hxxp://costamarine[.]com[.]br

Resubmissions

30/07/2026, 03:11

260730-dp5lhsah998

27/07/2026, 09:38

260727-ll7wgazdlg3

27/07/2026, 07:23

260727-h77k2sbj5w8

Analysis

max time kernel
899s
max time network
895s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/07/2026, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://costamarine.com.br
Sample260730-dp5lhsah99

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1028	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298547650470084"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{7515AB13-5977-433C-9F2F-99D5D56A9F00}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5296	msedge.exe
5296	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe
5844	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 5844 wrote to memory of 4440	5844	msedge.exe	79
PID 5844 wrote to memory of 856	5844	msedge.exe	80
PID 5844 wrote to memory of 856	5844	msedge.exe	80
PID 5844 wrote to memory of 856	5844	msedge.exe	80
PID 5844 wrote to memory of 1028	5844	msedge.exe	81
PID 5844 wrote to memory of 3656	5844	msedge.exe	84
PID 5844 wrote to memory of 3656	5844	msedge.exe	84
PID 5844 wrote to memory of 3656	5844	msedge.exe	84
PID 5844 wrote to memory of 1496	5844	msedge.exe	85
PID 5844 wrote to memory of 1496	5844	msedge.exe	85
PID 5844 wrote to memory of 1496	5844	msedge.exe	85
PID 5844 wrote to memory of 5716	5844	msedge.exe	83
PID 5844 wrote to memory of 5716	5844	msedge.exe	83
PID 5844 wrote to memory of 5496	5844	msedge.exe	87
PID 5844 wrote to memory of 5496	5844	msedge.exe	87
PID 5844 wrote to memory of 5444	5844	msedge.exe	88
PID 5844 wrote to memory of 5444	5844	msedge.exe	88
PID 5844 wrote to memory of 5676	5844	msedge.exe	89
PID 5844 wrote to memory of 1512	5844	msedge.exe	91
PID 5676 wrote to memory of 1132	5676	msedge.exe	92
PID 5844 wrote to memory of 2600	5844	msedge.exe	95
PID 5844 wrote to memory of 780	5844	msedge.exe	96
PID 5844 wrote to memory of 5900	5844	msedge.exe	97
PID 5844 wrote to memory of 4716	5844	msedge.exe	98
PID 5844 wrote to memory of 4716	5844	msedge.exe	98
PID 5844 wrote to memory of 5296	5844	msedge.exe	100
PID 5844 wrote to memory of 3428	5844	msedge.exe	101
PID 5844 wrote to memory of 3428	5844	msedge.exe	101
PID 5844 wrote to memory of 3640	5844	msedge.exe	102
PID 5844 wrote to memory of 3640	5844	msedge.exe	102
PID 5844 wrote to memory of 1276	5844	msedge.exe	103
PID 5844 wrote to memory of 1276	5844	msedge.exe	103
PID 5844 wrote to memory of 4652	5844	msedge.exe	104
PID 5844 wrote to memory of 4652	5844	msedge.exe	104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://costamarine.com.br
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7fff0124c188,0x7fff0124c194,0x7fff0124c1a0
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,7787336018138175166,11044813777023679553,262144 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,10525844871785723148,1582842657899849401,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,17374271039958256457,9670015865351445486,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:13
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3376,i,970577154198822221,10651072458149144899,2097152 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3336,i,15046872419938707734,1366071934207673770,2097152 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,10198271675418973499,8592445615793451860,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,2938675004605214357,1299714126753166385,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,17117387071700807155,17120284576266091127,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5676
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,8398641250411433471,7171005679336463562,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,8398641250411433471,7171005679336463562,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,10310164690409560296,6443816208349662145,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,12599984679961915755,4785090299505084409,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,6449788230968934532,17459804064109668701,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,13095677941809953620,3024699600038426137,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:14
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6024,i,7586326871265643664,13136925805596130819,262144 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,6596607229385549712,891429731053923524,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:14
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,11699077286515573429,3031913780593615744,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,14442566409062702905,16705477242279682122,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,12502840820655099034,6645045013250476106,524288 --field-trial-handle=1944,i,18228192729561900973,6711229606189682367,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:14
  2⤵
  PID:4652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c17dc8315075bb661bddf6b1efa879b9a3c39af13982f986bd287f5bc861cbdf
MD5 9573474710d1de6302a0d98890d2faae
SHA1 618b9f2079a97625be399f6137e46655659ecff9
SHA512 a345b915a4191d30d0da665ea4f78297c0cd671a5767e05c415403efb649110868fb279d22dc496792452c325e19b00f5e579f6e014a4488c9a4d6fac83d1c46
TLSH
T118D012273B0DB054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b9dac8593d827b7b825086ba5eeec776b808b8429eb90a6b645c319ec8f1435
MD5 c16a98ebe36bda7f5aece00f9ac1d0d0
SHA1 ef2e2a8775d1ebc0124f0ba983b6f20777919000
SHA512 148affd9dbe6aaee9070c22e41bc916df527cec5741753ca2733855f500e4eef0a257445d281d79c2449f8265c41b54dd53ffe57650802594b1211b0db611349
TLSH
T1ADD012273B0DA054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 05e7d49e7213413f38330f4557c87610b445dee810632b12ac3effdafb5ee4a6
MD5 9d59bc945008ad71641250b34bf1692c
SHA1 17ff07eabdb2f1f6d1f7e21b60bc0faf055940ba
SHA512 d842021815816fa0317b0fdb17b3aeefd643acc396ea6d644d105b9d9c0b5238ea7443885896b639aa8bd056148a822752b03b2d1956259a9d552d3851ecd1da
TLSH
T1C5E026E4C4CAC22ED390684B816E538C92B03E0BA7C8AA5A2748C9CE30030C0E7C69D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0f79c724548b0144bde566008729646efb0aa7b72163ceb60543d2ad96987799
MD5 74b357080a97cebf3c982b86025cb293
SHA1 cf0819c3156c4b75c8ae99a9b90d0a179b69e007
SHA512 8592887ff1d0b9436b3530398cd39e34eadcc6e97e7a00f4bc114e1cd0fc4aa5e313dd7fd626827989ee01983badb50e09a48c4406545edd8ad8a0b57a0b9bfe
TLSH
T1A5E086E4C5C9C39EE304654B4268578CC6B0360BAAC96A7A2B06CDDD72435D5E3D65E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c07d03f238dee4ad2af890f1c8cb19dc5d7c9f854133a89638f64f1082d4c7ef
MD5 85d470c82a7dc22f28b1762e2dbb8513
SHA1 3471c32807b0671ba85528acb994afc3ff83b674
SHA512 1cbecf3540f2bd6af671abc691210f3693964b4a7e1cbe8ff0d89795688467456fe8fe4a95d4961398f67691d4f829c30344f8fbabbbf610a2a59a2ce0880635
TLSH
T1A3E026E8CAD8C26EE30064474178934C82B83A4A9AC86D5E2704C98D7105080EB826D8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d5f8d4f5c21e286534adc0df76398807fa90472b5ccd7371b2bc50f532a926c9
MD5 bc57059289dbc32375ad7950b5574c7e
SHA1 8da03cebb4ca63cbd6ded92b0a8c149888048279
SHA512 7e00a5a6e13d04e58226577ffd9f1807fa3cc835dc91df1c94b9f663b8fe6624277e4bbe456fe4110ee6e9ad076dfb1874a519878bde9cfafb590fc405f326a4
TLSH
T109E02BAACD21AC3B0AFE1B2890615745E714139B5F428A0F3A3CD2088FF063E4687C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 374885f78a8727b3b80f123fed07d2d8ac1b0d2ff00b67490da9d0fda717e185
MD5 d9fdaba7b6a10a9800573782b21aff8d
SHA1 762885eabecc927060ad82cdaf094d9e6b3c8c7a
SHA512 0404c7c1d859d151c6dea39164ec4b58e8ba21b9be2e61367269e3e0d72a1d37c3187c57510ee861531c1871742ff6e1456644e011ac124aa7e7e3be3cdfb9e3
TLSH
T1F7712DDA81D125B4FBA00279B4C1FA10F07CF0AF0B974DC6BBE098BF2649B61551BA58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5888d2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5888d2.TMP
Size 3KB
SHA256 e3a76e4354cf20bffc041fbbce635e0caf5600ce858fadd1dcc02727e162753a
MD5 693722d7c51c2c810a7ffcf7096cdd45
SHA1 6fae17e52f5d37a0eb7ab11a818feeb9f9e4d8d4
SHA512 99c42570037316eff19946252b5534b8f9c43f4251b7ec5b59f06d6e76cda9c7ed5e7f77e5708cb3f67f8dc3046bb11f15601cd9a11300814c10d34627b9d9a7
TLSH
T163711CD982D520B1F3650239B4D1FA10F1BCF4AF0B974ED2B7F0587F2949B610517548
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 67f2987959392a8f443f28655de4149e19242bd55db603cfe16c7bb4419c37d2
MD5 05156e42739dde5e167dcefeed0c2573
SHA1 054d7c98a393f1918ddb4a7b0f82c27d3365ca10
SHA512 4fe0478465e70ca41b006cb69284c3550be433e64823687c45df63b1354622a54b3ecf9937f68e406ff5756e67f05c08206104ad134caf1701ae8853605707a2
TLSH
T16441D0F743E4866ED91196F0EA187E2BDE1D0510832C3DAAC5E4EF5B93E3071E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b07fcef2a117fec9055d932c281b4d3e843daeb03d372ce2dc40befe57dcce04
MD5 6ca4dd5f01f3a7d2bb6786a37f7972a6
SHA1 7563a3bb9a2130baaf29b48b9b3d97f048a1f5e6
SHA512 2ecc35e9075252c254de948e4f7b25e2f2701a2e88150bcc99c2c8ef30be0a9337316432ec121b4dd448d1a2ddf5a1b20df79df7d7905199d519ada3cc1da2cf
TLSH
T1C641CEF783E4866E890196F0AA18BE2BDE1D0514832C3D9AC4E4EF5B93E3471E141A4F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3b73a9f76d7e198be816a8fbdd3e729201fbefcea504ada9f69974e1fcf35d89
MD5 e32b1e7a78cc9835c88811d787e6e8b5
SHA1 e2922f47528691d5061a6aafdae907cde4a406dc
SHA512 9f742a26d8ade828a22f48bdc451495ddcc5c359094e8383d9590664011d3b0baa4c2a72e30ecd64935219f7c224fb30301ad56f6bda0ef4013cdb0c8966b95e
SSDEEP 192:sxZXRPyMqZjK1Ml8MF3/fUsZpKTG7OpwBzodpCM/lj6+WN9pR/Y0hB9TEIg5a+ZJ:sxZXId3/fUsZpUEOh7/q9/5SU+D
TLSH
T18D62F8066A345D7B8CDBD219F655BF63D2F81163D2945E44AAFCCB0C04E6ADC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6a83e83f88b5a8d487cc4998fcce27eca6131a21f11426e3834449df556cc315
MD5 e7e46d6294912f9ca3b09b4ba03c9043
SHA1 5ee31b5d0cace01aefca2f343e5bf80eb5655dab
SHA512 50768851d315421bb1fb7baf194bcf9b394812b9058dd64ed5ecf60a3d05e0471b27a54290b4d19fb4b4734ba1d4742f52b6a62bf59ad68c36d4b7fdd3649c09
SSDEEP 192:sxZXRPyMqZjK1Ml8MF3/fUs0OKTGVwBzodpW/lj6+WNGY0hbxTEIgj+ZJ:sxZXId3/fUs0OUEW/qG5Ij+D
TLSH
T1C862C7066A345D7B8CDBD219FA55BF93D6F91563D2905E44A9FCCB0C04E6AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 e97cf3918007f803e290ec53e086dcf24ca25aae5d6d2f5cbb90704c2e0a42dc
MD5 926149f4bc36aa96b57696b7dee790e6
SHA1 28c548ff9f6ede96ba736439d47e2a2c3742d569
SHA512 93867ca1df98d58838d7077a2035bb2e664251fa694cb2ea9fa814cf9d681b621f117298fe427dcb4bd2e245cf9fd75e312c51047c07583bdc50b8655d90114c
SSDEEP 192:sxZXRPyMqZjK1Ml8UQnF3/fUsZpKTG7OpwBzodpCM/lj6+WN9pR/Y0hB9pEIg5aW:sxZXIqF3/fUsZpUEOh7/q9/58U+D
TLSH
T14872E8066A345D7B8CDBD219F655BF93D2F91563D2945E44AAFCDB0C00E6ADC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 bb38d2843fac1676545fd1dbf46602eafc3617f0c3745aa49a1031db89ab22d5
MD5 c258ab0ffae4e902108528daa451bbb7
SHA1 94e44101cf4854bc8266cb0bf62310392e8e9398
SHA512 3ec692d2f7ea16ccdd85ca60febe9a9af8d14ee54e97dc94bcb3cae8992bb419a44865ee591a8d960ffbbb2f42a725ba3cb82349855708e5bfdcf7a2377fc549
SSDEEP 768:wQAKq8y028bWRmj1QWT8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3L4Ll/f10EMEroSO:wQAKq8y028bWRmj1QWTu1jaKL4LpfiEC
TLSH
T1FFE21B3B284CCB7E4FC44E9CED276E8769D802CBA7588D5447FA494C03CA3EE511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\84929e18-7031-4aed-9651-196b2ec11ecb\index-dir\the-real-index
Size 2KB
SHA256 20d07258886da4afeddef8fc77229cd9388942ed94aa2fa80fcc61633d37b0b7
MD5 aed37016cde9382ff3ec435e32d1206c
SHA1 a7c17695a420ea155c6648ede90612c02a33512e
SHA512 b82bc9f36a6e554ab544cb98ed39e54a6e0bd4159bdb232d8df17c92791fb83226f896c7ae7abf942521a8abb360a92d5747a7633848251a2c4ab42afae79d3a
TLSH
T16C51D54D4CA29B6EE9A801B214B2585833786CDC43556B23ACFC22369C0731E298F7EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c5d89.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\84929e18-7031-4aed-9651-196b2ec11ecb\index-dir\the-real-index~RFe5c5d89.TMP
Size 2KB
SHA256 f58eaf1376b07342be99ab3c38d7d3fdacdd8cf57d949ede0c83aa293b26405c
MD5 f7b0d56dbe5b59460397fbff451762c7
SHA1 7b99f7ad48287239d67dfae700aab13ddb482e59
SHA512 4d74700f81022cee2428cf3bd3b8762deedc503d3df1ccecf3d957ae76ee0ce31df05a196276ec9218717221b63732980969dc991a655600f78872ea9e3e30fc
TLSH
T19651985A4D418639D98440770DE3A8B8733A680087557F5374FC5636AC9279D3E0E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c0134a17079a19cb629a3604177ced4e8914843d602ea0afd1cc6b78c763ccf3
MD5 86b56841b9b49df234bc68412e85024d
SHA1 a11c52f7922d11e54617f52a6a4db0e606707328
SHA512 8cf80cd457e593987ad77857500585857d5b32da7d050da1eec4924b74953de0bef168d27e680df8e8f1cda7970599d076258988a517042778317602c6ab3089
TLSH
T13DE068FA2CA72824F86B83D21831906101023C50C544BCCF245EB5D360A13543599C72
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 22KB
SHA256 e2caac165248832c699d819b5e513732d2d7c278cb084c8c1b78bb5c755416c5
MD5 e3f17821d918e4876008b91b679bbc8d
SHA1 429720494fed1fddfc06e741f7bb2f183749c58d
SHA512 1644f2e64726b787fe41cf1dd1cc3a1434af5d31ecbbc3c4f30eea043ea897a788a1949c6034a3499a1094812d58d45d9522bb8a85c5a997d6b4af60dfa64494
SSDEEP 384:GZLVDJjEDPV0/ZdWiPWS84U945+qeB20NySZ8Wf:GZLVDJjEDPV0/ZdWiPWS84U945+qeB22
TLSH
T18EA2491232BA02423C7E390893968B674A42F1633459ED7F7BB940B64E67E125DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 11f06d402ae4f8da3e932a447bff0439a80fa55fcf2690155d0fea55f7e811ba
MD5 8bd90af3e52813d4b1c5b13601830f31
SHA1 31bac7e21c169e51a83733132eceea8aea456cd5
SHA512 ff209f5b3e40c9229b5eee67244002eea864ccf8e8dd2217860f74ebdcc35ea3515fff090a464b56f6702c8ac3c30661be5a5fe55a6c5f18d9c6539ee2d8d98f
SSDEEP 384:nAiFsZcIs38N08TUNTUlIRmPm3ek32nn972F4Jfb8Gqic3ZffwL9oLVlbhlDzzwP:bF6s33wgAKekmInGwfYSVlTDzzJSD
TLSH
T1A6D25B76DC60C9BBAEEA4F95B70A7603DEF04163C68CAAC4E9D85E5D009719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 a41bc172bb8bb52e92ad291c8069d439dd2c221260a87debd153fa50ae911108
MD5 7ae9d726c58a7b97a419068d19a1b0fb
SHA1 4ee0407df1938bc512996bf2a6293bfbb187d3dd
SHA512 27d65a82eb38df10cebff8d4b12cdb9c40ed978190e0f3f3ec459e74151257053208dbf87b3509fc75be3d02ae243feb1020f90562e7542f311b007339126642
SSDEEP 384:nUiFsZcIs38N08TUNTUlIRmPm3ek32nn972F4Jfb8Gqic3ZffwL9oLVlbhlDzzwP:vF6s33wgAKekmInGwfYSVlTDzzJSD
TLSH
T136D25B76DC60C9BBAEEA4F95B70A7603DEF04163C68CAAC4E9D85E5D00D719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 fe2637b743090430f9b74d79e0eb896473b5b7f862bdc6f32ed042da7f32c62e
MD5 e8ed71749b9429038b50143e3e17eedd
SHA1 3a55c663ed7d720ba6a5bfd176a983a79334100a
SHA512 dd2a51412cf31229ad3c886c04dc18c4ca1af7ac39dcf0f97e3291d923c18ebcb1a08da2a295a9521c7610f7117e7c4e1f73fc04a6c9289d037e3b95e955aa3f
SSDEEP 384:nniFsZcIK38N08TUNTUlIRmPm3ek32nn97OF4Jfb8Gqic3ZffwL9oXFVlbhlDzz0:iF6K33wgAKekmUnGwfYsFVlTDzzJSD
TLSH
T126F2C3F598D38977E99E4B97A73D6D0299FCC113B6889984B7C85D0DCC861BFC30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 84966284f0759f306a5159862ce63a736185aa3af39432c2eea71b542e46f984
MD5 7e9b459fea5a746e732464b588e693fa
SHA1 3fe098ee979b94c6b2928888b02bfdc6cd0a4ae8
SHA512 395d95a0efea2c4e729d855c090f48fc1b01713fd8cf8626e64f095e303013aea924e6abaebfdd4b37e750f7e2bd440fc086ef691020f734870ff51a9d952b65
SSDEEP 384:n4iF9CcmyWCs38N48TUNTUlIxBPm3ek32nn9wgm4Jfb8Gqic3ZffwL9oXVe4KV8f:DFccps3HwgPKekmTWGwfYYVI8p0e
TLSH
T17AC25B36EC64CABBEDD64F99B74A7503DEE05223C68C9AE4DADC1D5C009B1DD530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 46545ae204fa61c257a3ad96c5ed21d4f2385523fbc80c38cd6816446a815e86
MD5 4a0ba7c7aca5e4774ea77075520b13e8
SHA1 a9a93e6b1baf0482d8f7520d723d4f9a5c932b33
SHA512 f8b6c5e0492b9b88c785ff7b50553aacd41bc90e1d708afa242cfb0b37de7d8e30ef059613951624b9079c06dbd396af8d4a27e4f9368ce5be19ffa67e102bdb
SSDEEP 384:ntiF9CcmyWCs38Nj8TUNTUlIxBPm3ek32nn9B7Qcs4Jfb8Gqic3ZffwLdsqe4KVy:kFccps3MwgPKekmT7wGwfYxsqI8p0e
TLSH
T19CB26B36EC68CAFBEDE64F99F74EB602DEE01163859899E4DAD81D5C00971DD130B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad74c9b2-27c7-4aa8-a960-3a3cb4331304.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ad74c9b2-27c7-4aa8-a960-3a3cb4331304.tmp
Size 28KB
SHA256 6ed5819d7acd4c8160884c9bfd1fc444d7af24cd93fa742cb2121bb3018b125a
MD5 ea5da92f2b780669eecb6092026b3368
SHA1 f63383c3887c5126106194843b3f37dd989ffc2c
SHA512 a62e25049ff306d25fd06e254194e148c08b049891795d2e637b68a773926683485ed56f58172a9e9191026340964d3a9f18cabc0a2da1047c6353ebe164cab7
SSDEEP 384:nAiFiZcIh38N08TUNTUlIR6Pm3ek32nn9i2F4Jfb8Gqic3ZffwL9oLVlbhlDzzwP:bFQh33wgAKekmrnGwfYSVlTDzzJSD
TLSH
T166D25B76DC60C9BBAEEA4F95B74A7603DEF04163C68CAAC4E9C85E5D009709D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1512-195-0x000002A318B20000-0x000002A319B20000-memory.dmp

Download