Overview

overview

10

Static

static

3

2024-05-22...os.exe

windows7-x64

10

2024-05-22...os.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/05/2024, 01:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2024-05-22_731066cbba8733b1978aed3338721753_phobos.exe
  • Size 56KB
  • Sample240522-becfwafd53
  • SHA256 a8b59f5025d268a3dee891a8b991f66dcee7cb35b3d296e38a86631b835cf303
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
phobosdefense_evasionevasionexecutionimpactpersistenceransomwarespywarestealer

Malware Config

Signatures

  • Phobos

    Phobos ransomware appeared at the beginning of 2019.

    ransomwarephobos
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Modifies boot configuration data using bcdedit 1 TTPs 4 IoCs
    ransomwareevasion
  • Renames multiple (512) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Deletes backup catalog 3 TTPs 2 IoCs

    Uses wbadmin.exe to inhibit system recovery.

    ransomware
  • Modifies Windows Firewall 2 TTPs 2 IoCs
    evasion
  • Drops startup file 3 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops desktop.ini file(s) 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Interacts with shadow copies 2 TTPs 2 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

    ransomware
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 42 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-22_731066cbba8733b1978aed3338721753_phobos.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-22_731066cbba8733b1978aed3338721753_phobos.exe"
    1⤵
    • Drops startup file
    • Adds Run key to start application
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:312
    • C:\Users\Admin\AppData\Local\Temp\2024-05-22_731066cbba8733b1978aed3338721753_phobos.exe
      "C:\Users\Admin\AppData\Local\Temp\2024-05-22_731066cbba8733b1978aed3338721753_phobos.exe"
      2⤵
        PID:3120
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:2548
        • C:\Windows\system32\vssadmin.exe
          vssadmin delete shadows /all /quiet
          3⤵
          • Interacts with shadow copies
          PID:1036
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic shadowcopy delete
          3⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:2396
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} bootstatuspolicy ignoreallfailures
          3⤵
          • Modifies boot configuration data using bcdedit
          PID:2984
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} recoveryenabled no
          3⤵
          • Modifies boot configuration data using bcdedit
          PID:3868
        • C:\Windows\system32\wbadmin.exe
          wbadmin delete catalog -quiet
          3⤵
          • Deletes backup catalog
          PID:3104
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:3008
        • C:\Windows\system32\netsh.exe
          netsh advfirewall set currentprofile state off
          3⤵
          • Modifies Windows Firewall
          PID:4288
        • C:\Windows\system32\netsh.exe
          netsh firewall set opmode mode=disable
          3⤵
          • Modifies Windows Firewall
          PID:1808
      • C:\Windows\SysWOW64\mshta.exe
        "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
        2⤵
          PID:4188
        • C:\Windows\SysWOW64\mshta.exe
          "C:\Windows\SysWOW64\mshta.exe" "C:\users\public\desktop\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
          2⤵
            PID:4592
          • C:\Windows\SysWOW64\mshta.exe
            "C:\Windows\SysWOW64\mshta.exe" "C:\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
            2⤵
              PID:2000
            • C:\Windows\SysWOW64\mshta.exe
              "C:\Windows\SysWOW64\mshta.exe" "F:\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
              2⤵
                PID:3168
              • C:\Windows\system32\cmd.exe
                "C:\Windows\system32\cmd.exe"
                2⤵
                • Suspicious use of WriteProcessMemory
                PID:1036
                • C:\Windows\system32\vssadmin.exe
                  vssadmin delete shadows /all /quiet
                  3⤵
                  • Interacts with shadow copies
                  PID:4836
                • C:\Windows\System32\Wbem\WMIC.exe
                  wmic shadowcopy delete
                  3⤵
                  • Suspicious use of AdjustPrivilegeToken
                  PID:1672
                • C:\Windows\system32\bcdedit.exe
                  bcdedit /set {default} bootstatuspolicy ignoreallfailures
                  3⤵
                  • Modifies boot configuration data using bcdedit
                  PID:2036
                • C:\Windows\system32\bcdedit.exe
                  bcdedit /set {default} recoveryenabled no
                  3⤵
                  • Modifies boot configuration data using bcdedit
                  PID:4892
                • C:\Windows\system32\wbadmin.exe
                  wbadmin delete catalog -quiet
                  3⤵
                  • Deletes backup catalog
                  PID:4820
            • C:\Windows\system32\vssvc.exe
              C:\Windows\system32\vssvc.exe
              1⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:3620
            • C:\Windows\system32\wbengine.exe
              "C:\Windows\system32\wbengine.exe"
              1⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:4500
            • C:\Windows\System32\vdsldr.exe
              C:\Windows\System32\vdsldr.exe -Embedding
              1⤵
                PID:1588
              • C:\Windows\System32\vds.exe
                C:\Windows\System32\vds.exe
                1⤵
                • Checks SCSI registry key(s)
                PID:1188

              Network

                    MITRE ATT&CK Enterprise v15

                    Reconnaissance

                    Resource Development

                    Initial Access

                    Execution

                    Command and Scripting Interpreter

                    1
                    T1059

                    Windows Management Instrumentation

                    1
                    T1047

                    Persistence

                    Boot or Logon Autostart Execution

                    1
                    T1547

                    Registry Run Keys / Startup Folder

                    1
                    T1547.001

                    Create or Modify System Process

                    1
                    T1543

                    Windows Service

                    1
                    T1543.003

                    Privilege Escalation

                    Boot or Logon Autostart Execution

                    1
                    T1547

                    Registry Run Keys / Startup Folder

                    1
                    T1547.001

                    Create or Modify System Process

                    1
                    T1543

                    Windows Service

                    1
                    T1543.003

                    Defense Evasion

                    Impair Defenses

                    1
                    T1562

                    Disable or Modify System Firewall

                    1
                    T1562.004

                    Indicator Removal

                    3
                    T1070

                    File Deletion

                    3
                    T1070.004

                    Modify Registry

                    1
                    T1112

                    Credential Access

                    Unsecured Credentials

                    1
                    T1552

                    Credentials In Files

                    1
                    T1552.001

                    Discovery

                    Peripheral Device Discovery

                    1
                    T1120

                    Query Registry

                    2
                    T1012

                    System Information Discovery

                    2
                    T1082

                    Lateral Movement

                    Collection

                    Data from Local System

                    1
                    T1005

                    Command and Control

                    Exfiltration

                    Impact

                    Inhibit System Recovery

                    4
                    T1490

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    selection-actions.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
                    • Size 1KB
                    • SHA256 467082e15a8ddefd51088e12a6189f9923dadfdf363ac1b0448ec43dc483cb3d
                    • MD5 SHA1 SHA512
                    Submit Download

                    remove.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\remove.svg
                    • Size 1KB
                    • SHA256 4717e5fb82c0ee85a7c97d022f410990a62efa2492070e42385cfeab67afd619
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_comment_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
                    • Size 1KB
                    • SHA256 a9044f3c6877f4fa6789bd90f11813a22696bda53e0be17bf52229b70fa87673
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_filter-default_32.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filter-default_32.svg
                    • Size 547B
                    • SHA256 3d89171c24a889bce28f04adb60f08a141584b7c345b158536a72a8070c252b8
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_filterselected-dark-hover_32.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filterselected-dark-hover_32.svg
                    • Size 642B
                    • SHA256 e94ac27227c8a25c3f8ede219fd80ace01e7176a12111125b31ae1dcddd487ae
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_newfolder-default.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_newfolder-default.svg
                    • Size 552B
                    • SHA256 0345bffb28f80f4d0ded1a2af09a337b18ab3a80c68205bc8321a6ad4d409500
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_reminders_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reminders_18.svg
                    • Size 1KB
                    • SHA256 30f1d12f90b61f22130b22667f722aeca0aadd59ba3e19d866d72a99a3f0ce3d
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_remove_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg
                    • Size 711B
                    • SHA256 038589c0f8f0b9fbed7fe7835de0237de4a28ea404078955a78c0b8145fa323c
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_sortedby_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_18.svg
                    • Size 783B
                    • SHA256 ad125b854735c81b5782a65b5b006c7c991e28688b6dd8e5998f432976b9223c
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_sortedby_up_hover_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_up_hover_18.svg
                    • Size 979B
                    • SHA256 4b10fc416763ad7b65a6d6fb3c0016505ec5aaa7a117021a26e4dd6d11fe7d1d
                    • MD5 SHA1 SHA512
                    Submit Download

                    arrow-right-pressed.gif
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-right-pressed.gif
                    • Size 56B
                    • SHA256 d4817aa5497628e7c77e6b606107042bbba3130888c5f47a375e6179be789fbb
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hu-hu\ui-strings.js
                    • Size 3KB
                    • SHA256 ee0352f75df1009fa6f5eaf323a1ed55c127cc679ac6b9de70b1b3f8dc9ece76
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 bf9b3f1f9a3a163d41b1b20a2c410355e6ee72ae97725a7bad97ad23993b0b5f
                    • MD5 SHA1 SHA512
                    Submit Download

                    rhp_world_icon_hover.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png
                    • Size 388B
                    • SHA256 8de76ee7eb6b32c307d4a46a43ac55bc15b917e2a24d36c3d001878a97fd39d6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-il\ui-strings.js
                    • Size 1KB
                    • SHA256 d5343776747d802d64faedd9954d2a4bf555a6cd85396c55c39a8fce4c5353a6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\fr-fr\ui-strings.js
                    • Size 1KB
                    • SHA256 4cf9816ed1062189ff0c8d427fba5e912cc68fc9af76cf7f08fd255977de3b33
                    • MD5 SHA1 SHA512
                    Submit Download

                    example_icons.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
                    • Size 683B
                    • SHA256 d9de646d51650572b66a6cf8a52ad1efd46b7a47830fa7972da0bc05baa2fad0
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 655a3ef0465a9f30fddf25f4dde0c19a05c6f9069b83961800c1944165955273
                    • MD5 SHA1 SHA512
                    Submit Download

                    example_icons2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png
                    • Size 1KB
                    • SHA256 ca17d6cc1f7ab317c34a7cb767ad017163e71726ac648518679c6b1c59fa86dc
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\hr-hr\ui-strings.js
                    • Size 1KB
                    • SHA256 bc9df2774317cdca8e5a702f249a6994fa3b63852e7749124e82ef1f37b89aa6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 8267479623714339b61159b2f8235b15a38ccc1199eff859e5dc13359f8711c3
                    • MD5 SHA1 SHA512
                    Submit Download

                    rhp_world_icon.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png
                    • Size 445B
                    • SHA256 4eae979bb805992739f77e351706e745076ed932d3ef54dd47ba119c4c2fb5c6
                    • MD5 SHA1 SHA512
                    Submit Download

                    rhp_world_icon_2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png
                    • Size 611B
                    • SHA256 4049b739e6322c7d7caa241ac41c8e0b1f2893957204a910c9708c7731a7a8b5
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\en-ae\ui-strings.js
                    • Size 1KB
                    • SHA256 c960c819e997c1c9d080235a5e24e65059b63cf66b95ff3da9a44773ebf81c1b
                    • MD5 SHA1 SHA512
                    Submit Download

                    [email protected]
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\[email protected]
                    • Size 162B
                    • SHA256 7b3bae54e7a2931a1957c1ca23189cdf913f567e92af15089f033b99e33351f1
                    • MD5 SHA1 SHA512
                    Submit Download

                    line_2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\line_2x.png
                    • Size 550B
                    • SHA256 25778f162c4243167f8eaa876f1b0619e67afc158de7805600471a563ec5e8b7
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 82a1cc52037ccd1ee4a73cc41b86ef4c9b45db28025d56105566bbc9f06bc41f
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-ae\ui-strings.js
                    • Size 850B
                    • SHA256 e9288289beec2fe3b6ac24c1311451c8d079786a09515b95cbf2eda7f87f0b22
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\pt-br\ui-strings.js
                    • Size 857B
                    • SHA256 088d391d696ec15140e7b4dbe6fe17e95296af9d09c7eeff17a0a9c241925b89
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\tr-tr\ui-strings.js
                    • Size 856B
                    • SHA256 ab9ac8d62fd064748c921e6bd4c123f5cc8910a384d1804bec33ffe27da27c4c
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 e27e5eb93a24a2d866e30bf027e4f0c3da9fae8968cf5eb69446e7f668356164
                    • MD5 SHA1 SHA512
                    Submit Download

                    main-selector.css
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\css\main-selector.css
                    • Size 802B
                    • SHA256 359f38eef400e2fa3924a3258652e74ee19cd46cb92e47bce91f1194fce25e9e
                    • MD5 SHA1 SHA512
                    Submit Download

                    bg_pattern_RHP.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png
                    • Size 179B
                    • SHA256 5e06bfa9ebccfa3d8759270620b6860f0b92be9d69ef7d7802b78ee5b5f07f96
                    • MD5 SHA1 SHA512
                    Submit Download

                    bg_patterns_header.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png
                    • Size 703B
                    • SHA256 4985216f1f370fff03c45d4a711c18b3f49165f8278e6cfc231bb38b920095a7
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-gb\ui-strings.js
                    • Size 823B
                    • SHA256 4ecb5e390829b5b11dd02db2f22ac1349e32a24e5bd3a8489f6fb5fb0f07eeb6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 3b17f8b83bec3e72acd0d014f58e7de206106a7644bf3293f93c7456ced47419
                    • MD5 SHA1 SHA512
                    Submit Download

                    dd_arrow_small.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\dd_arrow_small.png
                    • Size 289B
                    • SHA256 6559f403524ea6ef9bf2e1d0bb66d1af8152920fb002ec2c4ced993083124a88
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
                    • Size 924B
                    • SHA256 ce7c16adff608d624a412164fdc692305fb461f4b14f9167e6efa78dbbad12ba
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\tr-tr\ui-strings.js
                    • Size 931B
                    • SHA256 899ad5e0b3501d7e00d2f3bd3c7729b4223839e8629c61328db0f818ba0870c9
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\fi-fi\ui-strings.js
                    • Size 1KB
                    • SHA256 7037318dbcb8809fd3d03ab0293d58666df18363f0144ef65b738ca3fbe028f0
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\pt-br\ui-strings.js
                    • Size 1KB
                    • SHA256 5c03e31975b96b3d151d9e034b884cab9c6fb29576d2b5653c375fc5661b6dd1
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ar-ae\ui-strings.js
                    • Size 855B
                    • SHA256 c9fdf06266cf9e6d61f7989471abe569239a93cc2c0f65a7c596a81af8d6a67f
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\eu-es\ui-strings.js
                    • Size 851B
                    • SHA256 d70a13e9b9e9f4026679200872160d667979bd0ae57e6527d44090e49bbc2c83
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\hr-hr\ui-strings.js
                    • Size 849B
                    • SHA256 e33edcde1654c47b3f834797623932ff5dd99a4331b255b60452d69d61ccfb4c
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ru-ru\ui-strings.js
                    • Size 852B
                    • SHA256 b3b87c3ad568de5a1f07702392e3bfc76f41a47b2fa1d710198406c3c5172697
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ko-kr\ui-strings.js
                    • Size 1KB
                    • SHA256 dfd68e26d32c27e8c7d096cd558b12da3228019525baaa2d4b32030339fb0b6a
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 d0a34414103960973357a239952bb0fab5f988ccda1b67ff8e6864afcd806272
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\sv-se\ui-strings.js
                    • Size 1KB
                    • SHA256 e3f604ce27fb93d417b9e8a4a5f10f6fd17b59a76aad9754ea0cc5c56b31687a
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_thumbnailview_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
                    • Size 1KB
                    • SHA256 ad47fd9e87159d651a53b3dfba3ef200684a9ed88c2528b62e18f3881fe203b0
                    • MD5 SHA1 SHA512
                    Submit Download

                    share_icons.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
                    • Size 1KB
                    • SHA256 91ed5badd0d99f45c65c0ccdec04fc59fffb1f6d055a4d2722dccde82a6bb73b
                    • MD5 SHA1 SHA512
                    Submit Download

                    adc_logo.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\themes\dark\adc_logo.png
                    • Size 1KB
                    • SHA256 c0601bc1bac97e69da3ef3e2898aafe64aec5ae4f3ccbdb7649471f76da4ca0e
                    • MD5 SHA1 SHA512
                    Submit Download

                    bun.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png
                    • Size 2KB
                    • SHA256 494032a3293df271c7cc5d26a5753acffc5f6df811d024e9b573f2fa380f3591
                    • MD5 SHA1 SHA512
                    Submit Download

                    cstm_brand_preview.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png
                    • Size 2KB
                    • SHA256 96497e49c11ebeb0f73bc01b033b7f45cd9f8eee478176e11b1c7342efa63569
                    • MD5 SHA1 SHA512
                    Submit Download

                    dd_arrow_small2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png
                    • Size 385B
                    • SHA256 e743d6195ff2f42282e101f9471874e8df79dc05a69ca20abf22015d48d28c6c
                    • MD5 SHA1 SHA512
                    Submit Download

                    nub.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png
                    • Size 1003B
                    • SHA256 bd66e8f62d34f70917102405af895c0b07b79c13fd2d1ea65ebfba3bd4853aeb
                    • MD5 SHA1 SHA512
                    Submit Download

                    share_icons2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png
                    • Size 2KB
                    • SHA256 fde09d85ac7ec84dc0b5f2bf1c1f935b80a3e45dd9257af499d412302602f310
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js
                    • Size 840B
                    • SHA256 16d0edc8b7ad7705b23a14058f366ff1c0dfa16a0ad14f741924c308754cf8d1
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_checkbox_unselected_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_checkbox_unselected_18.svg
                    • Size 952B
                    • SHA256 f438a4e713df6a982afbe2eec993cd582edc37a876fee88e1ddabb478f2b5ee0
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_close2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_close2x.png
                    • Size 631B
                    • SHA256 68df674391ddb32170020e5b55b8df9ac1bb5274419dbf8748ce53efb18584cf
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
                    • Size 1KB
                    • SHA256 5bc633d52bc4345c9cc4ea7cf49422a85a9fe401faf3239ef72b53aa0dd667ee
                    • MD5 SHA1 SHA512
                    Submit Download

                    close.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\close.svg
                    • Size 1KB
                    • SHA256 03e98670a1d9049b8e1f02c4fdd449d098465f7578ee0eebfaf3f138a78301ae
                    • MD5 SHA1 SHA512
                    Submit Download

                    Staging
                    • Path C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Trust Protection Lists\Sigma\Staging
                    • Size 168B
                    • SHA256 e3c2af35d1dfc500e16f826a071cc311bf55003a3de77de7ea3376c6b6fa2857
                    • MD5 SHA1 SHA512
                    Submit Download

                    identity_helper.exe.manifest
                    • Path C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe.manifest
                    • Size 1KB
                    • SHA256 4740d289d0a31bc1fc00e255845b3d8ba7cec2d6d0ee92177d23aa293f9fca3a
                    • MD5 SHA1 SHA512
                    Submit Download

                    msedgewebview2.exe.sig
                    • Path C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe.sig
                    • Size 1KB
                    • SHA256 5efe288bf88e3a66ead387ee327d7f2ae6637fa507e14271cd1c30024279945e
                    • MD5 SHA1 SHA512
                    Submit Download

                    MSFT_PackageManagementSource.schema.mfl
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\it-IT\MSFT_PackageManagementSource.schema.mfl
                    • Size 1KB
                    • SHA256 1c55f2acd075736d1fccd0e7bca9292072d933e2811b8e042c172e9e7f112f39
                    • MD5 SHA1 SHA512
                    Submit Download

                    MSFT_PackageManagement.schema.mfl
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\en-US\MSFT_PackageManagement.schema.mfl
                    • Size 1KB
                    • SHA256 424c38504d88d0f7b3691471d18b1a21141b9e31b1cee5dad278963613252480
                    • MD5 SHA1 SHA512
                    Submit Download

                    MSFT_PackageManagement.strings.psd1
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\ja-JP\MSFT_PackageManagement.strings.psd1
                    • Size 1KB
                    • SHA256 e2e70c766bc6c37a41a221b53a0e62ef616c8fbcf7a244c4863f6a74c06b8e64
                    • MD5 SHA1 SHA512
                    Submit Download

                    PackageManagementDscUtilities.strings.psd1
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\de-DE\PackageManagementDscUtilities.strings.psd1
                    • Size 1KB
                    • SHA256 a6f6e59f677587238a2b472d2f214b1c95d61d86a7973cdd89a61e2c05ca7594
                    • MD5 SHA1 SHA512
                    Submit Download

                    7z.dll.id[B64AD63B-3406].[[email protected]].Elbie
                    • Path C:\Program Files\7-Zip\7z.dll.id[B64AD63B-3406].[[email protected]].Elbie
                    • Size 2.5MB
                    • SHA256 0af439b6914f691031baaeb47bd20606fafbdeaf4985ac2fac67b22bcb652c32
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    relaxngcc.md
                    • Path C:\Program Files\Java\jdk-1.8\legal\jdk\relaxngcc.md
                    • Size 2KB
                    • SHA256 0c19ba9eeecab3cbbdf38da08c3fa0266f10ce8166e056715931efc543335eeb
                    • MD5 SHA1 SHA512
                    Submit Download

                    THIRDPARTYLICENSEREADME-JAVAFX.txt
                    • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
                    • Size 190B
                    • SHA256 07ec9bf950252d0254d4d778698c2e4173f36dbc3f57f51f34d1b85a07c2eab0
                    • MD5 SHA1 SHA512
                    Submit Download

                    invalid32x32.gif
                    • Path C:\Program Files\Java\jre-1.8\lib\images\cursors\invalid32x32.gif
                    • Size 153B
                    • SHA256 f1663cceeb67ba35c5a5cbf58b56050ddbe5ec5680ea9e55837b57524f29b876
                    • MD5 SHA1 SHA512
                    Submit Download

                    Slipstream.xml
                    • Path C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml
                    • Size 744B
                    • SHA256 1b66520d471367f736d50c070a2e2bba8ad88ac58743394a764b888e9cb6f6be
                    • MD5 SHA1 SHA512
                    Submit Download

                    POWERPNT_F_COL.HXK
                    • Path C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_F_COL.HXK
                    • Size 114B
                    • SHA256 802bbf1167e97e336bc7e1d1574466db744c7021efe0f0ff01ff7e352c44f56b
                    • MD5 SHA1 SHA512
                    Submit Download

                    POWERPNT_K_COL.HXK
                    • Path C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK
                    • Size 113B
                    • SHA256 951b1c95584b91fd8776e1d26b25d745ad5d508f6337686b9f7131d7c2f7096a
                    • MD5 SHA1 SHA512
                    Submit Download

                    PersonaSpy.html
                    • Path C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\PersonaSpy.html
                    • Size 1KB
                    • SHA256 1777e4f7955cb5900c97d92081efc4b11704ee3b265717a7d7152972b49a36c4
                    • MD5 SHA1 SHA512
                    Submit Download

                    s641033.hash
                    • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B8436FDE-48B5-46DA-A041-D5945D20D942\en-us.16\s641033.hash
                    • Size 106B
                    • SHA256 34dbd6bf55d0d075d666181d9278b8387482a8b5804e44e1ddaafe6876dadc15
                    • MD5 SHA1 SHA512
                    Submit Download

                    telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112.json
                    • Path C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112.json
                    • Size 121B
                    • SHA256 d8129de4286dc4fd245c7776b51d76aaa727956e8fc88ff928eb69ff7fc17e0b
                    • MD5 SHA1 SHA512
                    Submit Download

                    telemetry.P-Eco3PTelDefault.json
                    • Path C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json
                    • Size 57B
                    • SHA256 65a16cb7861335d5ace3c60718b5052e44660726da4cd13bb745381b235a1785
                    • MD5 SHA1 SHA512
                    Submit Download

                    0a8c1492-65ca-6a01-de25-0e183559d10d.xml
                    • Path C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\0a8c1492-65ca-6a01-de25-0e183559d10d.xml
                    • Size 2KB
                    • SHA256 68193f3f98611b2aa42be4d2995b0b9a2465277c7520231324a08460639a41a5
                    • MD5 SHA1 SHA512
                    Submit Download

                    760b9474-00b7-d44c-6932-5744e863a1e0.xml
                    • Path C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\760b9474-00b7-d44c-6932-5744e863a1e0.xml
                    • Size 3KB
                    • SHA256 7c23b4ec3b42f260dfffadaf7d59a0efcc8f6547149b45907b1fc5242a4e6c2e
                    • MD5 SHA1 SHA512
                    Submit Download

                    bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1.xml
                    • Path C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1.xml
                    • Size 2KB
                    • SHA256 77544451f210250b90637e7ecfebfc0ce00398ef964a2d46f1b92adf4d6f97a2
                    • MD5 SHA1 SHA512
                    Submit Download

                    System Configuration.lnk
                    • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk
                    • Size 1KB
                    • SHA256 f5ea79165516de2e7e1efb53d016983f5d18c3184413f044a4002f4b751c918b
                    • MD5 SHA1 SHA512
                    Submit Download

                    state.rsm
                    • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm
                    • Size 634B
                    • SHA256 18b602cdbb7656129a359046fc68faf1b990da88c6c3b3e6b20c1df399cc0645
                    • MD5 SHA1 SHA512
                    Submit Download

                    8DFDF057024880D7A081AFBF6D26B92F
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
                    • Size 834B
                    • SHA256 e3833793f7412667cdbe15693f5dc4994934d1a6695392f8bebb74f985658256
                    • MD5 SHA1 SHA512
                    Submit Download

                    7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
                    • Size 404B
                    • SHA256 0441772f66559a1c71f4559dc4405438fc9b8383ce1229139257a7fe6d7b8de9
                    • MD5 SHA1 SHA512
                    Submit Download

                    EAF8AA29A62AB29E614331747385D816_5C1009244D39FCE23AF8F277537F2613
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EAF8AA29A62AB29E614331747385D816_5C1009244D39FCE23AF8F277537F2613
                    • Size 400B
                    • SHA256 7a12e561363385e9dfeeab326368731c030ed4b374e7f5897ac819159d2884c5
                    • MD5 SHA1 SHA512
                    Submit Download

                    CURRENT
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\CURRENT
                    • Size 16B
                    • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
                    • MD5 SHA1 SHA512
                    Submit Download

                    messages.json
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.76.2_0\_locales\hr\messages.json
                    • Size 935B
                    • SHA256 e5cbc8e3a6e843009fc9a9de7a83df9d05532e08d48da06c66f907f58d0c745e
                    • MD5 SHA1 SHA512
                    Submit Download

                    dasherSettingSchema.json
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.76.2_0\dasherSettingSchema.json
                    • Size 854B
                    • SHA256 445c811c35e2fbd4aa59389ec805492c7b2db50d65f5d161417ce8302b103fbe
                    • MD5 SHA1 SHA512
                    Submit Download

                    MANIFEST-000001
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\MANIFEST-000001
                    • Size 41B
                    • SHA256 9e1736c43d19118e6ce4302118af337109491ecc52757dfb949bad6a7940b0c2
                    • MD5 SHA1 SHA512
                    Submit Download

                    the-real-index
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                    • Size 48B
                    • SHA256 17b0761f87b081d5cf10757ccc89f12be355c70e2e29df288b65b30710dcbcd1
                    • MD5 SHA1 SHA512
                    Submit Download

                    LOG
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
                    • Size 279B
                    • SHA256 74ca16b1138459ef2afb19324097332626ee7c897687c5adc5488f93bf0c11ff
                    • MD5 SHA1 SHA512
                    Submit Download

                    00000016.bin
                    • Path C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin
                    • Size 1KB
                    • SHA256 8f6abb9e202dd8027ac9abbd475a24e62659a0b2683613f219c21d1238816ed7
                    • MD5 SHA1 SHA512
                    Submit Download

                    00000093.bin
                    • Path C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000093.bin
                    • Size 647B
                    • SHA256 bbfa41253ad301a1cd9c7f6321bff365068178f26cd84e8afb127fb4001bc4be
                    • MD5 SHA1 SHA512
                    Submit Download

                    desktop.ini
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini
                    • Size 174B
                    • SHA256 eaae98aa73fe0b561c8b02607a524fb4853bbe81c6de8c3d8a9b7449366809d4
                    • MD5 SHA1 SHA512
                    Submit Download

                    iconcache_96.db
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
                    • Size 24B
                    • SHA256 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
                    • MD5 SHA1 SHA512
                    Submit Download

                    Windows[3].json
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CMPDKH9Q\Windows[3].json
                    • Size 620B
                    • SHA256 b5afda9531d50eca02d7e10dd6a5e5a9346ef452f1aea17049b4acf84be62641
                    • MD5 SHA1 SHA512
                    Submit Download

                    07 - Event Viewer.lnk
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
                    • Size 1015B
                    • SHA256 1f9ec15f6ff239e14a3a243a98f19ae7db16d425a63b2da0908cc0ffcb1258e7
                    • MD5 SHA1 SHA512
                    Submit Download

                    ads-track-digest256.sbstore
                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ue3bcu6m.default-release\safebrowsing\ads-track-digest256.sbstore
                    • Size 1KB
                    • SHA256 f18f13c653940384b01c154887477150b1c0669d5620d263f72bfcfa57daee09
                    • MD5 SHA1 SHA512
                    Submit Download

                    tinytile.png
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png
                    • Size 1KB
                    • SHA256 46dcb7a9e7bde1f57e5ed2eef9257d2d0ad622c1b3da32700f6d9e2ec4a0e287
                    • MD5 SHA1 SHA512
                    Submit Download

                    imprbeacons.dat
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\202914\imprbeacons.dat
                    • Size 1KB
                    • SHA256 1200e60a51f6ac39e23acc92ae56b0f8f9c007712e0f53ba8232d840ac33d904
                    • MD5 SHA1 SHA512
                    Submit Download

                    80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                    • Size 471B
                    • SHA256 9d2ce1c032646d2a3381b68bc9201e3dcd53b764e83a0d356d67cc4926ece015
                    • MD5 SHA1 SHA512
                    Submit Download

                    80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                    • Size 412B
                    • SHA256 9ebc694d4895efc802ea27714a71986f293edf4b63e9918c27d65871b06f43a9
                    • MD5 SHA1 SHA512
                    Submit Download

                    0.2.filtertrie.intermediate.txt
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{134b892d-3314-486d-a4fb-dc640f83f3d3}\0.2.filtertrie.intermediate.txt
                    • Size 5B
                    • SHA256 8855508aade16ec573d21e6a485dfd0a7624085c1a14b5ecdd6485de0c6839a4
                    • MD5 SHA1 SHA512
                    Submit Download

                    desktop.ini
                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini
                    • Size 338B
                    • SHA256 4bafbcbc4cbbda94d0a315a09176de0ce6872cf1d85113539a7b04ff2360efa1
                    • MD5 SHA1 SHA512
                    Submit Download

                    previous.jsonlz4
                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ue3bcu6m.default-release\sessionstore-backups\previous.jsonlz4
                    • Size 902B
                    • SHA256 8e1b2f3c38d9583ec30e0f44459700b5d81f4b6a2b2eefe88198c9230ec408ec
                    • MD5 SHA1 SHA512
                    Submit Download

                    .metadata-v2
                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ue3bcu6m.default-release\storage\permanent\chrome\.metadata-v2
                    • Size 42B
                    • SHA256 094c4931fdb2f2af417c9e0322a9716006e8211fe9017f671ac6e3251300acca
                    • MD5 SHA1 SHA512
                    Submit Download

                    1 - Desktop.lnk
                    • Path C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
                    • Size 1KB
                    • SHA256 462fa5c6568794276673c9159500918afddf8f170e580fd1f3d483c48934b050
                    • MD5 SHA1 SHA512
                    Submit Download

                    desktop.ini
                    • Path C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini
                    • Size 75B
                    • SHA256 367467f43d580c3c07040a78c7890ae4262dad4778878f9a49d5f652c81689a5
                    • MD5 SHA1 SHA512
                    Submit Download

                    06 - SystemAbout.lnk
                    • Path C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
                    • Size 1KB
                    • SHA256 43782c4d9b63da7cfe64f6a9a06a6cf8007d2a793b8a5f94c9b962bb5cb25b0d
                    • MD5 SHA1 SHA512
                    Submit Download

                    On-Screen Keyboard.lnk
                    • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
                    • Size 1KB
                    • SHA256 d0e438519a8e2075e13430b66debeb7204e5e8ab41fb24eaab20db0bdb66d835
                    • MD5 SHA1 SHA512
                    Submit Download

                    RecordedTV.library-ms
                    • Path C:\Users\Public\Libraries\RecordedTV.library-ms
                    • Size 999B
                    • SHA256 84ba348aafb41879cfa434256c8657baff00a9bf41d5ebe041b0ef87e7419f28
                    • MD5 SHA1 SHA512
                    Submit Download

                    info.hta
                    • Path C:\info.hta
                    • Size 4KB
                    • SHA256 68e3c451d2efc01a46dccb5a51ce78d86e15dbc3d51fa8fc7b010f255ad9dd57
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download