hxxps://cdn[.]discordapp[.]com/attachments/1562644087427829930/1563677861703843950/zone[.]zip?ex=6ade7ffd&is=6add2e7d&hm=b9f1699cb9f490e7ad8dc790a6dc9fa651f66cbb1f96a8e08f9889910630fdcd&

Analysis

user interaction
yes
max time kernel
53s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 22:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cdn.discordapp.com/attachments/1562644087427829930/1563677861703843950/zone.zip?ex=6ade7ffd&is=6add2e7d&hm=b9f1699cb9f490e7ad8dc790a6dc9fa651f66cbb1f96a8e08f9889910630fdcd&
Sample261024-2vgzeacy4v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1728	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{A8EB4305-DCD1-4237-B457-6651BCC0EC70}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	msedge.exe

Suspicious behavior: EnumeratesProcesses 38 IoCs

pid	Process
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
3824	zone.exe
448	zone.exe
448	zone.exe
3824	zone.exe
448	zone.exe
3824	zone.exe
448	zone.exe
3824	zone.exe
448	zone.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3824	zone.exe
Token: SeDebugPrivilege	448	zone.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 4644	4952	msedge.exe	84
PID 4952 wrote to memory of 1728	4952	msedge.exe	85
PID 4952 wrote to memory of 2864	4952	msedge.exe	86
PID 4952 wrote to memory of 2864	4952	msedge.exe	86
PID 4952 wrote to memory of 2864	4952	msedge.exe	86
PID 4952 wrote to memory of 876	4952	msedge.exe	87
PID 4952 wrote to memory of 876	4952	msedge.exe	87
PID 4952 wrote to memory of 1928	4952	msedge.exe	88
PID 4952 wrote to memory of 1928	4952	msedge.exe	88
PID 4952 wrote to memory of 4364	4952	msedge.exe	89
PID 4952 wrote to memory of 1928	4952	msedge.exe	88
PID 4952 wrote to memory of 4364	4952	msedge.exe	89
PID 4952 wrote to memory of 4364	4952	msedge.exe	89
PID 4952 wrote to memory of 1828	4952	msedge.exe	91
PID 4952 wrote to memory of 632	4952	msedge.exe	92
PID 4952 wrote to memory of 1828	4952	msedge.exe	91
PID 4952 wrote to memory of 1828	4952	msedge.exe	91
PID 4952 wrote to memory of 632	4952	msedge.exe	92
PID 4952 wrote to memory of 632	4952	msedge.exe	92
PID 4952 wrote to memory of 5020	4952	msedge.exe	95
PID 4952 wrote to memory of 4332	4952	msedge.exe	96
PID 4952 wrote to memory of 5020	4952	msedge.exe	95
PID 4952 wrote to memory of 4332	4952	msedge.exe	96
PID 4952 wrote to memory of 2372	4952	msedge.exe	97
PID 4952 wrote to memory of 2372	4952	msedge.exe	97
PID 4952 wrote to memory of 3296	4952	msedge.exe	98
PID 4952 wrote to memory of 3296	4952	msedge.exe	98
PID 4952 wrote to memory of 3296	4952	msedge.exe	98
PID 4952 wrote to memory of 1908	4952	msedge.exe	99
PID 4952 wrote to memory of 552	4952	msedge.exe	103
PID 4952 wrote to memory of 4648	4952	msedge.exe	113
PID 4952 wrote to memory of 448	4952	msedge.exe	114
PID 4952 wrote to memory of 2552	4952	msedge.exe	115
PID 4952 wrote to memory of 4292	4952	msedge.exe	119
PID 4952 wrote to memory of 4292	4952	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1562644087427829930/1563677861703843950/zone.zip?ex=6ade7ffd&is=6add2e7d&hm=b9f1699cb9f490e7ad8dc790a6dc9fa651f66cbb1f96a8e08f9889910630fdcd&
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2bc,0x7ff9612ac188,0x7ff9612ac194,0x7ff9612ac1a0
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,7144468248275180024,13482507626464207753,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,10167017543211614390,6003244632984827138,262144 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1676,i,11840842767489967565,7544016033014055960,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,6871628778937809873,12808357716088344223,2097152 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,6744771256974802267,4493183833124625521,2097152 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,7621842176530759028,15595774731732226847,2097152 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,15135478630562737062,17274686735320419528,2097152 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,7117837153355264938,7117152994982371350,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,5621955383342726533,4521392006307569397,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,18096443352948426186,9030211229723132894,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5624,i,4070257852106693797,9673025118363110350,2097152 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,15093206700267911695,10403958805112011397,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,925607645378699150,1489982065736023295,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,925607645378699150,1489982065736023295,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2668,i,12051006947474983387,16973989884040968461,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,4471640512316525710,196360066902143869,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,1357308946373046685,12706303274870527311,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,1845292467803502524,13231731772684779053,524288 --field-trial-handle=2144,i,11272496774727986723,14578495014467898050,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:4292

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1888

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4292

C:\Users\Admin\Downloads\zone\zone\zone.exe
"C:\Users\Admin\Downloads\zone\zone\zone.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3824

C:\Users\Admin\Downloads\zone\zone\zone.exe
"C:\Users\Admin\Downloads\zone\zone\zone.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18d0157e-eb94-48e1-935a-29bba46d6b84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\18d0157e-eb94-48e1-935a-29bba46d6b84.tmp
Size 18KB
SHA256 e068909f25b89e5a660bc574fe50898436a69a0f11eb6e2bb851722b8d98dda6
MD5 00c0d1803b68beea5587f00b2b054d26
SHA1 d976965ad17ccd296b1dcb85a018701f6a950308
SHA512 53a9e3d56d1df2e8fcfefe803ca1f7c47a7b994b1416eeba0058cc63c993098b28db5a156400fe7bff49a4384f6299ff7354f8d53f106137d3e17f00734144f9
SSDEEP 384:FQkUSvlsN83zj6nb5Ifh//F+oVvu2IQIIln:flVp/txJu5QL9
TLSH
T1F2826C35ACA9AC378DA79591F04B36138EB4915BD7C45F98D6CE6B2C05CB29C230BE13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63c79a3f-e607-407c-9b02-b5fe05db8be0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\63c79a3f-e607-407c-9b02-b5fe05db8be0.tmp
Size 8KB
SHA256 2ad6e918779b0dcf1bde342c5c2e152231f54995fe9961ddc53ff6591b1eb430
MD5 0289da2040b92ec83a7228047a517ca8
SHA1 64d815089243413b757ad964c62495045e95c6c3
SHA512 0cbec8e47146afeec2f87ec8c2134de6dd3f37e50514455db47be1c8ef409917593e9c60e694ac85886303cf1cf0a857d254f4cb82a4e68db23db28bbf176274
SSDEEP 96:KqONkhQsjpfbUmjH5ih/cIPURHl8h4otop5maDEBKP4v+Y1xf//ojdAxXRtIorOq:BONp6JUm0QmiUy7oso//F+o6BCu0U6
TLSH
T1EE02C739BC686CBB8EB39E45B04777239FA4106BAA916F94DAD81E2C01D725C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

53d41161-ba48-405d-8789-caf664ee748b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\53d41161-ba48-405d-8789-caf664ee748b.tmp
Size 10KB
SHA256 40f81495da0fb8942181c131d5c6f83851993089ee37c5bd447c3fcaeaad1537
MD5 a53ea5bff6962a320d43e8bfa8d9f9ec
SHA1 d37a8a043b65c0eeb63e41091d1eb6b0dc851361
SHA512 6aad27e6b1c8236f9236820e496bfb3e9f2deac938d234ca35dcf0b4d40239ba2dcff75419bbf6f0e226316ba9cf14adfc5610def217f8fa8ce3bcb2e5d11d49
SSDEEP 192:sxZrRzn7/fos+tIdpJHW6+WNGY36zVhEIg5kJ:sxZrd7/fos+OJHbGXo+
TLSH
T15222A7516E68697B8CC7E20DBA25BF53E6F9503261D01E58FAFC861C05E6ACD120790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58f55314-0d76-4309-99b6-6f5dc1cd097e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\58f55314-0d76-4309-99b6-6f5dc1cd097e.tmp
Size 27KB
SHA256 8b83eb7c634496f5041cdf9e2503215c7e93d95352027105fd4bcc56ed329a91
MD5 8ee277250c299e6cb97147dc0cf8181d
SHA1 f383f71d37e2752ded37fab0f9acdd011603cf4f
SHA512 b49ac05761247f79d1dcc0968f34f9f70acd46de678d4d14abd08ba750bd356478684c6cf01fffcbd573d5c9d417efbb40302d6921b1011486a204a3a7968c68
SSDEEP 768:6QKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/ProqOJ:6QKlm7QWvUYe0u1ja8/L/E/cqOJ
TLSH
T114C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 293B
SHA256 82bdadb31043a6f06fd350f472fcf89eab0548a84d2535552ba9d8b1e689e406
MD5 841b222a47b64dfeca97d5f12851cfe4
SHA1 44f520a8a299a4132189f154c5035a4127087e69
SHA512 333f8b8c4db37ade98a10c7b9f1c284a18fb101d14cab87abe38428995286345a2ea89cad0e197e30e65bf2e300d47a4163d869606d070691526c51c76e32a23
TLSH
T184E0C20958D0C33B6328E4D70128834D8B89231A96C0AA2E6F04DA4C318A888A6E66E6
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 f6f9d8bcb6f6099235b6da5f25886bcb07004ca6d4edfef84088188c6731c787
MD5 98665e1f8c082fea0effe9f3abd0e4c5
SHA1 dc9e6eb6bf5ba48954be9fd172e5c212b5603aeb
SHA512 09f2c438caa65819e08f957cb61465fece6a97380feac09ddfc4ed0dad7ccf367eedbba5200aa6e2f08927811e2dbbf9be5124ef06a1b2a8f0f740d64bf1e765
TLSH
T19051D68658A38BD4FBED61FC8DD211CF3B3CAD8086830E72A195DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bf322c2968ea2415b7ecd623a3e295fa2d6a566b5d711318da5c7362a2613e24
MD5 20a664709629998be1790aa0d69e7e39
SHA1 cd193a6d04fc40eeda16b0d7ff2f8e5f39bf5608
SHA512 0519b8af522a8e672cd96301ae2a174b3f2d8ff487ccbf47831003d9da3e33d1d53c8ce688d2ac949d9c045f16553fd36c1f87be60d74d374ef3180563b4438d
TLSH
T12A51E78658A38BD4FBED61FC8DD212CF3B3CAD8086830E72A195DE797827794B12C050
MD5 SHA1 SHA512 TLSH

Submit Download

59676988-e92e-4414-9f1a-1ab27c885c30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\59676988-e92e-4414-9f1a-1ab27c885c30.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3fdf55ce-9e2a-4409-974d-4def1289d9ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3fdf55ce-9e2a-4409-974d-4def1289d9ea.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

85ddb92e-ab77-4111-99a6-f4c4787e2b7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\85ddb92e-ab77-4111-99a6-f4c4787e2b7a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 2a750017d6b4df9e36884cead13337e6ecf8b1e58b82892b8b3e67cbdf650866
MD5 93e8c3ea622e8cb505e1bf108de34171
SHA1 eb3c4339d79e5ffea63b887f0a10127f9dd6977a
SHA512 ffafd56c2197383abc0a3f84b324e2a68ba6aff8556f8c9ce871a83b42b76e69c297e5c11df3fa412ed6f069e70ee5730c140cbdb66337154cc559917fda53a2
TLSH
T159219A5060278212BABDAA0E005CB5268F51F1713216EB6E3769D2B58B2EE106BFC5C9
MD5 SHA1 SHA512 TLSH

Submit Download

b2d7e1cb-968a-4e7b-8f01-cc7bc6b42495.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2d7e1cb-968a-4e7b-8f01-cc7bc6b42495.tmp
Size 9KB
SHA256 3b2fbf572a92b9324e31487533c953a51b1546524d8ce20f0ef983d7ae82f818
MD5 7778381d7183b8bf32159a4ac76a3646
SHA1 77487a9c788317513a2f7e9a9b31690c5b0b2ed7
SHA512 07cdc2b0275944b77de0c8992fb9a35857280a15341b890d20e9ac909374f578a1352ff98e3b5387d3eebf9a8954ea4c4bff104ddbe1429117e128ba0e91862f
SSDEEP 192:sxZrRzn7/foshtIdpJHW6+WNGY36cBhEIgrJ:sxZrd7/foshOJHbGXl9
TLSH
T13312A6526E28A57B8CC7E20DBA25BF53D6F95032A1D01E58FAFC861C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2516741-dd8e-4b1d-b2c1-1fdcfcf96814.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2516741-dd8e-4b1d-b2c1-1fdcfcf96814.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbe0d119-aec5-40c0-b34c-60c902c056e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbe0d119-aec5-40c0-b34c-60c902c056e8.tmp
Size 9KB
SHA256 ee6494728f69027e5c63503b3ab2038395a093fadc9b36293f7fcfbd1ac21003
MD5 0eaaae25e88de3b3bf2d76882fa0ee40
SHA1 29f7a2d053f70c63a41c0ebc80655dedf18ee10c
SHA512 3c7407948659f057f3ca3d15e10603600762071411cc5eab4d1fc2ccb517e6d86c05cc83e7045265eaf3a9ddf0ef7df2541611d9a2a644ee9869f9b64402930e
SSDEEP 192:sxZrRzn7/fosGtIdpJHW6+WNGY36cNhEIg5OJ:sxZrd7/fosGOJHbGXZU
TLSH
T18C22A7516E78A57B8CC7E20DBA25BF53E6F95032A1D01E98FAFC861C05E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a37630ff-a389-4f23-901d-e37639872e50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a37630ff-a389-4f23-901d-e37639872e50.tmp
Size 18KB
SHA256 4aaf603fe06506b4656767e22fa3f72fbc1fb2b8f43342ac88b558b546c8e5ef
MD5 9facbb64cb622e5a08875d7dc63ef51d
SHA1 c970ed2eb2393f0404474eead5fae0d4a01ecb7d
SHA512 087885d71ee999fdb355ac87a1df502b668bbf4f00637a57580fa80e9422ee5d9e2b7c0c5fedb15f2e667ec05bfdc6511904ad9e04fafa127aa601c2c79277e5
SSDEEP 384:VQkUSv0sN8ezj6nbIIfh//F+oVvu2IQIIln:v0bp/txJu5QL9
TLSH
T1AD826D35ACB9AC378EA79650F04B36138EB4911BD7C55F98D6CE6B2C05CA29C2307E13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6655372-d5d3-4895-823f-59095df3d6af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d6655372-d5d3-4895-823f-59095df3d6af.tmp
Size 8KB
SHA256 8c45572879c716e14ccbf465482158db7a06b6ab286a845e97392759d152381a
MD5 2b96a8dce98811ac1e4f8645a52fecca
SHA1 385705a1dd47abfbbb5841f49fb97062fd06b2b5
SHA512 f6353d541e3bbeb980879033f6dedfd213ad4c4ef93e0857388bf3a201c98ffc578d318d8a9adf751ba7e3ef00ee09640fe19b0a7fd493a6f4af5fc8a5f021ec
SSDEEP 96:HqONkpQsjpfbUHH5ih/cIPURHl8h4otop5mxDEBdP4v+Y1xf//ojdAxXRtIorexB:KONd6JUwQmiUyao9o//F+oV4WNxiqOU6
TLSH
T16212F835BCB8A87B5EA3A991F04736238EA44127EBC56F94D5DD2A2C05DB26C130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3aab0ca-6b41-48e4-97fc-f0ae359e756e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a3aab0ca-6b41-48e4-97fc-f0ae359e756e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fa1009b5-fa86-429d-bb62-a9119ac29b76.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fa1009b5-fa86-429d-bb62-a9119ac29b76.tmp
Size 18KB
SHA256 366165bc57549f6174f33f3f963a0f1df294dbec1ec64e1a0e03bb8ac35032be
MD5 6f1c4eaf5a81f3952ad452aafbd82d24
SHA1 c206a8173f0f22f4fcc216e5cd4a0866822e1cbe
SHA512 1fa10006ea3cc2f87648ce810dcfbf042c7770089dfbed895b9991f3b91af8fb69ca2114fc1f3a4424b8b7b62d7acbe07ecebadb71145995af90ad27c447ce1c
SSDEEP 384:kQkUSvlsN8Kzj6nb5Ifh//F+oVvu2IQIIln:UlKp/txJu5QL9
TLSH
T174826C35ACB9AC378DA79551F04B36138EB4915BD7C45F98D6CE6B2C05CA29C2307E13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 53ee4078967f8ece61c8ea6612b2d2f9bd0b520f99593db5f3a423b79cd928c4
MD5 876bcccb47d0b3f95e6b4f3daff3ad19
SHA1 a33c565dbe53ec9c1b5daa65e6e039604bda2408
SHA512 639ec62ac013e1e3008afd230ee2e3b91266135709c0eccba42af4677b01cfdaf036bee127dcff00d9bab87a12af52e7907637afbb82068f907cc589a35ac433
TLSH
T14D41FD5CBAFA1108B3B3AE5AABF2646D487F79771E06D46D00110E4F0A77B41D861B37
MD5 SHA1 SHA512 TLSH

Submit Download

zone.log

Path C:\Users\Admin\AppData\Local\Zone\zone.log
Size 704B
SHA256 2ab6265392e4e5e3d07c7cc0b7de1cc57b9f970f2e3d7896f2b13e92dd934e84
MD5 b7b9de64a23ed850eb54e8164636db8c
SHA1 1220eac29d7a3a5e61c6184dfe0fcbf840e992f5
SHA512 9c40781e2492d9b75406c59312b42ac22e79496d9b9329dcafea6d6356a48fe1dd44ce84e8b5ae673c0ad547ab5af5124e95fcf25d7ef693f6f1006f309730e1
TLSH
T150019C3DC0F1E96B9424C031032FBF4CCE26BC233E4C21A427425A1410AE82EDE697C9
MD5 SHA1 SHA512 TLSH

Submit Download

0ba98d40-7139-4c9e-bc42-b540fb6ebb7e.tmp

Path C:\Users\Admin\Downloads\0ba98d40-7139-4c9e-bc42-b540fb6ebb7e.tmp
Size 12KB
SHA256 19c631bb8fcaa2b65928471a691f6cfb983bef9318312dd0cef7447fd7222a7d
MD5 04969b1ee09d0ef016af78dcb5e3cbd9
SHA1 c5bd2d04647bef62cec8a86be48e42e3d29e3ef3
SHA512 fdb038b6de7e89c1b32a1d719042ed34190b5d4feaa618e3d3d4f4928986d455b37c4777810da0a7ce9f530a3161c0f551281018af4e150d35fa253b9284ede0
SSDEEP 384:KKmtDuSlp4EBaf8uDGXq/ggrp00/Io5l3ht:hUDuSlp4/kuDg6pvR5lH
TLSH
T1BD42C036834CE0E39B55DD3F69E98C847E103642FE9514729A6470642AE6AF1FA2B844
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zone.zip.crdownload

Path C:\Users\Admin\Downloads\zone.zip.crdownload
Size 626KB
SHA256 1c3a1213bcefc5bbee29389ce0a8a82c54bae4ccc133e1be82f1339a69cd083d
MD5 ad567e4e93b3cffb5f6aa017f42bc01f
SHA1 6845664aff6901df78c2a0ef7659b7764c2ffd04
SHA512 2624256461666d54f2c8168883d7045ec48901a6601eaa886fc206c8d0b7b1656525156dac26c919aacd585d3663e5ec3c4f3eff12959dfc12962641b93ce19b
SSDEEP 12288:Ym+tttttttttttttttttnww+O57Cm7bfLnhVtFmASiDFedVB5B7EthkpvQR+uDUh:AtttttttttttttttttnPCm7XLtFdSJTr
TLSH
T1EED423B1477AFEA8F5602A2796A1778657C1DC2ABB971DF008234E85B2C617D0F30EC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.zone-write-probe

Path C:\Users\Admin\Downloads\zone\zone\.zone-write-probe
Size 1B
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

Submit Download

memory/3824-242-0x000002BBB80D0000-0x000002BBB80DA000-memory.dmp

Download

memory/3824-238-0x000002BBD2240000-0x000002BBD2266000-memory.dmp

Download

memory/3824-240-0x000002BBD2270000-0x000002BBD2286000-memory.dmp

Download

memory/3824-241-0x000002BBD2290000-0x000002BBD229A000-memory.dmp

Download

memory/3824-230-0x000002BBB7A70000-0x000002BBB7B2C000-memory.dmp

Download

memory/3824-243-0x000002BBD22B0000-0x000002BBD22B8000-memory.dmp

Download

memory/3824-244-0x000002BBD22C0000-0x000002BBD22DE000-memory.dmp

Download

memory/3824-239-0x000002BBB7F70000-0x000002BBB7F78000-memory.dmp

Download

memory/3824-256-0x000002BBD70F0000-0x000002BBD7128000-memory.dmp

Download

memory/3824-257-0x000002BBD68E0000-0x000002BBD68EE000-memory.dmp

Download

memory/3824-260-0x000002BBD2BE0000-0x000002BBD2C9A000-memory.dmp

Download

memory/3824-261-0x000002BBD2B30000-0x000002BBD2B38000-memory.dmp

Download

memory/3824-237-0x000002BBB7F50000-0x000002BBB7F5A000-memory.dmp

Download

memory/3824-236-0x000002BBD21A0000-0x000002BBD2240000-memory.dmp

Download

memory/3824-235-0x000002BBB80A0000-0x000002BBB80CC000-memory.dmp

Download

memory/3824-234-0x000002BBD2170000-0x000002BBD2192000-memory.dmp

Download