Overview

overview

10

Static

static

3

99d44441e2...18.exe

windows7-x64

10

99d44441e2...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/06/2024, 02:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe
  • Size 145KB
  • Sample240606-dadt9afa8y
  • SHA256 fc2a39690214c12ae939a7719ffdb06ab728ef5e84a874be8573d84e33305430
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
phobosdefense_evasionevasionexecutionimpactpersistenceransomwarespywarestealer

Malware Config

Extracted

Path

  • C:\info.hta

Ransom Note
  • <!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'> <html> <head> <meta charset='windows-1251'> <title>encrypted</title> <HTA:APPLICATION ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no"> <script language='JScript'> window.moveTo(50, 50); window.resizeTo(screen.width - 100, screen.height - 100); </script> <style type='text/css'> body { font: 15px Tahoma, sans-serif; margin: 10px; line-height: 25px; background: #EDEDED; } img { display:inline-block; } .bold { font-weight: bold; } .mark { background: #D0D0E8; padding: 2px 5px; } .header { text-align: center; font-size: 30px; line-height: 50px; font-weight: bold; margin-bottom:20px; } .info { background: #D0D0E8; border-left: 10px solid #00008B; } .alert { background: #FFE4E4; border-left: 10px solid #FF0000; } .private { border: 1px dashed #000; background: #FFFFEF; } .note { height: auto; padding-bottom: 1px; margin: 15px 0; } .note .title { font-weight: bold; text-indent: 10px; height: 30px; line-height: 30px; padding-top: 10px; } .note .mark { background: #A2A2B5; } .note ul { margin-top: 0; } .note pre { margin-left: 15px; line-height: 13px; font-size: 13px; } .footer { position:fixed; bottom:0; right:0; text-align: right; } </style> </head> <body> <div class='header'> <img src='data:image/png;base64,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'> <div>All your files have been encrypted!</div> </div> <div class='bold'>All your files have been encrypted due to a security problem with your PC. If you want to restore them, there are two way of contact:</div> <div class='bold'> Jabber contact - [email protected]</div> <div class='bold'>- https://www.wikihow.com/Create-a-Jabber-Account</div> <div class='bold'>- https://psi-im.org/download/</div> <div class='bold'>- Once you created a jabber account. Make sure you add the contact first and wait for our approval to begin sending message.</div> <div class='bold'>- Directly messaging us with out accepting your request will result to Forbidden message</div> <div class='bold'> E-mail contact <span class='mark'>[email protected]</span></div> <div class='bold'>Write this ID in the title of your message <span class='mark'>9071A6C5-2275</span></div> <div class='note info'> <div class='title'>Free decryption as guarantee</div> <ul>Before paying you can send us up to 5 files for free decryption. The total size of files must be less than 4Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.) </ul> </div> <div class='note info'> <div class='title'>Where to buy bitcoins?</div> <ul> The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. <br><a href='https://localbitcoins.com/buy_bitcoins'>https://localbitcoins.com/buy_bitcoins</a> <br> Also you can find other places to buy Bitcoins and beginners guide here: <br><a href='http://www.coindesk.com/information/how-can-i-buy-bitcoins/'>http://www.coindesk.com/information/how-can-i-buy-bitcoins/</a> </ul> </div> <div class='note alert'> <div class='title'>Attention!</div> <ul> <li>Do not rename encrypted files.</li> <li>Do not try to decrypt your data using third party software, it may cause permanent data loss.</li> <li>Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.</li> </ul> </div> </body> </html>
Emails
URLs

  • http://www.w3.org/TR/html4/strict.dtd'>

  • https://www.wikihow.com/Create-a-Jabber-Account</div>

  • https://psi-im.org/download/</div>

Signatures

  • Phobos

    Phobos ransomware appeared at the beginning of 2019.

    ransomwarephobos
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Modifies boot configuration data using bcdedit 1 TTPs 4 IoCs
    ransomwareevasion
  • Renames multiple (511) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Deletes backup catalog 3 TTPs 2 IoCs

    Uses wbadmin.exe to inhibit system recovery.

    ransomware
  • Drops startup file 3 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops desktop.ini file(s) 64 IoCs
  • Suspicious use of SetThreadContext 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Interacts with shadow copies 2 TTPs 2 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

    ransomware
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 56 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5036
    • C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe
      "C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe"
      2⤵
      • Drops startup file
      • Adds Run key to start application
      • Drops desktop.ini file(s)
      • Drops file in Program Files directory
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2964
      • C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe
        "C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe"
        3⤵
        • Suspicious use of SetThreadContext
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:1308
        • C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe
          "C:\Users\Admin\AppData\Local\Temp\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe"
          4⤵
            PID:216
        • C:\Windows\system32\cmd.exe
          "C:\Windows\system32\cmd.exe"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:4372
          • C:\Windows\system32\vssadmin.exe
            vssadmin delete shadows /all /quiet
            4⤵
            • Interacts with shadow copies
            PID:556
          • C:\Windows\System32\Wbem\WMIC.exe
            wmic shadowcopy delete
            4⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:1672
          • C:\Windows\system32\bcdedit.exe
            bcdedit /set {default} bootstatuspolicy ignoreallfailures
            4⤵
            • Modifies boot configuration data using bcdedit
            PID:4528
          • C:\Windows\system32\bcdedit.exe
            bcdedit /set {default} recoveryenabled no
            4⤵
            • Modifies boot configuration data using bcdedit
            PID:3724
          • C:\Windows\system32\wbadmin.exe
            wbadmin delete catalog -quiet
            4⤵
            • Deletes backup catalog
            PID:3804
        • C:\Windows\SysWOW64\mshta.exe
          "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
          3⤵
            PID:300
          • C:\Windows\SysWOW64\mshta.exe
            "C:\Windows\SysWOW64\mshta.exe" "C:\users\public\desktop\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
            3⤵
              PID:2628
            • C:\Windows\SysWOW64\mshta.exe
              "C:\Windows\SysWOW64\mshta.exe" "C:\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
              3⤵
                PID:3628
              • C:\Windows\SysWOW64\mshta.exe
                "C:\Windows\SysWOW64\mshta.exe" "F:\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
                3⤵
                  PID:4384
                • C:\Windows\system32\cmd.exe
                  "C:\Windows\system32\cmd.exe"
                  3⤵
                  • Suspicious use of WriteProcessMemory
                  PID:1160
                  • C:\Windows\system32\vssadmin.exe
                    vssadmin delete shadows /all /quiet
                    4⤵
                    • Interacts with shadow copies
                    PID:2772
                  • C:\Windows\System32\Wbem\WMIC.exe
                    wmic shadowcopy delete
                    4⤵
                    • Suspicious use of AdjustPrivilegeToken
                    PID:5192
                  • C:\Windows\system32\bcdedit.exe
                    bcdedit /set {default} bootstatuspolicy ignoreallfailures
                    4⤵
                    • Modifies boot configuration data using bcdedit
                    PID:5368
                  • C:\Windows\system32\bcdedit.exe
                    bcdedit /set {default} recoveryenabled no
                    4⤵
                    • Modifies boot configuration data using bcdedit
                    PID:5436
                  • C:\Windows\system32\wbadmin.exe
                    wbadmin delete catalog -quiet
                    4⤵
                    • Deletes backup catalog
                    PID:5440
            • C:\Windows\system32\vssvc.exe
              C:\Windows\system32\vssvc.exe
              1⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:4916
            • C:\Windows\system32\wbengine.exe
              "C:\Windows\system32\wbengine.exe"
              1⤵
              • Suspicious use of AdjustPrivilegeToken
              PID:2588
            • C:\Windows\System32\vdsldr.exe
              C:\Windows\System32\vdsldr.exe -Embedding
              1⤵
                PID:1020
              • C:\Windows\System32\vds.exe
                C:\Windows\System32\vds.exe
                1⤵
                • Checks SCSI registry key(s)
                PID:4988

              Network

                    MITRE ATT&CK Enterprise v15

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    selection-actions.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
                    • Size 1KB
                    • SHA256 467082e15a8ddefd51088e12a6189f9923dadfdf363ac1b0448ec43dc483cb3d
                    • MD5 SHA1 SHA512
                    Submit Download

                    remove.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\remove.svg
                    • Size 1KB
                    • SHA256 4717e5fb82c0ee85a7c97d022f410990a62efa2492070e42385cfeab67afd619
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_comment_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
                    • Size 1KB
                    • SHA256 a9044f3c6877f4fa6789bd90f11813a22696bda53e0be17bf52229b70fa87673
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_filter-default_32.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filter-default_32.svg
                    • Size 547B
                    • SHA256 3d89171c24a889bce28f04adb60f08a141584b7c345b158536a72a8070c252b8
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_filterselected-dark-hover_32.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filterselected-dark-hover_32.svg
                    • Size 642B
                    • SHA256 e94ac27227c8a25c3f8ede219fd80ace01e7176a12111125b31ae1dcddd487ae
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_newfolder-default.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_newfolder-default.svg
                    • Size 552B
                    • SHA256 0345bffb28f80f4d0ded1a2af09a337b18ab3a80c68205bc8321a6ad4d409500
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_reminders_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reminders_18.svg
                    • Size 1KB
                    • SHA256 30f1d12f90b61f22130b22667f722aeca0aadd59ba3e19d866d72a99a3f0ce3d
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_remove_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg
                    • Size 711B
                    • SHA256 038589c0f8f0b9fbed7fe7835de0237de4a28ea404078955a78c0b8145fa323c
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_sortedby_hover_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_hover_18.svg
                    • Size 783B
                    • SHA256 ad125b854735c81b5782a65b5b006c7c991e28688b6dd8e5998f432976b9223c
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_sortedby_up_hover_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_up_hover_18.svg
                    • Size 979B
                    • SHA256 4b10fc416763ad7b65a6d6fb3c0016505ec5aaa7a117021a26e4dd6d11fe7d1d
                    • MD5 SHA1 SHA512
                    Submit Download

                    arrow-right-pressed.gif
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-right-pressed.gif
                    • Size 56B
                    • SHA256 d4817aa5497628e7c77e6b606107042bbba3130888c5f47a375e6179be789fbb
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hu-hu\ui-strings.js
                    • Size 3KB
                    • SHA256 ee0352f75df1009fa6f5eaf323a1ed55c127cc679ac6b9de70b1b3f8dc9ece76
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 bf9b3f1f9a3a163d41b1b20a2c410355e6ee72ae97725a7bad97ad23993b0b5f
                    • MD5 SHA1 SHA512
                    Submit Download

                    rhp_world_icon_hover.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png
                    • Size 388B
                    • SHA256 8de76ee7eb6b32c307d4a46a43ac55bc15b917e2a24d36c3d001878a97fd39d6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-il\ui-strings.js
                    • Size 1KB
                    • SHA256 d5343776747d802d64faedd9954d2a4bf555a6cd85396c55c39a8fce4c5353a6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\fr-fr\ui-strings.js
                    • Size 1KB
                    • SHA256 4cf9816ed1062189ff0c8d427fba5e912cc68fc9af76cf7f08fd255977de3b33
                    • MD5 SHA1 SHA512
                    Submit Download

                    example_icons.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
                    • Size 683B
                    • SHA256 d9de646d51650572b66a6cf8a52ad1efd46b7a47830fa7972da0bc05baa2fad0
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 655a3ef0465a9f30fddf25f4dde0c19a05c6f9069b83961800c1944165955273
                    • MD5 SHA1 SHA512
                    Submit Download

                    example_icons2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png
                    • Size 1KB
                    • SHA256 ca17d6cc1f7ab317c34a7cb767ad017163e71726ac648518679c6b1c59fa86dc
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\hr-hr\ui-strings.js
                    • Size 1KB
                    • SHA256 bc9df2774317cdca8e5a702f249a6994fa3b63852e7749124e82ef1f37b89aa6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 8267479623714339b61159b2f8235b15a38ccc1199eff859e5dc13359f8711c3
                    • MD5 SHA1 SHA512
                    Submit Download

                    rhp_world_icon.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png
                    • Size 445B
                    • SHA256 4eae979bb805992739f77e351706e745076ed932d3ef54dd47ba119c4c2fb5c6
                    • MD5 SHA1 SHA512
                    Submit Download

                    rhp_world_icon_2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png
                    • Size 611B
                    • SHA256 4049b739e6322c7d7caa241ac41c8e0b1f2893957204a910c9708c7731a7a8b5
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\en-ae\ui-strings.js
                    • Size 1KB
                    • SHA256 c960c819e997c1c9d080235a5e24e65059b63cf66b95ff3da9a44773ebf81c1b
                    • MD5 SHA1 SHA512
                    Submit Download

                    [email protected]
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\[email protected]
                    • Size 162B
                    • SHA256 7b3bae54e7a2931a1957c1ca23189cdf913f567e92af15089f033b99e33351f1
                    • MD5 SHA1 SHA512
                    Submit Download

                    line_2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\line_2x.png
                    • Size 550B
                    • SHA256 25778f162c4243167f8eaa876f1b0619e67afc158de7805600471a563ec5e8b7
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 82a1cc52037ccd1ee4a73cc41b86ef4c9b45db28025d56105566bbc9f06bc41f
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-ae\ui-strings.js
                    • Size 850B
                    • SHA256 e9288289beec2fe3b6ac24c1311451c8d079786a09515b95cbf2eda7f87f0b22
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\pt-br\ui-strings.js
                    • Size 857B
                    • SHA256 088d391d696ec15140e7b4dbe6fe17e95296af9d09c7eeff17a0a9c241925b89
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\tr-tr\ui-strings.js
                    • Size 856B
                    • SHA256 ab9ac8d62fd064748c921e6bd4c123f5cc8910a384d1804bec33ffe27da27c4c
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 e27e5eb93a24a2d866e30bf027e4f0c3da9fae8968cf5eb69446e7f668356164
                    • MD5 SHA1 SHA512
                    Submit Download

                    main-selector.css
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\css\main-selector.css
                    • Size 802B
                    • SHA256 359f38eef400e2fa3924a3258652e74ee19cd46cb92e47bce91f1194fce25e9e
                    • MD5 SHA1 SHA512
                    Submit Download

                    bg_pattern_RHP.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png
                    • Size 179B
                    • SHA256 5e06bfa9ebccfa3d8759270620b6860f0b92be9d69ef7d7802b78ee5b5f07f96
                    • MD5 SHA1 SHA512
                    Submit Download

                    bg_patterns_header.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png
                    • Size 703B
                    • SHA256 4985216f1f370fff03c45d4a711c18b3f49165f8278e6cfc231bb38b920095a7
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-gb\ui-strings.js
                    • Size 823B
                    • SHA256 4ecb5e390829b5b11dd02db2f22ac1349e32a24e5bd3a8489f6fb5fb0f07eeb6
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 3b17f8b83bec3e72acd0d014f58e7de206106a7644bf3293f93c7456ced47419
                    • MD5 SHA1 SHA512
                    Submit Download

                    dd_arrow_small.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\dd_arrow_small.png
                    • Size 289B
                    • SHA256 6559f403524ea6ef9bf2e1d0bb66d1af8152920fb002ec2c4ced993083124a88
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
                    • Size 924B
                    • SHA256 ce7c16adff608d624a412164fdc692305fb461f4b14f9167e6efa78dbbad12ba
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\tr-tr\ui-strings.js
                    • Size 931B
                    • SHA256 899ad5e0b3501d7e00d2f3bd3c7729b4223839e8629c61328db0f818ba0870c9
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\fi-fi\ui-strings.js
                    • Size 1KB
                    • SHA256 7037318dbcb8809fd3d03ab0293d58666df18363f0144ef65b738ca3fbe028f0
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\pt-br\ui-strings.js
                    • Size 1KB
                    • SHA256 5c03e31975b96b3d151d9e034b884cab9c6fb29576d2b5653c375fc5661b6dd1
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ar-ae\ui-strings.js
                    • Size 855B
                    • SHA256 c9fdf06266cf9e6d61f7989471abe569239a93cc2c0f65a7c596a81af8d6a67f
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\eu-es\ui-strings.js
                    • Size 851B
                    • SHA256 d70a13e9b9e9f4026679200872160d667979bd0ae57e6527d44090e49bbc2c83
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\hr-hr\ui-strings.js
                    • Size 849B
                    • SHA256 e33edcde1654c47b3f834797623932ff5dd99a4331b255b60452d69d61ccfb4c
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ru-ru\ui-strings.js
                    • Size 852B
                    • SHA256 b3b87c3ad568de5a1f07702392e3bfc76f41a47b2fa1d710198406c3c5172697
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ko-kr\ui-strings.js
                    • Size 1KB
                    • SHA256 dfd68e26d32c27e8c7d096cd558b12da3228019525baaa2d4b32030339fb0b6a
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 d0a34414103960973357a239952bb0fab5f988ccda1b67ff8e6864afcd806272
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\sv-se\ui-strings.js
                    • Size 1KB
                    • SHA256 e3f604ce27fb93d417b9e8a4a5f10f6fd17b59a76aad9754ea0cc5c56b31687a
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_thumbnailview_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
                    • Size 1KB
                    • SHA256 ad47fd9e87159d651a53b3dfba3ef200684a9ed88c2528b62e18f3881fe203b0
                    • MD5 SHA1 SHA512
                    Submit Download

                    share_icons.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
                    • Size 1KB
                    • SHA256 91ed5badd0d99f45c65c0ccdec04fc59fffb1f6d055a4d2722dccde82a6bb73b
                    • MD5 SHA1 SHA512
                    Submit Download

                    adc_logo.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\themes\dark\adc_logo.png
                    • Size 1KB
                    • SHA256 c0601bc1bac97e69da3ef3e2898aafe64aec5ae4f3ccbdb7649471f76da4ca0e
                    • MD5 SHA1 SHA512
                    Submit Download

                    bun.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png
                    • Size 2KB
                    • SHA256 494032a3293df271c7cc5d26a5753acffc5f6df811d024e9b573f2fa380f3591
                    • MD5 SHA1 SHA512
                    Submit Download

                    cstm_brand_preview.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png
                    • Size 2KB
                    • SHA256 96497e49c11ebeb0f73bc01b033b7f45cd9f8eee478176e11b1c7342efa63569
                    • MD5 SHA1 SHA512
                    Submit Download

                    dd_arrow_small2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png
                    • Size 385B
                    • SHA256 e743d6195ff2f42282e101f9471874e8df79dc05a69ca20abf22015d48d28c6c
                    • MD5 SHA1 SHA512
                    Submit Download

                    nub.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png
                    • Size 1003B
                    • SHA256 bd66e8f62d34f70917102405af895c0b07b79c13fd2d1ea65ebfba3bd4853aeb
                    • MD5 SHA1 SHA512
                    Submit Download

                    share_icons2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png
                    • Size 2KB
                    • SHA256 fde09d85ac7ec84dc0b5f2bf1c1f935b80a3e45dd9257af499d412302602f310
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js
                    • Size 840B
                    • SHA256 16d0edc8b7ad7705b23a14058f366ff1c0dfa16a0ad14f741924c308754cf8d1
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_checkbox_unselected_18.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_checkbox_unselected_18.svg
                    • Size 952B
                    • SHA256 f438a4e713df6a982afbe2eec993cd582edc37a876fee88e1ddabb478f2b5ee0
                    • MD5 SHA1 SHA512
                    Submit Download

                    s_close2x.png
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_close2x.png
                    • Size 631B
                    • SHA256 68df674391ddb32170020e5b55b8df9ac1bb5274419dbf8748ce53efb18584cf
                    • MD5 SHA1 SHA512
                    Submit Download

                    ui-strings.js
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
                    • Size 1KB
                    • SHA256 5bc633d52bc4345c9cc4ea7cf49422a85a9fe401faf3239ef72b53aa0dd667ee
                    • MD5 SHA1 SHA512
                    Submit Download

                    close.svg
                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\close.svg
                    • Size 1KB
                    • SHA256 03e98670a1d9049b8e1f02c4fdd449d098465f7578ee0eebfaf3f138a78301ae
                    • MD5 SHA1 SHA512
                    Submit Download

                    Staging
                    • Path C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Trust Protection Lists\Sigma\Staging
                    • Size 168B
                    • SHA256 e3c2af35d1dfc500e16f826a071cc311bf55003a3de77de7ea3376c6b6fa2857
                    • MD5 SHA1 SHA512
                    Submit Download

                    identity_helper.exe.manifest
                    • Path C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe.manifest
                    • Size 1KB
                    • SHA256 4740d289d0a31bc1fc00e255845b3d8ba7cec2d6d0ee92177d23aa293f9fca3a
                    • MD5 SHA1 SHA512
                    Submit Download

                    msedgewebview2.exe.sig
                    • Path C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe.sig
                    • Size 1KB
                    • SHA256 5efe288bf88e3a66ead387ee327d7f2ae6637fa507e14271cd1c30024279945e
                    • MD5 SHA1 SHA512
                    Submit Download

                    MSFT_PackageManagementSource.schema.mfl
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\it-IT\MSFT_PackageManagementSource.schema.mfl
                    • Size 1KB
                    • SHA256 1c55f2acd075736d1fccd0e7bca9292072d933e2811b8e042c172e9e7f112f39
                    • MD5 SHA1 SHA512
                    Submit Download

                    MSFT_PackageManagement.schema.mfl
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\en-US\MSFT_PackageManagement.schema.mfl
                    • Size 1KB
                    • SHA256 424c38504d88d0f7b3691471d18b1a21141b9e31b1cee5dad278963613252480
                    • MD5 SHA1 SHA512
                    Submit Download

                    MSFT_PackageManagement.strings.psd1
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\ja-JP\MSFT_PackageManagement.strings.psd1
                    • Size 1KB
                    • SHA256 e2e70c766bc6c37a41a221b53a0e62ef616c8fbcf7a244c4863f6a74c06b8e64
                    • MD5 SHA1 SHA512
                    Submit Download

                    PackageManagementDscUtilities.strings.psd1
                    • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\de-DE\PackageManagementDscUtilities.strings.psd1
                    • Size 1KB
                    • SHA256 a6f6e59f677587238a2b472d2f214b1c95d61d86a7973cdd89a61e2c05ca7594
                    • MD5 SHA1 SHA512
                    Submit Download

                    7z.dll.id[9071A6C5-2275].[[email protected]].help
                    • Path C:\Program Files\7-Zip\7z.dll.id[9071A6C5-2275].[[email protected]].help
                    • Size 2.5MB
                    • SHA256 e4f5cb4eb0f6775254fb2004b5b8db0a90e7baff9a5ea1f6f99f921a8654c1e1
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    relaxngcc.md
                    • Path C:\Program Files\Java\jdk-1.8\legal\jdk\relaxngcc.md
                    • Size 2KB
                    • SHA256 0c19ba9eeecab3cbbdf38da08c3fa0266f10ce8166e056715931efc543335eeb
                    • MD5 SHA1 SHA512
                    Submit Download

                    THIRDPARTYLICENSEREADME-JAVAFX.txt
                    • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
                    • Size 190B
                    • SHA256 07ec9bf950252d0254d4d778698c2e4173f36dbc3f57f51f34d1b85a07c2eab0
                    • MD5 SHA1 SHA512
                    Submit Download

                    invalid32x32.gif
                    • Path C:\Program Files\Java\jre-1.8\lib\images\cursors\invalid32x32.gif
                    • Size 153B
                    • SHA256 f1663cceeb67ba35c5a5cbf58b56050ddbe5ec5680ea9e55837b57524f29b876
                    • MD5 SHA1 SHA512
                    Submit Download

                    Slipstream.xml
                    • Path C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml
                    • Size 744B
                    • SHA256 1b66520d471367f736d50c070a2e2bba8ad88ac58743394a764b888e9cb6f6be
                    • MD5 SHA1 SHA512
                    Submit Download

                    POWERPNT_F_COL.HXK
                    • Path C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_F_COL.HXK
                    • Size 114B
                    • SHA256 802bbf1167e97e336bc7e1d1574466db744c7021efe0f0ff01ff7e352c44f56b
                    • MD5 SHA1 SHA512
                    Submit Download

                    POWERPNT_K_COL.HXK
                    • Path C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK
                    • Size 113B
                    • SHA256 951b1c95584b91fd8776e1d26b25d745ad5d508f6337686b9f7131d7c2f7096a
                    • MD5 SHA1 SHA512
                    Submit Download

                    PersonaSpy.html
                    • Path C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\PersonaSpy.html
                    • Size 1KB
                    • SHA256 1777e4f7955cb5900c97d92081efc4b11704ee3b265717a7d7152972b49a36c4
                    • MD5 SHA1 SHA512
                    Submit Download

                    s641033.hash
                    • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\B8436FDE-48B5-46DA-A041-D5945D20D942\en-us.16\s641033.hash
                    • Size 106B
                    • SHA256 34dbd6bf55d0d075d666181d9278b8387482a8b5804e44e1ddaafe6876dadc15
                    • MD5 SHA1 SHA512
                    Submit Download

                    telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112.json
                    • Path C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112.json
                    • Size 121B
                    • SHA256 d8129de4286dc4fd245c7776b51d76aaa727956e8fc88ff928eb69ff7fc17e0b
                    • MD5 SHA1 SHA512
                    Submit Download

                    telemetry.P-Eco3PTelDefault.json
                    • Path C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json
                    • Size 57B
                    • SHA256 65a16cb7861335d5ace3c60718b5052e44660726da4cd13bb745381b235a1785
                    • MD5 SHA1 SHA512
                    Submit Download

                    0a8c1492-65ca-6a01-de25-0e183559d10d.xml
                    • Path C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\0a8c1492-65ca-6a01-de25-0e183559d10d.xml
                    • Size 2KB
                    • SHA256 68193f3f98611b2aa42be4d2995b0b9a2465277c7520231324a08460639a41a5
                    • MD5 SHA1 SHA512
                    Submit Download

                    760b9474-00b7-d44c-6932-5744e863a1e0.xml
                    • Path C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\760b9474-00b7-d44c-6932-5744e863a1e0.xml
                    • Size 3KB
                    • SHA256 7c23b4ec3b42f260dfffadaf7d59a0efcc8f6547149b45907b1fc5242a4e6c2e
                    • MD5 SHA1 SHA512
                    Submit Download

                    bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1.xml
                    • Path C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\bb26a0e5-d235-0ee6-0c36-6d5e185fa5b1.xml
                    • Size 2KB
                    • SHA256 77544451f210250b90637e7ecfebfc0ce00398ef964a2d46f1b92adf4d6f97a2
                    • MD5 SHA1 SHA512
                    Submit Download

                    System Configuration.lnk
                    • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk
                    • Size 1KB
                    • SHA256 f5ea79165516de2e7e1efb53d016983f5d18c3184413f044a4002f4b751c918b
                    • MD5 SHA1 SHA512
                    Submit Download

                    state.rsm
                    • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm
                    • Size 634B
                    • SHA256 18b602cdbb7656129a359046fc68faf1b990da88c6c3b3e6b20c1df399cc0645
                    • MD5 SHA1 SHA512
                    Submit Download

                    8DFDF057024880D7A081AFBF6D26B92F
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
                    • Size 834B
                    • SHA256 e3833793f7412667cdbe15693f5dc4994934d1a6695392f8bebb74f985658256
                    • MD5 SHA1 SHA512
                    Submit Download

                    EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A
                    • Size 313B
                    • SHA256 8dea6b6aa16702f424f2679d756a6beb769c64ba4b1c74da279e32cfceaeb396
                    • MD5 SHA1 SHA512
                    Submit Download

                    7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
                    • Size 404B
                    • SHA256 0441772f66559a1c71f4559dc4405438fc9b8383ce1229139257a7fe6d7b8de9
                    • MD5 SHA1 SHA512
                    Submit Download

                    EAF8AA29A62AB29E614331747385D816_5C1009244D39FCE23AF8F277537F2613
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EAF8AA29A62AB29E614331747385D816_5C1009244D39FCE23AF8F277537F2613
                    • Size 400B
                    • SHA256 7a12e561363385e9dfeeab326368731c030ed4b374e7f5897ac819159d2884c5
                    • MD5 SHA1 SHA512
                    Submit Download

                    CURRENT
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\CURRENT
                    • Size 16B
                    • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
                    • MD5 SHA1 SHA512
                    Submit Download

                    messages.json
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.76.2_0\_locales\hr\messages.json
                    • Size 935B
                    • SHA256 e5cbc8e3a6e843009fc9a9de7a83df9d05532e08d48da06c66f907f58d0c745e
                    • MD5 SHA1 SHA512
                    Submit Download

                    dasherSettingSchema.json
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.76.2_0\dasherSettingSchema.json
                    • Size 854B
                    • SHA256 445c811c35e2fbd4aa59389ec805492c7b2db50d65f5d161417ce8302b103fbe
                    • MD5 SHA1 SHA512
                    Submit Download

                    MANIFEST-000001
                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\MANIFEST-000001
                    • Size 41B
                    • SHA256 9e1736c43d19118e6ce4302118af337109491ecc52757dfb949bad6a7940b0c2
                    • MD5 SHA1 SHA512
                    Submit Download

                    99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe.log
                    • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\99d44441e2e9b74bf96787a2789ab5f7_JaffaCakes118.exe.log
                    • Size 1KB
                    • SHA256 48178f884b8a4dd96e330b210b0530667d9473a7629fc6b4ad12b614bf438ee8
                    • MD5 SHA1 SHA512
                    Submit Download

                    the-real-index
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                    • Size 48B
                    • SHA256 17b0761f87b081d5cf10757ccc89f12be355c70e2e29df288b65b30710dcbcd1
                    • MD5 SHA1 SHA512
                    Submit Download

                    LOG
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
                    • Size 277B
                    • SHA256 5cdcd733b8b630509bac08589db291ddbde33d79f64664cb9582e66589555257
                    • MD5 SHA1 SHA512
                    Submit Download

                    LOG
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
                    • Size 279B
                    • SHA256 74ca16b1138459ef2afb19324097332626ee7c897687c5adc5488f93bf0c11ff
                    • MD5 SHA1 SHA512
                    Submit Download

                    LOG
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                    • Size 297B
                    • SHA256 d99258f5d81067df4e95825381104fe6c90d04d01bdd2915954dd06f75d07c10
                    • MD5 SHA1 SHA512
                    Submit Download

                    00000016.bin
                    • Path C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin
                    • Size 1KB
                    • SHA256 8f6abb9e202dd8027ac9abbd475a24e62659a0b2683613f219c21d1238816ed7
                    • MD5 SHA1 SHA512
                    Submit Download

                    00000093.bin
                    • Path C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000093.bin
                    • Size 647B
                    • SHA256 bbfa41253ad301a1cd9c7f6321bff365068178f26cd84e8afb127fb4001bc4be
                    • MD5 SHA1 SHA512
                    Submit Download

                    desktop.ini
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini
                    • Size 174B
                    • SHA256 eaae98aa73fe0b561c8b02607a524fb4853bbe81c6de8c3d8a9b7449366809d4
                    • MD5 SHA1 SHA512
                    Submit Download

                    iconcache_96.db
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
                    • Size 24B
                    • SHA256 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
                    • MD5 SHA1 SHA512
                    Submit Download

                    Windows[2].json
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CMPDKH9Q\Windows[2].json
                    • Size 620B
                    • SHA256 b5afda9531d50eca02d7e10dd6a5e5a9346ef452f1aea17049b4acf84be62641
                    • MD5 SHA1 SHA512
                    Submit Download

                    07 - Event Viewer.lnk
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
                    • Size 1015B
                    • SHA256 1f9ec15f6ff239e14a3a243a98f19ae7db16d425a63b2da0908cc0ffcb1258e7
                    • MD5 SHA1 SHA512
                    Submit Download

                    ads-track-digest256.sbstore
                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ue3bcu6m.default-release\safebrowsing\ads-track-digest256.sbstore
                    • Size 1KB
                    • SHA256 f18f13c653940384b01c154887477150b1c0669d5620d263f72bfcfa57daee09
                    • MD5 SHA1 SHA512
                    Submit Download

                    tinytile.png
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png
                    • Size 1KB
                    • SHA256 46dcb7a9e7bde1f57e5ed2eef9257d2d0ad622c1b3da32700f6d9e2ec4a0e287
                    • MD5 SHA1 SHA512
                    Submit Download

                    imprbeacons.dat
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\202914\imprbeacons.dat
                    • Size 1KB
                    • SHA256 1200e60a51f6ac39e23acc92ae56b0f8f9c007712e0f53ba8232d840ac33d904
                    • MD5 SHA1 SHA512
                    Submit Download

                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9
                    • Size 471B
                    • SHA256 9d2ce1c032646d2a3381b68bc9201e3dcd53b764e83a0d356d67cc4926ece015
                    • MD5 SHA1 SHA512
                    Submit Download

                    80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                    • Size 412B
                    • SHA256 9ebc694d4895efc802ea27714a71986f293edf4b63e9918c27d65871b06f43a9
                    • MD5 SHA1 SHA512
                    Submit Download

                    0.2.filtertrie.intermediate.txt
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{134b892d-3314-486d-a4fb-dc640f83f3d3}\0.2.filtertrie.intermediate.txt
                    • Size 5B
                    • SHA256 8855508aade16ec573d21e6a485dfd0a7624085c1a14b5ecdd6485de0c6839a4
                    • MD5 SHA1 SHA512
                    Submit Download

                    desktop.ini
                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini
                    • Size 338B
                    • SHA256 4bafbcbc4cbbda94d0a315a09176de0ce6872cf1d85113539a7b04ff2360efa1
                    • MD5 SHA1 SHA512
                    Submit Download

                    previous.jsonlz4
                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ue3bcu6m.default-release\sessionstore-backups\previous.jsonlz4
                    • Size 902B
                    • SHA256 8e1b2f3c38d9583ec30e0f44459700b5d81f4b6a2b2eefe88198c9230ec408ec
                    • MD5 SHA1 SHA512
                    Submit Download

                    .metadata-v2
                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ue3bcu6m.default-release\storage\permanent\chrome\.metadata-v2
                    • Size 42B
                    • SHA256 094c4931fdb2f2af417c9e0322a9716006e8211fe9017f671ac6e3251300acca
                    • MD5 SHA1 SHA512
                    Submit Download

                    1 - Desktop.lnk
                    • Path C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
                    • Size 1KB
                    • SHA256 462fa5c6568794276673c9159500918afddf8f170e580fd1f3d483c48934b050
                    • MD5 SHA1 SHA512
                    Submit Download

                    desktop.ini
                    • Path C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini
                    • Size 75B
                    • SHA256 367467f43d580c3c07040a78c7890ae4262dad4778878f9a49d5f652c81689a5
                    • MD5 SHA1 SHA512
                    Submit Download

                    06 - SystemAbout.lnk
                    • Path C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
                    • Size 1KB
                    • SHA256 43782c4d9b63da7cfe64f6a9a06a6cf8007d2a793b8a5f94c9b962bb5cb25b0d
                    • MD5 SHA1 SHA512
                    Submit Download

                    On-Screen Keyboard.lnk
                    • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
                    • Size 1KB
                    • SHA256 d0e438519a8e2075e13430b66debeb7204e5e8ab41fb24eaab20db0bdb66d835
                    • MD5 SHA1 SHA512
                    Submit Download

                    RecordedTV.library-ms
                    • Path C:\Users\Public\Libraries\RecordedTV.library-ms
                    • Size 999B
                    • SHA256 84ba348aafb41879cfa434256c8657baff00a9bf41d5ebe041b0ef87e7419f28
                    • MD5 SHA1 SHA512
                    Submit Download

                    info.hta
                    • Path C:\info.hta
                    • Size 5KB
                    • SHA256 07af097f334235e2c168a5b03b6503cd287bc7a6ac41cc676f3ad6acc9f1ac31
                    • MD5 SHA1 SHA512 SSDEEP
                    Submit Download

                    memory/1308-16-0x0000000074BAE000-0x0000000074BAF000-memory.dmp
                    Download

                    memory/1308-17-0x0000000074BA0000-0x0000000075350000-memory.dmp
                    Download

                    memory/1308-2724-0x0000000074BA0000-0x0000000075350000-memory.dmp
                    Download

                    memory/2964-2451-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-29-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-61-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-64-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-57-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-74-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-90-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-895-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-2444-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-12-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-30-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-31-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-32-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-27-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-36307-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-28-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-13-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-10371-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/2964-9-0x0000000000400000-0x0000000000413000-memory.dmp
                    Download

                    memory/5036-6-0x0000000002EA0000-0x0000000002EAA000-memory.dmp
                    Download

                    memory/5036-0-0x0000000074B0E000-0x0000000074B0F000-memory.dmp
                    Download

                    memory/5036-8-0x000000000AE60000-0x000000000AE74000-memory.dmp
                    Download

                    memory/5036-7-0x000000000AE20000-0x000000000AE46000-memory.dmp
                    Download

                    memory/5036-1-0x0000000000B40000-0x0000000000B6A000-memory.dmp
                    Download

                    memory/5036-2-0x0000000002EC0000-0x0000000002EC6000-memory.dmp
                    Download

                    memory/5036-3-0x000000000B160000-0x000000000B704000-memory.dmp
                    Download

                    memory/5036-14-0x0000000074B00000-0x00000000752B0000-memory.dmp
                    Download

                    memory/5036-4-0x0000000074B00000-0x00000000752B0000-memory.dmp
                    Download

                    memory/5036-5-0x000000000AB50000-0x000000000ABE2000-memory.dmp
                    Download