Overview

overview

7

Static

static

3

SecuriteIn...04.exe

windows10-2004-x64

7

SecuriteIn...04.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    102s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/06/2026, 16:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Trojan.PWS.Siggen5.33555.20020.25604.exe
  • Size 563KB
  • Sample260608-txde1acz3l
  • SHA256 f897e71163801c9bb6ed48d15bb803ff1dcd186b87e752bb7d56c7fe55714225
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
collectiondiscoveryspywarestealer

Malware Config

Signatures

  • Reads WinSCP keys stored on the system 2 TTPs

    Tries to access WinSCP stored sessions.

    spywarestealer
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Accesses Microsoft Outlook profiles 1 TTPs 33 IoCs
    collection
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 63 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs
  • outlook_office_path 1 IoCs
  • outlook_win_path 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PWS.Siggen5.33555.20020.25604.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PWS.Siggen5.33555.20020.25604.exe"
    1⤵
    • Accesses Microsoft Outlook profiles
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    • outlook_office_path
    • outlook_win_path
    PID:5380
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-fre --no-default-browser-check --no-first-run --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2"
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3116
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ff9985ec728,0x7ff9985ec734,0x7ff9985ec740
        3⤵
          PID:2668
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --metrics-shmem-handle=1588,i,1219230703837822700,10687344006978551060,262144 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=2020 /prefetch:2
          3⤵
            PID:1084
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1896,i,17569807279758388506,530997721533468052,524288 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
            3⤵
            • System Time Discovery
            PID:2632
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --force-high-res-timeticks=disabled --metrics-shmem-handle=2100,i,9344244330539564731,4390156907764559325,524288 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:13
            3⤵
              PID:2212
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2904,i,17893118741020821356,1617291669858314359,2097152 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:1
              3⤵
                PID:2504
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2928,i,12871680045388113617,9968443567239426341,2097152 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:1
                3⤵
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                PID:4732
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3120,i,13192702381312907999,8050573450296651463,2097152 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:1
                3⤵
                  PID:2240
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3148,i,16288260845477906617,15032784396818296799,2097152 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:9
                  3⤵
                    PID:3744
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3700,i,14225930722730982284,5239111625685569058,2097152 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
                    3⤵
                      PID:2128
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4168,i,1864767579545555655,17309672710635306324,2097152 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:9
                      3⤵
                        PID:5612
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2" --force-high-res-timeticks=disabled --metrics-shmem-handle=4232,i,12768491891064154059,8113408097180996489,524288 --field-trial-handle=2016,i,16731461675381390045,11059521747182005166,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:14
                        3⤵
                          PID:2552
                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                      1⤵
                        PID:6112

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Crashpad\settings.dat
                            • Size 40B
                            • SHA256 58f1e5cb01da1b958ea725c19f7a610d0366b4fca2b307061e0780ac228ae9b1
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\data_0
                            • Size 44KB
                            • SHA256 6e0202fe733833484d0d4e9c3aad32ae88e1deeb550a0f542568398b17bd8745
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\data_1
                            • Size 264KB
                            • SHA256 7b1be4abe18ab3d6179ed078319547787d1797f5fb14c85b934705b910587da4
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\data_2
                            • Size 1.0MB
                            • SHA256 c51a4ce88c2eea81bc6b420105af62e40b679d9b7493b72653a419e26641f3cc
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\data_3
                            • Size 4.0MB
                            • SHA256 21461ca0ccc22d118a4d81a7d93b677b6d3c47f1cc6347e8596a6bfdc1c955c6
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000001
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\f_000001
                            • Size 35KB
                            • SHA256 4435951eb262d439c5731cfc98ba796e1653825bfdade7d8d33762cc341faecd
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            f_000002
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\f_000002
                            • Size 68KB
                            • SHA256 6cb2b7b885f4b1e09aa5fc5187589e0d011150c6b2b3a6140ef616f890581004
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Cache\Cache_Data\index
                            • Size 256KB
                            • SHA256 4bcf98725d9c5dcf4cd2ac4467680376a76efe3841dd34f652d1fdceb3c950d3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            ba678a2fbd8c358c_0
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Code Cache\js\ba678a2fbd8c358c_0
                            • Size 298B
                            • SHA256 d9b2bb5acea4244c9e1dd07d2808ef5a6deb079829f9477172ebb0930e100df2
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Code Cache\js\index-dir\the-real-index
                            • Size 48B
                            • SHA256 a905679a6169ae4db3e3f892f5caba62494d185d111aa6a8811ec13b54689569
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Code Cache\wasm\index-dir\the-real-index
                            • Size 48B
                            • SHA256 89e2d146f7fcfc4f2f634eafa5216c9b7be9567abbcfaaa477d2019244805d14
                            • MD5 SHA1 SHA512
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\DawnGraphiteCache\index
                            • Size 256KB
                            • SHA256 06826a4a790801029a6b19de81360fd758e8f7a1594159ff51d24c7a437270ae
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\DawnWebGPUCache\index
                            • Size 256KB
                            • SHA256 dfa821ce677e89bdbd4cb3091906754b3dc0cde94f0cac9659bc95ab68f11d77
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            CURRENT
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Extension Rules\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512
                            Submit Download

                            MANIFEST-000001
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Extension Rules\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\GPUCache\index
                            • Size 256KB
                            • SHA256 402d5947aa51d2a70350bbf0d1203037714a863a629680fae869302a07818905
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            SCT Auditing Pending Reports
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512
                            Submit Download

                            README
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\README
                            • Size 180B
                            • SHA256 c43668eec4a8d88a5b3a06a84f8846853fe33e54293c2db56899a5a5dfb4d944
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            2cc80dabc69f58b6_0
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                            • Size 472B
                            • SHA256 7433e2de592bac3d53e34206cd580d140d107eae0defa146b238d209d3b34c87
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            4cb013792b196a35_0
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                            • Size 10KB
                            • SHA256 a99acceb13eb9a30ce2abec2430fdc88a126b9411e5eb7e15312fd6b2a88fd0b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            4cb013792b196a35_1
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                            • Size 6KB
                            • SHA256 dd618b52eda57ef47dcdb654e9dbe4c1085ff7219e45a78b6f98730ae601017c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Service Worker\ScriptCache\index-dir\the-real-index
                            • Size 72B
                            • SHA256 4f55837f0f1943abf83000b16e7a7b5e494fe33035bff3f7a4d637509fe0f16f
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Shared Dictionary\cache\index
                            • Size 24B
                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\Default\Shared Dictionary\cache\index-dir\the-real-index
                            • Size 48B
                            • SHA256 929b00fc7b286b3e902811e46df6178c27bbdac40ff8f6c2a21953d9c99b7365
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\GraphiteDawnCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\GraphiteDawnCache\index
                            • Size 256KB
                            • SHA256 0bc8347a12c9cc9eb08a523441e065373fb4f073b126cc9fd8880c71e3ab36aa
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\ShaderCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\ShaderCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\Temp\ny531aa3.qc2\ShaderCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            memory/4732-154-0x00000237B0390000-0x00000237B04DC000-memory.dmp
                            Download

                            memory/5380-11-0x00000000082F0000-0x0000000008382000-memory.dmp
                            Download

                            memory/5380-212-0x00000000082B0000-0x00000000082C2000-memory.dmp
                            Download

                            memory/5380-156-0x0000000006F20000-0x0000000007020000-memory.dmp
                            Download

                            memory/5380-151-0x0000000001580000-0x0000000001680000-memory.dmp
                            Download

                            memory/5380-152-0x0000000005A90000-0x0000000005AA0000-memory.dmp
                            Download

                            memory/5380-150-0x0000000001580000-0x0000000001680000-memory.dmp
                            Download

                            memory/5380-12-0x00000000086E0000-0x0000000008730000-memory.dmp
                            Download

                            memory/5380-0-0x0000000000E80000-0x0000000000F14000-memory.dmp
                            Download

                            memory/5380-10-0x00000000088A0000-0x0000000008E46000-memory.dmp
                            Download

                            memory/5380-9-0x0000000007A10000-0x0000000007A76000-memory.dmp
                            Download

                            memory/5380-8-0x0000000005A90000-0x0000000005AA0000-memory.dmp
                            Download

                            memory/5380-7-0x00000000078B0000-0x00000000078B6000-memory.dmp
                            Download

                            memory/5380-6-0x0000000007AC0000-0x00000000080D8000-memory.dmp
                            Download

                            memory/5380-5-0x0000000007310000-0x000000000745C000-memory.dmp
                            Download

                            memory/5380-4-0x0000000005C20000-0x0000000005C6C000-memory.dmp
                            Download

                            memory/5380-3-0x0000000005B20000-0x0000000005BF8000-memory.dmp
                            Download

                            memory/5380-2-0x0000000005AA0000-0x0000000005B1A000-memory.dmp
                            Download

                            memory/5380-1-0x0000000005A90000-0x0000000005AA0000-memory.dmp
                            Download

                            memory/5380-213-0x0000000005A90000-0x0000000005AA0000-memory.dmp
                            Download