Analysis

  • max time kernel
    315s
  • max time network
    333s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2022, 20:20

General

  • Target

    setup.exe

  • Size

    73.7MB

  • MD5

    02dde17be4c7a3dce827d28df8117e3c

  • SHA1

    2098d73511a1daac926645cad8a7b5fec6cf7f47

  • SHA256

    e071f7aff74e187f07a9f1ee88eeac9be728447aad359a0cda32fe7b62228bec

  • SHA512

    31c9f5582872e4634751ef1ab52b0f8e57ec0408c78aaa1aeb7d6883ae0991416da3c5eaea27ca64b5c6eb5fde930f85acf4fa9c68485b546e528081d22a6156

  • SSDEEP

    1572864:wKT3GWkokgm1Pia0dgTqHXwTvQ6GH0FBEJNJ5TOLOx7fSTtjIvmExf:wKTWWMia0mDAUrEzvOG6T2e+f

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 7 IoCs

    Detects file using ACProtect software.

  • Executes dropped EXE 4 IoCs
  • UPX packed file 48 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Control Panel 1 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\setup.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Users\Admin\AppData\Local\Temp\is-AOHTM.tmp\setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-AOHTM.tmp\setup.tmp" /SL5="$90040,76731090,67072,C:\Users\Admin\AppData\Local\Temp\setup.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:4676
  • C:\Program Files (x86)\Adobe Photoshop CS6\Photoshop.exe
    "C:\Program Files (x86)\Adobe Photoshop CS6\Photoshop.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5028
    • C:\Program Files (x86)\Adobe Photoshop CS6\App\Photoshop\Photoshop.exe
      "C:\Program Files (x86)\Adobe Photoshop CS6\App\Photoshop\Photoshop.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Windows directory
      • Checks processor information in registry
      • Modifies Control Panel
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1136
      • C:\Program Files (x86)\Adobe Photoshop CS6\App\Photoshop\sniffer_gpu.exe
        "C:\Program Files (x86)\Adobe Photoshop CS6\App\Photoshop\sniffer_gpu.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        PID:4204
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
    1⤵
      PID:4936

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\AppInfo\appinfo.ini

      Filesize

      1KB

      MD5

      1c3e73875032f79e1fe0d31611f28f5a

      SHA1

      9e102dcc46f70563ce408d962998f73b066a49a7

      SHA256

      30cd9225af9d7223834afacc1a21030dec326813ff51231af7dbf29f121f4f26

      SHA512

      28d1f71daa2322e556c71e32eabef1821862a7f7c34cf2b9e09364af3bdf4e4c84de56e574dec2e83660aa80adbea82f8f20b46b9e5bd8e75f47f2132af9e047

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\APE\3.3\NPSWF32.dll

      Filesize

      2.6MB

      MD5

      8d1f5e066d148754cf837445b5a6f97e

      SHA1

      06b34c1d62fc44b72a23ce53bc84f080229b0651

      SHA256

      4db134d653e300e536d9a61616d82ef8c4228682f2cba2006eef2ecd0898d07a

      SHA512

      3ede602e35f1ce141c37bbbfdb987953bf3489894b74c5ec3893a0a6e493e1cd630df7dcdb7adf3da83e71761b181e36a6573f5128d4c6272bcecb09d62a3245

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\APE\3.3\WebKit.dll

      Filesize

      1.5MB

      MD5

      ca941269c9476089bb9b655f7c8641e1

      SHA1

      187d6bc096f8905252c88c1f40f94ece27684c8b

      SHA256

      1f07c5504c58400b5f7c94302cdda9d4b96929e065f4099b4ce150fa619c1ad5

      SHA512

      72cd2b640d05a47695f99ac6fdaa51fcdc6afc44b751969d5729e29caf8ee44a0f2f0bfbe7fbe51197f9e4156bbb285f0207ce6cd0e3eca8cc6f969016792765

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\APE\3.3\adbeapecore.dll

      Filesize

      51KB

      MD5

      60ecb9ca60c5c5cef099b042bf6e6218

      SHA1

      e23ab3233f9354036b676ba1be6ba6e56436da44

      SHA256

      2837fc04368c6a85d38794d1d9273cf5736b2fc6281c13ae077b9595c34af419

      SHA512

      8abc1baa5a29661389698cb7aa52f1941d7ebb8e67562b07a2b49ba0e2bfdb210748652509b86ae7c443de13cb3b3401c329a809e3778f3d179c2070963dba41

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\APE\3.3\adbeapeengine.dll

      Filesize

      3.5MB

      MD5

      59337f4d585f52d2ea1c117d77b6bc05

      SHA1

      37ef92c224dea1cdfd757b7b4122b6d0dd13248d

      SHA256

      7fce0bb6ea8bf9baa5c4104025c6ebd788c1ffca76ba3151a743944628e57144

      SHA512

      e939cc70c635117a6cc39dae249431ee10daa2d9141e94dc4363b930389e44aa26b535e47720b1a6d14fe312496875d168080e91529fc69c7f8afbb65aad89ab

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe PCD\cache\60F5D9C2C5F2

      Filesize

      112B

      MD5

      35287783746a081a83b1e67613e12e78

      SHA1

      19b3bd526f20c71da8951f948bee6759b8e57297

      SHA256

      f718b317367546abfc8e61575579c6df0e9b02f01800878d7a89b5f47f356a9d

      SHA512

      33c50c5081a15f264ef8c53f44a463b14ca2103e9562252216473af7400b88858d947262388e6ac3105c301117204aa04742c1022af4968a086da873cd9fb2b4

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe PCD\cache\7A1BDD8A3681

      Filesize

      112B

      MD5

      18ff6478725410a3292f3bb679b4112e

      SHA1

      6cd49d51dce6ea36396a8e6f839619abc27360bd

      SHA256

      2de5bff340be66ff5b16cdc0dceb6271acbf872c5e7dbc7d83e1e6715a20fecd

      SHA512

      f7653bbf4daabb4f816f9988abf79fef073e4c44417e7249248da428ac2f1adf9db856f38cd1ad2c801b6c24be0d1ec50d3285a32a5e4f220dd67c3dd93efe03

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe PCD\cache\D075286DFCF9

      Filesize

      40B

      MD5

      6fa5279adb3e4e751f8abefd5a679207

      SHA1

      a3b5c8b7cf25021e42b8f2cfb148cbbac2d7fd9d

      SHA256

      e348f06c42b034832766b26bc24167e11aaa770553108c4e94feba646b583497

      SHA512

      a8027174899697d500c93863cb751d4c8facc105ce78508e9dde65afe05f030fa7925a54c571ca88c5db1ebec5d90f6f02fa3d2b927492ed24ba0375a4e455c4

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe PCD\cache\D2622E6DFDF7

      Filesize

      112B

      MD5

      c8a56fc8b9555dc6962a6b9e25f50fdb

      SHA1

      edd13d4ec565c5d3143cd83bcd8718b4ccab937e

      SHA256

      84e802c5f19307825e1ef58c4ddafaa84bc10d8179547e5ec5308f6ef6476887

      SHA512

      a9fb571a037f7adedf500a86e3160d9fb1c6e06ca7dda66ed970c4b5c417dcae6c19e577408acbdbc5f7d3c9929915a13ac12e8857b0690bbab8a1b2577ed040

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe PCD\cache\cache.db

      Filesize

      5KB

      MD5

      12fba8a07e5168ae01844d82440c2b6c

      SHA1

      a8ae7810258a267e792d5814acdc3e6b04eccb67

      SHA256

      0b46b6af166bfbde51973686fdcce925c354d361751bea247a1d44ec756f85c8

      SHA512

      11553fb9b4b0536c5a7d5ceb92afeba117a4f1801493ffa1c42f18d9cf166fa6ae083f89ed47209c23ce976b13ec3eb5d73236a988c7d49d2ce264a0a4a2bc48

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe PCD\pcd.db

      Filesize

      384KB

      MD5

      4620ae9eb32421fa62e366e023e11024

      SHA1

      b77e92ed7473663317dd0c60020202a956017066

      SHA256

      0f44c1231bda9c758281445c42e39c5da33387586d9ade0ebdf27c3483a85593

      SHA512

      824a419603e6f5fb4c13938565d83d9c97c641fff5de75c99929ba8fdfb2ecf80d422cfafa67c16acb37af0cb7f041f42ec3018c5cbf0f53dc8e45458db4cfe5

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe Photoshop CS6\AMT_Driver\Driver key files\ConflictingProcesses\ConflictingProcesses

      Filesize

      35B

      MD5

      9b6bb7a47340651e311803e9dbda7871

      SHA1

      9189d1f857c7cbe1541b75f03d9b13dcf8526220

      SHA256

      9a4bbe0105e3be03ef0a1c3cd4bbebc1458d74cbc252079d2b79c5ba3e372617

      SHA512

      22c613d346124ca1e9a4bdc3ac2ad852ede32688b3377c8f444a646ac3c08d12daec242bfcda32526591e01eed0ca6fbabbcb824a928c4caff9c7426256db15b

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe Photoshop CS6\AMT_Driver\SLConfig.xml

      Filesize

      22KB

      MD5

      063f6923c3a2f3e6492797671791b31b

      SHA1

      2008832fd241d1b4994b4663f1eeca421d602372

      SHA256

      640f7ae2e4287214b7771052e8ea77bb552722e6a8976ca8018c4e266ff9c07c

      SHA512

      7d910f6c57bcd883a0eae5558b04606f4a4195d7f3e5fc8c34b000181a91a786c50a85ee2dc726c348297d9d439229aa4892a8f2a038f7cc14a4f9d9c6423ed4

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe Photoshop CS6\AMT_Driver\application.xml

      Filesize

      974B

      MD5

      236ac7e66f5d6648508fa7e764c7662e

      SHA1

      0530dc9292ac90a775bf81f571c7beda3e0d4bc2

      SHA256

      1c351d37c9c1e773b659a1afa77a26592c5cc128545a7ac39742ce1cbe74e08d

      SHA512

      eeb06889ee995c900d760a939908827faae1c9781e52dc8101b41a8e4ded9bcf87fd63499aea41c17fa82ad856674893e85c27cb222b4c3bf67f40fd189da969

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe Photoshop CS6\AMT_Driver\en_US\license.html

      Filesize

      79KB

      MD5

      24ddc6112fdfe2a426b7481e4cb686ed

      SHA1

      8527caad500df7c2e570d32b97867c84a18f5833

      SHA256

      08babe2e31b02c7d990d8a7c029eafdb33f404eed7b70142369f07b2a085b817

      SHA512

      caf29da7ac36ab64576b090d7a0de05e37cdef4e19e5c4b618fcad1a49a6c481c153b2bfa74f4ac2c20b1a28641cdc7c12db4585278fb5c4b41e2f75cb760bc0

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Adobe Photoshop CS6\AMT_Driver\reg_custom_background.bmp

      Filesize

      1.4MB

      MD5

      341961fe41812183d617285fb7acd68d

      SHA1

      decfb824222322c4a8c82bae079284a65d28d011

      SHA256

      174b08919a93b57e809544b9c3f43ed3481a2a3864f1d92e0818756d5091550f

      SHA512

      07e47773af07a9de9d9b94f8e1f213fea1376709258d23067f68eabcfcbcf4678f192f76663d829482204e2faec0b67d9712084f8e9b4cc791d32864d4fad2bf

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\AnimePalette.icc

      Filesize

      29KB

      MD5

      7b4ecee8cbbd09e036913fcc3c44b362

      SHA1

      b28ab4af574b8cc8b561d53b3167799fb367a2d7

      SHA256

      415c77ea9b81ba9e40e07a5d2b23e8d204c777ac2abcff2ba1e9eae6a49e04de

      SHA512

      459679534996912f57d609b49d1f56dbd0422fd46f2df1d8669869c831af90d5d4fa6479dca27323d31859480a6f946eab0765bb52e1bdabbbbcdcf024cbd3d4

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\BlacklightPoster.icc

      Filesize

      16KB

      MD5

      70c3c2c81942f1a28e2c60b6d38a67d1

      SHA1

      63bcd6b6d64d5640b1e4cb9e566b49b98add4fef

      SHA256

      652f7a3e7e309d45edf9b56019eb42b670140e4e8ff706ff95f3ed74b5e85ab4

      SHA512

      01f369046d75490776f77ba21f1ac6772d9fed5c422ce50be272f97192f01ff517017031eef1cfa8e6bef36ea145dd248b9feffaab89fb8f1f77d52ab3b6937f

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\CobaltCarmine.icc

      Filesize

      16KB

      MD5

      375061925e4af8d0baeb9b0d93de5606

      SHA1

      8c64d73857337d8bddf3036fc3e8c6ef5d0b4986

      SHA256

      3f85fff47a31ea6af31391ee44518988b3ac439caee5386e750ee79b78f62421

      SHA512

      6bba8919ba166336d608b2baa34c742bde63ce0e92497a021846f40e882daeb292749338008cc6d8bdb90457d5a426f96f95fa53bd600126be26e968c40559c6

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\ColorNegative.icc

      Filesize

      29KB

      MD5

      545fceb911b6cd953fd942fc8b9e4f53

      SHA1

      0c51f81bde3eff570e500853957c55b32ec13c9a

      SHA256

      1ddbbe78180146e0b71e656e347e8904834bbd9098e41ae2262661910188bb09

      SHA512

      538174e43f22dfb19ef071736e040b2d08c4832f1cca7e3433a571fe9c829c51235638b0bdff1f25c71f032d5232af681db718ce493fcf61f1fdd68b4bed5e70

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\GoldBlue.icc

      Filesize

      16KB

      MD5

      d95dac3679704a8506d36323bad53884

      SHA1

      5dcaec0225cb5552de6d4d7215d8759e2149c18f

      SHA256

      13a68032010d5f259499c903d1165579c7649620f8da5b9808d65dacd26fa1cb

      SHA512

      94ad6a035cccc6ab69052d16fad3bd67876a1529ba409a51919959ff42a918fc4854811aedbe80c76ca5f5f1e37cd962754fa86c03ab04ee58424d840571a01f

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\GoldCrimson.icc

      Filesize

      16KB

      MD5

      211ca4933d9053917344213f2094f4f0

      SHA1

      1a234dcf40c22abc686d80aaa30f6e06091a3e01

      SHA256

      62f3b00931487f11f28d13d8631e5ee10cdab919a92417861f3c4e48f6b3233e

      SHA512

      7065c9cf8d84a59a590b6a9d309f013c1654270b4262f2e2c7a1bba365c3a07bf605c013e61502c44d8a192bae89d492cdb866e5cf8d2c948baa61560373a637

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\GreenRed.icc

      Filesize

      16KB

      MD5

      5f98b853f39587349dbbaa693f49bd1b

      SHA1

      8bbdc7e6464b240761b2f5dbec757279058ef0af

      SHA256

      734943579cb17f268f7213db8f2f5557ed4597eaf3517ffca55ded39fe9255e7

      SHA512

      c52ae26c4071638cf1e321577807136e24104f7923da1a3f7d9363a6b6f40896c7712ab0eea488218b08f6f1ea827bc1c0f62eaa62d9a903362287bac871abfd

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\Pastel8Hues.icc

      Filesize

      16KB

      MD5

      66329da2658bfe26cc3abf51c72ab573

      SHA1

      6a729852d6f40be1f7c3a44eb65288830adcc270

      SHA256

      e904d0f879a93459b28251b9e0daae56a12109b866f144e5c3e492a44e36ac91

      SHA512

      020097b9afededc224421de8d6d2b5d82cee83044056203bf5ae03c95ca5f5da992d52247ae3e98ebe5eff86bb81f8d19edd4cb158e10d5fb2e85a55197529f1

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\RedBlueYelllow.icc

      Filesize

      16KB

      MD5

      3324858f5e782ad2ced042b3e99ef7fc

      SHA1

      e887443f9d747f694cbed39852daa67a30f746bf

      SHA256

      02eba08150ad2a352857ccc9f78677da3a28f69281c655b59079649eff28d05f

      SHA512

      0d920ef85a5aaa82cad919028ad1dbca10534c7f24ce125f47c0040e2b2ac353ae3eb3ef36b6732ab19af3a79996ebed7d839190f9513feb5e486e27ab26a57e

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\SiennaBlue.icc

      Filesize

      16KB

      MD5

      9f23d9ffb4ef35b1cc929269db564a11

      SHA1

      d390c0f1a78292a7f800899125b0df285ce8fe0c

      SHA256

      33e0c10353bb6769428b425ba03e5d825eb8c5587b4c5aa7bebf4a5b6bdf1df0

      SHA512

      1a70bc912229b0d2e4e59d972e8af9a80b60cda2f8f2cb57d73841e89d05410ee8dc8e8768984d95f3faeeb243bb1b5b1d36ff6d8ca1a75f4596834d64303bc9

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\Smokey.icc

      Filesize

      16KB

      MD5

      9311ca431fdb15021aebee1a2126b068

      SHA1

      4faf6bb957fdae0f996d28b1d94d7c6cd0293279

      SHA256

      89d30013f163dea4b61065a3526fa85e8a21daa3f8f373ff8a530e154d241814

      SHA512

      700f05943510620dcd573ee83860d5c5bb406e16f673acf8a5b28479e072b048a432debdb400f3b8713f8a241af1ffc350ab751d9bf4527839529f64742a1a90

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\TealMagentaGold.icc

      Filesize

      16KB

      MD5

      58711c63722cd86ca8b63f6b8486a787

      SHA1

      0702775bfa816255b34f045dcfcdb2ffe6d4f795

      SHA256

      865674a541f22fa2578f41214a108a28dedbad861dd6aa862ffae1613d593083

      SHA512

      05c76b673236b668574430322f48cf6c8a9230d2f5f5da9fa19dab516dfb211cc9acb0dfa7318d3e23ef7408fe4d6e0796d23a30629a052a2c6e4d2560b894c5

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\TotalInkPreview.icc

      Filesize

      3KB

      MD5

      cc360240fcc66981940df06d5dfc75cb

      SHA1

      cc30183e2379d8180f040cadf1bf47886527b6e4

      SHA256

      a7a8c092a18f54b324b237cce9fc023e0b13096e9cfb7dd5596d436635db427f

      SHA512

      686d4916ecacc883d386bcfb64064b3812f58eca8ed755ff25a1f7bf00f0f3021b6af7a4ece16272ad0e7866db922c2ecd690819548cc203d53d8021a7ff420b

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Color Profiles\TurquoiseSepia.icc

      Filesize

      16KB

      MD5

      214bdab45dc0725bbbb43ead79a12d95

      SHA1

      ee004efdf1f0a4a282341446944de229ab50147d

      SHA256

      b2f7f521e9ea84fd2ead9cb06afee47804da25dd5fecd0dc39555a38ac8d6dc6

      SHA512

      e3c5e5e6ce56d5b5dbf1d28c5960ae333d67c56590c086f214a0b23a23ff0299be3a486e4e3a29089978d7e6637dc05261e5a7cc90d9b4e337d3dde6e440cc15

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\PCF\{093DEFC4-542D-4D0A-8162-0592055515F4}..xml

      Filesize

      224B

      MD5

      b65ab64d16eb4e38258481658a1d9f28

      SHA1

      7c67d3b9ff72cc3008abad3778e6350ac7ec6812

      SHA256

      175d2445976b22f169bfbc447f1008f9e70ba0f625bc933b1ce40cd0421c667c

      SHA512

      b328ec3773dfa0ad53e5239f6899446d545d429b22666e3b87b1729afb18cd4b4e98b48b392850018105b6475b49ac138d3e0134b51c6849b4a374fae592c542

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\PCF\{311CDC89-AC18-4344-9EC9-0225328C73D3}..xml

      Filesize

      238B

      MD5

      a3855cf5421de8e7763f45123cee8c5a

      SHA1

      3520e8ee8c802be15259c3739d85a3d4e8b7a40a

      SHA256

      d574b2a895a97b9f32d38250c8095ec776a1390ad63179e2b60f7b5658a6f392

      SHA512

      55e52c9158582c74bb4c3512b6a10183d3cc2c558db532212c5b7a5a5bd6d8c46343bfba98456626216c45e61fa9e7ce46012ff9a6ceb7650d11b138dca14aa9

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\PCF\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}.Photoshop-CS6-Win-GM.xml

      Filesize

      1KB

      MD5

      dec4c8033df0a93f44a248f94a40f789

      SHA1

      99211676fdb668357ea9d096cbe4c5c088eb76af

      SHA256

      711c277810950ce9ea31145a1c2359c80898687509aaaacf6e5b1910fdcea956

      SHA512

      3cbcb7200145f6ae04336baec34ffa64407808ea80eca5bcec879b44c11cb2f4b1b52d193dea8d463120d14ddc485fb2ce784dc50c57ff832c019c5fef6d2cc9

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\PCF\{9124DF4E-617D-486B-A970-8FA632244F24}.Photoshop-CS6-Win-GM.xml

      Filesize

      1KB

      MD5

      6e8f96455bb5dde946e4249f3d4e75fe

      SHA1

      78c1f0026b8611d4dc8d47bf723c259ee6c45414

      SHA256

      4c6362a335c69a074d4c9bec370257cfcd710e4116f8100e3c70da4ae99c81e4

      SHA512

      1951586e148589fb396f7cfa99ee45a2978680d7b91a83deddc32cbaccc0391bda7d5b02175c61c6061de7d155f754d7d346a48cef2419bdd4ca41b9a83390e4

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\PCF\{B8ADDCBD-30D9-4366-AE25-089CEF76C8E1}..xml

      Filesize

      139KB

      MD5

      ed9ee3496aa9cbdda1511236608254ed

      SHA1

      06206cde11f7b9ae20adf9dc4d5f0b513144fbd3

      SHA256

      a351b3834ec11267cebe2c9410568df9997a5416fbf1564b0b328a5c2c24767d

      SHA512

      97b98bc884d156565e691f9c87409eaedfd49ac4c33455046468b645904efd37381e21cd1d0ff6cd1422a1a4039eccddeca18b6e0b59f6dc59547c50f9f0809c

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\PCF\{CFC3110A-491C-4DBF-A97D-66C567600A2F}.Camera_Raw-7-Win-GM.xml

      Filesize

      1KB

      MD5

      c3e2ace52d5a36575d1b68f1ff4ab06f

      SHA1

      c37d356a1e1ad063ce6b33ec2f8a1b9c8e3a2d0f

      SHA256

      ec865a0b729837c33ad0f3cb6fb0e4479b139a90aafb49fe61b0695d23ea3847

      SHA512

      e8ca65b3a440ea8d3cd4a3de102f69185927ab731c1eb18ef833ea0f549dc3a070e4f2b9b2583adfc4513548217d098926b809006d0037ba2ad42a4c2f1b3971

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\OTI2Mjg3MDExOTIxMjM0NDU0NjcxODY2.slc

      Filesize

      1KB

      MD5

      c71b25f50ed889797c2e586c2afb9a81

      SHA1

      7811cbe137b3cb779547e97b2d8ce9ac5714afbc

      SHA256

      2db2eb84c16e8d846aa4b8307be84e3616be8352ba459ee10402d52438979f19

      SHA512

      9c313e2c6e26bec39aeb81241794d77b73a2e475c316953c620e3497a70578cf1e4c7af37bd239a914ba79346dc0f32038699728239d297dc024a0c7f364f65b

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\QUNDRVNTX0NIRUNL.slc

      Filesize

      297B

      MD5

      4b71c7a18ff8a62a75f93007a5a7d2de

      SHA1

      f3ba04bfccc86987d1b306abebf4a37fdf82ba48

      SHA256

      afc2ea631f27a285e5c265e76e20e53d2ffcd45a7d44e7cb1dbd6c06a26a5476

      SHA512

      99a503c50c0005122f2224c97697f9651569b195577afaf476b84ea0e87851642af6bf46b3ced3c20944d2cfde00e557fcac1000d6f92b83eedebcaa50b0f27e

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\QURPQkVJRFdUVFM=.slc

      Filesize

      359B

      MD5

      78c6fbe3186a7c3639712d5a06824d1d

      SHA1

      f0df57b4f6f552478678c1f7603f3187920b732f

      SHA256

      764a64f87ff0ce19ae8762fd0da58fe65b3d31a2cf229e6feb8c845056beee43

      SHA512

      acfcdf7ae7e259a3baa674e67b27df3383d8b106942cf172b4ae436a74234028f7e03040c3c41de5df0cf2b8b3b79158f6ed0ae3f7e933d9d7b8031853a85ff7

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\QUxNLUdVSUQtTGlzdC1UcmlhbHt8fTMuNQ==.slc

      Filesize

      324B

      MD5

      ac761defec64656574a5cf37ac3880d9

      SHA1

      f70b9cfa469c916f8461a90f09e0a401003916d1

      SHA256

      7e3ced53dcebc29c0b4384f623084c64955cd4619235de5e049ddf64cd471a22

      SHA512

      a5a478e739bfef9a71cfd2e1119773cc158b5dc4abd576b4af05085ef21026cb7a957778f47b2c4e3ecb3d142d88bcc9499134c7b7d63e4d8d01128c582f701c

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\RkFfU2V0.slc

      Filesize

      322B

      MD5

      61971db29957de0e4c4ebb91c52b3461

      SHA1

      b4866ba563a78bda24d74ffb294d55f7a97c6e25

      SHA256

      756539201a45e2035afb6a944538347139864339eaec809cea397434a893bc61

      SHA512

      a7aaae0275be216e40f9cfdc3e2f6e6bfd984f5445c54bb9683be2f992ccfbfc3868faff1090037f9d752acfcee7f6b48f394f4a58b42369e56127df6295ffc5

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\UGhvdG9zaG9wLUNTNi1XaW4tR00=.slc

      Filesize

      444B

      MD5

      77dd84fcaf1b6b07e21c24f9044d38af

      SHA1

      3fd633547e8be9f11f7d464fbc83cb9e3272272b

      SHA256

      bee78b918cd5cf33854bd42a68039e80c2d11d0f32d5f9d48c30cd5a8245b2f6

      SHA512

      062af9cc8e41a2f5d0e54f720be411893256abc3a39325484e1ba53698471bccf9b846af2ae2c2eedc02bceb89b711bbfa87d261e1fa018b4de74fd55a8de66b

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\UGhvdG9zaG9wLUNTNi1XaW4tR017fH0zMzA=.slc

      Filesize

      308B

      MD5

      15c717222d9111d86d3d87317f860ffb

      SHA1

      a8ec25acdc7381b697f86641ae27b344147603d8

      SHA256

      97c5b13da5ad5fab9947e931022dc6edb4a58b540bb3e517e28815c419ac0e3a

      SHA512

      dc79da0ba8df7ddd23835e86cd08067dbbf33986fb82b0716813aeb044d9a3846c5d12c2d569161b29473c1e39f67da712ec896afb4de0789d0f35462e50d32f

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\UGhvdG9zaG9wLUNTNi1XaW4tR017fH1BTEw=.slc

      Filesize

      569B

      MD5

      9835ff8c05f389bf9562c99631098a5e

      SHA1

      194f2fa6b1ce6ca7d7a8fd7006d30b182592ff52

      SHA256

      b39d57491fcfe0c19c54f9d4e111f2dc2e5eea4cd0296a9d944c3c55f8bd8a73

      SHA512

      fed941ef03543cf37f284ecfeab30c1056e088a09e3120356b076cb8c0572b520e3c3aaea0736bbbe72c40d60b00c1f91d18fdca23ba53eaef7dce83801ef6d9

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\UGhvdG9zaG9wLUNTNi1XaW4tR017fH1MaWNMb2M=.slc

      Filesize

      323B

      MD5

      9e0e9bc808d54c1a7d640c6bcbaa7fbb

      SHA1

      bacece3cc671a05ab9c2d5e6a8e2238e2888c8c6

      SHA256

      201df578b39de477c004664c99ec4b01e2f7851718360f021c52d78ba67b8b40

      SHA512

      a286a5924d18ab885104a72fbc0a4f37bced9504c77fdf94d00c2baa1704ed9bf57ac8623f810de38cb6ba63994d89f19376191c73bc31460111251037720857

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\UGhvdG9zaG9wLUNTNi1XaW4tR017fH1lbl9VUw==.slc

      Filesize

      329B

      MD5

      ac0b25c59848be57d5a19dc8cec269b2

      SHA1

      5fcfa47ce3d2497ab87eb49021710ed9642f787d

      SHA256

      92013836086c77efda0f2cd2150d6c5449f09fb794c6904cbba0cc95723084a8

      SHA512

      2cb393a927932530b3a6036ed0f1c15ee6faf7022df58174eee8af7f696a6a1facd152ea0ea7242ec35da5248436e152491da78586dd15e9533b2171cabb3b8d

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\SLCache\X19zbGNfZmVhdHVyZXNfXw==.slc

      Filesize

      710B

      MD5

      f1ec93dff24b142d1d8d605089d24ff8

      SHA1

      b278c43e66b963b7d3846afbb69aba919597db90

      SHA256

      e881530eaa201b35cd357b390355004c8558d574ec28d74dfbc7d1ab53aff7cc

      SHA512

      2996907708e9470e2b782bae1f965eba733647e74fc4d9cfb4b4737d496e2333f37a753d0769a6f0329daddfb931050021912693102e879c4cb729a884facdf8

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\Startup Scripts CS6\Adobe Photoshop\photoshop.jsx

      Filesize

      101KB

      MD5

      6b2a7b1779c76454a58c2e0a801e447b

      SHA1

      5610be55597cafeff39c467e15e6208cda710ef5

      SHA256

      1428ff55a4b6ac22c214949d4a066e5b3c21dca1ec10559d5b5f249638b09141

      SHA512

      f787a81cdba5e180f1394ac1fd694724ccab5b5e35428ffeab159777452cc7884ff64cb98b9b9e6e235531649021f1c2a77c5f764fbef35a4b0edfdc8f4550a2

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\TypeSupport\CS6\CMaps\78-EUC-H

      Filesize

      15KB

      MD5

      71373b5e3e4407ae707a9567043803c2

      SHA1

      8d124d2bec5029830ba4e0a91df2bb927b9c08fe

      SHA256

      116fd4dc47310e780234271317c561b6a3ffa082f88372e07c6a86fdc5359464

      SHA512

      0e8262d3934d515434a8ff88437f1b513e1ac66ce6ba6342f22123911fbc794532090cec699d4ab739bd3a2b71404bd82ff193002278e83c9ccb81cb3250a1af

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\TypeSupport\CS6\CMaps\78-EUC-V

      Filesize

      3KB

      MD5

      8985d6c7f299a92f4b424cc431c3d7d5

      SHA1

      6c997a330298f623fd85f0529bede6e3cabbf9f1

      SHA256

      fef6d92a32b57950b9df13a42a0e96e4a92451d2ecf9b6898efaa0240424a429

      SHA512

      492803712ce6d26555fb51ddd7b51170f8b4c6812e9ff86417132e3aaa6738a5df68be0a73de6719d1e288261d9a81580155495dfdfdf9d1dac6e22bad4c1267

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\CFiles\TypeSupport\CS6\FntNames.db

      Filesize

      378KB

      MD5

      39a54ce9f336f898572affedc53343f4

      SHA1

      5ef6f3d25efa2553dc2f34ac83eede3d74b9366d

      SHA256

      54eee5239639730df76ab93a9d8bf5cbb3fbd20644856f046b046e033f149cf5

      SHA512

      9fa17219f850d615093807901d6e51d6b720808c91857de20e74985038d09bd3073b974919f401a120181723416fab84b74fc3ded23885ac7302974d1c818734

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\Photoshop\AMT\application.xml

      Filesize

      1KB

      MD5

      6e8f96455bb5dde946e4249f3d4e75fe

      SHA1

      78c1f0026b8611d4dc8d47bf723c259ee6c45414

      SHA256

      4c6362a335c69a074d4c9bec370257cfcd710e4116f8100e3c70da4ae99c81e4

      SHA512

      1951586e148589fb396f7cfa99ee45a2978680d7b91a83deddc32cbaccc0391bda7d5b02175c61c6061de7d155f754d7d346a48cef2419bdd4ca41b9a83390e4

    • C:\Program Files (x86)\Adobe Photoshop CS6\App\Photoshop\Photoshop.exe

      Filesize

      12.9MB

      MD5

      f4d1749e554ee1d12787c80af3ff349c

      SHA1

      b2f35f1ba88de4e925d66101eea6474f90a211b7

      SHA256

      8f871d767e9f464ea25dfd11771b1fcf563c2318745f57a526eb49ceb1941ba8

      SHA512

      2d70a76356a9a8b74d27a71a09db613ac47121fce37bca549ba1021228c30b03b89e11bad7be4eba5e563cdda54e25216efc2e90be043c6f96f4cacd87bfba7c

    • C:\Program Files (x86)\Adobe Photoshop CS6\Photoshop.exe

      Filesize

      194KB

      MD5

      bbb7c7f58d03d5758c43ad3f9ca344fb

      SHA1

      41c7a5b247f3eb885ce47fff042baa898741e4de

      SHA256

      f9e41fe0854e1d2cba512b09924e117b044f23232e621b02e762a0988b044636

      SHA512

      3eeb0429249c31e9f2523e467a4d58d087eba521f598eb0883b5189421af47d0962ed191701f99e62b958e15d7e9d02e0a3bde99527493306c16a3beb5b608e1

    • C:\Program Files (x86)\Adobe Photoshop CS6\Photoshop.exe

      Filesize

      194KB

      MD5

      bbb7c7f58d03d5758c43ad3f9ca344fb

      SHA1

      41c7a5b247f3eb885ce47fff042baa898741e4de

      SHA256

      f9e41fe0854e1d2cba512b09924e117b044f23232e621b02e762a0988b044636

      SHA512

      3eeb0429249c31e9f2523e467a4d58d087eba521f598eb0883b5189421af47d0962ed191701f99e62b958e15d7e9d02e0a3bde99527493306c16a3beb5b608e1

    • C:\Program Files (x86)\Adobe Photoshop CS6\PhotoshopPortable.ini

      Filesize

      271B

      MD5

      f00e19d54eaca96784dc471f7a47937c

      SHA1

      45e80a813283180a9fe9a0d11dc3b8953a286a1b

      SHA256

      3713a80e1088bc82ed09da8c08b18ff50f0b0f3da4ac9f008d79ae3a620581a8

      SHA512

      7c9558d4c98b73825f5914be24b5f12db7297df7a5d926a8e48341bc4a4697d315629e23ff2cf05807abd77eecc1454d361b5f78827fea56c67ebbd5a8074621

    • C:\Users\Admin\AppData\Local\Temp\is-AOHTM.tmp\setup.tmp

      Filesize

      700KB

      MD5

      e96f5762d16377ae76b21f5d65d196b5

      SHA1

      dd401b51830d5fc5c13715945035e730e0fa3f2d

      SHA256

      00e2eef72f6374bd4bb8d983a63d7fa1e6b1b24b7d4d8b80126033544e15a1e8

      SHA512

      68fe9acfc1e07f362383afc658abf9d3beaafd5cde514eb398b90ec01562cce943f15254119efcb7d2c5f8a526d14ee6282559cbf0fdcd0ad9d34ac4ccfaabc8

    • C:\Users\Admin\AppData\Local\Temp\is-AOHTM.tmp\setup.tmp

      Filesize

      700KB

      MD5

      e96f5762d16377ae76b21f5d65d196b5

      SHA1

      dd401b51830d5fc5c13715945035e730e0fa3f2d

      SHA256

      00e2eef72f6374bd4bb8d983a63d7fa1e6b1b24b7d4d8b80126033544e15a1e8

      SHA512

      68fe9acfc1e07f362383afc658abf9d3beaafd5cde514eb398b90ec01562cce943f15254119efcb7d2c5f8a526d14ee6282559cbf0fdcd0ad9d34ac4ccfaabc8

    • C:\Users\Admin\AppData\Local\Temp\nsx5363.tmp\FindProcDLL.dll

      Filesize

      3KB

      MD5

      b4faf654de4284a89eaf7d073e4e1e63

      SHA1

      8efcfd1ca648e942cbffd27af429784b7fcf514b

      SHA256

      c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3

      SHA512

      eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388

    • C:\Users\Admin\AppData\Local\Temp\nsx5363.tmp\FindProcDLL.dll

      Filesize

      3KB

      MD5

      b4faf654de4284a89eaf7d073e4e1e63

      SHA1

      8efcfd1ca648e942cbffd27af429784b7fcf514b

      SHA256

      c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3

      SHA512

      eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388

    • C:\Users\Admin\AppData\Local\Temp\nsx5363.tmp\System.dll

      Filesize

      7KB

      MD5

      8b06f277ae47f0d2e1c7098a5657ee88

      SHA1

      e3802a6f3949b6c8cd058d840b8776ebf587eed2

      SHA256

      ddccebbf499672af3a74be6fb838b804a66679f7689dde137c39f4e0df1be11d

      SHA512

      6bb68bd7ce5577ba6460ba2eb11536703d0472ba6f91f2fd9b2ec93128cc2700a426217b1029380a8b98cb823b67959d73edd99b3c3812532530aeae0d928060

    • C:\Users\Admin\AppData\Local\Temp\nsx5363.tmp\registry.dll

      Filesize

      24KB

      MD5

      2b7007ed0262ca02ef69d8990815cbeb

      SHA1

      2eabe4f755213666dbbbde024a5235ddde02b47f

      SHA256

      0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d

      SHA512

      aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

    • C:\Users\Admin\AppData\Local\Temp\nsx5363.tmp\xml.dll

      Filesize

      55KB

      MD5

      12a31750971f5a6bb5a6a8893f3dcd75

      SHA1

      9f26b5e353341562cfcf1c44a337a285dad2ec5f

      SHA256

      06d28fa930e52746194d4e28a353a81b2dd34b644ac5b354f4caf4fed2f6e591

      SHA512

      25347c2c670d24782401274e7120c714aa24f265584dc199ac4c7c83090e8f1137d766ad578773a435feea216d416e7fc80b9e2fe14d073ac185ab77a597d68e

    • C:\Users\Admin\AppData\Local\Temp\nsx5363.tmp\xml.dll

      Filesize

      55KB

      MD5

      12a31750971f5a6bb5a6a8893f3dcd75

      SHA1

      9f26b5e353341562cfcf1c44a337a285dad2ec5f

      SHA256

      06d28fa930e52746194d4e28a353a81b2dd34b644ac5b354f4caf4fed2f6e591

      SHA512

      25347c2c670d24782401274e7120c714aa24f265584dc199ac4c7c83090e8f1137d766ad578773a435feea216d416e7fc80b9e2fe14d073ac185ab77a597d68e

    • memory/1136-225-0x0000000072D00000-0x0000000072D16000-memory.dmp

      Filesize

      88KB

    • memory/1136-233-0x00000000719A0000-0x00000000719D1000-memory.dmp

      Filesize

      196KB

    • memory/1136-263-0x0000000071B00000-0x0000000071B13000-memory.dmp

      Filesize

      76KB

    • memory/1136-265-0x00000000715E0000-0x000000007168C000-memory.dmp

      Filesize

      688KB

    • memory/1136-267-0x0000000000400000-0x00000000006A5000-memory.dmp

      Filesize

      2.6MB

    • memory/1136-261-0x000000000C6F0000-0x000000000C9C1000-memory.dmp

      Filesize

      2.8MB

    • memory/1136-257-0x000000000BE90000-0x000000000BEE1000-memory.dmp

      Filesize

      324KB

    • memory/1136-255-0x0000000071A60000-0x0000000071A73000-memory.dmp

      Filesize

      76KB

    • memory/1136-258-0x0000000071D00000-0x0000000071D13000-memory.dmp

      Filesize

      76KB

    • memory/1136-207-0x0000000000E40000-0x0000000003C11000-memory.dmp

      Filesize

      45.8MB

    • memory/1136-208-0x00000000741D0000-0x00000000741DE000-memory.dmp

      Filesize

      56KB

    • memory/1136-209-0x0000000074040000-0x00000000741CB000-memory.dmp

      Filesize

      1.5MB

    • memory/1136-210-0x0000000073FF0000-0x0000000074032000-memory.dmp

      Filesize

      264KB

    • memory/1136-211-0x0000000073F40000-0x0000000073FEE000-memory.dmp

      Filesize

      696KB

    • memory/1136-212-0x000000006A000000-0x000000006A67F000-memory.dmp

      Filesize

      6.5MB

    • memory/1136-213-0x0000000005BF0000-0x0000000005C51000-memory.dmp

      Filesize

      388KB

    • memory/1136-214-0x0000000073E80000-0x0000000073F37000-memory.dmp

      Filesize

      732KB

    • memory/1136-215-0x00000000739E0000-0x0000000073E72000-memory.dmp

      Filesize

      4.6MB

    • memory/1136-216-0x0000000073950000-0x00000000739DD000-memory.dmp

      Filesize

      564KB

    • memory/1136-254-0x0000000071C90000-0x0000000071CA3000-memory.dmp

      Filesize

      76KB

    • memory/1136-219-0x0000000073550000-0x0000000073662000-memory.dmp

      Filesize

      1.1MB

    • memory/1136-221-0x0000000073390000-0x0000000073437000-memory.dmp

      Filesize

      668KB

    • memory/1136-220-0x000000000BC60000-0x000000000BCB1000-memory.dmp

      Filesize

      324KB

    • memory/1136-223-0x0000000073360000-0x000000007338C000-memory.dmp

      Filesize

      176KB

    • memory/1136-224-0x0000000005BF0000-0x0000000005C51000-memory.dmp

      Filesize

      388KB

    • memory/1136-253-0x0000000071CF0000-0x0000000071D03000-memory.dmp

      Filesize

      76KB

    • memory/1136-226-0x0000000072B20000-0x0000000072CF3000-memory.dmp

      Filesize

      1.8MB

    • memory/1136-228-0x00000000074F0000-0x000000000773B000-memory.dmp

      Filesize

      2.3MB

    • memory/1136-227-0x0000000010000000-0x0000000010186000-memory.dmp

      Filesize

      1.5MB

    • memory/1136-229-0x0000000007740000-0x0000000007BB1000-memory.dmp

      Filesize

      4.4MB

    • memory/1136-230-0x0000000071D00000-0x0000000071D13000-memory.dmp

      Filesize

      76KB

    • memory/1136-231-0x00000000718F0000-0x0000000071940000-memory.dmp

      Filesize

      320KB

    • memory/1136-232-0x0000000071CB0000-0x0000000071CC3000-memory.dmp

      Filesize

      76KB

    • memory/1136-218-0x0000000073880000-0x000000007394F000-memory.dmp

      Filesize

      828KB

    • memory/1136-252-0x0000000000400000-0x00000000006A5000-memory.dmp

      Filesize

      2.6MB

    • memory/1136-234-0x00000000718F0000-0x000000007199C000-memory.dmp

      Filesize

      688KB

    • memory/1136-235-0x000000000BC60000-0x000000000BCEF000-memory.dmp

      Filesize

      572KB

    • memory/1136-236-0x0000000071A20000-0x0000000071A72000-memory.dmp

      Filesize

      328KB

    • memory/1136-237-0x000000000C6F0000-0x000000000C9C1000-memory.dmp

      Filesize

      2.8MB

    • memory/1136-239-0x0000000071D00000-0x0000000071D13000-memory.dmp

      Filesize

      76KB

    • memory/1136-240-0x0000000071950000-0x0000000071963000-memory.dmp

      Filesize

      76KB

    • memory/1136-241-0x0000000071740000-0x0000000071792000-memory.dmp

      Filesize

      328KB

    • memory/1136-251-0x0000000071CD0000-0x0000000071D22000-memory.dmp

      Filesize

      328KB

    • memory/1136-242-0x00000000716F0000-0x0000000071740000-memory.dmp

      Filesize

      320KB

    • memory/1136-249-0x0000000072020000-0x00000000721E9000-memory.dmp

      Filesize

      1.8MB

    • memory/1136-238-0x000000000C6F0000-0x000000000C9C1000-memory.dmp

      Filesize

      2.8MB

    • memory/1136-248-0x0000000071A30000-0x0000000071AFB000-memory.dmp

      Filesize

      812KB

    • memory/2040-132-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

    • memory/2040-134-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

    • memory/2040-138-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

    • memory/2040-139-0x0000000000400000-0x0000000000417000-memory.dmp

      Filesize

      92KB

    • memory/4204-243-0x00000000004D0000-0x000000000055F000-memory.dmp

      Filesize

      572KB

    • memory/4204-266-0x0000000073880000-0x000000007394F000-memory.dmp

      Filesize

      828KB

    • memory/4204-250-0x0000000000400000-0x000000000040F000-memory.dmp

      Filesize

      60KB

    • memory/4204-244-0x0000000000840000-0x0000000000AE5000-memory.dmp

      Filesize

      2.6MB

    • memory/4204-268-0x0000000073360000-0x000000007338C000-memory.dmp

      Filesize

      176KB

    • memory/4204-246-0x0000000073880000-0x000000007394F000-memory.dmp

      Filesize

      828KB

    • memory/4204-256-0x0000000072D00000-0x0000000072D16000-memory.dmp

      Filesize

      88KB

    • memory/4204-247-0x0000000073360000-0x000000007338C000-memory.dmp

      Filesize

      176KB

    • memory/4204-259-0x00000000004D0000-0x000000000055F000-memory.dmp

      Filesize

      572KB

    • memory/4204-262-0x0000000000840000-0x0000000000AE5000-memory.dmp

      Filesize

      2.6MB

    • memory/4204-245-0x0000000073950000-0x00000000739DD000-memory.dmp

      Filesize

      564KB

    • memory/4204-264-0x0000000073950000-0x00000000739DD000-memory.dmp

      Filesize

      564KB

    • memory/5028-155-0x0000000074BC0000-0x0000000074BC9000-memory.dmp

      Filesize

      36KB

    • memory/5028-156-0x0000000002360000-0x0000000002386000-memory.dmp

      Filesize

      152KB

    • memory/5028-206-0x0000000010000000-0x0000000010008000-memory.dmp

      Filesize

      32KB

    • memory/5028-157-0x0000000002360000-0x0000000002386000-memory.dmp

      Filesize

      152KB