44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec

Analysis

max time kernel
96s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 02:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
Size 936KB
Sample241114-ctkw8stblc
SHA256 44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec
MD5 d996db1d2481bb287b2adb466beba234
SHA1 6d84750e42c242ab2461c673ac8b2ca2d766ca41
SHA512 da537e6e0a62510e17748dd23e17d3c18af22eb133e56c52f7f82ca553e99b8a057b519b462cf19a2ea95e72e4fb700e2d5222feb976af47bdd7fce3c8539f14
SSDEEP 24576:cWZTxUOmOdajOpFBvvgLn+xHjO9ZJUfYrrW:cwvgb+xHjO9Zlr
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

credential_access discovery ransomware spyware stealer

Malware Config

Signatures

Renames multiple (7778) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops desktop.ini file(s) 31 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Pictures\Saved Pictures\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Pictures\Camera Roll\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Desktop\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Favorites\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\OneDrive\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Saved Games\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Videos\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Downloads\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Links\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Pictures\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Contacts\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Videos\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Music\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Downloads\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\3D Objects\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Desktop\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\AccountPictures\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Libraries\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Public\Music\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Favorites\Links\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Users\Admin\Searches\desktop.ini	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Microsoft Office\root\Office16\FPA_f3\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\svgCheckboxUnselected.svg	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ro-ro\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\bun.png	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Trust Protection Lists\Sigma\Other	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\nl-nl\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Common Files\System\ado\msado27.tlb	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\cmm\LINEAR_RGB.pf	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ul-oob.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ul-phn.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ul.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL048.XML	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\remove.svg	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\eu-es\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\checkmark-2x.png	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\uk-ua\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\en-il\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_PrepidBypass-ul-oob.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-ppd.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHLTS.DAT	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\sl-si\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ro-ro\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-cn\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\it-it\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sv-se\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\Social.DATA	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ja-jp\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_K_COL.HXK	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_up_selected_18.svg	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\123.0.6312.123\VisualElements\SmallLogoBeta.png	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ar-ae\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Grace-ul-oob.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-140.png	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\MS.GRAPH.16.1033.hxn	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\DEEPBLUE\PREVIEW.GIF	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-il\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Web Server Extensions\16\BIN\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\css\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial.xml	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\tesselate.x3d	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files\VideoLAN\VLC\locale\gu\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\123.0.6312.123\Locales\sl.pak	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\xmlresolver.md	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\XML2WORD.XSL	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\zh-cn\ui-strings.js	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_GB\added.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\asm.md	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\en-il\readme.txt	44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

C:\Users\Admin\AppData\Local\Temp\44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe
"C:\Users\Admin\AppData\Local\Temp\44f40b79a12c1665987fe0d6158731d79e7ec9662dd7b30b9e0c63a2c56667ec.exe"
1⤵
- Drops startup file
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:3452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

aic_file_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Size 50KB
SHA256 e020e5b69af2b663ebd79aa3f3da777feb61129425c970e8c7d4f483e48fb1fd
MD5 0db4bbfaff0cbd8e197268823e0b93c1
SHA1 99fccb68d53afc4b03b10438d506a522c72d227e
SHA512 6113aae3db515a0781a8748b5310076178e2e8882c645ec02c61554b889738430d3f178e15f6778a88933601e225c80dab00274d3f2e0820a9fc0a3a5a38c41d
SSDEEP 1536:9+E4NXzByzFPyU47mf12zMprAaR9Xtn+/9ny:9v4Nj0yfi12YpsaRPwpy
MD5 SHA1 SHA512 SSDEEP

Submit Download

s_remove_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
Size 761B
SHA256 062ba5ef629b3345156e513815fcbf70b33e509da6ad3cea437f81d7f09b2fa1
MD5 1b0c7fd3a49708ea41b69bc2149e6d19
SHA1 362f8e2d87e868cd97cf0838819aa06925108b16
SHA512 cd2364c46100688590089b1cd02ca3a23081ddb41efa83be96dbc88334028bb7b2bb3a102ee9764ebce329487e78c51b73e3c2670f7e6626eb43d90776eafbfd
MD5 SHA1 SHA512

Submit Download

selection-actions.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Size 1KB
SHA256 8fb6e8f9e6c20b8c5f41aa77cb641fb6533a0f5f0633675fc42e48f464a398a6
MD5 b30e9ce23dc3e2366149cea2b70d6ece
SHA1 256c2a218a62e4669a7f11eb74580831bf52f0b2
SHA512 39a6e76c1236e866b85169af89bd2395a4f85d111971ca38707d036d9d4e15428f078c0d7d3dc06eb47efba1d9e00785e4e63403605d961714f68e7af54f9561
MD5 SHA1 SHA512

Submit Download

selection-actions2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Size 3KB
SHA256 b97cd54061ab0565ab2ef80b110bb2e53993cd7281196d44cb76e22d429ab07e
MD5 8a064eeb8f8b688ce2dcef6c18bd33c3
SHA1 2aae540d9ee976cf52a2533fc2f40cdb00c31177
SHA512 842758046c0a2395f080730753aa0a023cbea124ebb16daf3f464b113abd36018270ad1980ebf030025bd35ed3c4e1099f98ac3a4dff8bef45d18b65b43befcc
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-ae\ui-strings.js
Size 3KB
SHA256 6f5310dde996bc4d9c59e50967c089995ea1819962bc5f4bbdfc672542dcd380
MD5 2e1cda847b8ad9937b518f6a775ee516
SHA1 0bdd93e35570bc3694002aef353e11b8c973e9d2
SHA512 f4a9556d084b6dbedf4d8acbbb4167594e9764a4a70156c333c40275d9ba500100b120671eb8361190a2c6ffdb2ca4f00725c4c40097ad47b4cf32c78dc7cdfb
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
Size 28KB
SHA256 e3aaf6189104d4ba8cc0bccc3aa92a8cf50e049b54c4a9e99be2574d624e6f17
MD5 ffb24e979617d52f10ac8df7f607771a
SHA1 8a47c6d18728c3ee079e8e7482bac93a023e1139
SHA512 75ba6fc74be8bb896a0e7134700cb3cdad8b74a0c31d2908df2790fba31350513924434a167598d68bb5cc1b3a28841fc04796a9a66c2595da93dc3aa36a1fdd
SSDEEP 384:sTM/GhjCrUfeOQHBVDJVUXSlI0SFWUMrYBE9OQcBhRlqUmYEEKEjtUJ:AM+h0U4VwClItWUMv9OjTJmYDtg
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
Size 7KB
SHA256 eb5b872f9a6022ef70f927ad807ae9397b2247ac00b22d27ae8ef8f0a1a878e0
MD5 5b10a5b963a980f610d398b05784438d
SHA1 c89079dfce81706949ba8951d2e36c4ade1e9480
SHA512 cf387fb399fed966e7e22d1d5332943d18435ba81954c11c7b85f74c46a081aa6bc1f93b48d639a795794c4e6e0afc1e525d8ad5bd20d37aaaf9f411ffb3e06a
SSDEEP 192:DjrE9aZdCS2qM/cIXlJDXLTFGQ3rabLcJ27kUSVKs:QSq/cUdTFticJORs
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-il\ui-strings.js
Size 4KB
SHA256 60415f6b7ecbe231bbd6aa55b9e63c4a431aa32d1269bf6481f0ee9176e54fc8
MD5 7ef7d1dc8ea606ddf9dcc0eae45053db
SHA1 c7c91ef0115c5f6c0622808f0620714a07af00e7
SHA512 a95b4c72e635be4ffc2ecf03e522a7b4cf6651248f2c0473cef35984f6bcd2f058501cb8e67ae08184b9484a9529191389144122bfc76a4237db863929fa7853
SSDEEP 96:NJ3Jacui0Il9hKttP0dUgfeHN2pZjPv/JzX:NJ3cnIlKt5SeHU3t7
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\ui-strings.js
Size 936B
SHA256 0e11870242a2e733563c2df93154b3211a8ea0c8f88ea238d0bca0b741cea30c
MD5 21f2ca476ed257d7e66c00b67fc96634
SHA1 c58b27c34bbfacbd897807b14ff24ce136731068
SHA512 06b97ed7709837fa224de1f5f07632bb53a227066f41f70e1eba747aa7185868f19503d6daa2e598cc8e9267b8ec743502ab8a01210b7387a67b6fcd1c78bcc4
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
Size 1KB
SHA256 89793a216a11c25a3d04523f4ef7bf518aa15431650c9f559616c4379e5bdeae
MD5 aff732a35945d784e248e4885b99e103
SHA1 e6c6103672db50598b79836483d115104f5c41f3
SHA512 65c9810c959c382a10e8b7c0166483391f094f738cbbde16f86072eee0f2c61e7744c3bea83d55dfc9d7d901192b81ce7292f29e3fc5201efefda73c19f4f9a9
MD5 SHA1 SHA512

Submit Download

exportpdf-rna-selector.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\exportpdf-rna-selector.js
Size 175KB
SHA256 48f5a1325cb20164d1c05e4cacbffc82a130cd573c624233f642a9c49e683ab9
MD5 1bef3730805f22730d810159bb5c8ad9
SHA1 73f31f9cdfc0c603509b5efbd8e6bd58ce622f6c
SHA512 097d8cbe4ee22ff10b1825369e883e2a0be4839d6c9518170f2b88042167d3b51f2e600a9c5583b07cbf5bc7a603b2d9af3a0009718d366aff489c9a4e170258
SSDEEP 3072:b1eU/zSEooCa9l9y+R8+gqp0gtVzsc2K54B7qpB0NA/stY0ouujTTz3x8QR+wp//:cU/zScR9++gWpld2witY0o9TTzXTpLMU
MD5 SHA1 SHA512 SSDEEP

Submit Download

exportpdf-rna-tool-view.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\exportpdf-rna-tool-view.js
Size 385KB
SHA256 bcbfc040fb68a1d22d25adbf99e053002245f8e7a238560e501ae5f21fb5e230
MD5 4c1e06ee07943595be07e523dcb058dd
SHA1 f188b18cf9fbd713083825978db50dae3b34413b
SHA512 cd9ca2788db95ecf8f0567161aeb07ef1ea8d185c2c03f638f22a34c973145dab818ab49f19e2c31c29b889cb9855264c9fbb8d9d30a943f22c5414e3d5d88c8
SSDEEP 6144:G7l/500pUln3VlfWBTadHZ1UBsGx7z21TemVNzhDUPID9eRV+O6JYQ8GnGlv:kl/5pmwa5Z1Nz1fVhhQP8sV2JYQRC
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
Size 2KB
SHA256 f5a31ce30e168b969ee444286bf56491bfa9d3c5af80a6ac99a44e15e923b126
MD5 2744753292c5241070212dec4f2c39b6
SHA1 d7802267799886f94a2714ac5a83b8549d6ec4b7
SHA512 9b74980973430b62f628dd3f432f0c5dacd0b3adcca964df3ca280045218b6298a18b9b360c23b2ba29327669dcf5da023700e811adebbb3a8d0e7bcb96312f8
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Size 1KB
SHA256 29429773709033e63b4c8e07e650f781cfb3ae999023de6ef619081485d39253
MD5 ceeb186db67d7f0d32edbef4a3e1657b
SHA1 c3b36e286b6b309f50217e1372a97d94fb6aa7ea
SHA512 c6025103d8248950555885771decd603feacdbb151c3ccbd371e462fb60dd07f7f0cb689bf4625d01a6f73f07ee7634895f5e8b2b98e94eccc9e4fedadd62f40
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\root\ui-strings.js
Size 1KB
SHA256 48e46c90e105ec82548791d1b80f2b28b589f743bf82ab7d10831e5c0ef571dd
MD5 ae920a285896a617e84426755a2a56c1
SHA1 122ddfe0a9e5a88e7151cd732915c6e4f9e70d32
SHA512 e59c3242abcd1215581938dae140b6a038578fb33e7e773b557691bdfbf33fd5561095822b027c7963b83f4ccb14da40bcccc8152d9775e5a30b8c62d6f46e6d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 4a18d854f1cf465597309a8bc5147fbca263c211e535058ef50bb7604b4be61d
MD5 222609bcd971fa3c564feb75e0c3c64f
SHA1 ed61ad50c89daf2c5ea0c69ed4e7f79aea8ee4f9
SHA512 47825070b4fdccd03063bc9191dab10c5873a7d6d5049a80c610858c1b332c06609dd16d5097fa5c70bccf571e3a05e0945df87da089bb8b28d5eff89ac14ab2
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
Size 8KB
SHA256 d2e215360e7253c5ea2f00fce527b1dd18a9824af0b177abf3a96bbaee09718e
MD5 5759f1a633b7d2b4efdba6f5f16ed12f
SHA1 a44e9589f073379d995691d7c1ce4d1fea3fba86
SHA512 00add3770e7e845b4521a40cc9c22e638ef68d6486078e36987fd614b0c6112871232fae1ee46f4bf2d7b211f096ab58877cd7a59e3e57f73c21991e9e05f3cf
SSDEEP 192:0OFZwlwJxvij01LtMOqfrYaEZvnG4knYtIwF/oLT5LIIz1:0O7wlwEjyxMOqfr/EZaYXF/oSI
MD5 SHA1 SHA512 SSDEEP

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png
Size 733B
SHA256 253893e386208402ecb9a8a4ef5d88006083f340e20c80653b3d7b584344affe
MD5 b534c145de2e57c25cc19971482e7f80
SHA1 ed7610bfc6c8555702c97b374c398267d739047b
SHA512 6f6443efe877a066221bbdbd969ac699b1827de1c8c24677ea7d4e343114211ad7877726674c81b02ac3ecd7c04ec73939d1608f56230cd95343341795dd1c7b
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png
Size 1KB
SHA256 76186e4fabe9a1abd594b7ab17e35c06c45997b75dc3a0ea6a93ff7df310b415
MD5 94852414d61cf7d10884b9e07f2d4cd5
SHA1 dad7f0afb2925e41432ec66b074912231932c2f3
SHA512 e282070bb1dcb66d2e4e113007a60dc6bff35d305f9f921c06b5767fd29a13caa17cb2b54e11f36903c1dd560fb08251f5c1a6e0ef1f628f2cd63a4249f88b9d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 e27b1250131d485e95d03a55118e4471471df1ce8a82e45a1f6f6b221c1096c4
MD5 1ebc675ac6d1517e717a52b6d2ce33da
SHA1 73f4ba794f36f5a0a3517546bc69a0adfbdfcf10
SHA512 1244718928f35965ffb8e0b3f62680c5f905d480d9e22bf73eb097e4c62a82e49c0671c3eb627c335aa01eeffb2363cdb88babfcc19f499648672931629c3af5
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 c7944101c7d83932c58a32d71b3a19ec1298ff468f52bbc58bbb7276ebe09414
MD5 af2ddfe39b73a92ff445fef1b4559c5f
SHA1 c5598d57571027eb0cdce6886a0dd615021f6eb9
SHA512 248702df1ad84bc75dba4ee29e8b34c1f5c11eafc5f6d5f11d0531b2d7d7595c93bc67c04c8b8ed2d0ca6f444a585d57668997087ff1db60ee1b34460ca5224d
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons.png
Size 733B
SHA256 dbe23a36b6eb375bd4b12e0716b30be75aa53de5ae371e01d52e49122877997c
MD5 013b09bb9a22039c9aea3655d1c299bb
SHA1 116716d570afb66b530ba8ca954db1842e6203cb
SHA512 2b9fb30452563ac05762123361bd46fdb18cd3ee1eab9ec8f3c4d466e27820188af94c7fdad4c143a4a2d90cd36ecc7f7d0e9b142c682b405339af4a3f13e257
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\themes\dark\example_icons2x.png
Size 1KB
SHA256 c1e7bf2367f965c65f26a50bfe515d75a1569832c9266a92cb9f6b2137a13fa1
MD5 8ad5a40524a07b5d772f85947cc50acf
SHA1 d2ecba7ed7f7923ff5b28cb8a78567f04dccaa10
SHA512 ea3d9f23cac71efc6b6857ffda2b73f2390eea355a8bb1d30c98b87182525a213032ff7beadba1eaf3906254ef9578c711006ff0c659d048bd7726518d7d25ac
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\themes\dark\rhp_world_icon_hover.png
Size 438B
SHA256 bb3e0e1cd627671d1508bbc4fc473c04f86efe90b5a4658b64223a6c66a8fe66
MD5 b3425f24f3cb8303eef08a25a812add7
SHA1 ad7f99ba65d1c4c7eaa75044d0fd0b2320aad5eb
SHA512 46d423e37af8e0fe44a32221d4a31ff7249007159fe44fb18f26d5302cc8ce15ab5a60b1d6b868afffea3a9d59a6616339b360878970a243d7a5d86894a23653
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\themes\dark\rhp_world_icon_hover_2x.png
Size 602B
SHA256 c094b7487694de34a197f98e3b8e39e60e9e4b7cfc3e9f2971b9c9830ed90cbc
MD5 a0c6a4c12fd1904f26a6cd0ad8a5edf4
SHA1 785a1285d41fc2588f84f49a1f4d6127dc4531a2
SHA512 bfb7e96111e2a9686c46ebb95e42686cbfe09ae68915d81df729e223f4480ad279f99c5329e31e451dd4333d816ee11d310d9eace0b52e9dca1f4b936dfeba5d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
Size 900B
SHA256 c9c36da5fbd3685c498e136ba702c147fba2548325275f74a159b493fdef122a
MD5 5cf13605759f88106fd19f699be37790
SHA1 93103f6d4f91ee8676b237baffe99e52a749ed36
SHA512 b04fefd76022461a5275ba47c69f9cb39a80829c148c724ffb6db0106456a1d549965d2ab57fd772c8f914ce9aa9f36ebaa168ac54fa91b5429e9f6a657f762d
MD5 SHA1 SHA512

Submit Download

icons.png.NBA

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.NBA
Size 7KB
SHA256 95d0a426160d7b46f2ebec9efc5d77e4194cc91685feea7cd9d7cf0fe4379a12
MD5 67fceee06ce3e15527f448b756eaafb9
SHA1 462587a1628418b351442430477b03d8cc7343d1
SHA512 be363fce941ce0d455c308a7bfec079a2ffbf2979916b90941bdb4ab4a5ad86ceb3537ee1a6b39d276c1b8d08f0f839b8c0a32e4c20bafb2eeb3268386458768
SSDEEP 96:P0Cxu1LIzJDuwww1sA0mnP0LJ4sn1DXlKL7eHGlL9GhZnsMFJ2yEcGa73iwC8yc6:40Fwwta3jgeHDhqDfa7u8yOuFJ0DZi
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif
Size 8KB
SHA256 32588324e6db03d9faee2d121264c27f6fb06ef078d76df7268c5045bd811d9d
MD5 7c9d1f3e97721610c86607981cd41cdf
SHA1 7cce2e72e90294126cbaeb50cd7849b1bd2d98fa
SHA512 9b018261485ceb66cb69ee092a6088511424440e7febd3948b0c05c7381a63f81f63370bf6e03a6e619d055d3c77baf71eab23ed643d57412be7d49aef83f539
SSDEEP 192:RFIhGjm19psswDDcF9JB8KGWURHSDnrZeKkUmG6REIvFQzm8jQb:Rx8sswDDcF9JBfNURH4rvlmGMEYx
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons.png.NBA

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.NBA
Size 8KB
SHA256 0aff63ba73abf91da4527b211a7be4c9b99bc764e2a7013cff963ff32f761ddf
MD5 2376b131621f62d36a020e64f93d3013
SHA1 eca668a186d76c681b82423e396d99e34e426ffa
SHA512 056e544e6a7c903f5877ed36b5d8940044b073dc1b2e224fb1a3c6c6d33f8b2af7c259a7cbb53052d53f4505c69de96203af5077b652b1393a2a443dd57c0ece
SSDEEP 192:U5z1KXYvv9yF+n12XnSjoZ9KFQWTmjphz69zjprSrYB:q0X8ysuS4gKWT4p5at2YB
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png
Size 17KB
SHA256 7ab62ce91f1d548097116d4e8d38a12718a905d7b833b30e88f7381072b879e7
MD5 1d35fecd18d60098725fa9c74cbbdad8
SHA1 00be988fa444c76d47918a526847d60da01adaa9
SHA512 6d08ef0be0007bd03900153b309377779929f7f6ace2aa9e1569aad5d73020b9daa2786a7e46d9c716e4a062c4077948b7ecb2e548876180bf4facc88bd1707b
SSDEEP 384:zdA4iy4tKzj0pwdfcq+N6ZF/bnlq7rzOOeuT104DFo2o1hmSm6uC:p9iztK30DuNblOOOvTivDduC
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\icons_retina.png
Size 15KB
SHA256 256b3f948b0930118fce0619201302bfd16c9d342a9e029cde207208b03148c0
MD5 cda1e392433ac5643c1bb0207f3abab2
SHA1 9b7728cf176d4995726868221c7c9f2e7902f28d
SHA512 e0d2624090f13b7467e913461f82b6bee850e357ea6da4ea1588f50546e30230793fef4745c2003ca04dd19d09ad556e5ada81f7822e75fb418f8e8afa95b53b
SSDEEP 384:HbUVlLL6KxDPrYsAMIHNpEPEnGoHN9bP1+4ks:HwVAKZPrYsABtpEPUzSs
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\he-il\ui-strings.js
Size 1KB
SHA256 c2e4b93129bc4473826a55e20078950c1f0ea27e9a215c9d906a7f6e579b4f39
MD5 d9a01d7ebec3af432208d53001993d05
SHA1 451909a1c25d5ea570953ceda1957590c02e0bfe
SHA512 5ff02123af6dac2f7022bcb96f8a5a692ac4a9701fab643683aa1f1efe0df68b498b7df1dd7b15091d45fbc9c57fe5ff18b792ae033ae39e66e4d92d3d27e075
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Size 1KB
SHA256 0cf45539d95b1a93212e98df6edff762ae9677bba1e1a43b2f86b67cdd54a1bc
MD5 13dc1ede123f70c325ffd41ff8d39740
SHA1 34a6c929647bfc31363c9b6d4ec94f796bdaa67a
SHA512 a936863939f8215440949e583e544658dcd55cc2f126e2a866929539d08d3b5034c26dead71bcc29e4e12b900a2fc822b73583337361ec0608bf0fe9a2900171
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Size 852B
SHA256 e7455ea9c9467972e56d7e30abd353ef2f06b3470552424e5c5d0911ed84b698
MD5 0b3db481d965e9222f2cbb36b78ec07a
SHA1 2bd3056242275b28e41c857045e94c17ab07e324
SHA512 f0fcc6d3e4ef53d0fa402177a97ffc8da5b4ea4855031f7fa78eba264d2cacfdd982df91567a6195ad51b2348270b438606fb9322b2d3eaf1e2bf1d87d412e17
MD5 SHA1 SHA512

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png
Size 229B
SHA256 737a275d9b20bb9b3ae87fc1802593bd585d37190290ebf98cddd02dd1d0da53
MD5 5261058cf46a134216d5389aedaaaf0b
SHA1 fb101a0a8e023c6509f2d2f90a48f94e442a86d8
SHA512 d81d1223f87d28112ec8a9efd8fcb789dee646dd5e35fe35a4108ceb88109cd8bba600e149fc97d69800c1a2bc5acea31d359dae980cfef14ddb9ea5733a0e19
MD5 SHA1 SHA512

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png
Size 753B
SHA256 8370c69c87a36ceff10b1cc81d4dd220849ad8f0551c43763e525c20a8c4973d
MD5 f443755a58b995d1cbd9089da6003c85
SHA1 fa954e7e88ba3c4ff3e6ce5efa45ae2a61787244
SHA512 3e816e853c332d7fffb5232318fa1d85ac06e5964825229f1ad04c589927958a195e08aeda8399fa62b3ea3a3735b1f89eb7db7328f749d7f71271cedad5f557
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png
Size 8KB
SHA256 7dc1d6f93190a9df2e3fda49ace1b4a80df27b6f2024a9c4f3ba52b7ffbe5149
MD5 11a7f6bf1abc54249bc55dcd77586597
SHA1 dc49fa4b394523cf3be36518b43429f575caa765
SHA512 9f9e030029f5733ee91d41bf5f5ee9b9e50a82cab432a775e00ef941a11f62c035b2f885c259a9753825f82b311efb06128189bf48cbde9196201f7493721c91
SSDEEP 192:g08DqQ9mZChdoq2RJ7GbVLtv8++SEriey9WsCdkNR+LLZNDV0eHEpsE7:gdfMZkaqU7QVLcNe/hNR+LLZNJXE/7
MD5 SHA1 SHA512 SSDEEP

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png
Size 19KB
SHA256 026ef1be4f4895ac19e27abef42c5952e9b5fa90ae4c228644ea248d59f921a3
MD5 bfc7999d96c3a9522ad4e0e884788624
SHA1 d67c54d416de5ab7823c3f9b76310b86f602ed31
SHA512 27ee309016308f7fd9fa17afe542736b789a7ca77db2a0577a695d516c60bc6292302346039e35115a2d66735828b9a40b01c5355abcde636e1edb5ebd7a21b9
SSDEEP 384:Rxk/sLNPN4GnsEnVF++gzn3ja4uPE01piquxWmHJpd9pK1O4uDiVP46pHtjjJ:TkQFsKVFqzja4GgrxjHByruDiiIHpjJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 fc36aec682f51d420803103fd5a8df5580c4fdf4de74eb0e92683cdd8fb74ea6
MD5 29e8cfc08816f04fa0df6f1f8c006ff2
SHA1 bca6af52fff184837b05871ce5ef98eab8dfff5a
SHA512 116dd7668fd95f4bdcb1f73044d3f97064615b49cf82ad4e1f60a98d4e467a7293351c6646b0ab9ced5aec039f9b9afece820e856f5f44d5cdd861dbda6694ef
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
Size 4KB
SHA256 45770d7d95e5f4b2f454fc1cfe6167301cd64b89f1a6b58b0f6d439384fdb3c2
MD5 0c9f07221fbfd942cd1f4ada1a714367
SHA1 7bd02ec7535725d9e6bf04147d1b5b82073c655e
SHA512 08ba3ebcc99b73afc6efe3e504579a90dd9ed29540182cd5cc0f889027f72d9eb5ebd2abec22524a82537715c2262a5489565e4f216c6bc4b2a4c652a846d8f5
SSDEEP 96:ZQsIHjoAHRRI8wOK9hVQLp9TK9mq9Q6kZcBUaviqfb4QlUe4K:qHseR3wv4lZCmP6kZ/UJfdz
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\en-ae\ui-strings.js
Size 12KB
SHA256 ee29a0a20c683246fd398c8e10609142476de1cf8149f1b2a10ec295a912c95b
MD5 ac571e13c70d2dc0b494600c5c8a20d1
SHA1 2bef6a617b15e236ed74a14951dbbdee6382971a
SHA512 2bb118a5b90e31be4842402171d7fd497a420220768adb6e3a6086224a50e61e592c0e34932bd99020e55d9cc5e1990d96872859acbf4cf36a1246de4566fda9
SSDEEP 384:gUhfR0g6dgfTo4p5tpYoyUzMI9jMn7YTvAkdSoA:NmutJyuM0juMTKoA
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\en-il\ui-strings.js
Size 974B
SHA256 9c81f360a30be8508ebfa75e7d4dbdb6276dfe5aafb9f4d1cdef0a61d7a66333
MD5 f7809d92023ce23252220ec2956347c0
SHA1 a0d8ef852d338e46095336a031aa9f917754dda2
SHA512 39dc4e4ca8d8453d382a61df4c9e2237342a9a74727ef9d121b989026017a7010e267e1e17e41887049154ace2ee780fe7020a83cc8d4f7a574e8bbc31b493d1
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\en-ae\ui-strings.js
Size 1KB
SHA256 a6ee1cd724c729ce81aebc388370c42e4bc3a2eb561c1a41cb1ae592380a1c4a
MD5 d3fc02c621256b9d911ba57ba8c837d1
SHA1 05e167e3fa868026137768e52fcd58226f246ccd
SHA512 ca7a8b5b05733589f494648d46394d246b680770d77cd0a77e66237d9dadfa2a348b2d134dceecc3ad8f5a9dfd66ef24e88345e71fe3a89dfac0ed708b35970d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ar-ae\ui-strings.js
Size 905B
SHA256 7eba9ca5945748c48325394e984b17181f1542ee58ca3d5661bf3129c0dd29a5
MD5 c277e763bc7322ce1634d33756e2b0b0
SHA1 3a8c7e07f49e2e2e311b75f0f17e4a96d835c53d
SHA512 96b76903b6fde91dc98c35b31eee775c43fd0a2f8b7d3b0214e17c4a6f1f93dcd30fe50f87e0230d7f6b1cd8ed577285fe535dfac524aa4cf85635995ad4f67c
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
Size 900B
SHA256 108ff6626dcaf6ad7db0ef10d31309b352939c8e217644ea647cdf9459cc0e64
MD5 11ffa592aac0fb92122c8488438a8ce4
SHA1 4f6a3231e6d3b608bb3b5f3cb1be143ad2b84be8
SHA512 6c679f6047b093ef0b4853fc40325fa5a00e69efb1c6013b27e9cd245f4caaf4d0306500703a96b9395f4fa27c8f77e304f152bc945fdc45cba09651fc01af03
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Size 899B
SHA256 46a4b9e7040f957f997548fecf08ed62444fb8726809cd5c5f864bc69991a787
MD5 e146671466464ea4e3033744071c93d4
SHA1 c2fd8e2ac73276a191fa98d89b5e3a8f17c501fa
SHA512 9650b831cddeffa541e8223e21b96a8c4ec7d22cc8be07adb7d484cf7a2bda6c98047eab2502b4eb4309589eb97ea5b1eb58c796c8d7a5a02cc4e347ce987050
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\en-il\ui-strings.js
Size 8KB
SHA256 669cbb3e7fa224f0512f723f3b9c581c173273bb644df57258e9166791be0e6e
MD5 da3cf1dde6259520a2c00306abe30f52
SHA1 cde688f1fa1bc3bd2b95e4dc5b72cc24d9c8c13f
SHA512 75ec03cfcc4c4ffd95817e60c070188293ae5b81d9df9a52bd48e532f986bedf65ff17fe34406fbe2e94cba5b05df9a14214a811ddb48ffdf4e28a1a78cb3bd2
SSDEEP 192:ozL8Fp8VifHuUjlgO4/Jqcu2ald/OoCboLq9L9SBoy:vEUPuUjlgO4/Jnu2alCboLe0uy
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Size 3KB
SHA256 53aaf08a700cc1ba71b7dd05fb5c0c9b0127595b51f6482542e77132de057727
MD5 6f8b5a95a174f7cd5afdecf004b15c05
SHA1 2dd30c94c19246581580209bb246277e8c4f0b8c
SHA512 e8e1ea05324435a2ef6be83e2bb7e6b32f3081caee537d1a32b72cf6019234c8a54fb4acf0600b3a1dcf5c51bcd32e5ada923b989be4060068223df085e44cda
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Size 1KB
SHA256 150ef6c8d42cb62405c5e32fff40c0caab1e5961e9632dd6087c550bbf4df451
MD5 7405f1200f2b7a1a0f84fd829637656b
SHA1 107334392b419bcf6118ffa7eef2498efea5d103
SHA512 51a4976873e157ab13bcfffa160e97792fa2ac86af6cc6da7c04819d5bdb03eead5144eac7bd291112e3495779c375337b16bed6f5a71c5e7e3714493a8950e1
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Size 13KB
SHA256 aa1f4f0bda17ea6989e2ac4b061c9966d8f02c60ca1d54c76d4da41d60bf1fb9
MD5 8069d8492eec5dc3f2ce903f988ce7b7
SHA1 97948d891b4146954d57d075bb4e9bec746c2df1
SHA512 c57aafc2578a40f6061429cf6c70f9061d78e9c94f1737e704fb906d52ce31b36bd7da8c7a44028577fb2700b459a9fa68324474c1a3a2ba321811cefc68787b
SSDEEP 384:oE4JYSQsMFzqCSH0ZgQvPRV7+go4gbjCHs3q:oXYT1zqjUCIPRB+gg/CM3q
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\en-gb\ui-strings.js
Size 873B
SHA256 92c44c8ddce1ebc61bd65c528b3b3cec6de4c55c9e2cbc52cfcd7a30d0423fea
MD5 d05d5e7bc4f514adae7f22785980f6e8
SHA1 7523ded3da3699f4c25c617fc7a94a8d91515242
SHA512 636e863a7f120630ae87070bc4b41273358e06b143c77c34fd14883e8dcbdb37bfdb47d4d3a1303d58dc972b971aa5109bfe23196da82f555aaa7e0a55ef783c
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
Size 14KB
SHA256 fe3c2ef049ab6ad7982860fe33cce3c0e1757105a983b540e4f0034c469c07ce
MD5 ab71e3b694ef1d11dd575f153621bec4
SHA1 fd49795c80b327ebdbd08b207ae06f63e77efa23
SHA512 ed8c016b984ece3697bb361f77814889552b8095f965a22b217052d2c0969015b3bd39a96a1576acfce08f73feac5e8165a59840cefb0f1dd6871527698de227
SSDEEP 384:ZzBG/kXc+jD0XNBlznudufjg9q66kc9v+w32:rbTcXN3nAufQ6Jv+R
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js
Size 890B
SHA256 81b239811e0a4c3eb981eda8d588544167377362047ac00f2fcaf220b332c0f1
MD5 197471a06b07536b3b21d80c2b2e0a37
SHA1 1ebcec912448e78493d8cd423a6055734cf0d56f
SHA512 f9e1bfa24361a1969fb6b482e9356feb2159ee93d447600176a3ec8ef203fccbc3650dc21680132299ea740f0d3c0c551aafab2afa4d5165748363e76030859d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Size 17KB
SHA256 4846c02f811e4c23baccc783dde31dc366560888b43904ba1a42c2e34f815531
MD5 d89801ad6065aeffcfcbb6a4ff32e403
SHA1 1919a23b68bfe0210d9635d2dfd9593cdcbb1eb5
SHA512 d98cb8a3042180e23ae7672d45da034e5c1c66914841c5f1f371ebf2b9a4b52f1ccb7862ec044c9f41e34104be8c351627c6d78550828cf969fbc5087080ee48
SSDEEP 384:VzBG9dpIdAhwz2IPrz0M8XRZ6k9lyiTr5e1Fdv:HCrra2cERZ6kjdTr5ebx
MD5 SHA1 SHA512 SSDEEP

Submit Download

DisplayLanguageNames.en_GB_EURO.txt

Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Size 33KB
SHA256 c9d52db405887e5189536e42e15b72cb9baf4417e77683c369b4e64ffe51deba
MD5 15efa47730efd12261723b65b82dc8cb
SHA1 399d96477a0185a0403e439fbd8f4a2c36ea4ffc
SHA512 9e48417d48f68c12c03b147bcac10f7778868dcadbedc24f071e666559e7248638c9bed5edff725a6307c2b114d7cc6b13a12a368b7b62e130854d3e63fb788b
SSDEEP 768:xf0W/d1KgKf+odZdW3DBC3KHGefeIlouOLeX3DBZ5:aWFAF2otWTmKHG6IeXT75
MD5 SHA1 SHA512 SSDEEP

Submit Download

readme.txt

Path C:\Program Files\7-Zip\Lang\readme.txt
Size 1KB
SHA256 b48f0c8b5ffdb91885a6e11cf49287ab1451f7a319302ae0a58441fe14791f66
MD5 ce84fc74b75f880013e953a200cfdde3
SHA1 b7aee542b34765005180b89853b4d1630c21bd25
SHA512 2793c772dd484ecdb98100739d2fbcd3f27daf641d5dc94892bf56d3ac93335e38fcb58c6596819334a609371336e74ecdb98994523752804f535bba219b9337
MD5 SHA1 SHA512

Submit Download

win32_LinkNoDrop32x32.gif

Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
Size 203B
SHA256 34f824f38a2e482ef1da1c2f7831c7d8d3ad2af9c9bf040a8ac3a3d5f00c6f80
MD5 130e4eaa6215a59eb728513ba516f847
SHA1 aa1af6a6bf5140ea7b1f3f321a207e53d81dbd74
SHA512 94f0088f300691c5cc33afe371c29131ebdca1472619214068036b129df18d958d378e425b6c46457ee9cb47cefaff07831afb4e123a3cbf1a10ed1f435d2d2e
MD5 SHA1 SHA512

Submit Download

win32_MoveNoDrop32x32.gif

Path C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_MoveNoDrop32x32.gif
Size 203B
SHA256 cefee8cfb0df123027950ec265eeed7a4a398837f7f54349ded3eef8f7830b43
MD5 44622bb50c1fae5e217fc369f2a92375
SHA1 66bd166ed3bf1934a416bdf2f8a4faae87f2bd37
SHA512 56a2012c8a85b97fa38e3133a24c000835957f26680a611ab6aab2778d3dfa803052f32e3f8ce0e1bd5f0e46b2474cb031a0787ef6e29c8a6c4acbfa1bdd9233
MD5 SHA1 SHA512

Submit Download

ClientSub2019_eula.txt

Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
Size 92B
SHA256 e8505ea0e38e9edb4f637f8537fd05c8b17700aa0b64b3b1af737c7c447ca65d
MD5 88c0717c31c64dc22c03d0ef7e7f73e7
SHA1 134689a958e83aec0c81c50b106a066692f975de
SHA512 4d31eb19f33908e4e4652c41f9585b947adc98fb2dabd4df61be5b9a8c7abf3cb0f146792929263267ce2fe46b77363470297f0ee7618b0800d3bb9c4235685a
MD5 SHA1 SHA512

Submit Download

MSOUC_F_COL.HXK

Path C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK
Size 164B
SHA256 051bc2438200fd025290509a529870c534359936125b5cbb8b81e8c4fc3aa9cb
MD5 382f153285f47d9bf505ccf0ed660002
SHA1 39dd912b24fdaad233390a3d227d83462bcbaf95
SHA512 649d36c3d60007360776b41e673b7f4257673f32f74fbeea3978bb067cd1014b7f01ee907b0d371065fe37bdd0ee62c6b2f8f5b670604b5c00e614f97440ea53
MD5 SHA1 SHA512

Submit Download

MSOUC_K_COL.HXK

Path C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_K_COL.HXK
Size 163B
SHA256 b16e024842c8d31b07eabe020b081bf37e6a88ad4bf45fdc2b4eba9df1b98c4a
MD5 a7f8c1209b2e9cebcb46b44919fdf986
SHA1 3d134df739ceebb38753252a4c99e444276c0722
SHA512 cfa7a8fb5df653a06532fa5ef50d4fe8348576d954be5a17a1c1b10fac831393f2f1bafe1ac300e527016872ec5c0df66a90fc757e2815b6f19fd2ab298cfc09
MD5 SHA1 SHA512

Submit Download

SETLANG_F_COL.HXK

Path C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_F_COL.HXK
Size 164B
SHA256 4bfbedf1d60d78fdff2db423e4b230cd7a8eae9ff6966528927c88169f45eab6
MD5 4771aee3e9c778a3dc89182290beabea
SHA1 1aa494d3fb98db1276aee7a4dda3796207f670f0
SHA512 a5c8fdc8a9017e63d6c9eadc8fd94c4ff3f30fc72a76141f02c4891079af67f880792671c86f094efc672855312b3b300d5148410e9958f9ad7f168f7afcc87b
MD5 SHA1 SHA512

Submit Download

SETLANG_K_COL.HXK

Path C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_K_COL.HXK
Size 163B
SHA256 223dc669312bc42bb7e6632aa83a33c89f91a132f09c5875f71a1f31caf5c1b0
MD5 f143165091948fb1f9de6138b92fa27b
SHA1 0618184532a66fd25aebbd060a407ddc4690e87d
SHA512 9fe443b4c73ff5113ae46242bf04af4ba9922d363ad3dd5805ee18acbc2731db27f046a281d5d21f25507d0dd797363466343c3edfeda7cd85f43b8bb32638a9
MD5 SHA1 SHA512

Submit Download

SIST02.XSL

Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
Size 245KB
SHA256 a8bd8ba2b373ae651d564060888a74793b6ad02817193b239d363dd4edeae2f8
MD5 a372fb56cfae3c977a1da72b2764441c
SHA1 7e7d4cc931aef3235996f4462a96335565edaa07
SHA512 caee5a2d578a4a64fd26a0b6debcfa9ef79feb4c22e573b8860ea6a0af6844e5b2c2262b21c41e96bc3d89270cd81a2f5d49bfff55603fb0b7014846e10bba01
SSDEEP 6144:/lCeo9265lBu1oWfO9tmSjrOL3msVsZv5Gu6K9BDJyAA8:NbEqfy9u3Q5rdyR8
MD5 SHA1 SHA512 SSDEEP

Submit Download

msgr8es.dub

Path C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr8es.dub
Size 55B
SHA256 ccbbc79b2f6c1a8fdc778401aaad2cffa146e0138819f37068a107d09c84da80
MD5 98db013e3a8e9503880fae3b53bbd5f4
SHA1 d21d8145f6e7b2f8d5b21393026adf009a58b064
SHA512 7425557a4eec030c34071bf1cd90a90499343369aaad18dcc046760e81c546434848721eff4d0b98bbf3b95a9a548b705e3edb70322460f6445bbf4dc8040c02
MD5 SHA1 SHA512

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo
Size 607KB
SHA256 6f91e85a5e588c99be6583bcf76dc0e67be3eafc006c0b9044fbe2195b1fe81b
MD5 43a199064b5076d2a46dff72c9efe5de
SHA1 8c943ff2b1ea1a62eafa6c44f6057ff42d33acf4
SHA512 d20ffba32989e29e4d8ac78313f4652b42e74d81b890bf1b0767b69ca6d763b609ccfb1cdff2a0b2626ee2f837d716050b72f5623a18e43fba70d6bf545cf94f
SSDEEP 12288:K5AA1VKrcy8DeRZbfvUaNNI36O1g++fs2O3dvNA1USDFvoP:FfrcMBvUMNOiO3dGy+FAP
MD5 SHA1 SHA512 SSDEEP

Submit Download

edbtmp.log

Path C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log
Size 1.3MB
SHA256 59de9a5c63ff901267b7ac688663d8128910ab235b441f33a04788d8029ee379
MD5 6c32f3fbffd083f91a1e0432da6d0199
SHA1 67d3ed99e5a1869546fb3b1f5906c219cf3ccdae
SHA512 0f04ca56be0d0e2d9ad740f55722e984369205572636fb8a3608ffeaf2fc3bc3545ddee2bd384eded2f11b68123a7b421b1ca8a883bb0143077586ea2bb6985e
SSDEEP 24576:hFVDTDILiw/Iq4OaPHU/IrkHOS09lRS37+gpcSsqGVImFpozyyp:hLDsqq4fHlrY2q7+gpNGVItOyp
MD5 SHA1 SHA512 SSDEEP

Submit Download

USSres00001.jrs

Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USSres00001.jrs
Size 3.0MB
SHA256 426384f82fe4e01543a11fe9206f85e07dc678263857212c66d918d41e52c84f
MD5 229db2414b4c2c8cbb931f25cfb0e386
SHA1 b9f45f26f5af1bb64391864cae31f83519d8937f
SHA512 bafba7081dc5bf37ae1d5ae2e53aa1df6f9e4f280ae084521c94ee71cf631c4ba089b3d29666af8a50eb958cc0d0f0058dba9dfecb1702d71e220b99783be320
SSDEEP 24576:0XllqM6Dapq0CMUW/TUHcnwPqI84IkO++EO6sh7:0X7UOg0Clfd8ZlOO6C7
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000001
Size 91B
SHA256 5bc28330cb16d33243ba77e03fe51337c17d1ee02606c344dff93bb003af8658
MD5 03506305bce7cedc8622b968bda97298
SHA1 a242fa7682d908974174e5455b511b771600387c
SHA512 fe7a3048ddc628240a098e56c135bf32327900d81d73e290e6568fdef025bb5a9e89fe0d1eb08a995473434bafe0683a1a3a7b17cee8a67ae7d996da54286d47
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT
Size 66B
SHA256 29f9bba582d5857e5f230d9bee54a8585b1356afcf32fe14a1cc20bcc43c4652
MD5 5e0e7923e5fbb326d5f405d3ba95fb52
SHA1 91e7c8874a5cb52df8e5a123d38a69498f2b3da4
SHA512 fd49da866ecdf106c8854d45642698c1cd6eb524fc96f705ba524020ba31d3e189e777d88b8758e479e5d77146da08c4af5cdb8786db3dfd8e6e7fc8fd4eabc4
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT
Size 66B
SHA256 5115fbd04c5ed8fa8020f58f4da2ece274b50a222a8c1cd96733e667001e83d4
MD5 fb2304d453505d2ce4bcbdeb7713230b
SHA1 a1bf6d0886a6923b0ad12954965550b840f5d690
SHA512 5f643b0777c3f0192dae39a40dc65adf93c8fdbb005db2e13f93f5ddfc8ee4f087280faad6d922e730fe9fc80982518e874ce2f3f7cb877a0af713a485c0e917
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
Size 91B
SHA256 95ee54ccc523d54fb8b360af4953a9678672f156f900f5e87666b97141af92cf
MD5 06e602198f489e491abc4475f970e9c2
SHA1 a6094b1a8de208939fd919ce377c4111f3cc71ab
SHA512 e96384824af1c88bb93347d6cab602c71881302107bd005b4031f2badf6f6be86af469694d1f2b22a6d1ec3154ea727589e9598f5c00930b766c811c6bffc528
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index
Size 74B
SHA256 f453091e3fcdfefb49d73ec653dd917dd65016c8c807b25b149199eee4684848
MD5 c274523500d4b0c141324c68bce2d185
SHA1 16ed1828c59bc79cf9de8ed210b07d3e827ce78f
SHA512 ed41a7c96698e38a021e39dd2e3ce73984c4a129cc9e7428528426732de3808f4288b832f1447de1f55e1cfe986c6e15be658c6749755ba578cfc9a6f30c2bc5
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_0
Size 8KB
SHA256 b5d73b07a57eab8960fc36f8f2436c15390d999be2371a6241eb1962a6dd4822
MD5 0b4e2c2d5ce00faca9e7d316f3011ce3
SHA1 754cfd1e2768456f8d9bea16d0c05924979953d2
SHA512 8953d18f9f4e15772def92beb5bc9a440605b31fdd470e3eae2454e94822b74930c5cd53f59f5b21eabfed1658e59a4cf70976df102508dcd4ee9c4f697cfbf3
SSDEEP 192:ssc8HIYwtUSpLvpZdw/S3GCHDPBE61b0wJvve++e3DDuwR:rDoYMpLRw/S35HDxbRx+QuI
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_1
Size 264KB
SHA256 6d4321726c8776b02818ceb7c4990e9267a1ce32040ffc9079b81d6abc902164
MD5 8a71886e110277bd259aa193c5d4c225
SHA1 67403bcdf32ffbaa1a05eae4eaa0b0321b778fb8
SHA512 87abe3733f69e89e04c55131e44b42f8f19d3fa5c0655c6c0b227e4cd4ba40c6cbd41dd2b409598b98d81b6eb0e37cc148c883765e05bef8d54bf774db3420fb
SSDEEP 6144:IzVBei6QfWIVMF3egyxHrjlbSlp1Y0rBeYR:IJB3BeFaj5SO0rBe2
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 b615bc79f41666a4659c287093be00468228dddfc1687523335f38e3f8b7aaca
MD5 dba904eb327efe76553deb13d4abb5f8
SHA1 a4141db3d3c6209f351c52a480bf6e32275fba3c
SHA512 29a57b58643ee4147845e90695e7930b54fcc3d06744fad30828f3fefab4b5dbfbe5f3e696c27117c65d20a9242c97561c3bc4267644a25057e4d43708d6a828
SSDEEP 192:isc8HIYwtUSpLvpZdw/S3GCHDPBE61b0wJvve++e3DDuwR:ZDoYMpLRw/S35HDxbRx+QuI
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e26eb58603a7c9bdd6fe9959f61e539b5948d6673563b824a5092bffe457b6df
MD5 db82c1c3a69ba657eb7f371d9ba58c2c
SHA1 6c2c5fcfe539eed8addbbd24a63739276d82a487
SHA512 7e6b3a93197dd97cde319a66b84d5c71bfd654a76bc6670ad216dbe8c521940ef2b12c12e086f29f1e26b05f799589d3e22300ac93448365b52545ba1976bfba
SSDEEP 192:Nsc8HIYwtUSpLvpZdw/S3GCHDPBE61b0wJvve++e3DDuwR:qDoYMpLRw/S35HDxbRx+QuI
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_2
Size 8KB
SHA256 b8f3e20930d5a740a94cdc0f8cec8496a6845e2f1583a8c721ef211e225e589c
MD5 2ed5c26af6ff895beb03a8c8a73ed61c
SHA1 968616b2b3ceae9410166cb1b0040ade13507df1
SHA512 eefd53eb965991d92d4d7d50f57ec5765104d3d880f100ab722c417d251f49adc38cf7d541344756b76bf4494e4cf8bd8ac8c470986efccb0c73ea3545faed3c
SSDEEP 192:8m1+XbCaPpPNikguyO0cb50KYCQevh3ZvseZl:8moXbC84s0ciKbQevh3xv
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\data_3
Size 8KB
SHA256 b6a0849594927654ebfaadb5748c155f98a855e984a2b79111df990f1be14e3f
MD5 6eb8fa2d563e23f0210e4df34c49e736
SHA1 a5e6e04762dec9c8b660770c65e716cb8234d85a
SHA512 a20c2da93e338a966a689f6d695ed575085c118c7a7042e6bbd5c1e28a39f7a76b240b5723e8aaab6db0db041ee79e9e218f115e38c9352bea97ab79572ead0f
SSDEEP 192:dm1+XbCaPpPNikguyO0cb50KYCQevh3ZvseZl:dmoXbC84s0ciKbQevh3xv
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0
Size 8KB
SHA256 cd0c28809d752898931ff14e68905b74ad2220082ef3daa543c42c267adf7af1
MD5 7a6b98bba28d158a4851092a40c5036f
SHA1 84834e912f31f4ae17d1a4fd54b20b688844951d
SHA512 f87b404c2aaceba0dd9553c323191ac7fdfc7a7a365f7ea7f443622ba6afdf318f4fbc5ac1d87f715ad6a3a0c191a9978f18985a47fe052f177abee532ec23ec
SSDEEP 192:am1+XbCaPpPNikguyO0cb50KYCQevh3ZvseZl:amoXbC84s0ciKbQevh3xv
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 69b0c220f808cd699fbf74a66b182e49dcbe4dc1ea9fb86164d893ab09ceab96
MD5 9c742a8e51bac9a3bc2a890599916f0e
SHA1 647b6e8aaa16b51f0acf7240f1bd36470789f86e
SHA512 b6c4875fde0e4ce2b921d6127eee5f2a80096bda16d277bd8a042f28b9dea213df189f5be91baad506bffe1b12770bb7d81feac537793eb891ae939195cd23f9
SSDEEP 6144:EWqtRi5AN95u6czPeo5KD271jOTZZ10mOSXpopx2lpGiV2g:qtRiS/c3zmmKD27VGZZHOSZoL2XGiT
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT
Size 66B
SHA256 1e4d9e2ad516a34f69698d508cbf1256a9c38952415868105396dcece98c62c2
MD5 337e1697c41a6b2080ceb1ccbae4e37b
SHA1 9a84c69984e9a7e3844f18c97075d81395975da6
SHA512 7ff3252b80838f52826a95f0154e96ef2bf63813bd0694bd7b02458aedbca47cbf0ac1ba2ddd21ff504e2d99c91d1f1ecb791bc66b1b7733dcbbea49b28fc5b5
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001
Size 91B
SHA256 95b0e906713a2921da266d75d4744fa5985106dbe798fe5acc2cd3daa077c76d
MD5 8789bf61415bcd55bbc5a999baa7be7c
SHA1 edc83db47f30cc94399d9f8264bd8619ca2a5920
SHA512 fefc7b8f9e1542dc1fc0b383fe9766b142ad2734d0837a14cf8086dac9024cf0dafce90ad8fbf4ae27b04b5df760f071efbc0d617a5f0d2e7a7caa103f3fba2a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy\Settings\settings.dat
Size 8KB
SHA256 da2350b8d4e82cf8645213b4d48f2d98472c1e60bd1b72beacfbeb6c0d5012c7
MD5 1fff562aa58c9f1c222c5049e9bfa592
SHA1 13e00d780e65db0774172e7ec9bc3622b67b755f
SHA512 efc43e9ad283b6348edc1d18fe97b7ac1253de93f69be41170ae6b937074c994acd17c9333f77e616ff1ee6a47146a0ed8cd757a34f236bad8f6146880c10de2
SSDEEP 192:SsHcaaHeeocFTSkBzTQhydlGky2I6uzmQeWyKLfTZpSaH7pf:SIcXHJukBYqGrPi5WyKLfTfrf
MD5 SHA1 SHA512 SSDEEP

Submit Download

wct5658.tmp

Path C:\Users\Admin\AppData\Local\Temp\wct5658.tmp
Size 63KB
SHA256 616fbd1592a211e63002bdd5379ceb55b5372d1134cfaa9a7bdae2aa0f7fb3cf
MD5 cd03b86bbf96b05514c7b9537822061e
SHA1 9ba0298f3e2d2254783623055cf81199f484b10d
SHA512 9e939ffe171cd900090bf9c1bb1d36448d8c978a8fbfce48d38abcc3c862d66511ff4b341743e5ba17c924696c98216b32fcc104a3fead4f365d288168f8ae5a
SSDEEP 1536:0QEb4W1NOYnOCFO6T3hVtcqTojhLuuH5omYpxLHYHspO0pfOLO:0QEURH67hwqChLuAomY/HUUtGO
MD5 SHA1 SHA512 SSDEEP

Submit Download

TM02851227[[fn=sist02]].xsl

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851227[[fn=sist02]].xsl
Size 245KB
SHA256 69af284cddb8c12f8bd7826af5e1ebb4a7b5ad9b5995db4d3be798fdfd51d4c0
MD5 6dd4eb5e743f5285173442a03b662873
SHA1 2b47dcd972caa8a836dd85af02cf9c4c25de762f
SHA512 59c6f267997558845f820c9b1a6de73f64a3511d5974e93185aad67f63cb84d399c724be3dedcff8a0a3e61adc28c14b095da767ed18cc2786362cd10e0b70c0
SSDEEP 6144:wOPC8Bi1KgImf4/9tkGw9/ZCGVc/7QE7fqD5RCD4gk6TAIMVyqEl2:PPC8w1Kef4/MGwpVCy5CM8E
MD5 SHA1 SHA512 SSDEEP

Submit Download

places.sqlite-shm.NBA

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\42vejdix.default-release\places.sqlite-shm.NBA
Size 32KB
SHA256 d1ef1f5dd2362ad060b4f69634c9f2769caeb75593b49199bcc34e4c3dcdb394
MD5 62d3f7732141aa48a48b5630b9c923ce
SHA1 1fc82d3e929330964fe45bef2da12c0e03c4a11e
SHA512 610ba77c8a54d54d97008b1e0342779896f130d1d6d176f4afbd025e82fe58eea3b77e339a87dc06d3f9f9146bfbbde247aa83980a7cdf4b3075cc333fd20954
SSDEEP 768:VDeOpT/tLtKm2rwFFtNBElDA4wbQ+2X1moKWrKVtkERyKSd:VauFLtKmowFtAlDA9bQ/13KxOEbSd
MD5 SHA1 SHA512 SSDEEP

Submit Download

2823318777ntouromlalnodry--naod.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\42vejdix.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite
Size 48KB
SHA256 609b52fe4f841cb17500b68ea4110e42ea1d7f9e182e93601f21b0985eee3aec
MD5 ed7e995f0d82cb7a3923b0bdc7c2fa34
SHA1 a484ea9eddf6e5dc0a1f170ee0a2eaf63c8f4270
SHA512 153af1cad3e76414f54b976dbd63efd41000f08dcc9d5cb3d606be5890ef3e835dc877d384b899fcab27b6bab168cd7fd7ae21e82ac46b10fe0a31b6a2777b6a
SSDEEP 1536:jlqsKzoHFtABDA9bQR13K/OENSVP+I3CW5xI:jYfWY7hMFWh3Cn
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3452-9323-0x00007FF69AF80000-0x00007FF69B072000-memory.dmp

Download

memory/3452-16021-0x00007FF69AF80000-0x00007FF69B072000-memory.dmp

Download

memory/3452-5497-0x00007FF69AF80000-0x00007FF69B072000-memory.dmp

Download

memory/3452-12230-0x00007FF69AF80000-0x00007FF69B072000-memory.dmp

Download

memory/3452-19129-0x00007FF69AF80000-0x00007FF69B072000-memory.dmp

Download

memory/3452-19413-0x00007FF69AF80000-0x00007FF69B072000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads