Overview

overview

7

Static

static

3

SecuriteIn...98.exe

windows10-2004-x64

7

SecuriteIn...98.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    134s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 09:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Heur.MSIL.Benin.5.33844698.exe
  • Size 809KB
  • Sample260722-lnmcjsgj5v
  • SHA256 59c292aaa6b81e0de85fd7f463c7042f680c49e00f7e0027e6d0940a0fc88d9e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
collectiondiscoveryspywarestealer

Malware Config

Signatures

  • Reads WinSCP keys stored on the system 2 TTPs

    Tries to access WinSCP stored sessions.

    spywarestealer
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Accesses Microsoft Outlook profiles 1 TTPs 33 IoCs
    collection
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs
  • outlook_office_path 1 IoCs
  • outlook_win_path 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heur.MSIL.Benin.5.33844698.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heur.MSIL.Benin.5.33844698.exe"
    1⤵
    • Accesses Microsoft Outlook profiles
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    • outlook_office_path
    • outlook_win_path
    PID:4284
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-fre --no-default-browser-check --no-first-run --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl"
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4516
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ff82ffcc728,0x7ff82ffcc734,0x7ff82ffcc740
        3⤵
          PID:1008
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --metrics-shmem-handle=1632,i,3878744274586690520,150658137327729027,262144 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:2
          3⤵
            PID:4088
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1884,i,9443571968299297601,16843222548118929129,524288 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:11
            3⤵
            • System Time Discovery
            PID:1492
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --force-high-res-timeticks=disabled --metrics-shmem-handle=2116,i,2199094897361867128,6820176496816199480,524288 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:13
            3⤵
              PID:3840
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2960,i,12157617142383553441,386421700298349944,2097152 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:1
              3⤵
                PID:2308
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2964,i,184098117960693765,18389452621072197768,2097152 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:1
                3⤵
                  PID:1136
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3248,i,5097007234214752191,2736651435013637876,2097152 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:1
                  3⤵
                    PID:3508
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3260,i,10620914141694953333,14850710144275292194,2097152 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:9
                    3⤵
                      PID:2264
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3756,i,16170037941878311391,12031510384592296797,2097152 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:9
                      3⤵
                        PID:1884
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=2960,i,1681919968052514829,17651349177877883014,2097152 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:1
                        3⤵
                          PID:6008
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-sandbox --mute-audio --user-data-dir="C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl" --force-high-res-timeticks=disabled --metrics-shmem-handle=4656,i,12274589130486177983,17517399598743578397,524288 --field-trial-handle=1996,i,2144653219586546352,5687505386663838960,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:14
                          3⤵
                            PID:5824
                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                        1⤵
                          PID:1332

                        Network

                              MITRE ATT&CK Enterprise v16

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              settings.dat
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Crashpad\settings.dat
                              • Size 40B
                              • SHA256 9369e96316099514ffb9d1e154d4e8a62476793157daa6822de37d26c1a7bc99
                              • MD5 SHA1 SHA512
                              Submit Download

                              data_0
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Cache\Cache_Data\data_0
                              • Size 44KB
                              • SHA256 4af760e706d446d43cf65b7fb44f166431645da1d4a60dfcab336d256e8ec0ba
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              data_1
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Cache\Cache_Data\data_1
                              • Size 264KB
                              • SHA256 a113de77aef573cc0efaa1bb9c5439ab4a091ccb549b61d49c734237ce76a13f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              data_3
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Cache\Cache_Data\data_3
                              • Size 4.0MB
                              • SHA256 7ad60256d59ab199e81ce133c128b27da384636b85e51a13ded8f859d8e1ff12
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              f_000001
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Cache\Cache_Data\f_000001
                              • Size 37KB
                              • SHA256 1f35ad48182322c0c9770f1ca9b08a1f6f839711c2c9986ce89b2dddc45f0a4d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Cache\Cache_Data\index
                              • Size 256KB
                              • SHA256 c4cfa850a15a2a0ae7906979f6aada4d56aa75951ddb97f8c379d3c3a25ef302
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              ba678a2fbd8c358c_0
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Code Cache\js\ba678a2fbd8c358c_0
                              • Size 298B
                              • SHA256 3024e7bb01ee056e8970069e2b1ecb313aec18df5a25cd56bcbe86deea1bd50f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Code Cache\js\index-dir\the-real-index
                              • Size 48B
                              • SHA256 27c511439901ca99d82ea29172c36d1d1300c3945b1c9544d9348dd9ecf9c2ac
                              • MD5 SHA1 SHA512
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Code Cache\wasm\index-dir\the-real-index
                              • Size 48B
                              • SHA256 6be880a7eb623dfb086b9dbe2caae742434109daf9b6617a801449599fb20e83
                              • MD5 SHA1 SHA512
                              Submit Download

                              index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\DawnGraphiteCache\index
                              • Size 256KB
                              • SHA256 96474d11faf16962c7c1ee5ab93bec5bafeb1506efe49085b11f51f7d41b3ee2
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\DawnWebGPUCache\index
                              • Size 256KB
                              • SHA256 838e44ebfd91fe151514679aa419f46bce4a04797cefbdb66a66ff2e7dc68b03
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              MANIFEST-000001
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Extension Rules\MANIFEST-000001
                              • Size 41B
                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                              • MD5 SHA1 SHA512
                              Submit Download

                              index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\GPUCache\index
                              • Size 256KB
                              • SHA256 d0ec0f809750bb15cb3111c3a32044d156b911074978de3fe6521dcea4cbb11e
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              SCT Auditing Pending Reports
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Network\SCT Auditing Pending Reports
                              • Size 2B
                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                              • MD5 SHA1 SHA512
                              Submit Download

                              README
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\README
                              • Size 180B
                              • SHA256 c43668eec4a8d88a5b3a06a84f8846853fe33e54293c2db56899a5a5dfb4d944
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              2cc80dabc69f58b6_0
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                              • Size 472B
                              • SHA256 7433e2de592bac3d53e34206cd580d140d107eae0defa146b238d209d3b34c87
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              4cb013792b196a35_0
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                              • Size 10KB
                              • SHA256 a99acceb13eb9a30ce2abec2430fdc88a126b9411e5eb7e15312fd6b2a88fd0b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              4cb013792b196a35_1
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                              • Size 6KB
                              • SHA256 dd618b52eda57ef47dcdb654e9dbe4c1085ff7219e45a78b6f98730ae601017c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Service Worker\ScriptCache\index-dir\the-real-index
                              • Size 72B
                              • SHA256 4f7d72c810f93bc0428a5984c52426f65809b66959f734f04e98fc7490ed1a64
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Shared Dictionary\cache\index
                              • Size 24B
                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                              • MD5 SHA1 SHA512
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Shared Dictionary\cache\index-dir\the-real-index
                              • Size 48B
                              • SHA256 6281641949ab6bca6c676610fc81ebfbcc643564f55cc62d47e107301a9e551d
                              • MD5 SHA1 SHA512
                              Submit Download

                              CURRENT
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\Default\Sync Data\LevelDB\CURRENT
                              • Size 16B
                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                              • MD5 SHA1 SHA512
                              Submit Download

                              data_0
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\GrShaderCache\data_0
                              • Size 8KB
                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_2
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\GrShaderCache\data_2
                              • Size 8KB
                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_3
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\GrShaderCache\data_3
                              • Size 8KB
                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_1
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\GraphiteDawnCache\data_1
                              • Size 264KB
                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              index
                              • Path C:\Users\Admin\AppData\Local\Temp\fxtyottq.mwl\GraphiteDawnCache\index
                              • Size 256KB
                              • SHA256 addaf56b0188961a5e4893e7bc19b89937e990bf90151964046d9cb46375262d
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              memory/4284-134-0x00000000745D0000-0x0000000074D8C000-memory.dmp
                              Download

                              memory/4284-10-0x00000000070F0000-0x0000000007182000-memory.dmp
                              Download

                              memory/4284-208-0x00000000074C0000-0x00000000074D2000-memory.dmp
                              Download

                              memory/4284-12-0x00000000745D0000-0x0000000074D8C000-memory.dmp
                              Download

                              memory/4284-152-0x00000000745D0000-0x0000000074D8C000-memory.dmp
                              Download

                              memory/4284-51-0x00000000745E2000-0x00000000745E3000-memory.dmp
                              Download

                              memory/4284-209-0x00000000745D0000-0x0000000074D8C000-memory.dmp
                              Download

                              memory/4284-130-0x00000000745D0000-0x0000000074D8C000-memory.dmp
                              Download

                              memory/4284-0-0x00000000745E2000-0x00000000745E3000-memory.dmp
                              Download

                              memory/4284-11-0x00000000074F0000-0x0000000007540000-memory.dmp
                              Download

                              memory/4284-9-0x00000000076B0000-0x0000000007C6A000-memory.dmp
                              Download

                              memory/4284-8-0x0000000006EA0000-0x0000000006F06000-memory.dmp
                              Download

                              memory/4284-7-0x0000000006DD0000-0x0000000006E02000-memory.dmp
                              Download

                              memory/4284-6-0x0000000006950000-0x0000000006A42000-memory.dmp
                              Download

                              memory/4284-5-0x0000000005370000-0x00000000053BC000-memory.dmp
                              Download

                              memory/4284-4-0x0000000005440000-0x0000000005518000-memory.dmp
                              Download

                              memory/4284-3-0x0000000004F60000-0x0000000004FDC000-memory.dmp
                              Download

                              memory/4284-2-0x00000000745D0000-0x0000000074D8C000-memory.dmp
                              Download

                              memory/4284-1-0x0000000000390000-0x0000000000460000-memory.dmp
                              Download

                              memory/4516-133-0x0000025CEB6D0000-0x0000025CEB7C2000-memory.dmp
                              Download