Overview

overview

7

Static

static

3

SecuriteIn...74.exe

windows10-2004-x64

7

SecuriteIn...74.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/06/2026, 16:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Heur.MSIL.Benin.5.92461974.exe
  • Size 766KB
  • Sample260608-txbleacz3j
  • SHA256 ea3febb8a5f510ce79cd0ef6032b0b38bfb079230a09d85ae11036636fddc709
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
collectiondiscoveryspywarestealer

Malware Config

Signatures

  • Reads WinSCP keys stored on the system 2 TTPs

    Tries to access WinSCP stored sessions.

    spywarestealer
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Accesses Microsoft Outlook profiles 1 TTPs 39 IoCs
    collection
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs
  • outlook_office_path 1 IoCs
  • outlook_win_path 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heur.MSIL.Benin.5.92461974.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heur.MSIL.Benin.5.92461974.exe"
    1⤵
    • Accesses Microsoft Outlook profiles
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    • outlook_office_path
    • outlook_win_path
    PID:4420
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-fre --no-default-browser-check --no-first-run --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq"
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:536
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb841ac728,0x7ffb841ac734,0x7ffb841ac740
        3⤵
          PID:1884
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --metrics-shmem-handle=1792,i,5403381324038635498,6916142317476645060,262144 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:2
          3⤵
            PID:4636
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --force-high-res-timeticks=disabled --metrics-shmem-handle=2016,i,1953043929656357881,6807006108083120595,524288 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
            3⤵
            • System Time Discovery
            PID:3792
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --force-high-res-timeticks=disabled --metrics-shmem-handle=2196,i,13845847236496766342,3682466084974631190,524288 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:8
            3⤵
              PID:540
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2924,i,14649199627235604703,14203395976588760463,2097152 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:1
              3⤵
                PID:3064
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2940,i,9895297943728579446,2797756461282995649,2097152 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:1
                3⤵
                  PID:1712
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3252,i,17804385961985886791,2685914690018998566,2097152 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:1
                  3⤵
                    PID:3940
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3264,i,8872628415685560700,16445498089144059083,2097152 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:2
                    3⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:1540
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3916,i,9273358728159455207,11237580989853793195,2097152 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:1
                    3⤵
                      PID:1112
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4108,i,14177311394236349451,16685889796735681040,2097152 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:2
                      3⤵
                        PID:3084
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq" --force-high-res-timeticks=disabled --metrics-shmem-handle=3676,i,15307424911344238980,15375716382561660493,524288 --field-trial-handle=2036,i,2986634750931345082,16220607214048295328,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:8
                        3⤵
                          PID:2332
                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                      1⤵
                        PID:4120

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Crashpad\settings.dat
                            • Size 40B
                            • SHA256 4e94778cba56f146a850ddda53e4269ecc427ed207f49c9162dde5f80232a9e3
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\data_0
                            • Size 44KB
                            • SHA256 1df47cddf8010631c98ef24574ce35149674f884f8c7eaad334aa1c44586e7e9
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\data_1
                            • Size 264KB
                            • SHA256 32cc64507e040ae3ac4e11518fd42c50533eb30f8a61dc8e30540d2d4c9333a3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\data_2
                            • Size 1.0MB
                            • SHA256 c51a4ce88c2eea81bc6b420105af62e40b679d9b7493b72653a419e26641f3cc
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\data_3
                            • Size 4.0MB
                            • SHA256 9ed5e4e5cfa312124eb46882cd6ab46936043b3a1ad8125f6d67d7e64ff549cf
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000001
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\f_000001
                            • Size 35KB
                            • SHA256 55e5ee80c8f4a8490f8d3b17ce9941f2fda2b88d0e8451e905cb678e201c3a46
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000002
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\f_000002
                            • Size 68KB
                            • SHA256 6cb2b7b885f4b1e09aa5fc5187589e0d011150c6b2b3a6140ef616f890581004
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Cache\Cache_Data\index
                            • Size 256KB
                            • SHA256 2012cc7040fce76b7052cb13dd0a6a65d32e82076392f1efc2f71f5c0a84ed4e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            ba678a2fbd8c358c_0
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Code Cache\js\ba678a2fbd8c358c_0
                            • Size 298B
                            • SHA256 696c044a95ae76ed44d4aa0b2db041f0ec6f520cbfb2b57cdf2e6e0cc672484a
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Code Cache\wasm\index-dir\the-real-index
                            • Size 48B
                            • SHA256 2acb9ee39efa189ad0ae845cec2e32011510bb740adc4d8eb4c2dbc20a11c113
                            • MD5 SHA1 SHA512
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\DawnGraphiteCache\index
                            • Size 256KB
                            • SHA256 b843b67bec6b9c33266badaca571306248c22467724c4eb5bdd2b44d44fb356d
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\DawnWebGPUCache\index
                            • Size 256KB
                            • SHA256 0284f6c89f5fb3be4959077bd7f0211f828cd1edbeeffc725198af77a63aed54
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            CURRENT
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Extension Rules\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512
                            Submit Download

                            MANIFEST-000001
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Extension Scripts\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\GPUCache\index
                            • Size 256KB
                            • SHA256 0fcf23ad8754e1ba34c1af2472ddd3a862aacd8496a301c56d514332bc00d148
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            SCT Auditing Pending Reports
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512
                            Submit Download

                            README
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\README
                            • Size 180B
                            • SHA256 c43668eec4a8d88a5b3a06a84f8846853fe33e54293c2db56899a5a5dfb4d944
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            2cc80dabc69f58b6_0
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                            • Size 472B
                            • SHA256 7433e2de592bac3d53e34206cd580d140d107eae0defa146b238d209d3b34c87
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            4cb013792b196a35_0
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                            • Size 10KB
                            • SHA256 a99acceb13eb9a30ce2abec2430fdc88a126b9411e5eb7e15312fd6b2a88fd0b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            4cb013792b196a35_1
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                            • Size 6KB
                            • SHA256 dd618b52eda57ef47dcdb654e9dbe4c1085ff7219e45a78b6f98730ae601017c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Service Worker\ScriptCache\index-dir\the-real-index
                            • Size 72B
                            • SHA256 744a28bcf8a91303f3756b06097a27f8fd702308bed487633171213ae60c9902
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Shared Dictionary\cache\index
                            • Size 24B
                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\Default\Shared Dictionary\cache\index-dir\the-real-index
                            • Size 48B
                            • SHA256 7c9d6184c36998392ac42f4c2a8c7cc2b93b24e0436e2e5e783b33560ef350ec
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\GrShaderCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\GraphiteDawnCache\index
                            • Size 256KB
                            • SHA256 4128aa03febec8f84d5cf213e8f1fa8092a6a1b2b202b0799267984870a93d32
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\ShaderCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\ShaderCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Temp\n5udpesu.qoq\ShaderCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            memory/1540-152-0x000001E6F42D0000-0x000001E6F43A4000-memory.dmp
                            Download

                            memory/4420-11-0x0000000004C50000-0x0000000004C60000-memory.dmp
                            Download

                            memory/4420-210-0x0000000006C60000-0x0000000006C72000-memory.dmp
                            Download

                            memory/4420-154-0x0000000000750000-0x0000000000850000-memory.dmp
                            Download

                            memory/4420-149-0x0000000004C50000-0x0000000004C60000-memory.dmp
                            Download

                            memory/4420-151-0x0000000004DE0000-0x0000000004EE0000-memory.dmp
                            Download

                            memory/4420-150-0x0000000004DE0000-0x0000000004EE0000-memory.dmp
                            Download

                            memory/4420-0-0x0000000000200000-0x00000000002C6000-memory.dmp
                            Download

                            memory/4420-10-0x0000000006D10000-0x0000000006D60000-memory.dmp
                            Download

                            memory/4420-9-0x0000000006D60000-0x0000000006DF2000-memory.dmp
                            Download

                            memory/4420-8-0x0000000007230000-0x00000000077D4000-memory.dmp
                            Download

                            memory/4420-7-0x0000000006B10000-0x0000000006B76000-memory.dmp
                            Download

                            memory/4420-6-0x0000000006A50000-0x0000000006A86000-memory.dmp
                            Download

                            memory/4420-5-0x00000000065E0000-0x00000000066B4000-memory.dmp
                            Download

                            memory/4420-4-0x0000000005190000-0x00000000051DC000-memory.dmp
                            Download

                            memory/4420-3-0x0000000004EE0000-0x0000000004FB8000-memory.dmp
                            Download

                            memory/4420-2-0x0000000004C60000-0x0000000004CDC000-memory.dmp
                            Download

                            memory/4420-1-0x0000000004C50000-0x0000000004C60000-memory.dmp
                            Download