Resubmissions

03/10/2026, 23:38

261003-3mrz3szy2p

01/10/2026, 11:47

261001-nx26ga1bra10

27/09/2026, 23:02

260927-2z89fsyx9l10

27/09/2026, 22:09

260927-128j9szxex10

27/09/2026, 11:54

260927-n3acmsyvez10

26/09/2026, 22:37

260926-2j7qpatv8r10

26/09/2026, 01:02

260926-bd84fs1bnc10

26/09/2026, 00:59

260926-bcllrs1y2k10

20/09/2026, 10:36

260920-mnczjsab7710

20/09/2026, 07:07

260920-hx3jcadp5x10

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/07/2026, 02:20

General

  • Target
    Red-Flaged/Fantom.exe
  • Size 261KB
  • Sample260716-csp5kaex2v
  • SHA256 f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Path
  • C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Ransom Note
  • <html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>SRa/YVOWtvHqiC58ee9K0BThVrPiLU4DJz6+qvg3TW5PXFVTaxk7xFYx48OF7lgYxmxcM3izCSDV4rrgMeZqJWjO6egF9J5prpvoqDK+6QhXgfgIazDlBqS9r4azGjQnTVUQFmCe8wRr7LyXoa6mBKwUxLBRWeVRLUfPp4hJemJk/uT/2MRF+9BT4k1nROiY45xNjwCwcj+86B8yTw8UvCdDQBH/XLp7Kj+AWidDJu2xtWCftmOv5YeQ6YLE1l4M8ZuedjA3HUEGcJNpGehROQaFfurgu+kENXtss4AUtg7LHmOe/RbjbnDWr5hv8qa75SThh5nIfdlzQ1R4wEzzxg==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Signatures

  • Family: Fantom

    Ransomware which hides encryption process behind fake Windows Update screen.

  • Renames multiple (102) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Disables Task Manager via registry modification
  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Red-Flaged\Fantom.exe
    "C:\Users\Admin\AppData\Local\Temp\Red-Flaged\Fantom.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3288
    • C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
      "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
      2⤵
      • Executes dropped EXE
      PID:5172

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cef_200_percent.pak

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_200_percent.pak
        • Size 16B
        • SHA256 ce105e3e6867446dace7ffda78b27161de9892a22d662478cb846b6e704de865
        • MD5 SHA1 SHA512

        aic_file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
        • Size 50KB
        • SHA256 e0a7a65a635362ecce9f1c274e18e78b214ff91c9c4f1aebcb4d31aab26b03d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        selection-actions.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
        • Size 1KB
        • SHA256 06720baa906a9687c167614c4200c15b40f031df3d503c61d5fe474d368deffa
        • MD5 SHA1 SHA512 TLSH

        selection-actions2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
        • Size 3KB
        • SHA256 14678d8c929ee92c5f4cfae39283ed76d2de06bfca8db8eb4eb19c6dfc684e97
        • MD5 SHA1 SHA512 TLSH

        s_remove_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
        • Size 720B
        • SHA256 050c792f90473f422c7da23242a49106610763e37ff64d8cfe44a6e3e310abea
        • MD5 SHA1 SHA512 TLSH

        duplicate.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
        • Size 1KB
        • SHA256 adad884b3e159aff4ffe68429deed0115b0ea876414e93a860ea58dcd856cf0e
        • MD5 SHA1 SHA512 TLSH

        remove.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
        • Size 1KB
        • SHA256 e9fd6db539426102dd4bb52844190b42658252dd75805c0df5d606161001d1f6
        • MD5 SHA1 SHA512 TLSH

        s_backarrow_default.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg
        • Size 896B
        • SHA256 20d522e56ba144c87e04753346b78c15da4c55ed610e3d8e777dfded95686168
        • MD5 SHA1 SHA512 TLSH

        s_comment_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
        • Size 1KB
        • SHA256 c2b26b68b009c91157a64d5d5cf2c76914514e7d84f028554884b6f18e60bda3
        • MD5 SHA1 SHA512 TLSH

        s_editpdf_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg
        • Size 1KB
        • SHA256 fddb6ab0286aad02a4d98fefa0b1f613f365da79e051fb4659ad146f5231b55d
        • MD5 SHA1 SHA512 TLSH

        s_export_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg
        • Size 7KB
        • SHA256 df37470b789099ddd81e8131f8cc243f02ff5e62c8b0807df095e0693ef5de3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_fillandsign_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg
        • Size 2KB
        • SHA256 a1315af7271c0f4d01240071f069a09750aee1c64eb063741c7333b43ef3b5f8
        • MD5 SHA1 SHA512 TLSH

        s_folder-default_32.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
        • Size 560B
        • SHA256 260ad610f9f429a561f200bea36556b66b9d13d81ec6b7e2018c68e92187be9e
        • MD5 SHA1 SHA512 TLSH

        s_move_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg
        • Size 1KB
        • SHA256 bebeb5d5d865ac9c07d354f23a002f7479e3a6ee66ac2b96bdb49bb92fcf4fa1
        • MD5 SHA1 SHA512 TLSH

        s_nextarrow_default.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg
        • Size 880B
        • SHA256 52dc2babd27197377edcc8fc34f7a58f52b0a678d88edbf9445f26db2e4a65e4
        • MD5 SHA1 SHA512 TLSH

        s_organize_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg
        • Size 1KB
        • SHA256 dc90ec3fa3403a14c43da233b33ad8a432e28e39fc9b6032fc0c84b9dbfb6949
        • MD5 SHA1 SHA512 TLSH

        s_rename_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg
        • Size 1KB
        • SHA256 68b19fc53355db3e2ff13db8f6c21cbeef47dd02d0c149073dbc8b0095d2388f
        • MD5 SHA1 SHA512 TLSH

        s_sendforsignature_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
        • Size 2KB
        • SHA256 56daf523e208e9691940538b3c793b42fb53829f99cffae25db3138eccb32e89
        • MD5 SHA1 SHA512 TLSH

        s_share_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
        • Size 1KB
        • SHA256 2a04134ffbd6f9988ec687a4c3c88860b2f0514efae14ea3d7585f84a3708c46
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
        • Size 3KB
        • SHA256 f84e2bedfd9cf15cc0305ba8ddd36e1b5dc7a935be3c5d19d10f809c68d76b19
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
        • Size 28KB
        • SHA256 250b86fdda096864157897947cf2930ad80583db67ad12144687e353fdd7fef4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
        • Size 7KB
        • SHA256 691fe80647b63f531b6d6f5a15065ad64fbe95a96642b74ca2b9d0d40765b803
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
        • Size 896B
        • SHA256 7c54005117fc5cbff08763f08891feeb7b5fc188f46f4a431aa61e1eab041573
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
        • Size 4KB
        • SHA256 b4820e031c9e5f6f653b94446ed83cc94d888a782ca4dccde7206ac4d28fe201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 48e399d6eea14cbd684c3bab450cb2591a77e03cc7f4e3939e42e2d239872c6b
        • MD5 SHA1 SHA512 TLSH

        convertpdf-rna-selector.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
        • Size 175KB
        • SHA256 7986acffeb5efef9bb055f3730162ac277b82b132eac6f0dca419a78463e6ad2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        convertpdf-rna-tool-view.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
        • Size 376KB
        • SHA256 8cbb445eba513717b5583595da104995d129474ac5414b6f3cf134853b735568
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
        • Size 2KB
        • SHA256 b978c3608aa05cf22595c4b3a5fd5a0057e8de95cd053c7d0154797abea645e2
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 7473fb58dbe7ce94f3181b7c4101d0152fdbf8b5173a7dafcf40bc9358c9b355
        • MD5 SHA1 SHA512 TLSH

        example_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
        • Size 688B
        • SHA256 8c30178193a8ec9226418e4c9fcd7c7d78ac84c75f8425f3232a3da12542d4b3
        • MD5 SHA1 SHA512 TLSH

        example_icons2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
        • Size 1KB
        • SHA256 65c7437ab9cda46233d8dc7539096100fff4a67389125db7529039db522cc302
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
        • Size 448B
        • SHA256 639c401f37ad5e04c232033d98a253ceb0527d079497a36d9b75a5ab2d3dffc9
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
        • Size 624B
        • SHA256 2a984f76d033c264c57ddc9ea3fbdd5428be956fbb481b4899928bab61e0be68
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
        • Size 400B
        • SHA256 69efe3a73dd1460c0cbc1b3f1684a6a0318a3d41e26e3ac05a09fb9377892594
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
        • Size 560B
        • SHA256 b955b5ba15d780d93fb7b4e15cc6459d26b407b05219c29778f2d5591033d39d
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
        • Size 400B
        • SHA256 0ef7ecc30d53921eba10d68c92ff0c98a354ff98b6c7e27a75605c9cf992b717
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
        • Size 560B
        • SHA256 8395cdcbb48f83cbe5188ce2c6da06400cf463d0b9f0565312ff7c2bad6fdf57
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
        • Size 400B
        • SHA256 d4c2116fdc776fec15b84a3e1752e6d4e8da502d9be876d93ba4b48a4967534d
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
        • Size 560B
        • SHA256 3d8df5cd3ae90829791e1c8f1872e0d8b231207098eb0044bfdbf63781435f2c
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
        • Size 1KB
        • SHA256 97d88d5d4011f213409c848ab188cb4f1a0fd15672f357182689473e53ba5618
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 56d0e10bb02891f32607ba4e20f0a0e72aeafde6b6e98eeb4d22b317dced8f74
        • MD5 SHA1 SHA512 TLSH

        s_checkbox_unselected_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
        • Size 912B
        • SHA256 e509dd2b1b7fb7ae2a1bc92b7882067e234c955e8a3a062bdca8dfa5aa2bf3b3
        • MD5 SHA1 SHA512 TLSH

        s_checkbox_selected_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
        • Size 1KB
        • SHA256 f8abb0e63ce9d32c0187a00e36a7eb2660f2a29b38597fcb83ec7017b934e2fc
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
        • Size 8KB
        • SHA256 f0be3fa42ef1efa41c1be845d4b506b31454086dd5eea8f6ad9d9a8980828b9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
        • Size 1KB
        • SHA256 34fc1aa2978eda515628b2dee35888802fe692b6bece6f3a32af77be0e311744
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
        • Size 1KB
        • SHA256 3e95c99a3f5689e9846a2279767ce1abb7d9909a9c2f2c02cdf1de458a7e7bf7
        • MD5 SHA1 SHA512 TLSH

        icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
        • Size 7KB
        • SHA256 f74d9ef2c5d1f13aec06f112a74f499f0b53403283d83a9f77f9b247b89f1708
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons_ie8.gif

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
        • Size 7KB
        • SHA256 d267750fd99adf06a92eb8acf3b40597f90b0ddb80ac005e3947da40a679e4ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
        • Size 15KB
        • SHA256 71310d8cecbc2c5e99b7d40c97e27eef192a45ad6c996541caa87ee7f13e41bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
        • Size 8KB
        • SHA256 d1d1efed73f570d5aa3ced698c8b6c6482d87e8b5c38f0cdfa9b6f52d1fb51e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
        • Size 17KB
        • SHA256 9bf9b497f90f83e7f4be34458375ef7809a4b369823939b8cc95bea409a5263c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
        • Size 832B
        • SHA256 276a6e66ceaab29ca6e96c7422043f806fcfedd008a3e362bb755428b9435884
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
        • Size 864B
        • SHA256 53eb588d81569c9f4468ead65f80281056650ddf677a9d52e2dc55285fc91426
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
        • Size 1KB
        • SHA256 185cf4244b1ad769bc293680d1160036f4a3f4ac4de0e6b8125657acc40fc07f
        • MD5 SHA1 SHA512 TLSH

        bg_pattern_RHP.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
        • Size 192B
        • SHA256 47fcf6f9265ed3f8d2d30618be876b92d448edf459836358f31787d135ef034e
        • MD5 SHA1 SHA512 TLSH

        bg_patterns_header.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
        • Size 704B
        • SHA256 2d8b27105f658394b518621dd00095ebbc8ad639c5d06d45da81d4a6acf56ee5
        • MD5 SHA1 SHA512 TLSH

        illustrations.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
        • Size 8KB
        • SHA256 fb8fb54bfe0c7f21fdb9a16f3779dd3e9dd5998bfdc4535d02018ab6a827d935
        • MD5 SHA1 SHA512 SSDEEP TLSH

        illustrations_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
        • Size 19KB
        • SHA256 5bbf85c513fdd2d0b6429691e85cd5fa102082126cc8829b0274a0e376fe9d89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 aa74b297cd340d59f676999e931fd70ec93283392b0db21eb6b379a78ee0c7a7
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
        • Size 1KB
        • SHA256 dcafce1831fef820d9490091243a0668936cd4b1bedb7ea34a55917458096df6
        • MD5 SHA1 SHA512 TLSH

        DECRYPT_YOUR_FILES.HTML

        • Path C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML
        • Size 1KB
        • SHA256 875f551f7b2c1a887d7165911b09cc31a0eb2d9c3d2a6ade7fa91ea4243d056b
        • MD5 SHA1 SHA512 TLSH

        af_NEUTER.pak

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Locales\af_NEUTER.pak
        • Size 32B
        • SHA256 e101a45704c1caced3c07a2c6cbc97f6f2a74166ac9084f7b3ca91d2e21131d4
        • MD5 SHA1 SHA512

        win32_LinkNoDrop32x32.gif

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
        • Size 160B
        • SHA256 9f35f1fad62097594f3eae6ca52e8afd9f27713e72d7557969e0cd276c9c739d
        • MD5 SHA1 SHA512 TLSH

        THIRDPARTYLICENSEREADME-JAVAFX.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
        • Size 192B
        • SHA256 055410d9111222c8f1d4cc31803ca73f647fb4ea579fe1b6e4d8cdfe2ec6471f
        • MD5 SHA1 SHA512 TLSH

        THIRDPARTYLICENSEREADME.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
        • Size 192B
        • SHA256 56b189260ed511b761aac204ecea23472656637ffd460a6f89aee04f8d23268e
        • MD5 SHA1 SHA512 TLSH

        directshow.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
        • Size 1KB
        • SHA256 15efef5162be9511aa603b7fe84b3a55739f9bcc99500078adaea92f181db963
        • MD5 SHA1 SHA512 TLSH

        glib.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
        • Size 31KB
        • SHA256 0a04e40d2b1fa8ea0bddf07e6738b51c9d64e2faad6216f88a1df9fe146cf13b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gstreamer.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
        • Size 34KB
        • SHA256 35a00689dc3d80856b223c142c006f90b675c4f39bec99da7f2c0987e995c4df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icu_web.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
        • Size 23KB
        • SHA256 c784d06ecf573c63d49c182a46d7aa38918d7ca888b404a7506cefb2e2ebb26d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jpeg_fx.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
        • Size 2KB
        • SHA256 437e23b4b5fba378e7ff8b16ca125288471a6004478c885f64cdb044d2cbfb17
        • MD5 SHA1 SHA512 TLSH

        libffi.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
        • Size 1KB
        • SHA256 db8a5886ad2c2734e902bc4ce1a86e86b33e386c3f03b04b8d6a09ff2d5217f2
        • MD5 SHA1 SHA512 TLSH

        libxml2.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
        • Size 3KB
        • SHA256 fdf8e4f7f877d41cf22c4cb8fd7fefa172d0920cd06b2592c9e8f11c6b278bc6
        • MD5 SHA1 SHA512 TLSH

        libxslt.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
        • Size 2KB
        • SHA256 5b4dd5d882fef4f086bf14b5562e6f4f8fe05ee04fcb6418372e837de07e0349
        • MD5 SHA1 SHA512 TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
        • Size 5KB
        • SHA256 28b91de1456acd950ac16229387a5958df795f9887cc67d480298d92975fb58e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        public_suffix.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
        • Size 17KB
        • SHA256 ad59f2d0d1ffc8a29d7df7aaad47cab52416d6ae1ed7105bc4f4616bade3b6af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        webkit.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 984331457520c4db6a14a8ca3f8a4d7f42df5f46a06c9c4fb4552f8de8a852eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        asm.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
        • Size 1KB
        • SHA256 977be96a2aad54aef350eb22f37a5e3e823f3ffdf029b83c0f4d1019576dc07b
        • MD5 SHA1 SHA512 TLSH

        bcel.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
        • Size 10KB
        • SHA256 28611abf3ae2c0fec20025ba5ec62cd18a71a702c76de3f97100ae9d07a3f3a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cldr.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
        • Size 3KB
        • SHA256 3a03ee3250574749baf72441c98fc3981d357ae719bb53291f87d476e87f01cf
        • MD5 SHA1 SHA512 TLSH

        colorimaging.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
        • Size 176B
        • SHA256 229c15d7f73a0b98181bd97e31c0b4f95b3ca0f0ad1e38e442e5e3bbd38d72ee
        • MD5 SHA1 SHA512 TLSH

        cryptix.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
        • Size 1KB
        • SHA256 c01d37b33c811a7c7615c9c1d5cd4bb34fc3fd8e8581f91345edb28f5e92e8ff
        • MD5 SHA1 SHA512 TLSH

        dom.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
        • Size 3KB
        • SHA256 96bc0b98945654a93f1a07701219afc1ebacf2a03a6d0476692dfb75fe3bcd1a
        • MD5 SHA1 SHA512 TLSH

        dynalink.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
        • Size 1KB
        • SHA256 279ae0265be9884828df66e762d49ff31956da7c2350f397214c44550fae27ac
        • MD5 SHA1 SHA512 TLSH

        ecc.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
        • Size 28KB
        • SHA256 85db5fb0489537f54a39d89fe7d0b1d8a20473283816457bc62c0cdd23eb1599
        • MD5 SHA1 SHA512 SSDEEP TLSH

        freebxml.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
        • Size 2KB
        • SHA256 d63f3b7bf18ec124a8487c93046dd5b00f6a6d12b4cfc400f903f868c33a6c1f
        • MD5 SHA1 SHA512 TLSH

        giflib.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
        • Size 1KB
        • SHA256 fb34321b06dceeb63e48bdf970f25ecb79252c807cd5933108e3240ca8cc684a
        • MD5 SHA1 SHA512 TLSH

        icu.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
        • Size 2KB
        • SHA256 53628d89ecab99de2f1999585ed42db4e9799cc31d0662ffc8266408750642d5
        • MD5 SHA1 SHA512 TLSH

        jcup.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
        • Size 1KB
        • SHA256 36aa12b77fac858ec77f943167c62572b5261d823f84a6994c8532a89622bfb2
        • MD5 SHA1 SHA512 TLSH

        joni.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
        • Size 1KB
        • SHA256 e4122215c4301ebad40c15ec6f2d2180e271746b76f48333ae2fb998ad8138c7
        • MD5 SHA1 SHA512 TLSH

        jopt-simple.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
        • Size 1KB
        • SHA256 605e8c9a1960b640210ed22d21a7fd9e70a068f8eaf1a74b552d864737e949de
        • MD5 SHA1 SHA512 TLSH

        jpeg.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
        • Size 3KB
        • SHA256 637b1681f930da804fe830fa50affbc5a3f3152d465af7a0cfb2431d17ab1f6c
        • MD5 SHA1 SHA512 TLSH

        lcms.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
        • Size 2KB
        • SHA256 a6edab3ff339714c62ee11274ab4f5c3158c803294d9041bb449042f97966571
        • MD5 SHA1 SHA512 TLSH

        libpng.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
        • Size 6KB
        • SHA256 26b64355cb8780cf1dfdaf7ac482da425e7b7d9550ed944031cd52c41cfb95bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
        • Size 5KB
        • SHA256 e8296970ab82d3c3df140c7d36e386f92a86a184667ba546d62b3c1ae8ef8d64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 3KB
        • SHA256 5e99c9cc5e45f742d07b2d9c0373649032f2dfd3fee78e72bcf15f779c7f2f93
        • MD5 SHA1 SHA512 TLSH

        pkcs11wrapper.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
        • Size 2KB
        • SHA256 804a881ba033adda85acbf82b1a20358e94f1d89376d2d7b873ff5985b2bb1ad
        • MD5 SHA1 SHA512 TLSH

        relaxngcc.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
        • Size 2KB
        • SHA256 2dd56c360e5460da1e3733013ab4349a293f974aafed100837ac9a810184b689
        • MD5 SHA1 SHA512 TLSH

        relaxngdatatype.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
        • Size 1KB
        • SHA256 d8fef7edee80b65f96526b80ed3a71b3c585785d0a201846b8ddd48d94727e08
        • MD5 SHA1 SHA512 TLSH

        relaxngom.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
        • Size 1KB
        • SHA256 04733efdf1da127dff808086226d8d2d5a4a7f780bf15218defde08ab50a889c
        • MD5 SHA1 SHA512 TLSH

        santuario.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
        • Size 11KB
        • SHA256 576f8d5e3d6bf57a11608262f05d87dde0e26d887d7510ed4dfbfeb1c4b1e0d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thaidict.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
        • Size 1KB
        • SHA256 6732640694411cffac5320de977717c9e51d1e058b3a9e054abf34da83c76464
        • MD5 SHA1 SHA512 TLSH

        unicode.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
        • Size 2KB
        • SHA256 34d1e8c481022cc070f103c2fcb29e2efa46e0b16c835c579776e4308ed7cd27
        • MD5 SHA1 SHA512 TLSH

        xalan.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
        • Size 11KB
        • SHA256 0abf0c19c7e90f157efc185eef8977119ee38c477d94f297a629954f53854862
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xerces.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
        • Size 11KB
        • SHA256 4d0b8471ecdb3a17e5e1faca14fe92862cf7649050ba78f437f5fd6da639dcad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xmlresolver.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 f65904eb34cd91604fd47e27672edfd760f8e4eb6e15b5ed7039b419933fda46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
        • Size 1024B
        • SHA256 66de20142fabb972520b2533d850cb10eab2706780ece7fb9f3765595f0fdc2a
        • MD5 SHA1 SHA512 TLSH

        ClientSub2019_eula.txt

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
        • Size 48B
        • SHA256 7c790a8607cf9a53a2cd9c1c6fc3098a90731b090c248b9ab14d64b6011c595e
        • MD5 SHA1 SHA512

        WindowsUpdate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
        • Size 21KB
        • SHA256 489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3288-41-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-69-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-1-0x0000000004B90000-0x0000000004BC2000-memory.dmp

        memory/3288-2-0x0000000004BC0000-0x0000000004BF2000-memory.dmp

        memory/3288-77-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-3-0x0000000074310000-0x0000000074ACC000-memory.dmp

        memory/3288-116-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-127-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-96-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-131-0x0000000074310000-0x0000000074ACC000-memory.dmp

        memory/3288-130-0x00000000052D0000-0x0000000005362000-memory.dmp

        memory/3288-129-0x0000000004D10000-0x00000000052CA000-memory.dmp

        memory/3288-132-0x00000000053C0000-0x00000000053CA000-memory.dmp

        memory/3288-95-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-93-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-137-0x00000000054F0000-0x00000000054FE000-memory.dmp

        memory/3288-136-0x0000000074310000-0x0000000074ACC000-memory.dmp

        memory/3288-135-0x0000000074322000-0x0000000074323000-memory.dmp

        memory/3288-4-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-5-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-7-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-13-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-31-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-53-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-66-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-99-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-45-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-111-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-9-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-11-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-15-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-17-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-19-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-21-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-23-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-25-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-27-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-29-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-33-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-35-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-37-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-39-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-0-0x0000000074322000-0x0000000074323000-memory.dmp

        memory/3288-43-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-107-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-133-0x0000000074310000-0x0000000074ACC000-memory.dmp

        memory/3288-59-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-51-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-55-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-57-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-49-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-61-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-63-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-67-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-47-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-71-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-73-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-75-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-79-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-81-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-83-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-85-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-88-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-89-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-91-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-97-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-101-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-103-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-105-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-109-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-113-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-118-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-119-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-121-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-123-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-125-0x0000000004BC0000-0x0000000004BEB000-memory.dmp

        memory/3288-134-0x0000000074310000-0x0000000074ACC000-memory.dmp

        memory/3288-128-0x0000000074310000-0x0000000074ACC000-memory.dmp

        memory/5172-646-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-148-0x00007FF804D7F000-0x00007FF804D80000-memory.dmp

        memory/5172-149-0x0000000000500000-0x000000000050C000-memory.dmp

        memory/5172-150-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-151-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-167-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-170-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-177-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-182-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-185-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-644-0x00007FF804BF0000-0x00007FF805594000-memory.dmp

        memory/5172-645-0x00007FF804BF0000-0x00007FF805594000-memory.dmp