Analysis

  • max time kernel
    56s
  • max time network
    54s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/06/2026, 17:24

General

  • Target
    Fantom.exe
  • Size 261KB
  • Sample260620-vytdaaf18r
  • SHA256 f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Path
  • C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Ransom Note
  • <html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>B+yaNdpUBhu4SSd++C5zTdi0HctXyQZKBejtETEkkf4rqQ9SYdumkiHYMhpzf1qTsNvjgJMQavtVFie9nw1yvbORMrDMiSqYBTjvME9Ivv8IZ8S8IXzF3KBgey0HVZUpn5PgMQGvkzYJdtHFzWgjOrMThKcAk/Rqr0NRygQcOQPUwoHAgjGidEsiQb2Wt7SwTIQNOv8ICAZKcTxi1Fi+84WvwhxneF3xCqjwN2htP31hvbJnvqiuqu7FBhIr232tZEkvQ51RNa8M4wjJEuQxqofp3ZLkahgZ/RwVUOxHqaJmFLJeEhSWMMcf/K54831xnllfx8zASsDD6KycWv18Fg==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Signatures

  • Family: Fantom

    Ransomware which hides encryption process behind fake Windows Update screen.

  • Renames multiple (113) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Disables Task Manager via registry modification
  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Fantom.exe
    "C:\Users\Admin\AppData\Local\Temp\Fantom.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1780
    • C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
      "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
      2⤵
      • Executes dropped EXE
      PID:716
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:368

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          cef_200_percent.pak

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_200_percent.pak
          • Size 16B
          • SHA256 c39775c3a553442b8c7259c61a58ca1f48c366da204d1960e7368a1c0e516d17
          • MD5 SHA1 SHA512

          aic_file_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
          • Size 50KB
          • SHA256 ff535d5d7e871c7c98dddd542ce00cbae145460df83523533b06bf5204585648
          • MD5 SHA1 SHA512 SSDEEP TLSH

          selection-actions.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
          • Size 1KB
          • SHA256 0a4fa4d9433bea18417a4c436bd21ea24f5b8c6d1be0cf221eb2b81c7be713a0
          • MD5 SHA1 SHA512 TLSH

          selection-actions2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
          • Size 3KB
          • SHA256 e4aabf1a49090e58a8a7bc60f8e505329160d8630ffaa63df9123f6dc211c812
          • MD5 SHA1 SHA512 TLSH

          s_remove_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
          • Size 720B
          • SHA256 7e9e5d476e18121aefed067565f0e35a40ce69786c0749d01d01ca4413c836e5
          • MD5 SHA1 SHA512 TLSH

          duplicate.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
          • Size 1KB
          • SHA256 40f9e802c3686260e58fbed7ca666a0bcc15cf0881e317b3dc9372596a65f25b
          • MD5 SHA1 SHA512 TLSH

          remove.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
          • Size 1KB
          • SHA256 5e484087e5765a344be24a44e7f966367ef7d1ce1c1a1be56a496c789fa2320c
          • MD5 SHA1 SHA512 TLSH

          s_backarrow_default.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg
          • Size 896B
          • SHA256 c74c06527dc402aeb3ae57d02b184d052743c70be74cc8fbc4d70d64f6ff82b4
          • MD5 SHA1 SHA512 TLSH

          s_comment_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
          • Size 1KB
          • SHA256 80325d57036036547645fbc69585d04501803065a8321da79285e497acab6b4a
          • MD5 SHA1 SHA512 TLSH

          s_editpdf_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg
          • Size 1KB
          • SHA256 0590741e6285cab0c63901cdfc550dba69c32c12497cbc3e37fe116386733b9d
          • MD5 SHA1 SHA512 TLSH

          s_export_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg
          • Size 7KB
          • SHA256 77ef137469a9fc16f4a3741d7e3d57bc6149ff2bc370c284abae001441baab2e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          s_fillandsign_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg
          • Size 2KB
          • SHA256 15498d2242f671a155d307619d7f3534fc781979c86db50bafb6ac1d7be73da3
          • MD5 SHA1 SHA512 TLSH

          s_folder-default_32.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
          • Size 560B
          • SHA256 baa5ca7e511a4f440438e6d1fba31cc477e3773b743133ffd626a90235ed3e0e
          • MD5 SHA1 SHA512 TLSH

          s_move_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg
          • Size 1KB
          • SHA256 973ecdb636b0e8caf3d64d3625b5c862c66e3d74309d9dc5cb8f8c2fd56aff4c
          • MD5 SHA1 SHA512 TLSH

          s_nextarrow_default.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg
          • Size 880B
          • SHA256 23c61ac7042cab9c58959785693ce7c69ab3580dd24a70be6448aa07fa9eb255
          • MD5 SHA1 SHA512 TLSH

          s_organize_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg
          • Size 1KB
          • SHA256 2116dd278935500cf1702b0d8149eb8ba2f4d028178a2a24c03ade51e3427d36
          • MD5 SHA1 SHA512 TLSH

          s_rename_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg
          • Size 1KB
          • SHA256 de9b9133c731792dec2bd16000caacb8defbd29793be5888faa9a6adf3aeaa5d
          • MD5 SHA1 SHA512 TLSH

          s_sendforsignature_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
          • Size 2KB
          • SHA256 01f0892345f34f60540312428b3c60db146185cb54d8afc655f74deb74a46f3e
          • MD5 SHA1 SHA512 TLSH

          s_share_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
          • Size 1KB
          • SHA256 f69c68c56463c215b543a71f858a4d23b504ac62f524cca13b85b1a55aef4293
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
          • Size 3KB
          • SHA256 92a2b248066d45144608c5b67fc0414ff64a17def5258a5523c4a43a02971dc3
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
          • Size 28KB
          • SHA256 7afd5c4d06b3b74fdd814f90acaf3b03e25cd6714eb28822b9c06b876f1e7a02
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
          • Size 7KB
          • SHA256 19a4e9e3d2c5cf508f5a256eed25ea760cddab0b74dfc55f65469985a93b4e95
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
          • Size 896B
          • SHA256 bde26de8f928f914f69cac45978f14d4909dd09c24d5db27c723547afd688d9e
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
          • Size 4KB
          • SHA256 f821bf803117f1c5a911a238eec3e9b9f700a16e33735b5f2bd8c36fa6e93b7d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 44e0c03517d55d96292af59bd2ace0b4a7234df49a35881b8f4cbb8fd846fe95
          • MD5 SHA1 SHA512 TLSH

          convertpdf-rna-selector.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
          • Size 175KB
          • SHA256 fc221c9d3b6c415ec70451e3e1c1f90508b696c51a886a27b0c4b8a1f6528eae
          • MD5 SHA1 SHA512 SSDEEP TLSH

          convertpdf-rna-tool-view.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
          • Size 376KB
          • SHA256 ffeb6445d16bb30067b75ae1e315e73f9e2d08421c0468897f4f2e4be9a8b145
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
          • Size 2KB
          • SHA256 173a89204221ac30935db29529d2fb466609bcba3abe3330f5aaad1892f6eda2
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 2687d7180a3fffb1b57e4c4de861eb759df93910f09c44df4f947ec613ca4b96
          • MD5 SHA1 SHA512 TLSH

          example_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
          • Size 688B
          • SHA256 846a617f8107a78368a1f45ef6906fe7b6ceb9cb26a22e92b191a19099b3d726
          • MD5 SHA1 SHA512 TLSH

          example_icons2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
          • Size 1KB
          • SHA256 51230dea228f18c7f2016b957088128fa259693a9c05ab03e1eb2ab868b601cd
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
          • Size 448B
          • SHA256 a6eca47ca90adc4d4f8f38aaea3871b7cfe759a3ed2bd614cc43d31d63d6141e
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
          • Size 624B
          • SHA256 58e3973edbeda89c9e5cef4ec5b346047570bf6dcedad34e4d02ac130b6b1959
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
          • Size 400B
          • SHA256 32bfc178c337d3934f55b9ef5c81c5730aaaa66e4ea4f5f5c72ca82c80e8f2ab
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
          • Size 560B
          • SHA256 e0762a82a40da9b906f131383bf03ad3ec5f59da4f0922d2c14a2056c69b353c
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
          • Size 400B
          • SHA256 ca559cfaa8587ad8fb7505f33e07ad2e1988086d54bcf7cd82e81fcc7ecfb454
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
          • Size 560B
          • SHA256 681e3c4f1eaa93f7ede77b365326f8fa5c8815e010458e939dfeaed25310573c
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
          • Size 400B
          • SHA256 40a4c22c594b1db666c0fb79e870b17f44530deac4416363d8b3da20c13c45c4
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
          • Size 560B
          • SHA256 4e56ce64f7d6b108f29e85734126d24c881d3e43b80090f5fc716c166928e473
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
          • Size 1KB
          • SHA256 f56aff9a0e16754f21d322356c975b799967ae26fb79140febea07848af8da06
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 92e4a017cf4c3550cf1b539952cfdff3775797811a05c8f75216dc508f2936cc
          • MD5 SHA1 SHA512 TLSH

          s_checkbox_unselected_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
          • Size 912B
          • SHA256 05b59851a7c0fddebe60b10f14d35d206227577aa58f63a74eceae700563c4b8
          • MD5 SHA1 SHA512 TLSH

          s_checkbox_selected_18.svg

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
          • Size 1KB
          • SHA256 9bc4617a3c49ff546a45c87c8ed4d15cf3b65d41620b01ab4eec111ddc2f5742
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
          • Size 8KB
          • SHA256 c99c414c26a96945075f874b46307afa40094ccdccb2c92969aed56185db82fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
          • Size 1KB
          • SHA256 e70d7da3b667ac875238088fc0ae1e32537582a0b43f8cfca142538b50b3cec1
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
          • Size 1KB
          • SHA256 e45f488b2d8ec108c013d1bccd84023c03a29ebc55bd86f4ff253c9334e66e41
          • MD5 SHA1 SHA512 TLSH

          icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
          • Size 7KB
          • SHA256 6836968df9a0a3ec89fe083342523c1d07ea80e4057b3fac69e1a27f83f381b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icons_ie8.gif

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
          • Size 7KB
          • SHA256 4a74f1be2b6898d0094e073ed58f6b163b729dd6943f0a054eda1415da9cb178
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icons_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
          • Size 15KB
          • SHA256 27b69f830f16bfe5e2d8749c3fd078d0c6216d9873434a315ffa0691a3795398
          • MD5 SHA1 SHA512 SSDEEP TLSH

          new_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
          • Size 8KB
          • SHA256 cd5931ee6b9a2fb744065feb555d2ac12bb002df4a9fbf71c8e0da8dbc684e7e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          new_icons_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
          • Size 17KB
          • SHA256 996d8993766dd894380027c43ce7d3007067835f6b90dab6076fb479ff087b5f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
          • Size 832B
          • SHA256 cdadbd2a610225fa7120726707de329eb3c55a27018de320d00e8ef188a0ce35
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
          • Size 864B
          • SHA256 0bd20aac1bfc8c7f70267b7dc9f88d6ee0e806a9634096c1de6383ed43762c60
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
          • Size 1KB
          • SHA256 e2d4175a32c097e05e133eec5e5239435fc2fa4a668b79f684d5d6da148d3d9e
          • MD5 SHA1 SHA512 TLSH

          bg_pattern_RHP.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
          • Size 192B
          • SHA256 a22d3c8722d4bfe1a212d8e976cadb24c2115c5e6efef86d67b12c61014572fe
          • MD5 SHA1 SHA512 TLSH

          bg_patterns_header.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
          • Size 704B
          • SHA256 dcfa05d7c2c653de911902eaccde043aa9a696970d13a874bbbf27f726f9fb9d
          • MD5 SHA1 SHA512 TLSH

          illustrations.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
          • Size 8KB
          • SHA256 477e93cd7d8454649468c8a17285dd10185ba63329ca68a0d4da626005b637fa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          illustrations_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
          • Size 19KB
          • SHA256 0785395db31cc91bdd9e4459d2f7e678241a68b66dd2d4bebfecfe6f36d4f3a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 0202a12df38e98da60161d844b28b3bd4fc6c986a142de762c542c35c7376da7
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
          • Size 1KB
          • SHA256 2fe227f580f99195a1617a86eb1bc46fd314f3214e038ff79aece9354328493b
          • MD5 SHA1 SHA512 TLSH

          main-selector.css

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
          • Size 816B
          • SHA256 2faf569ae0ab6049e7b0dfdfa8f4ee68ed7d04d642def46fcec00f248045bcf4
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 d50b060eeac41ff18c8128efad75443a9ae96d9c95328c8202cf2270a9c2051d
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
          • Size 1KB
          • SHA256 aef9bedd08c6beb9724aa92ccc291a739021bc2f70b60017d0357ce9bca69b0b
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
          • Size 1008B
          • SHA256 00369c6ad7f7bfcd86dad2c4c9e8b144a89dc439f268f5935d6491c64948ede5
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
          • Size 4KB
          • SHA256 28c32fa15d3dfcf2cf7e427e42cd9e56bd6170897e1b1b37f2ae3ccf3cb29f84
          • MD5 SHA1 SHA512 SSDEEP TLSH

          DECRYPT_YOUR_FILES.HTML

          • Path C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML
          • Size 1KB
          • SHA256 1843f68bc2ed9321728daf0b4652f5bf7f2bfb02a54a01efe0f1435bc1a66840
          • MD5 SHA1 SHA512 TLSH

          af_NEUTER.pak

          • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Locales\af_NEUTER.pak
          • Size 32B
          • SHA256 1869e11a0e18ab4718d39405ab9ce19d10f976b35878a9f90f3c86b28ca1e35c
          • MD5 SHA1 SHA512

          win32_LinkNoDrop32x32.gif

          • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
          • Size 160B
          • SHA256 09aed6e996fa0ec4d152c297625bc8cf754d57bc85aa93c417318381d552146a
          • MD5 SHA1 SHA512 TLSH

          THIRDPARTYLICENSEREADME-JAVAFX.txt

          • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
          • Size 192B
          • SHA256 0c67f86a926c0173eae48c507a2eb0235fe857b78bbd3a8699712e06c0cc506e
          • MD5 SHA1 SHA512 TLSH

          THIRDPARTYLICENSEREADME.txt

          • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
          • Size 192B
          • SHA256 bbb767fae10f4ba3f10cd52abf7e555249e1960b5ddb834e1f12882877779b64
          • MD5 SHA1 SHA512 TLSH

          directshow.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
          • Size 1KB
          • SHA256 1d09a3a86dbb8b55ec08008210a099d47fc1797fb476c612a32555789cb2a4f3
          • MD5 SHA1 SHA512 TLSH

          glib.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
          • Size 31KB
          • SHA256 2f9ed04f093e8715ecef4c9236f4fb145a21c047fd1f28b284105b0b48fae5c2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gstreamer.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
          • Size 34KB
          • SHA256 e089229843f697893724ec388769ddcaa31e44c34e0180a43ab62ed34562bf6f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icu_web.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
          • Size 23KB
          • SHA256 51049a724d16291e4857d976ab3074265fcf29bf22876e5f447eaa376bd8d42c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jpeg_fx.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
          • Size 2KB
          • SHA256 b5a05e2c777d6fe610ba0583ba5de5d74b5cf6750c071b4905ff595125b5fb95
          • MD5 SHA1 SHA512 TLSH

          libffi.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
          • Size 1KB
          • SHA256 30562ecda04eaa0bfc36c244e88173e4936e3de079248697ea276f18f4049489
          • MD5 SHA1 SHA512 TLSH

          libxml2.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
          • Size 3KB
          • SHA256 d6dc6950bbbeed8b7a488df3a6aa45347a6277427bee7c9ad6efd140bf5fe443
          • MD5 SHA1 SHA512 TLSH

          libxslt.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
          • Size 2KB
          • SHA256 65355846023f5eefdccf10059ec061b7a00951ffdd840020ebf6cec50b207b2b
          • MD5 SHA1 SHA512 TLSH

          mesa3d.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
          • Size 5KB
          • SHA256 55f32925f6f289ca1b788b0e36cccf96f73f4fa015c18abc1635312ca50f690a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          public_suffix.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
          • Size 17KB
          • SHA256 08ccc483e7ef3dce003ad9992a41aa02a116c55304c960607de72ba4e73dfe6a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          webkit.md

          • Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
          • Size 320KB
          • SHA256 2022dfb9f2c56f220c5d276bead2600adad52450f44739629cfee7bc2a230382
          • MD5 SHA1 SHA512 SSDEEP TLSH

          asm.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
          • Size 1KB
          • SHA256 d20438287828cf51d2d13c9d48e9ea8a12b26d0961dba31c09c71c709d598876
          • MD5 SHA1 SHA512 TLSH

          bcel.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
          • Size 10KB
          • SHA256 18acbcf50160a6c663e8732f5612481b7032e6f378fd74d245474e9ea8d97489
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cldr.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
          • Size 3KB
          • SHA256 bd9c6a0160b930a2d7118ff1105f47daee5686465873d10596d9adb5406cf739
          • MD5 SHA1 SHA512 TLSH

          colorimaging.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
          • Size 176B
          • SHA256 d8fcaf89267d217b2d4c1d323414d7a3358234f55a4e5f3a4f9291247d4455b4
          • MD5 SHA1 SHA512 TLSH

          cryptix.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
          • Size 1KB
          • SHA256 90027bbfcf8eeb55a4c17584fe20eace89187afc3e04918b31818f5e0684ad98
          • MD5 SHA1 SHA512 TLSH

          dom.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
          • Size 3KB
          • SHA256 92894e38a79311a3bad70e049a84655899cd1359ef7afb913c41cf1b095b01fd
          • MD5 SHA1 SHA512 TLSH

          dynalink.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
          • Size 1KB
          • SHA256 9d1ce4a92246b1fc4902d867a672f38cc7e99da356a128717ea2073be8410afa
          • MD5 SHA1 SHA512 TLSH

          ecc.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
          • Size 28KB
          • SHA256 6dfe0729616a43024610f254f3d457d5675a7c82582467881feccacecb8fb91f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          freebxml.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
          • Size 2KB
          • SHA256 9883b67f9e1a4882c69cca3b6683870320419fcbb05be7821423e1e1c8d19e8d
          • MD5 SHA1 SHA512 TLSH

          giflib.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
          • Size 1KB
          • SHA256 81ae464cfef12d9416c5da52272c7d0fc7ef390fcb8b7648d90f7d7e55a29976
          • MD5 SHA1 SHA512 TLSH

          icu.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
          • Size 2KB
          • SHA256 7607e40583b18f2c3640ce91637d8ed889ee7b781cebc58a464b10b0609999aa
          • MD5 SHA1 SHA512 TLSH

          jcup.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
          • Size 1KB
          • SHA256 caed15144147937a9390293d3a29e39eff46370c6b087c0633f8787692778a9d
          • MD5 SHA1 SHA512 TLSH

          joni.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
          • Size 1KB
          • SHA256 61b5e0f9e545482dcc0881ca1e8f8a0eebaf1485d8f884a7ed62ef8e7db60105
          • MD5 SHA1 SHA512 TLSH

          jopt-simple.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
          • Size 1KB
          • SHA256 224a144b16dd25707db34974e062370a25549ad2c6c07219469b676b706c2d19
          • MD5 SHA1 SHA512 TLSH

          jpeg.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
          • Size 3KB
          • SHA256 2c4cf390fb6f7667d008a580d1221736e7aea32ff7f3cebabbc5aff8a272d50b
          • MD5 SHA1 SHA512 TLSH

          lcms.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
          • Size 2KB
          • SHA256 31d83f076ab9f984c10cdf4b22248706156d3728e0f2ea53674a6e1b8e2d60e5
          • MD5 SHA1 SHA512 TLSH

          libpng.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
          • Size 6KB
          • SHA256 34eaf304f7dfc65d2cf4e3c54f2ee42a3fef3589f17eb02271f2940aee7e427b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mesa3d.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
          • Size 5KB
          • SHA256 f2d71b161bec60a77f965f7a1be2eb487cdf38e8505ae5f83d9dbe6203033171
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pkcs11cryptotoken.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
          • Size 3KB
          • SHA256 54f2ae09c3f57e6d9d8e1aa00a5f0705e41370bbbd5366fe5f6331b2e05b6a08
          • MD5 SHA1 SHA512 TLSH

          pkcs11wrapper.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
          • Size 2KB
          • SHA256 e4fe4b01468e4b26cd0155fe5169661ea4f2c46edcc847dc0ec2835eba4ae790
          • MD5 SHA1 SHA512 TLSH

          relaxngcc.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
          • Size 2KB
          • SHA256 f2a21200d519757e56c1255b28964a71f6016ad77df78690a0b638003fd643b3
          • MD5 SHA1 SHA512 TLSH

          relaxngdatatype.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
          • Size 1KB
          • SHA256 da348acfddc49ca75ed6d308cc9014d5b9becdefe2322d0ed53b28bb05bc42ca
          • MD5 SHA1 SHA512 TLSH

          relaxngom.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
          • Size 1KB
          • SHA256 bcef212796717d7a8677244a0397428c0e73dbe1c639dab8543d6ec791f6326a
          • MD5 SHA1 SHA512 TLSH

          santuario.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
          • Size 11KB
          • SHA256 186f35a500254f4d636e4875e2c3533f838677c0af55f13f9948f2b6e6d9e8c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          thaidict.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
          • Size 1KB
          • SHA256 cea80cabb5fb70339f471a68e9af43068bade7f7910ffa1f221b5409e251eda0
          • MD5 SHA1 SHA512 TLSH

          unicode.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
          • Size 2KB
          • SHA256 3ed8d486c669765ddbfbb4caf3a57bae68e3a1f264e2879cc7373c2fc0cf8633
          • MD5 SHA1 SHA512 TLSH

          xalan.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
          • Size 11KB
          • SHA256 8f3155fe6ee851ad943dcb80cc4ebd23850c4fafd0120d28a2a2d39f068fbbc5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          xerces.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
          • Size 11KB
          • SHA256 e4ee6aba449ee676a5b5da218eae03a0e0d6ba5b2b4021e680413e9cb04fa667
          • MD5 SHA1 SHA512 SSDEEP TLSH

          xmlresolver.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
          • Size 11KB
          • SHA256 ce0eafdb14c02e99ca1e1559f9c1b8ad6fac70b69dc14d81186b34fcd80af88b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zlib.md

          • Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
          • Size 1024B
          • SHA256 3588f409bcf7f86819dc44f3df2d721d65b1838234e11127ab692c934a607f06
          • MD5 SHA1 SHA512 TLSH

          ClientSub2019_eula.txt

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
          • Size 48B
          • SHA256 998b9e890480387d43e783b169c644ad22d1eb56b92d75c57b57303ae6e3f0ee
          • MD5 SHA1 SHA512

          WindowsUpdate.exe

          • Path C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
          • Size 21KB
          • SHA256 489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/716-153-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-147-0x0000000000840000-0x000000000084C000-memory.dmp

          memory/716-250-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-253-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-262-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-146-0x00007FFA2BA2F000-0x00007FFA2BA30000-memory.dmp

          memory/716-641-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-235-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-202-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-158-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-167-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-176-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-195-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-643-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/716-642-0x00007FFA2B8A0000-0x00007FFA2C244000-memory.dmp

          memory/1780-24-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-60-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-16-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-14-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-12-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-6-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-4-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-132-0x00000000748D0000-0x000000007508C000-memory.dmp

          memory/1780-133-0x00000000748D0000-0x000000007508C000-memory.dmp

          memory/1780-134-0x00000000748E2000-0x00000000748E3000-memory.dmp

          memory/1780-18-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-135-0x00000000053D0000-0x00000000053DE000-memory.dmp

          memory/1780-26-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-36-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-42-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-44-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-68-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-92-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-96-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-3-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-8-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-10-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-20-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-22-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-28-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-30-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-32-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-34-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-38-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-40-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-46-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-48-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-50-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-52-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-54-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-56-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-58-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-0-0x00000000748E2000-0x00000000748E3000-memory.dmp

          memory/1780-62-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-64-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-66-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-70-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-72-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-74-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-76-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-78-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-80-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-82-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-84-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-86-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-88-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-90-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-94-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-98-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-102-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-104-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-106-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-108-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-110-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-112-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-114-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-116-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-118-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-131-0x00000000748D0000-0x000000007508C000-memory.dmp

          memory/1780-121-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-130-0x0000000005270000-0x000000000527A000-memory.dmp

          memory/1780-128-0x0000000004B30000-0x00000000050EA000-memory.dmp

          memory/1780-129-0x0000000005140000-0x00000000051D2000-memory.dmp

          memory/1780-125-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-127-0x00000000748D0000-0x000000007508C000-memory.dmp

          memory/1780-126-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-100-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-122-0x0000000004AB0000-0x0000000004ADB000-memory.dmp

          memory/1780-2-0x0000000004AB0000-0x0000000004AE2000-memory.dmp

          memory/1780-1-0x0000000004A80000-0x0000000004AB2000-memory.dmp