Analysis

  • max time kernel
    150s
  • max time network
    127s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    16/07/2024, 10:46

General

  • Target
    GrandCrabV5.0.1.exe
  • Size 2.7MB
  • Sample240716-mvb1ts1fre
  • SHA256 b4902aa2802656f873111b272c03ad93ca2dd53c0c612b9d310c982f4afa497b
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • Renames multiple (4196) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GrandCrabV5.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\GrandCrabV5.0.1.exe"
    1⤵
    • Drops file in Program Files directory
    PID:4596

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aic_file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
        • Size 50KB
        • SHA256 c026337148a1283082f863c244c0861ea619b3c6463ccb83893217478d803457
        • MD5 SHA1 SHA512 SSDEEP

        selection-actions.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
        • Size 1KB
        • SHA256 d422963367fca0d7b41ef84a9a4b60d5759173a3bdfcf8bfed2e041844549544
        • MD5 SHA1 SHA512

        selection-actions2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
        • Size 3KB
        • SHA256 16119a87bd3a5d081ef72e78e470101604858fae9b51c02e3efdfff593389624
        • MD5 SHA1 SHA512

        example_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
        • Size 688B
        • SHA256 42d876eb3f2c4f5549214700a797dc39b1c44d7fa9b368cccb2e970958412aca
        • MD5 SHA1 SHA512

        example_icons2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
        • Size 1KB
        • SHA256 95eabd619b3d21e110f5581e50ef3e0a3ac856d47719881b35f46a69d1600bb6
        • MD5 SHA1 SHA512

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
        • Size 448B
        • SHA256 e10b85d0afc4232197ca845e1db3c4c598e46c83da4c74913fb14d359e64faca
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
        • Size 624B
        • SHA256 f94f4451b9da490c9afd612994dea4ba4a37968d068023514d73505bb7806c15
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
        • Size 400B
        • SHA256 caae4bb024fce2891c861f58cc43034b3ac5902580e9cbd24fa49bb96dab53f6
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
        • Size 560B
        • SHA256 d417073bd8dc1c8c7baff457ddfecbc0e575578a728f3dd21f7ec5bbe2cd1e3b
        • MD5 SHA1 SHA512

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
        • Size 400B
        • SHA256 0d19efd9bec8f1cf35fc2d451c686aaeecc7191bc0cf82f033119d7efa1beab0
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
        • Size 560B
        • SHA256 ca41d7867414b769a23f07b3f41dc348a91d2a5a9e54c4981f5648d40df70b9a
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
        • Size 400B
        • SHA256 fbf012339feb245cedeba1cd3b4f6e4a485d7662e9e0efabc288b8b371002d43
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
        • Size 560B
        • SHA256 ab53152ab9dfbc7b964c8d798a48a37546438f38975cdcfa7ce3f1ecd0687a5f
        • MD5 SHA1 SHA512

        icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
        • Size 7KB
        • SHA256 08e76e101463a6fe5914e35e5fd56d779789d8669cb162593c625c36f3139403
        • MD5 SHA1 SHA512 SSDEEP

        icons_ie8.gif

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
        • Size 7KB
        • SHA256 1907d193d9f15904f0e0c785f69e738d3016c97021d3a07ad66970b4b93af98b
        • MD5 SHA1 SHA512 SSDEEP

        icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
        • Size 15KB
        • SHA256 1e8ae8fee25279123c0f915d684047cb8fd26767df225e4e908779f6ef299a70
        • MD5 SHA1 SHA512 SSDEEP

        new_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
        • Size 8KB
        • SHA256 fcca9d9a830ed4a9b682b90473bf0ebc89fc690783e8e4f5ea6784d9390d19e4
        • MD5 SHA1 SHA512 SSDEEP

        new_icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
        • Size 17KB
        • SHA256 9e7d506f7b8f278d1ba861714e8faa84f212d9858c02d085b66748bb46234cd5
        • MD5 SHA1 SHA512 SSDEEP

        bg_pattern_RHP.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
        • Size 192B
        • SHA256 1f1b477d6fbf767929bcaf28e514788ab0f4ae49904b20da0626ec895bf9e002
        • MD5 SHA1 SHA512

        bg_patterns_header.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
        • Size 704B
        • SHA256 6f29c65401da681d654c833d1a6d5f3fe049e55fee4a2b35383e898f4b18022a
        • MD5 SHA1 SHA512

        illustrations.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
        • Size 8KB
        • SHA256 6d5acac4894a8bfb867ee61110046ed3fb32c849fe9714f0b3d0445a88752648
        • MD5 SHA1 SHA512 SSDEEP

        illustrations_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
        • Size 19KB
        • SHA256 4dfacf3c7df76776d0f25ef47e239d8c165939012d9080f8eadce0f317a6d9ec
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll
        • Size 558KB
        • SHA256 8ce088bae2e925a56d4056a0369f35f9d89187cb394df41aa6a110540bcd3226
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll
        • Size 95KB
        • SHA256 405c83fbc0b4a5ec19c36dd33499796673dc80adaaa5d5bdcaf02e5e5ee5e1f9
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140_1.dll
        • Size 36KB
        • SHA256 2937338f3a2b6e3f508a8aecc03822929b2cacd51315c239b6634b99e25c0423
        • MD5 SHA1 SHA512 SSDEEP

        win32_LinkNoDrop32x32.gif

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
        • Size 160B
        • SHA256 6a811485326f6946a50cc0eee067870482bf94c467ab4a90bc6d4fd6b31f0c32
        • MD5 SHA1 SHA512

        THIRDPARTYLICENSEREADME-JAVAFX.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
        • Size 192B
        • SHA256 40fc2651b7f22499a629a7d0ec788ce31330249a08c3d8e2f7b2d7bd2524f94e
        • MD5 SHA1 SHA512

        THIRDPARTYLICENSEREADME.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
        • Size 192B
        • SHA256 b893a8abfb68dd574d5f5d72bdfb5928aff6d1070101f96e096c0298651acfd7
        • MD5 SHA1 SHA512

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 11KB
        • SHA256 797cddced3f762e8e0e999ceda772996337ea3eb2b8fbe6ab11539480ac99717
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 11KB
        • SHA256 fef257f6300a478c017f5161b445d12ca1a49bdb11155fc04531e8725c4f1627
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 11KB
        • SHA256 ac4596d312ad715d3462ce83ed91a5a31234da9c297dbd21bdbf7015c4791bd1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 11KB
        • SHA256 13c301f786315df2f0c6acc1d7249e6a514fe74bc48e8511c824e4adc5125c1a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 11KB
        • SHA256 9fc5424865e3fd6cb4cf7a9985e25a04f28d9aba188731efd7e7e458d9facf66
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 14KB
        • SHA256 52d862e126df55d641fbb94aa37e046ba74731966ada1a9963b40b991e10ff17
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 3e93ba93120576d5d1080c2d016a3f5106f27ddc8e14ec525ebf8a8b7207886d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 58422d54cce51a2c648bf491e29b6949d71e7f2d4336fed07d9528dc388cdacd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 11KB
        • SHA256 258b7da2318311010b21f298d5c8738bc4f1e57e713380415f49e91af79f817a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 11KB
        • SHA256 d36d4af26a5c5ab617ad0ade3c8a8870176d14b0b22aefd6b08c888b9a8d657d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 11KB
        • SHA256 d30ff606f07bae1990002465c74eea2b3b5c1100a2d632a7cc36889aee2b99f2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 12KB
        • SHA256 ef1264ff88db9f57ad4682047d0dbf8e17e7d9c94f721fac0a28de2156409bd1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 b7e7934fd85408935cb46cc757fe0855783f7eb09100c87eb5d6e066749d6362
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 11KB
        • SHA256 ae230627cb17c242aaa7d6062604f619375442535317a9b699414866bbe3a411
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 11KB
        • SHA256 8f89ea418f70a3c2076539a9fd325f16810736aec4bb416283ce0f6a732bfda5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 12KB
        • SHA256 2bcaf847529fc9a632bb4479953975fc8e24f07365eace8def663ba1bf75c98c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 13KB
        • SHA256 679ded5bcb574fff906834ae229068124e496e6f68d301701783f31e08c92391
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 ea99f9fef85ee5bced81a1759b4762df710fe1f415235c752d4b986d683439da
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-profile-l1-1-0.dll.anonymous

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll.anonymous
        • Size 11KB
        • SHA256 0a60ef83f7d7578d4f10a97cdc0e8ef61798b89df0fddd3f79d6ebe6250aaabb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 11KB
        • SHA256 ac7ee98b30ca8fa0d5a1097b0008e7518c90c647faeaf621ba8878fafa087c80
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 11KB
        • SHA256 f10981a328634df0b4bc187e4220a6d257623e5691e6117a3e3862d8d5d66c2d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-1-0.dll.anonymous

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll.anonymous
        • Size 13KB
        • SHA256 5a47927687a5924d1d2e37e958cb48418bb33d9582aeaac760f64926876dd559
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 9f3e4ae2aea4bc867c50a40f6e4a38d6e7e09a3edf983a2973937084bb2f0d84
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 12KB
        • SHA256 2238e26f3c5d917f68630e0b869f96668fcb52cbff1e197322d00bed7b711acf
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 98afed8f7f4af8bc2d9069424daa5dddc7951eb149fbddd1d30e96ad69d6cdcd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 11KB
        • SHA256 86d8d13f1043aff6be03f645269260323f6cf5534e8f38a06a776ed4482c7954
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 118c8a96d2c0d8bc94b92118612e0daa6c489faa50516fc14a7500193bf2d662
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 801b325df5c06d365a04f237da10aa1dcdb2a2e75e9aa6d9a56c3a7f7f3c8110
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 e0d75eedfb514af737b9064d52d87c41fd1543873e91ed70e22afae3b5029e31
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 f0d780f5988e7a91f6a88be3779b1ec32e8ad29b7fecf35c334d5ce41b7e91bc
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 d837132e7791f096b828453e7ec69e377a565934b870752ad5c8bb5978e575f0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 97c73d314caca363413f8bfc7f7da5377d6f62f8fd6bb5af1fcdecab24454064
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 5db471ec4ab822bddf48fa0575bbd2453fc920a7186f0e8006b52187b651dcd0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 19KB
        • SHA256 5800542759b64d69c610bd46dc8304eec3fd97bcf9d9b5ea3f90b2f50eb57550
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 62KB
        • SHA256 692c51486ee3effcb13ee7f42f0df02d86e557d2e25a9978fb8623664cabaac9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 cafa6f537e88c12096a67c2a332d465b5b842752e2d9a036aa21b1858d2da23d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 87005660a7520c0d1fc438fa93b7b99e782e27dc4cf3fcb2220af901a157e7d4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 74b593cd232a5e316112dac6b8867d583ce06b6205bd605a7b0db9e7b59317f7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 10a98405944418bf246c710f366c1ddfe7c07466ddd74732fbcace89df7dde67
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 8ed456735903ba504108d6267ab46f3c99dd9e5a23a8a5786618de2357e5d63f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 6f97ea35c20357506d2b508fec5bb9f55d5af0c5e8be69a36a271acb158d2953
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll
        • Size 1011KB
        • SHA256 35d75b6d868b570e9e361dd0db9998710e2011759e1f98b2a60f370af8062c6f
        • MD5 SHA1 SHA512 SSDEEP

        OfficeClickToRun.exe

        • Path C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
        • Size 4.1MB
        • SHA256 c0aff9a761a8ecdea1fff569ecad6cffa068d62221a1f0b1315ed3914322d219
        • MD5 SHA1 SHA512 SSDEEP

        ClientSub2019_eula.txt

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
        • Size 48B
        • SHA256 dde051ba5d8323fc119846c64282c34c9e26486dc546c37edd1f75204417a940
        • MD5 SHA1 SHA512

        Localytics.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Localytics.dll
        • Size 16B
        • SHA256 2647929d2e0acb3896ca1f4657cbf1d097332f699d9fa5ba7a22a19c2da0f620
        • MD5 SHA1 SHA512

        zlibwapi.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\zlibwapi.dll
        • Size 274KB
        • SHA256 2f73ddc5672feb6148b241654b159891c3205f69521e9dae683c002ba2bf63bf
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 794204fe9f006290a2f6e991b2fd13a72c94c474f5edcb02d17fc5b71dfcf6bf
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 21764c51108cc776d56979323d9f229f09f5bdc04bbf7f97b4d8e3c7981e649f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 cbfe1b3ff37f80ccba7296591f990466a3c73264af0471e0e2a84c47ab4b0513
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 33047d0c97f42196f53902cba6b99155c74b3ca1edb038a89d26623dc32c7ea1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 b1527037cf9b251bce69dfc0d2bff0ceed61af8c79206452000ba3b07804c6f8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 18cf063c020c51064fdf6e53e043c83c03843c7a2ec049afb68e3eab881dc722
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll
        • Size 11KB
        • SHA256 69be72f30d244e4f26a70d63d382c881dbddca33bf9a00988f9bc542c00bc069
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 22bab200abae8b9caa455bd9e85fe16ddd2b4c8a26b0c65c8c6562d34c5d401e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 813373a4bd79f642c3a7306e10e2ff3b70d9842ccbf34d60a626f3dce6e99d17
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 f562aedac4dab8337e6fa71bc93148319a45c1eabd50adef5bda823f659b37f5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 b56e40f2f6a5e0e8a79dcb68fdf5938efdcec2cd036ab8e75e572f052d60a8a8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 20ecb59203e30e1fd9d9529f9dab0be9f2b87470a56fd093a37152c1e775a926
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 aa7b46d31af1dc6ae5e53f2718bd2d7d6b8701488be3e4919285be0fcca40019
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 9be7956ecf10c96c1c190e396c728b74c08a56b534069ba69786cbc4bf1414da
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 c7ba8288e8f5557e437bb59c0e506e521d221877dd3e621ba9e502d041352d79
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll
        • Size 69KB
        • SHA256 78aacedab1c890928d7f872ec1be05b31a8d28a701d6a8a880a73891bd127f85
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 a9527c42be5eafe6ad667d4b804bd338df6a7c727591c4b52748b22aec6546e2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 f08358d3978dc5da1cde95191a2a085caf8531f3b45d22f67dda6c604959d352
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 4c5716ec5cc38149dd61d2bfb0d2767065a053d6d031415bb17dd7e3eb962596
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 ce037989fcd4623e672b0991e0c96e19a5cb2d5e64be67a378ab816da11d6d8d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 27907a9d9eb829a9bc3deaef36637b61426873a4e9b83f94d6a28c4138ed67e0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 66d4e27f06e485ffe6f490754ffbabb1ef0e1edf6cd1010b44f9169ba324cb6e
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\concrt140.dll
        • Size 324KB
        • SHA256 2f53ffde91beec476c96211faa548067966bfa541f9a6daa91b4a614513e2020
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll
        • Size 358KB
        • SHA256 d40943465d22446e5cde193326351f7a386f50778bdbe266bbfae4fbad388948
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll
        • Size 5.6MB
        • SHA256 c29ce8044b31f16d398fa6a9c34d3f67547d216806c4aaae1ada03e970705e72
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll
        • Size 644KB
        • SHA256 674eb59e5268e6c86f64a712877d2d5c96d104b82ef2a6e20e6195312bb9b135
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll
        • Size 613KB
        • SHA256 89af2af20d56f2beb0eac15e1c02cc32e83077ddf08b6931e9148fc124c820a5
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll
        • Size 940KB
        • SHA256 276db914850b615e11692677e137969b94078ed38c807598bb35758c5624eb33
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vcruntime140.dll
        • Size 83KB
        • SHA256 70196074aee6d24461f5d1b53586e2f1b314128f9255ece141b7209e33572563
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 6b85e797cb6520343d6e1567684a81dae378d7e99a27c9c4516ccfa2890ff4d1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 7b81d72bbf5b5c1ac454dfeb6bf81d5965a38a32d10ff2294c6885531c8c80fc
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 3d2ec90935d08a0d6b0b08c26df571efa858da77ebfd38bf7c700ed173465eec
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 ccba8190be34183c5eed2675b6317bddb00bd885735593130402f7e110aca475
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 ba7ab25853340688231c092087f95292db92758ef94ab470d640f56c6a1b209e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 10ad43de917ba36ebd16565fb860a0728a70eb252ee939382d1544c0ae574bcb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll
        • Size 11KB
        • SHA256 75408f00487c750eef75a65d7589cc6e8017ce54285a8a1fbc5505a36356dc49
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 710267ffbd3cf32d9061441c12881f496b36c021f25b61565d378c13b41b3544
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll.anonymous

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll.anonymous
        • Size 22KB
        • SHA256 af4941593e44d9a54d891d23a811bd29c2d3b2dc09d2221e278b30724495f4be
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 f416452595c52c28b7751e49c391947ba146deabc304649223ad6035e578aa56
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 671f18c91619abf434c3e75b06753665fd0f72d7d3a666dba71c5fe8f9b64a28
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 e3c56bfdb0c4037b5a5f6fc9c7de52db6c637ce438b23f8fd2b6da40c7c45b9b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 f4db9139de6926064e09fef8301786f384b6b4780dc2a2f8af712c28946479f8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll
        • Size 28KB
        • SHA256 65bf40d749e3c4b966b3c1564f83b056d97455a1d81af85dc7c7b831221d9606
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 66f97fb58b1a6dc58bd354bf2ec3af17d7d0f2587ed596953fc676540bd291ec
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll
        • Size 71KB
        • SHA256 a3f835f77ec5c063462a29d162367e41bf633a3f0510c6f30b88353128c6b965
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 f04431df9eca82358a7daff6a6a758ef7b61e2eb155842b73de60ac50cf65c61
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 6d12277748e5479ea576a3d302f4c2d9bcb7aa7a261224d0c9b4f0091b13f2ab
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 f23e5bbf90b1883f0a6f2133f0d8507d8e9c1ee6b7dc129fe06f6dce592be925
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 f91c4e196b69247de0c163cfb15043eb62f3b019afefb627a316acb3e66d14bb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 33c9b459cfd629a0aaf255d00dcb59f36bcda242afde6c0f91f5973ab4a03e28
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 6b134037ffddd55cf698ab01ffbdc3b862a4eb8af1d8aae2a2fc2ac6dd258f80
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll
        • Size 244KB
        • SHA256 4ef18d4cf151269d85f922f3a54a48524a2c124db6f4dd16915532e054f41466
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll
        • Size 4.8MB
        • SHA256 301948f2aae3b94163bbe36e5d2297828a41ff282f6c7f4e2421472bc0b65555
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll.anonymous

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll.anonymous
        • Size 444KB
        • SHA256 dcf38a294c93b0f26e505cb5263f45d2e660edcc23f1db6b1ce06e18fa06b3de
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll
        • Size 439KB
        • SHA256 16b2c7433fd1a3599d6042efa3db0ec8544860949c01505a55d8d260f01e9cf9
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll
        • Size 946KB
        • SHA256 f5c40271408deda35dd4bd2defe55200ce7fb6ac285676b90e7145b5c6b51355
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll
        • Size 879KB
        • SHA256 50177947c397338bc9ca3d6b7939f626f910b65ae9ac53ed9f184bfbf614b19e
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll
        • Size 263KB
        • SHA256 e824590990acce52eda6aeb6309d9dd1021f6c36d4750fa28d2b7cd531da921f
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll
        • Size 79KB
        • SHA256 35770fc1bc557b09e9f93473847d849ee0af92eb43d21a4d58437382f2498833
        • MD5 SHA1 SHA512 SSDEEP

        misc.exe

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
        • Size 1014KB
        • SHA256 15a0cb262d95907d170759076777fb85894270336dab4af44e611fe9d3a8b401
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 84757e285851f54fc4b5b3763b2952b484500cf5f0b84fea4648a8a9da524880
        • MD5 SHA1 SHA512 SSDEEP

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 252972ad651ce01e20890b14d6b4dbbe989054c558cc1d08421d01ea2ec26681
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll
        • Size 116KB
        • SHA256 e948e524262abf4ab660f01ef6f6af3470b1c616bf9bcfb6385a46d8d9d9f92d
        • MD5 SHA1 SHA512 SSDEEP

        memory/4596-2-0x00007FFA039F0000-0x00007FFA044B2000-memory.dmp

        memory/4596-1-0x000001877C3B0000-0x000001877C662000-memory.dmp

        memory/4596-0-0x00007FFA039F3000-0x00007FFA039F5000-memory.dmp

        memory/4596-3-0x00007FFA039F0000-0x00007FFA044B2000-memory.dmp

        memory/4596-2270-0x00007FFA039F3000-0x00007FFA039F5000-memory.dmp

        memory/4596-2751-0x00007FFA039F0000-0x00007FFA044B2000-memory.dmp

        memory/4596-3088-0x00007FFA039F0000-0x00007FFA044B2000-memory.dmp