c8eb9073286a6175e58bfac94
                            • MD5 SHA1 SHA512
                            Submit Download

                            CURRENT
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\Default\Site Characteristics Database\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\GrShaderCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\GrShaderCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\GrShaderCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\GraphiteDawnCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\uv0sds0c.mzr\GraphiteDawnCache\index
                            • Size 256KB
                            • SHA256 b9da58589292ca67f209854c8c100961e762261a55b343b012bfadcd69a36ddf
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            memory/3880-11-0x0000000005800000-0x0000000005810000-memory.dmp
                            Download

                            memory/3880-9-0x0000000007AC0000-0x0000000007B52000-memory.dmp
                            Download

                            memory/3880-155-0x0000000005B20000-0x0000000005C20000-memory.dmp
                            Download

                            memory/3880-1-0x0000000005800000-0x0000000005810000-memory.dmp
                            Download

                            memory/3880-151-0x0000000005B20000-0x0000000005C20000-memory.dmp
                            Download

                            memory/3880-152-0x0000000005800000-0x0000000005810000-memory.dmp
                            Download

                            memory/3880-150-0x0000000001300000-0x0000000001400000-memory.dmp
                            Download

                            memory/3880-0-0x0000000000E70000-0x0000000000F02000-memory.dmp
                            Download

                            memory/3880-10-0x0000000007A70000-0x0000000007AC0000-memory.dmp
                            Download

                            memory/3880-211-0x0000000007990000-0x00000000079A2000-memory.dmp
                            Download

                            memory/3880-8-0x0000000007FD0000-0x0000000008574000-memory.dmp
                            Download

                            memory/3880-7-0x0000000007850000-0x00000000078B6000-memory.dmp
                            Download

                            memory/3880-6-0x0000000007770000-0x00000000077A6000-memory.dmp
                            Download

                            memory/3880-5-0x0000000007320000-0x00000000073F4000-memory.dmp
                            Download

                            memory/3880-4-0x0000000005DE0000-0x0000000005E2C000-memory.dmp
                            Download

                            memory/3880-3-0x0000000005C20000-0x0000000005CF8000-memory.dmp
                            Download

                            memory/3880-2-0x0000000005AA0000-0x0000000005B1A000-memory.dmp
                            Download

                            memory/4704-153-0x0000017ABBA30000-0x0000017ABBB04000-memory.dmp
                            Download