hxxps://mega[.]nz/file/4VdxDILS#VM1xF9kOg0tq8ZlKcmn4ljMQi22py8NKoDLMZQVVyaE

Analysis

max time kernel
414s
max time network
420s
platform
windows11-21h2_x64
resource
win11-20231222-en
resource tags

arch:x64arch:x86image:win11-20231222-enlocale:en-usos:windows11-21h2-x64system
submitted
03/02/2024, 21:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://mega.nz/file/4VdxDILS#VM1xF9kOg0tq8ZlKcmn4ljMQi22py8NKoDLMZQVVyaE

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 7 IoCs

pid	Process
2508	setup.tmp
700	Poly Bridge 3.exe
3156	UnityCrashHandler64.exe
5860	UnityCrashHandler64.exe
4976	Poly Bridge 3.exe
4492	UnityCrashHandler64.exe
6952	UnityCrashHandler64.exe

Loads dropped DLL 22 IoCs

pid	Process
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
2508	setup.tmp
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
3156	UnityCrashHandler64.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4492	UnityCrashHandler64.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\dll\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	Poly Bridge 3.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\dll\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\dll\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\kernelbase.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\mono-2.0-bdwgc.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\exe\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\mswsock.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\WindowsPlayer_Master_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win64_mono_x64.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\mono-2.0-bdwgc.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\symbols\dll\kernelbase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\combase.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\kernel32.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	UnityCrashHandler64.exe
File opened for modification	C:\Windows\DLL\kernel32.pdb	Poly Bridge 3.exe
File opened for modification	C:\Windows\kernelbase.pdb	UnityCrashHandler64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000003	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000003\HardwareID	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000003\Service	msedge.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Poly Bridge 3.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Poly Bridge 3.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Poly Bridge 3.exe
Key opened	\REGISTRY\USER\S-1-5-21-4286256601-2211319207-2237621277-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Poly Bridge 3.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Poly Bridge 3.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Poly Bridge 3.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Poly Bridge 3.exe
Key opened	\REGISTRY\USER\S-1-5-21-4286256601-2211319207-2237621277-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Poly Bridge 3.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	7zFM.exe
Key created	\REGISTRY\USER\S-1-5-21-4286256601-2211319207-2237621277-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	7zFM.exe
Key created	\REGISTRY\USER\S-1-5-21-4286256601-2211319207-2237621277-1000_Classes\Local Settings	msedge.exe

Suspicious behavior: EnumeratesProcesses 56 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
864	msedge.exe
864	msedge.exe
3164	msedge.exe
3164	msedge.exe
1936	identity_helper.exe
1936	identity_helper.exe
1844	msedge.exe
1844	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
2508	setup.tmp
2508	setup.tmp
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
700	Poly Bridge 3.exe
3156	UnityCrashHandler64.exe
3156	UnityCrashHandler64.exe
3156	UnityCrashHandler64.exe
3156	UnityCrashHandler64.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4976	Poly Bridge 3.exe
4492	UnityCrashHandler64.exe
4492	UnityCrashHandler64.exe
4492	UnityCrashHandler64.exe
4492	UnityCrashHandler64.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3556	7zFM.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: 33	1820	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1820	AUDIODG.EXE
Token: SeRestorePrivilege	3556	7zFM.exe
Token: 35	3556	7zFM.exe
Token: SeSecurityPrivilege	3556	7zFM.exe
Token: SeLockMemoryPrivilege	2508	setup.tmp
Token: 33	2576	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2576	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
3556	7zFM.exe
3556	7zFM.exe
2508	setup.tmp
2508	setup.tmp

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe
864	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
700	Poly Bridge 3.exe
4976	Poly Bridge 3.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 864 wrote to memory of 3484	864	msedge.exe	70
PID 864 wrote to memory of 3484	864	msedge.exe	70
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 1872	864	msedge.exe	80
PID 864 wrote to memory of 4988	864	msedge.exe	81
PID 864 wrote to memory of 4988	864	msedge.exe	81
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82
PID 864 wrote to memory of 2940	864	msedge.exe	82

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://mega.nz/file/4VdxDILS#VM1xF9kOg0tq8ZlKcmn4ljMQi22py8NKoDLMZQVVyaE
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fff06dd3cb8,0x7fff06dd3cc8,0x7fff06dd3cd8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4620 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1328 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,8496812583523792339,9509144978545992514,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5200 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1380
- C:\Program Files\7-Zip\7zFM.exe
  "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\Po3lyBri3dge3-1.0.6-elamigos.rar"
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:3556

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2088

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004D0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1820

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2484

\??\E:\setup.exe
"E:\setup.exe"
1⤵
PID:4928
- C:\Users\Admin\AppData\Local\Temp\is-BLLH6.tmp\setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-BLLH6.tmp\setup.tmp" /SL5="$A0304,3374199,677376,E:\setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:2508

C:\Games\Poly Bridge 3\Poly Bridge 3.exe
"C:\Games\Poly Bridge 3\Poly Bridge 3.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:700
- C:\Games\Poly Bridge 3\UnityCrashHandler64.exe
  "C:\Games\Poly Bridge 3\UnityCrashHandler64.exe" --attach 700 2327097184256
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious behavior: EnumeratesProcesses
  PID:3156
- - C:\Games\Poly Bridge 3\UnityCrashHandler64.exe
    "C:\Games\Poly Bridge 3\UnityCrashHandler64.exe" "700" "2327097184256"
    3⤵
    - Executes dropped EXE
    PID:5860

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004D0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2576

C:\Games\Poly Bridge 3\UnityCrashHandler64.exe
"C:\Games\Poly Bridge 3\UnityCrashHandler64.exe" --attach 4976 3106804273152
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
PID:4492
- C:\Games\Poly Bridge 3\UnityCrashHandler64.exe
  "C:\Games\Poly Bridge 3\UnityCrashHandler64.exe" "4976" "3106804273152"
  2⤵
  - Executes dropped EXE
  PID:6952

C:\Games\Poly Bridge 3\Poly Bridge 3.exe
"C:\Games\Poly Bridge 3\Poly Bridge 3.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Games\Poly Bridge 3\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll

Filesize
1.9MB

MD5
34b3ef92e9669f01111b77afc011072c

SHA1
85f3cbc6d67d2fe765e9c4171a1b109f5a7f7ec8

SHA256
918934696db24256983a98f2dd6d56db899825640cbe719f0aa86e0e913e2dd9

SHA512
997339bd179762c4ee317cc16c692d2087626907f8d819b15f8f943277e667cc9eafac0beb1239ff39e9cb15bf4c6b33d61497c5883c2a3fba8862d82181ab02

Download Submit
C:\Games\Poly Bridge 3\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll

Filesize
1.9MB

MD5
e0077138168e3605b74527363cc419e6

SHA1
05ae77e3f17b3ed2a1a336708fc9597af910718f

SHA256
fe822c61aaaca522c6fcac402d7b3f42c5943304006489a4c36f65e6aed7ad39

SHA512
bbd920642c82d7414d7f2a45341822c11fa186d1340ab38f8858360b4a496522b0f9d3e5056d714e34df0cbc6732950672c8099d9a171d22fdce989643398cd1

Download Submit
C:\Games\Poly Bridge 3\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser

Filesize
1KB

MD5
0d831c1264b5b32a39fa347de368fe48

SHA1
187dff516f9448e63ea5078190b3347922c4b3eb

SHA256
8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

SHA512
4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

Download Submit
C:\Games\Poly Bridge 3\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx

Filesize
59KB

MD5
f7be9f1841ff92f9d4040aed832e0c79

SHA1
b3e4b508aab3cf201c06892713b43ddb0c43b7ae

SHA256
751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

SHA512
380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

Download Submit
C:\Games\Poly Bridge 3\MonoBleedingEdge\etc\mono\config

Filesize
2KB

MD5
00dd0ea7a708a9cb30545160e6474fdd

SHA1
48741b77d235e9159474b316eb244ec395a2de72

SHA256
40ccccec6366e788ae757e88ce39c0fa0484b1f8a4836da7c860b54a15ebb1d7

SHA512
a6d752a6efbb9f531ba662f94d2181c0e5679e595f226e894ebb75f5a0e666f027beb329ba47f0ea20958a8be196ecaf702b51cca3a427e8f8ce7e29447b0e89

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3.exe

Filesize
638KB

MD5
8d64144ef5a9947d4d75cb9e0c6f48da

SHA1
ebe63cfa7126a80707b90c0161a8798cdbe19ee5

SHA256
f5cb1cab74c6bce87d789472b56eae40f49879f95b3e40fdb0cf25298d0f9b9b

SHA512
aa75720b0341ff78a04b8884f6a96cbb7887350ffed2863c4a6178ea66f5aacea64e068c61a6d678f116ba579e06d27b787cf94b03cac8b7c1691ffa55ac4019

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.AIModule.dll

Filesize
54KB

MD5
ae6e4c252a1847721c81f071d4b7f469

SHA1
5d86be15202fb6c87559ae3eff607cbf91b76252

SHA256
89fd7a6d004b5ca030f0e623a96bf99f91e654350f3994358c67f5384463dad8

SHA512
51535f71d16b8d625aec0942f20429e7a1dc321dd5a7920d9f9837dc0c64e585a8242e34dcd9def71ffad10dcbfa919b97e07a0ff9cfe9eb47555b66f1257fd6

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.ARModule.dll

Filesize
20KB

MD5
0fd471c470cccce26c71e793bf0261dc

SHA1
062320169760a4a3d840d484e430b93e99e2b90e

SHA256
c6e2d2e7521f26e6ab444eb524d2589c28f4e1288e5b13ec7c7f6613fefc429c

SHA512
57ece4456e5996f70001db0de38ae5bc1754214f9da9522da1a601640bf0cc4bf9895d2bda722bb38fe72b4c99022953549018b43e1a7dcffc9cbbc0003ffd2f

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.AccessibilityModule.dll

Filesize
22KB

MD5
8328e6b56ffc63150e41d037f89e8914

SHA1
2fe733f6910079b16224fcc38cdf66d0b35c49ac

SHA256
eb25bd6808b8391212ab450741aed12838ba66f345cc7b97e1c8c80b0c4a5616

SHA512
0b67e725b6ceb42e636288f64aa0bbc121932664ffae89dc7c326be1b44c83d499a1e93cf7f7d5c5b3c3e52661be02b4dbdb90350103d6a16ac5f9e234bf0ef4

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.AndroidJNIModule.dll

Filesize
77KB

MD5
6da2622d89a051ee2686620bfb0dab98

SHA1
97f4ca1be67e6513ffeff6fd56a3a48c125ecd7b

SHA256
7ddb82fd1fb44d760a50f921393f2a6b48bbbade46cf93b667d8f9fdf04e0651

SHA512
2a54a2ae4086db845dfe9e257887f52a97b564550f8d7abfd06ea8ba42755606b29e9c2acbc3fb547d18ca2abd29ceac9b4d4934584f8855e54dabe117d7e422

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.AnimationModule.dll

Filesize
157KB

MD5
4bb9c7e7992d207d15ff090742792318

SHA1
5ad5993b1f7b4f8d13c71083110f6f448ce0a62e

SHA256
1ad3119baaf501130754e5ecdbb6cb24e58d1439d37ae720181aaa48e61fcbe3

SHA512
47afa2b59601ebcb4ba7e6afdc8149faa34f80de812b276e503a08ce9abba3b990d60168f7b87ad14fd4b112a0c9673cbc8ccb6ac411c2b1e0163401209b3c5c

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.AssetBundleModule.dll

Filesize
32KB

MD5
d8374d31ed358bc947793fe83529f4c8

SHA1
e70dbcc7f92b6047b1e41fbc8b449194272ff027

SHA256
e3008f8a99985c07d20161d202c37cd2afa3d9e1f46942a0487d108273697de6

SHA512
80c8e2c07979ad47b4cb108598f96e37a1e27f58c79095d232a5ce502b37ed414f29d3e27e5fdc3d25651966846287254109c36c8fbb23f3102008454b781f73

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.AudioModule.dll

Filesize
68KB

MD5
8b7f856ca57782203e5e4de34870983a

SHA1
eca763af4b1c6d90c3cac5587fd688366a897bdd

SHA256
014d911dcea8a0b0ac6a3c51d718a4562b993880b421a247c77abbe329c94e78

SHA512
00445b1b6cf722fe6851414cf348f04fe77b5cda930e0a4bb0ebeb378f132ff193bbb21654f8c57f56b575085fb6184700baaa5641c28a9d01b528d1cdc2ff16

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.ClothModule.dll

Filesize
25KB

MD5
5f0adc4f6531da44c9c169f49bee34ab

SHA1
26a3d91c37409621c6fbe6b90cb3a5e80e99f3f8

SHA256
43adf3ad72985a6bd4355e8f0e011fc4e2f01996b4dd0119152cc36e8c5aad51

SHA512
d97cf651c1a283b8292296b5f46f29040b90f2e272742e079469f4c5d5d16478d0d193f547f7e87fa4786215d7592db95fe7a35c4dcc65da91369fce3b9011cf

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.ClusterInputModule.dll

Filesize
20KB

MD5
b95a55b75dc39c0748ea5785645fcafd

SHA1
f1ef294640c3cc50db0d2f070ba1abcb9273f5b4

SHA256
f2ea35893be2fd51e33cb33cf636da6c35c5258de2d2ede119380b1ab28eea4f

SHA512
46423e4c14b1546f04976e0fe207fc96ff01a5b71a0d4b6512e92df07604b9aecf02c66ec0a7d99adb592c1531cf72ccec3dd7c430f18da01eb04ebecca5c8c5

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.ClusterRendererModule.dll

Filesize
21KB

MD5
24656414cb8a904f42325547254787a6

SHA1
d3ed6f6824d9bc7ee0d84cdd430a05cbf727ae8a

SHA256
d8a88f65a9a2256eb4ad4b4da005c1f20d4db7259399f5fb4bdd93b7aee3a3ac

SHA512
b49db7aff9821e28b0ec94cb895be4f80b7221963e575b9707883d29e1d3ed0ebcd03643576c2a765fd4590c8b11ca09dd2a17f5f63a0827cab0f458fa1a0545

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.CoreModule.dll

Filesize
1.1MB

MD5
3ce6ae55ff4045818fb18c4f6b8f5dd4

SHA1
5521d8584a791d1471aff017214ba733db1ad7ae

SHA256
1f0bc4697ef4cb20cd192eb2ef786628afb83cd726fef61b8b96865bd1da5001

SHA512
c0a29f1533617b93d30f0d53f5a3d20f0866ecb0c392efbae8536b710549a987183a725f74e4007fe18e94904fc37f68e0e85d9b3b51b40fd2c16289aaba84ad

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.CrashReportingModule.dll

Filesize
20KB

MD5
9155dda140f38cf9e3420619dd151054

SHA1
5628c172dd820ae2266b01a56d8a92098a4d26bb

SHA256
982e79d7827d977a3faae3aef56cab27a623e35719873206a1a8a74accb11eaa

SHA512
087770a9ee5f3cd8df0d9caf2b7c314e52badf08433816988b1e68062dc066649d6bbfa9d709b91cc8772500be6e504b699d2f1022167ffc72f90fa15f37f943

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.DSPGraphModule.dll

Filesize
28KB

MD5
1ff8de8ceec33632b43accd2df146602

SHA1
f2ea25b595821d3cce0d3103b290476c6ded0020

SHA256
f0de1c23f65ea6842155226fa27a28801e7f85f7b16b8474b31ec6205bd9868c

SHA512
637cb0ba27271cd219d0c585f3adb7f3422c384dd9b2d2676b4e50edc1266a7d90ba276aeb6c4ebdd4ba5d49b354f4a762e01c3350ecf0b44b7434c6faeaadc1

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.DirectorModule.dll

Filesize
24KB

MD5
ff877fae25286fba54b08ff7e2409b1e

SHA1
14a3e14dc1d04d295eb5efcfb64b7f540e3c8888

SHA256
80c9dbbccbe853d44cd746a36995d1164e655eec6ceb1d0c080dbf0bc6ecbf31

SHA512
578a837501db673acc072c2f9a3f5ec5cf38d83b6e44eb3f7f9967abcbeca550989cb4fa538321b5ba73fec0bc2bd5a7fb4f3f8d044d60259377adf4bb5e4736

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.GIModule.dll

Filesize
19KB

MD5
b88f9ad5e4329bbd082630274e1678c2

SHA1
06765159ec4f72d51a537fa26fbb2f05e6a26e34

SHA256
9ac8f2957cd7ac9451faa55b57a87cb7887faf0cbabebb99a5784ba894828e71

SHA512
a846623e2c262aa0a1754ea649aa7157fc3eb602650651c622714c98b88851bc403063dd6dc2eae3c9e21a89b8fc6a920a75cded7555d5303abfda33cb0276fa

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\UnityEngine.dll

Filesize
101KB

MD5
42fb26074da2250ad9f4a94fdd0347cd

SHA1
de61a270ef72304c135eea5fed140c26b7053fe3

SHA256
5a5fa2bc37727106f1120dd0431671125963a860c2d76133f9266f6e6124210c

SHA512
a9b79c05d40abca8b27c8b6e123a0119534c57c782ac7d7c0c4b0267bd21b566b3585bf45d9c476b4e82de8dbf9c2a30439ea102db04f8833d5d641d8e3679d8

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Managed\mscorlib.dll

Filesize
1.8MB

MD5
45c55a5fdf3625d78662fca8399954ec

SHA1
983b52a0c2ca76bf1a956bc339d8c7867329dd09

SHA256
cf0e3abf10c20265abdbe0a3de57b176897f68d7c32a4ca944642d625a8f29e5

SHA512
f22c92c302ce8f1db66b860b715bef641a01491995f7b52d4621a5b8a3ede6abeea520214799cc6bf9ed68512f391d3bdb30088593c719fcec75552c442bf5bf

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\Resources\unity default resources

Filesize
2.0MB

MD5
470d137e913a8ba7ded1786f0dba2367

SHA1
82c0f26665255184663b9eb95da478fbb0f9de41

SHA256
8fce45d47445488cb02eb03127b379ae9853e76a24f7e3966ae7db74e4868df4

SHA512
d8d499d6909761575dfc680a05e3d86d6633027f36b402376b7d1a8328fdec78bf014b1447bfdaa06f2127c6e55cb29d9000bc3218391a705412eabb8bcc22b7

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\RuntimeInitializeOnLoads.json

Filesize
6KB

MD5
e86cb269a37458b74c7d1b74c761c2db

SHA1
7525846c67eb32006036350d01ee5d62d15e498d

SHA256
8f710b6db4f06ad11bbebb94ee63b61eaf9cf000943a5b94f8f32d21b7b9f56c

SHA512
4544ae3bcea3f9a05d61ed79c0f1ccd72b41d2137868a58a5fdedc8a255902a336ae5c02c1de4217543b477825ffafcc37b59475dc91277f64d63c6859427ce7

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\ScriptingAssemblies.json

Filesize
4KB

MD5
d8739342b2454c30937e245adfb51f0c

SHA1
c2c356e28285bfa92d4fcc829fb1e348474e75e4

SHA256
03ab20f2ea14192fa2d18c38ee3f3b043de3e27f40ba1d86d1bd58e071b5a233

SHA512
f1423ce84c5c2cd677bd249e41ccf4bfe5892acf59e2eb97cad0908828532fd38ece3fdbcc0a2e6feac9bdc0cfa306ed746d74aa988c291225a047dd9af0fcba

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\StreamingAssets\MainMenuCameras\MainMenu_006.camera

Filesize
435B

MD5
c5d726da1b73cab5ce52854e997527da

SHA1
6899077fc5213cbe8f75f7630b6e1ff2c382d757

SHA256
7c92be68ddaf2fc4502409ea644656ec0bc19b1164c12c2d6188e0042c2ffa9a

SHA512
95688bf73cdcd9f312cf42692c633e93b61e365a178993ec6bf592df17ba2d3c7bf725e5fae612eacc1458d6a376ca1ac9d351b975011a5c5b96b9d53852cd37

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\app.info

Filesize
24B

MD5
cd361bfa745923f56e85ada71ca8e36c

SHA1
266690d77a1d4f3a071c18526b3c33c99752d745

SHA256
5a7404f59e30bf6f5b5ef7f6169588310d55ac8c153349fe117b9114ccd32dce

SHA512
0ff3db3f2ad63c2e3b57990b5d736fd1f427850670335fafb40fc92f49698678c6afd81d41c8fd63d60b758514e0a9984a83d0dce0443bbcade85beb38698af4

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\boot.config

Filesize
86B

MD5
e0cc3d180088c8c2ab277613b1fa77ce

SHA1
3c5af5c86fe70d1975ac0de8bc0ba26e0b13573b

SHA256
a2eec40c5ce47add99ff5a85fc8ba68143897f9728af32b76ea552e1c8b00e6a

SHA512
a6d7db7dfc2329a3d3daf98ede90f653e5a72d5ca49dc643966680f915292fe3739a0cb22de4da5b9c5f1c5328e51fa7d1d1dd3e1a9e5aa99347becf35576633

Download Submit
C:\Games\Poly Bridge 3\Poly Bridge 3_Data\data.unity3d

Filesize
1.8MB

MD5
823f045d3f0137c4a99d813607bdc120

SHA1
66bfd9befe0ba510387eb81d41aa33b0bf8bc2c1

SHA256
30141018693054d425153d4c0db039b839cf25e49211dc22c2b02d2bcbb87c29

SHA512
349a28561f62be5dc9619a53253d8c3e88e47725794f80e7402f33eed4b90739b8ffcffa71705f0031288b6e151c57c8ba9efe91f5e2e1fac98a6e206a9e608e

Download Submit
C:\Games\Poly Bridge 3\UnityCrashHandler64.exe

Filesize
1.2MB

MD5
78e2c993d746da8bf9fda25b66e69ddc

SHA1
d3af8a1a4534f1fc0d8d1db2fe3cd437a7f2913c

SHA256
7e4338b3ba8d2f71a57c4e8535c6fc1f5c808db702ce741862bb897a849e2415

SHA512
3da60f9e3524b1ffa0c22b1cff6b742790a074ad656acb92c8ecd97ac4e34eed517960e8cf52c3047328f729966e5d81af8fae4d2e788e645b3142da4444e5c3

Download Submit
C:\Games\Poly Bridge 3\UnityPlayer.dll

Filesize
1.6MB

MD5
8188ea6224f2c8c90cea9e3ab1675aad

SHA1
26559d18e935ccb1ef4ad0004160260e64f0d11b

SHA256
3c32f5cc69b1fbcd6414a2cf5a8e4c9396200f31398a54595c73fdbde093d3f4

SHA512
86b06484aac6c7ff3ca1c1a186c91edf2ad3eb940e888a51ceaf78b2f0eaeadbab456204a11a56dab8db05afcc4735dcdce7d954c0e8f873798e34870077757c

Download Submit
C:\Games\Poly Bridge 3\UnityPlayer.dll

Filesize
1.4MB

MD5
ad2395f9ce05d90881d3114a9e3e41c8

SHA1
f9c18ce3cc63e8d54c9714104bc0dcc8857c6aa3

SHA256
8b439998fa2bc05dd8c37bfdd1a65399e22a26f6bf9499ec243c5454f60f834f

SHA512
2261004538f075705f6bed58a3293f97e5e84813e344e7da28e1457779ff18b8fcc01468f7954085348447fe21bf922231736c2008dec844370a3dc6912282bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Dry Cactus\Poly Bridge 3\Unity\142dd7b1-9789-4378-8030-810f0feeb537\Analytics\ArchivedEvents\170699544300000.2f229f7a\g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0bed556ffeb1e69835b408d733b041f0

SHA1
e2aec94abd489a26f36a9694c7ef3903af6409b6

SHA256
7d60b9117a935eaba25d7273a5b5e8ba04ece22672661ecb37a3c8a08f61def3

SHA512
47d492a7c72f9d12511f070d7d28451b1c52c5f0d446890e704b02bbc51330b1890c5ac4e050d514ff1bfd9c64421adeebee114718042af5aee3f5fdfb413fc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
252dcd807216b74d599d9caa8d6256e5

SHA1
aec680673f8f656776b17781fe66091c699eadbc

SHA256
744a10be9fc296e8308df1a6dd4619e5a4f34cf27664f22c631ff163c17f1cec

SHA512
c7e3889cbc0200f9a74430e6202ae8210f3dbed9457f381e62a3e907e48022d7fc05573cb75cc7d4fd0ab06fc551267ddf745aea30e4dc9bafc80fabdcf533c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\00\00000000

Filesize
4.5MB

MD5
b232eb12989e29c727688042796c7925

SHA1
5cd242954de8f69a2cdeaca1451d39ce45a6af3a

SHA256
909f2d7dd3fc9b738762299629e0e429c56e76906f150f9fcdb24c7a92bc5a80

SHA512
5373b6dbb516462131f86aa74cfb43c6ff3ee22c5a7df49b889bfd3f554b95a318dc19cea79483328da0d98cf9d438bd4dd11a64c88276effd2c8fa57b73acd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
b687a93a9addc6f6f3fc9a79fca02a93

SHA1
7048300a8bc8ee8c3dfbc826d55b4f54b189d019

SHA256
4f64cc4c7f7c0b695c1e0e41b58900ec797b0fc20afff169862c134bdbf98ec0

SHA512
41d193881c1c0909dda76cf7231731501c52d0a73aa213083a400c699ca05c2585b3a93bfe2140f58403b2caad73d6ecde2a2f1fb583c74317b49e88e4a813da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
d90ab90ce87eae493d127087ad5069ed

SHA1
ac65a0f67aba188caa2b798da625943405449b5d

SHA256
9977ebe6d6bf87ba70a3028fe1219577a1f86bf3839b5536a13d80ba3e092d67

SHA512
13dc785325134c90935660c4d9cf4eb016ea41041b94298c3c55064c62b505981c9ce06601adf1fdd7fe58bf8f3994391a03cfb4023b2259077f43c9ac46ce1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
9433d05aced8fa5f5036e41939a28869

SHA1
9dc37fd619ba9cd61d994d6b848fb9b2972d2be0

SHA256
9eaa0825ed6d58b0ae975d5c0ef1a0a5ad01b46d3e6b99fe881a33641af50b94

SHA512
4e7146cac8c4d30fb0ef2525cbe7dbaf328948fed10e9ae358b3c6d042a8cbf16784d0ad5156cd603fbd25fde8eed4cf640a8030cc3689e922b2d77d18ffbb28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
e8df8bb03b840fa0dfbae22dd2901615

SHA1
18fc3d6c9a2869ab9e13237c4b4d65ce0a28ed3f

SHA256
37b2b2e630e2fd3fbe1f80813235e5297e6de6ffd98e09492b1591d6d32dbd5f

SHA512
29b1877605ccd5a3480172460450785c9c504f4472d128858183a07f38b270b26cd8e5c1c4009694009cf1c704d7439b5d7cb5c83e2a8bea6b2a5cfdb1b191ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
b43415acf2719e1f029df2d44c75e230

SHA1
0a2b303d45b4b297ca1a7a6150cf647e8c1b9fc2

SHA256
1c89499dd86f2548af122b840be10488b7238a600f130d36f9570115e0a3cb9e

SHA512
298e550f00df30bb93a46d250814afc599cba31908a9a46316c526b672cd6d9300dc277a8f42a7e554b1f62c84b92bdb8baf5dd4c70e6e994dba90b9385fcd98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
aa6a67b9dac381ac655df49d65f73831

SHA1
74714af1f45813f6dc646cb1f9b3ada245a809e4

SHA256
56e0e522bdafd7d26cc1e49000a86805401e06beb275faf438b7189883c101d4

SHA512
0daf5c44799b9f3a448865e0d3716c544b8af8cd2746b0a5153d729f1b5098f8ebec9dd0cf0eb3649bddcea8051fc4f675ee6132b651f53820f346ebca50f1ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
7ff17f2618d970ff217fd24c1368d7c3

SHA1
d5df4348cb1235bbe3cadef44dd47ff384e91722

SHA256
e35ff7613db4d89e8ce8ab2e163b2a3d6b792feb0456538098062f3bb1bafd74

SHA512
2f6bbc30315d372cbee88f7f779cd890932afbe72612bb083ae0210f5f7ba08daadb412504b63a0f7a09d782c808f375168de30d5ea4231dc9613eaccdf7e789

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
5a8f95dad41f1a4381e524a6c900741a

SHA1
c48dd8595ea1bff5d5716e9af891afdeecc584bf

SHA256
79065b00bfad2403fc26eba083cf0d7cd6f6a582406638d7698e0d4f74f6f01b

SHA512
395ac2d5547dba1cbf4a0c7fc6ba0930d55b7fb9b89eac1f3821e068273955fc1989a2d2e06bfc9fbdcc38edc1287bf28e6fcfcef004cc0169ea237d8b6ccc29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
f63d10ac15cacc2c853c2f4eaa62113c

SHA1
61977144cb0e1ff125f03426b6b985affa7732a7

SHA256
62e818f80bd3845f4324fefa15f9e1978e3b793d4e393ff333e987a3940d9f81

SHA512
64472fdb97ac469838740ef475b97a1471738932e5d7d941eaf70ed6438fd131f9c7ecd911ff6b2ab7d46acc8d2a52f7a70aa538b71587543b09182ddd385dd6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

Filesize
1KB

MD5
763d618ef713a0a958cb01d847c10c30

SHA1
82d3c60ae6a10c2dcc15c444cea57d9958872b8a

SHA256
25caf5c97370cead5d881b9e4f0d689ae728f03658198658bec373d491edca24

SHA512
c47de4a41a44ebc2179d3d85bd0fb8ba20e052fe88278541383be8ec25b768e11941d148ec1fa88bb6d2d27f7518e461eb443ca69e15fbb3d14cd9ff7fb0b56b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old~RFe57a345.TMP

Filesize
592B

MD5
cb63c2b472525dc9e896db0de5bf2b64

SHA1
9666c35329ffb3922dc08c43bfaad950917799d6

SHA256
f6464abc8c7c2b6c3f1ab221dcfbb51957faf13a3e9a1f9f78adb0706c7fed18

SHA512
9745826de9cc907f9ec40ac1520733e65d760a3d5d0a36fc76a9aae205dc5fe5d4ec725ba566eaf420c561226cd78cc824b7b379dc4f1eb39c90765839729969

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
188B

MD5
e08735d8d04f386ff229cfdd8a901096

SHA1
e90c5ea41031dec6fee120cc3dff12883d030394

SHA256
dc42a69331760dd72e43c530f6bfe4baeaf1e8ac68edd7e6ac80d131afe9c0d0

SHA512
a1459dfe83ad0ce30a3c50bd9de00e56a57f66b6b96eda248288d5de02cb0bc5c22797e0a33188bfc09a66a0695e6b3c57ba5f0d743abf2c6e5a4b66bfd75386

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
ef0e01fa9efdb71b238ef0664dec4f78

SHA1
2eeba946e25c9fda8bc851d4a8e75e21ae7cceb4

SHA256
93019b9becbafff7fdc6514010a4a747b7a24d41e8b47ce1a9d4b50badfe65d8

SHA512
6e40af40aee335860b1628a6cbfa01c9479e0b45bcf59ba9c146db0bb375e7d6f5b1efcad7108075df23977e20108b7b6b09a6c058ef439442d19eea9a8e8b2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
22b3b52898f1caefde14d6a5119a1575

SHA1
5206eb91e531af2da1ba11557643b22d3e6fd743

SHA256
2c2554ae0e7a2c23722fd55ae92f242e9b32e3aefa55e928d974dc2c6665b536

SHA512
85f9a40762719d29e47733cb4ac4bc4b4449db105c294e9cb0c5d418cbf3390b17cd74d5f54d83046c05278a2174e2e502f9d838608fef064c6aabc08d4317dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
497a9636a0f3e63047ea3ccfea57afad

SHA1
f2a3f667b6d923aa942d1776b066a7d7df6a5881

SHA256
1ad68d774fd8be463b725248d1e0d171a0ee37ef05eec02be6a2d93cadbbcae6

SHA512
9855fcf16a029080f2d882e4d568072f6276300ab91aff5a39ad5b15b918e21208b329e4bdadcded29072565280ca4da538f58ee9ff85f78d9ce99daa9975826

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
60014941c75bd0636db19f74a647ae76

SHA1
ca749e99d8480fbc79df4f2212808a3e0a55f1d5

SHA256
54be7b1ed55f3ce08b08f2c105da89c4ebd0101e590f82b008e18c081562db46

SHA512
84876caf8ababb9bb809b70bbf21998dc8db545e5f53f104c9c1af74e288f08cde8e64f847b7f233a52d43ea62e57177d9a49fe4f55beed742be92a334a3c31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
25KB

MD5
5e1542ec05a1840cfb56ae87d1c2e16e

SHA1
25bdd95b83b7c614a6446609cff6ecbcab58d9d8

SHA256
41acd6ffea81ff1b8b58a4693696a397817473eb899edbf6606314820a8e40b8

SHA512
12c32368cbedc3d2515907ab740c75022fc4eaecec9b45734f346db0df209e667b066b2fcd891e84193868ecec8b892e7b484c66a8b329562bad53a69b25c0db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
9dc3419aba0f1e61e7a9cf9adc1dfc01

SHA1
6861989c5e7ec42c354265d3580c257a1280cf4c

SHA256
56655d22938e64d9aba34e4af3c26567abbd58ed2e1d4c54f6666054f76592ab

SHA512
c1d762619d36ee8115ab19441f7c6946728e57ce5b7d2ac03f4625dac0b43d9d91154f084163ecdc8fd9e0c80fd27421cc947cbb88de44d17d8d34a25aa9c1cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c237.TMP

Filesize
48B

MD5
4c2a99f1ce6b99cfc2965c6e6d374448

SHA1
d3791e8d94619c80f5d10ce56e05117f78b86de1

SHA256
e324ba6fc64f12969f32d03fb17155a67d521c38d8f5f93d5a2e3901b702a782

SHA512
40df152abeabe302b93b62d18d1258d155fd826565f038ac28fbed5887cf7d4984071531eab332eb2965229ff33c4050457bef87c5aa1b687dd47f4e5ed7eba3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
284a866b54d08b3dc4631f38eb6d0c11

SHA1
61a833ebbea38a1f55762f778c99c4cb3607f735

SHA256
cda8ff90fccfee32a16006020652b59744c28e53391cb1b01f2c43cf786fe782

SHA512
336c653d77b82c4b5ae1cb357e087fdaf89092adf3c1107854e6a30fb2bf736c3ca6ba1815287e0f34dad89c6bfe95b2f18494c31699867e4c38099251bf2787

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e533f15c36e8bf7ba10bc3f3d882b0fd

SHA1
afdb0a0e68e9fadd5b262e123c6bb8c60de2b2b4

SHA256
a93856be84f0f9abb1d1d7a26e69e39d1866a5b6c7fcf027c0a6972b7fa9d00f

SHA512
f0f47e740ec2a2405531b785a14324686c7ba8abd65eccfbae36e7fd61510e9b63636452f1fbb33d9cfa355db75ef60a4599b63749f4418775c79fc4f9510da5

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\CLS-MSC.dll

Filesize
334KB

MD5
67a3a34ecafc68afdf05f71657ee0009

SHA1
2ed842e3244992dc2d5d36e5c481d048f433329a

SHA256
6d3d6b0ff25fd2ac2c8d478b068af55cb053d9b2c08c53964d6559c7c8b8047d

SHA512
a673ff2c79d59cc2c02ffc79269bf4ea019a19f5b7766f375ccb4d5cda68335ea1f36c4875ebaa0f390f1abb37494cb13c075359a1735982621c61e42f34e3af

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\CLS-srep.dll

Filesize
85KB

MD5
522d2fe95820798431e59bd982c373c2

SHA1
e04def966208b662eed6b548d2c5e0c4d9e84bcf

SHA256
af4379f3d8e12938a2f4e6d8f7d8f135181c415fa6c443b27eb44c3be173b2ef

SHA512
9e2afd800fcae018ed6ce3ccb32a9f73c2874a8cd5133112c346feb5009829dcd1b0be3d13dc0be046b68b40bf5d11e4165f6bab736588bc6e999fe9f4f2a6fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\ISDone.dll

Filesize
452KB

MD5
4feafa8b5e8cdb349125c8af0ac43974

SHA1
7f17e5e1b088fc73690888b215962fbcd395c9bd

SHA256
bb8a0245dcc5c10a1c7181bad509b65959855009a8105863ef14f2bb5b38ac71

SHA512
d63984ee385b4f1eba8e590d6de4f082fb0121689295ec6e496539209459152465f6db09e6d8f92eec996a89fc40432077cbfa807beb2de7f375154fef6554bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\_isetup\_iscrypt.dll

Filesize
2KB

MD5
a69559718ab506675e907fe49deb71e9

SHA1
bc8f404ffdb1960b50c12ff9413c893b56f2e36f

SHA256
2f6294f9aa09f59a574b5dcd33be54e16b39377984f3d5658cda44950fa0f8fc

SHA512
e52e0aa7fe3f79e36330c455d944653d449ba05b2f9abee0914a0910c3452cfa679a40441f9ac696b3ccf9445cbb85095747e86153402fc362bb30ac08249a63

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\callbackctrl.dll

Filesize
4KB

MD5
f07e819ba2e46a897cfabf816d7557b2

SHA1
8d5fd0a741dd3fd84650e40dd3928ae1f15323cc

SHA256
68f42a7823ed7ee88a5c59020ac52d4bbcadf1036611e96e470d986c8faa172d

SHA512
7ed26d41ead2ace0b5379639474d319af9a3e4ed2dd9795c018f8c5b9b533fd36bfc1713a1f871789bf14884d186fd0559939de511dde24673b0515165d405af

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\cls-bpk.dll

Filesize
227KB

MD5
d31067a2843518379a3166d031be68e5

SHA1
555646cf61ca4beefc0aba44337c614154ebfef8

SHA256
20c1c8f1a70470e18c898d35136fcade1fa1cabdd069c564415debfd1a26c403

SHA512
102ec7aa932a6ada90a167a5c7f32ba76b693ed5b0f57923ffa23b833e42146aa890092b2beb6ffd0cb51caea09179b1d7fbc1b2336f50acabc03d4da1f72701

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\cls-lolz.dll

Filesize
16KB

MD5
9e1e200472d66356a4ae5d597b01dabc

SHA1
8d93246907a422d2333697cfe999cd9aeaea764c

SHA256
87df573ac240e09ea4941e169fb2d15d5316a1b0e053446b8144e04b1154f061

SHA512
dd16e9c0831e72d19b1bf1431a2c8c74bcc183cfa16f494b5f11f56168209948744e0add7f2afe62db7f34adddf940fd570e28d60bebf636e07f57a0bf0346cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\facompress.dll

Filesize
355KB

MD5
d43845f28651a42ba2105fcfcca5253f

SHA1
9aa415b9e8039caf6e07bc074185d5e8a9f486ed

SHA256
17a9ffdf381f7a9f6cdfc85b157fc6cf80cd4b45ed8ad43edac73008923501a0

SHA512
16ac57254b81d6cc26c8c07ee07ee9b648c2b2b167c380da2fad87e3af9e85c7dbb0795f696ea5083f06af424ddb6c319eec5799771a9a7887cf02116e7737ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\facompress_mt.dll

Filesize
204KB

MD5
002508839634e56d43e4fd56e3df2757

SHA1
0cedf5289c102e75554c08f56361a294767b8fca

SHA256
7eeb2c50920e30544e2f180b0c39488501372a8f8bd8393bcb095353e9114cde

SHA512
2f35fe7e2ceb64fa7fdda0db704067ab7144a62709044b88d2f203b48046a8aaa270673dc14c1c61d1b961e03874c616f21df1bee7ae104f19eb6b4330e31a0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\unarc.dll

Filesize
320KB

MD5
2ced17f02b24372c166faaf7da2dffb3

SHA1
8e2e6d6855095cc032eb5a9c8e1ed975d60ea5df

SHA256
89952411324163a635942db33dd0087508e20d112e1e75403dc1d5e852927dd7

SHA512
8aadcf0249ef17519c329ce586a2d29ec7dde7898bb2b88650312ae4098010cd351bb45bad703ec69a14507ef87fc37317b9d8eb8a6068fb61fd15255807d4ea

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-1489B.tmp\wintb.dll

Filesize
16KB

MD5
9436df49e08c83bad8ddc906478c2041

SHA1
a4fa6bdd2fe146fda2e78fdbab355797f53b7dce

SHA256
1910537aa95684142250ca0c7426a0b5f082e39f6fbdbdba649aecb179541435

SHA512
f9dc6602ab46d709efdaf937dcb8ae517caeb2bb1f06488c937be794fd9ea87f907101ae5c7f394c7656a6059dc18472f4a6747dcc8cc6a1e4f0518f920cc9bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BLLH6.tmp\setup.tmp

Filesize
818KB

MD5
519e8b99378e19654a1cd1e0fe32601c

SHA1
517c1e7bd9d0f2bc5cb7fc26b1b81cfd1a6399e7

SHA256
5d71352bb3888d4c2f1e6cdf0d9c0fc3dba77cf0712b82c03c25f58ebcba97dd

SHA512
b357c0507dfda4001e4849d4eee1b3612f064583e50d06bbc4906df7c69f6a178bbb2dfb9172b602276b2b0c137eaf2216170ab47b0b9a385d07dee528c1c4e4

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-BLLH6.tmp\setup.tmp

Filesize
641KB

MD5
44eb55346f4be7761f7684928008165c

SHA1
94e76a9d53c6d449d7f150e0ab7b82ec5fea3ea4

SHA256
3b5c05c7002743449c25b7c2ac424840f78470df0247508fff725b59afd603d5

SHA512
b1a9026415101815cb8a54ceed19e78cf1ae7a5370ae4700e38e8441203daa49b8d49b87c1afe9f0f2718e6defd2f71b99e2a2198ba97201936e48ec4fa8bdc1

Download Submit
C:\Users\Admin\Downloads\Po3lyBri3dge3-1.0.6-elamigos.rar

Filesize
1.1MB

MD5
50e21cd8b8b13f810d4fdf48cc894798

SHA1
306ce916a4d3aec06a523a638dcdf5dc547d0651

SHA256
53880058d1191786276b3ac9992d821db692f5e79d7e35a2019afd274861e040

SHA512
b95a21853a3eb5cc488f0b10ab42620f1b6029b80ee2b62dfd6093fec107308bc459b70a096dc187e3b98ce50c14af19b8a6e6a513409360740caf18d2f7e030

Download Submit
\??\E:\elamigos-1.bin

Filesize
874KB

MD5
c3fa294d771520b3357fa4b62d8a36cd

SHA1
c495f504644be1ab99ab5b67e56af235e94f3147

SHA256
0cf41bc36983a740f84853dbb254a98b1d36c6a5488385cccc56ced38d5610db

SHA512
fbce049842a8a550204c08775626337f3bd5155d459de5449ebc22e10d7c55959e3732466dc69496debe589aab65ccc7c707cdf42943333e6f9290bb0d363c2a

Download Submit
memory/700-3433-0x0000021FBCF60000-0x0000021FBCF70000-memory.dmp

Filesize
64KB

Download
memory/700-3457-0x0000021FE8FE0000-0x0000021FE8FF0000-memory.dmp

Filesize
64KB

Download
memory/700-3365-0x0000021DD3600000-0x0000021DD3610000-memory.dmp

Filesize
64KB

Download
memory/700-3506-0x00007FFF012C0000-0x00007FFF013D8000-memory.dmp

Filesize
1.1MB

Download
memory/700-3499-0x00007FFF012C0000-0x00007FFF013D8000-memory.dmp

Filesize
1.1MB

Download
memory/700-3475-0x0000021DCE8F0000-0x0000021DCE910000-memory.dmp

Filesize
128KB

Download
memory/700-3477-0x0000021DCE910000-0x0000021DCE920000-memory.dmp

Filesize
64KB

Download
memory/700-3476-0x0000021DCE970000-0x0000021DCE980000-memory.dmp

Filesize
64KB

Download
memory/700-3467-0x0000021FE9010000-0x0000021FE9020000-memory.dmp

Filesize
64KB

Download
memory/700-3468-0x0000021DCE950000-0x0000021DCE960000-memory.dmp

Filesize
64KB

Download
memory/700-3469-0x0000021DCE960000-0x0000021DCE970000-memory.dmp

Filesize
64KB

Download
memory/700-3387-0x0000021F57470000-0x0000021F57490000-memory.dmp

Filesize
128KB

Download
memory/700-3465-0x00007FFF27270000-0x00007FFF27271000-memory.dmp

Filesize
4KB

Download
memory/700-3466-0x0000021DCE940000-0x0000021DCE950000-memory.dmp

Filesize
64KB

Download
memory/700-3463-0x0000021FE8FF0000-0x0000021FE9000000-memory.dmp

Filesize
64KB

Download
memory/700-3464-0x0000021FE9000000-0x0000021FE9010000-memory.dmp

Filesize
64KB

Download
memory/700-3462-0x00007FFF27280000-0x00007FFF27489000-memory.dmp

Filesize
2.0MB

Download
memory/700-3461-0x00007FFF012C0000-0x00007FFF013D8000-memory.dmp

Filesize
1.1MB

Download
memory/700-3458-0x0000021DCE930000-0x0000021DCE940000-memory.dmp

Filesize
64KB

Download
memory/700-3388-0x0000021F58BB0000-0x0000021F58BC0000-memory.dmp

Filesize
64KB

Download
memory/700-3453-0x0000021FBCF90000-0x0000021FBCFA0000-memory.dmp

Filesize
64KB

Download
memory/700-3454-0x0000021DCE910000-0x0000021DCE920000-memory.dmp

Filesize
64KB

Download
memory/700-3389-0x0000021F78BC0000-0x0000021F78BD0000-memory.dmp

Filesize
64KB

Download
memory/700-3455-0x0000021DCE920000-0x0000021DCE930000-memory.dmp

Filesize
64KB

Download
memory/700-3369-0x0000021DD35F0000-0x0000021DD3600000-memory.dmp

Filesize
64KB

Download
memory/700-3456-0x0000021FC1230000-0x0000021FC1240000-memory.dmp

Filesize
64KB

Download
memory/700-3390-0x0000021FBB960000-0x0000021FBB970000-memory.dmp

Filesize
64KB

Download
memory/700-3392-0x0000021FBB9C0000-0x0000021FBB9D0000-memory.dmp

Filesize
64KB

Download
memory/700-3393-0x0000021FBB9D0000-0x0000021FBB9E0000-memory.dmp

Filesize
64KB

Download
memory/700-3395-0x0000021FBB9F0000-0x0000021FBBA00000-memory.dmp

Filesize
64KB

Download
memory/700-3394-0x0000021FBB9E0000-0x0000021FBB9F0000-memory.dmp

Filesize
64KB

Download
memory/700-3396-0x0000021FBBA10000-0x0000021FBBA20000-memory.dmp

Filesize
64KB

Download
memory/700-3397-0x0000021DD3600000-0x0000021DD3610000-memory.dmp

Filesize
64KB

Download
memory/700-3400-0x0000021FBBA70000-0x0000021FBBA80000-memory.dmp

Filesize
64KB

Download
memory/700-3391-0x0000021FBB9B0000-0x0000021FBB9C0000-memory.dmp

Filesize
64KB

Download
memory/700-3398-0x0000021DD35F0000-0x0000021DD3600000-memory.dmp

Filesize
64KB

Download
memory/700-3399-0x0000021FBBA00000-0x0000021FBBA10000-memory.dmp

Filesize
64KB

Download
memory/700-3401-0x0000021FBCF90000-0x0000021FBCFA0000-memory.dmp

Filesize
64KB

Download
memory/700-3417-0x0000021FC1230000-0x0000021FC1240000-memory.dmp

Filesize
64KB

Download
memory/700-3418-0x0000021FC1150000-0x0000021FC1160000-memory.dmp

Filesize
64KB

Download
memory/700-3419-0x0000021FE8FC0000-0x0000021FE8FD0000-memory.dmp

Filesize
64KB

Download
memory/700-3427-0x0000021FE8FE0000-0x0000021FE8FF0000-memory.dmp

Filesize
64KB

Download
memory/700-3432-0x0000021FBCF50000-0x0000021FBCF60000-memory.dmp

Filesize
64KB

Download
memory/700-3452-0x0000021FBBA70000-0x0000021FBBA80000-memory.dmp

Filesize
64KB

Download
memory/700-3434-0x0000021F57470000-0x0000021F57490000-memory.dmp

Filesize
128KB

Download
memory/700-3435-0x0000021FBCF70000-0x0000021FBCF80000-memory.dmp

Filesize
64KB

Download
memory/700-3436-0x0000021FBCF80000-0x0000021FBCF90000-memory.dmp

Filesize
64KB

Download
memory/700-3437-0x0000021F58BB0000-0x0000021F58BC0000-memory.dmp

Filesize
64KB

Download
memory/700-3438-0x0000021F78BC0000-0x0000021F78BD0000-memory.dmp

Filesize
64KB

Download
memory/700-3439-0x0000021FBB960000-0x0000021FBB970000-memory.dmp

Filesize
64KB

Download
memory/700-3441-0x0000021FE8FF0000-0x0000021FE9000000-memory.dmp

Filesize
64KB

Download
memory/700-3440-0x0000021FBB9B0000-0x0000021FBB9C0000-memory.dmp

Filesize
64KB

Download
memory/700-3442-0x0000021FBB9C0000-0x0000021FBB9D0000-memory.dmp

Filesize
64KB

Download
memory/700-3443-0x0000021FE9000000-0x0000021FE9010000-memory.dmp

Filesize
64KB

Download
memory/700-3446-0x0000021DCE8D0000-0x0000021DCE8F0000-memory.dmp

Filesize
128KB

Download
memory/700-3450-0x0000021FBBA10000-0x0000021FBBA20000-memory.dmp

Filesize
64KB

Download
memory/700-3449-0x0000021FBB9F0000-0x0000021FBBA00000-memory.dmp

Filesize
64KB

Download
memory/700-3448-0x0000021DCE8F0000-0x0000021DCE910000-memory.dmp

Filesize
128KB

Download
memory/700-3447-0x0000021FBB9E0000-0x0000021FBB9F0000-memory.dmp

Filesize
64KB

Download
memory/700-3445-0x0000021FE9010000-0x0000021FE9020000-memory.dmp

Filesize
64KB

Download
memory/700-3444-0x0000021FBB9D0000-0x0000021FBB9E0000-memory.dmp

Filesize
64KB

Download
memory/700-3451-0x0000021FBBA00000-0x0000021FBBA10000-memory.dmp

Filesize
64KB

Download
memory/2508-594-0x0000000000400000-0x00000000005B3000-memory.dmp

Filesize
1.7MB

Download
memory/2508-591-0x000000006B080000-0x000000006B08D000-memory.dmp

Filesize
52KB

Download
memory/2508-563-0x0000000002CB0000-0x0000000002D27000-memory.dmp

Filesize
476KB

Download
memory/2508-3350-0x0000000000400000-0x00000000005B3000-memory.dmp

Filesize
1.7MB

Download
memory/2508-585-0x0000000000400000-0x00000000005B3000-memory.dmp

Filesize
1.7MB

Download
memory/2508-586-0x0000000002CB0000-0x0000000002D27000-memory.dmp

Filesize
476KB

Download
memory/2508-587-0x000000006B080000-0x000000006B08D000-memory.dmp

Filesize
52KB

Download
memory/2508-598-0x0000000000400000-0x00000000005B3000-memory.dmp

Filesize
1.7MB

Download
memory/2508-595-0x0000000002CB0000-0x0000000002D27000-memory.dmp

Filesize
476KB

Download
memory/2508-592-0x0000000002570000-0x0000000002571000-memory.dmp

Filesize
4KB

Download
memory/2508-550-0x0000000002570000-0x0000000002571000-memory.dmp

Filesize
4KB

Download
memory/2508-3133-0x0000000009DD0000-0x0000000009E29000-memory.dmp

Filesize
356KB

Download
memory/2508-589-0x0000000000400000-0x00000000005B3000-memory.dmp

Filesize
1.7MB

Download
memory/2508-644-0x0000000073B80000-0x0000000073B87000-memory.dmp

Filesize
28KB

Download
memory/2508-2359-0x0000000000400000-0x00000000005B3000-memory.dmp

Filesize
1.7MB

Download
memory/2508-3128-0x0000000002CB0000-0x0000000002D27000-memory.dmp

Filesize
476KB

Download
memory/2508-3129-0x000000006B080000-0x000000006B08D000-memory.dmp

Filesize
52KB

Download
memory/2508-3130-0x0000000061080000-0x0000000061115000-memory.dmp

Filesize
596KB

Download
memory/4928-545-0x0000000000400000-0x00000000004B0000-memory.dmp

Filesize
704KB

Download
memory/4928-584-0x0000000000400000-0x00000000004B0000-memory.dmp

Filesize
704KB

Download
memory/4928-3351-0x0000000000400000-0x00000000004B0000-memory.dmp

Filesize
704KB

Download
memory/4928-543-0x0000000000400000-0x00000000004B0000-memory.dmp

Filesize
704KB

Download
memory/4976-3638-0x00007FFF012C0000-0x00007FFF013D8000-memory.dmp

Filesize
1.1MB

Download