Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/04/2026, 01:58

General

  • Target
    svhost.exe
  • Size 263KB
  • Sample260414-cd9knady2y
  • SHA256 23ed51909e20f1e128aaf46cd8bc76f5c91488f80e9def6a101e0508a085629b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Jigsaw Ransomware

    Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (348) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Run Powershell and hide display window.

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 9 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops desktop.ini file(s) 26 IoCs
  • Hide Artifacts: Hidden Files and Directories 1 TTPs 1 IoCs
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • Interacts with shadow copies 3 TTPs 1 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies registry class 1 IoCs
  • NTFS ADS 2 IoCs
  • Runs ping.exe 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Views/modifies file attributes 1 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\svhost.exe
    "C:\Users\Admin\AppData\Local\Temp\svhost.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4344
    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe
      "C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe" --r
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • NTFS ADS
      • Suspicious use of WriteProcessMemory
      PID:3788
      • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe
        "C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe" --wd 3788
        3⤵
        • Executes dropped EXE
        PID:3660
      • C:\Windows\SYSTEM32\cmd.exe
        cmd.exe /c chcp 65001 >nul && powershell -NoP -W Hidden -C "$a=New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe';$t=New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 2);$s=New-ScheduledTaskSettingsSet -Hidden -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 0;Register-ScheduledTask -Force -TaskName '\Microsoft\Windows\Maintenance\DefenderCoreHelper' -Action $a -Trigger $t -Settings $s"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3644
        • C:\Windows\system32\chcp.com
          chcp 65001
          4⤵
            PID:3076
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            powershell -NoP -W Hidden -C "$a=New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe';$t=New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 2);$s=New-ScheduledTaskSettingsSet -Hidden -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 0;Register-ScheduledTask -Force -TaskName '\Microsoft\Windows\Maintenance\DefenderCoreHelper' -Action $a -Trigger $t -Settings $s"
            4⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:1976
        • C:\Windows\SYSTEM32\cmd.exe
          cmd.exe /c chcp 65001 >nul && powershell -NoP -W Hidden -C "$a=New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming:DiagServiceHost';$t=New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 2);$s=New-ScheduledTaskSettingsSet -Hidden -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 0;Register-ScheduledTask -Force -TaskName '\Microsoft\Windows\Maintenance\WinSvcHost' -Action $a -Trigger $t -Settings $s"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:2936
          • C:\Windows\system32\chcp.com
            chcp 65001
            4⤵
              PID:3036
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              powershell -NoP -W Hidden -C "$a=New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming:DiagServiceHost';$t=New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 2);$s=New-ScheduledTaskSettingsSet -Hidden -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 0;Register-ScheduledTask -Force -TaskName '\Microsoft\Windows\Maintenance\WinSvcHost' -Action $a -Trigger $t -Settings $s"
              4⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              PID:5088
          • C:\Windows\SYSTEM32\cmd.exe
            cmd.exe /c chcp 65001 >nul && powershell -NoP -W Hidden -C "$a=New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming:DiagServiceHost';$t=New-ScheduledTaskTrigger -AtLogOn;$s=New-ScheduledTaskSettingsSet -Hidden -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 0;Register-ScheduledTask -Force -TaskName '\Microsoft\Windows\Servicing\StartComponentCleanup' -Action $a -Trigger $t -Settings $s"
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:3240
            • C:\Windows\system32\chcp.com
              chcp 65001
              4⤵
                PID:3496
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                powershell -NoP -W Hidden -C "$a=New-ScheduledTaskAction -Execute 'C:\Users\Admin\AppData\Roaming:DiagServiceHost';$t=New-ScheduledTaskTrigger -AtLogOn;$s=New-ScheduledTaskSettingsSet -Hidden -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 0;Register-ScheduledTask -Force -TaskName '\Microsoft\Windows\Servicing\StartComponentCleanup' -Action $a -Trigger $t -Settings $s"
                4⤵
                • Command and Scripting Interpreter: PowerShell
                • Suspicious behavior: EnumeratesProcesses
                PID:1512
            • C:\Windows\SYSTEM32\cmd.exe
              cmd.exe /c chcp 65001 >nul && attrib +h +s "C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe"
              3⤵
              • Hide Artifacts: Hidden Files and Directories
              • Suspicious use of WriteProcessMemory
              PID:1624
              • C:\Windows\system32\chcp.com
                chcp 65001
                4⤵
                  PID:2764
                • C:\Windows\system32\attrib.exe
                  attrib +h +s "C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe"
                  4⤵
                  • Views/modifies file attributes
                  PID:1444
              • C:\Users\Admin\AppData\Local\Temp\ComradeCircle.exe
                "C:\Users\Admin\AppData\Local\Temp\ComradeCircle.exe"
                3⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Drops desktop.ini file(s)
                • Sets desktop wallpaper using registry
                • Drops file in Program Files directory
                • Drops file in Windows directory
                • Modifies registry class
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of WriteProcessMemory
                PID:4236
                • C:\Users\Admin\AppData\Local\Temp\1.exe
                  "C:\Users\Admin\AppData\Local\Temp\1.exe"
                  4⤵
                  • Executes dropped EXE
                  PID:4824
                • C:\Windows\System32\cmd.exe
                  "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Roaming\delback.bat"
                  4⤵
                  • Suspicious use of WriteProcessMemory
                  PID:3316
                  • C:\Windows\system32\vssadmin.exe
                    vssadmin delete shadows /all /quiet
                    5⤵
                    • Interacts with shadow copies
                    PID:4904
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\update0.bat" "
                  4⤵
                    PID:3928
                  • C:\Windows\system32\cmd.exe
                    C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\update1.bat" "
                    4⤵
                    • Suspicious use of WriteProcessMemory
                    PID:2632
                    • C:\Windows\system32\PING.EXE
                      ping 127.0.0.1
                      5⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Runs ping.exe
                      PID:4408
                • C:\Users\Admin\AppData\Local\Temp\cats.exe
                  "C:\Users\Admin\AppData\Local\Temp\cats.exe"
                  3⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Adds Run key to start application
                  • Suspicious use of WriteProcessMemory
                  PID:3216
                  • C:\Users\Admin\AppData\Local\Google (x86)\Chrome32.exe
                    "C:\Users\Admin\AppData\Local\Google (x86)\Chrome32.exe" C:\Users\Admin\AppData\Local\Temp\cats.exe
                    4⤵
                    • Executes dropped EXE
                    • Drops file in Program Files directory
                    PID:2372
            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe
              C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe
              1⤵
              • Executes dropped EXE
              PID:1912
            • C:\Users\Admin\AppData\Roaming:DiagServiceHost
              C:\Users\Admin\AppData\Roaming:DiagServiceHost
              1⤵
              • Executes dropped EXE
              PID:3212
            • C:\Users\Admin\AppData\Roaming\Frfx\firefox.exe
              C:\Users\Admin\AppData\Roaming\Frfx\firefox.exe
              1⤵
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Program Files directory
              PID:3656
            • C:\Windows\system32\vssvc.exe
              C:\Windows\system32\vssvc.exe
              1⤵
                PID:2468

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    RESTORE-FILES!639117323941903999.txt

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\RESTORE-FILES!639117323941903999.txt
                    • Size 2KB
                    • SHA256 9be09bbfc8570db3a81e04ad79871066c291f26febf4069ceb10af384c109a73
                    • MD5 SHA1 SHA512 TLSH

                    aic_file_icons.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
                    • Size 50KB
                    • SHA256 a005792289697447d2107ba77b24a720bef652ff8b5d8628b1e6296f159f57f8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    selection-actions.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
                    • Size 1KB
                    • SHA256 94acda38bef7a96b63054a3cb68c693b0224eedf5764c416a4aee0cdca2c0ab3
                    • MD5 SHA1 SHA512 TLSH

                    selection-actions2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
                    • Size 3KB
                    • SHA256 12c872bef1f6ce46640100695c946ee595df8ac75af4a2ed7c6e1cd5dd0cc23a
                    • MD5 SHA1 SHA512 TLSH

                    s_remove_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
                    • Size 720B
                    • SHA256 fc42a01d0e24881d6b388380f3fe7f9010a1680c4258e1881c33acd242382c9a
                    • MD5 SHA1 SHA512 TLSH

                    duplicate.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
                    • Size 1KB
                    • SHA256 9c7eb2002f0d3a18459014c93ec18daefca36dd0d8b0d9783fb51d144bc6dc27
                    • MD5 SHA1 SHA512 TLSH

                    remove.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
                    • Size 1KB
                    • SHA256 4d725c91896fcef9c2180fb854642c07d627e9c48d887c1a12466fc2b3b1d059
                    • MD5 SHA1 SHA512 TLSH

                    s_backarrow_default.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg
                    • Size 896B
                    • SHA256 c3e793f8ea628fff3e6daadeda3eedd32a6c338da16431ae91ac410b823f5c5f
                    • MD5 SHA1 SHA512 TLSH

                    s_comment_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
                    • Size 1KB
                    • SHA256 a717a2966ee63edb615a38bf306c2c5c534551e5d3ec2c986afce6dfef98e993
                    • MD5 SHA1 SHA512 TLSH

                    s_editpdf_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg
                    • Size 1KB
                    • SHA256 d5ba08032326e1fd045b27c820c17f6faaddc6904025c4de07dd70e9f99fdeae
                    • MD5 SHA1 SHA512 TLSH

                    s_export_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg
                    • Size 7KB
                    • SHA256 72704dfffb6a9ee1a9473db7d8b0eafdb10c1d507195d2cc9f002c644eb97caf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    s_fillandsign_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg
                    • Size 2KB
                    • SHA256 7322c34d4df8a8f5d888e987e4ae237894998ae4b1364f16c0037e3829e3c93d
                    • MD5 SHA1 SHA512 TLSH

                    s_folder-default_32.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
                    • Size 560B
                    • SHA256 76c18302d14f12dc8c0ff7b4e2324176df5f2bf1b08ddd4b250aaa814371df2d
                    • MD5 SHA1 SHA512 TLSH

                    s_move_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg
                    • Size 1KB
                    • SHA256 ac6de6c4d9bf1d5debc9a454418b54ab9adcb88af2cd0dcaa5b222fd52e3637f
                    • MD5 SHA1 SHA512 TLSH

                    s_nextarrow_default.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg
                    • Size 880B
                    • SHA256 26b9c78560ff6e44bf71f58558b5beaf8379ede0ec2069676afeefeddf304dae
                    • MD5 SHA1 SHA512 TLSH

                    s_organize_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg
                    • Size 1KB
                    • SHA256 bfbbeb1e76be140802c2ff4604f0d0774ba639e614d77b5d35447d3decf8011d
                    • MD5 SHA1 SHA512 TLSH

                    s_rename_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg
                    • Size 1KB
                    • SHA256 b67ab167a617f7345965ffce5f0bbb630ee08c1fee946b53588b420bdc0f7612
                    • MD5 SHA1 SHA512 TLSH

                    s_sendforsignature_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
                    • Size 2KB
                    • SHA256 de2cd74bb53fad7ebcd83e64f97a0abf992ec0b01f7205c5ba10e87e3695cb04
                    • MD5 SHA1 SHA512 TLSH

                    s_share_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
                    • Size 1KB
                    • SHA256 9384c60a505e84394555abf5f2c86db2e27de2e68eb8c11a7cce3a8442bdac66
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
                    • Size 3KB
                    • SHA256 5796690f04079daf5a7093ee71ceb172342b92ccec4ab7619429b431f3c3d07a
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
                    • Size 28KB
                    • SHA256 ee5f3c87bc66a698d9fcec82aff170e34c28dfa2a6195bf7556dbd0ed42ab63a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
                    • Size 7KB
                    • SHA256 6c9af2fc99742af70dba634f9d35371166cbd0a46af8b29faefd4539ad39227b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
                    • Size 896B
                    • SHA256 99a511d628e92fdc991f87ee9f3db5ad0a0c81a0178d1cb496f98269d5c2f4b8
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
                    • Size 4KB
                    • SHA256 0a25d5e69356b9fe7392c613113fa1663a377c7d1bfe9479349abb4ddb0b021d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 b79c9bf946b1cb12291f375ebb305d03a99787e758f00879b1e6ed610fce61d4
                    • MD5 SHA1 SHA512 TLSH

                    convertpdf-rna-selector.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
                    • Size 175KB
                    • SHA256 2bebb3bdaac7274a9656a7265fcb37f246fe64d65643db88998ea0e120e3b21e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    convertpdf-rna-tool-view.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
                    • Size 376KB
                    • SHA256 aff434b5adadec4f4d2bd2fef3037ed57ebec76d368b4d66df3e593973cf0744
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
                    • Size 2KB
                    • SHA256 a0f12a9cd31485d2549a0d132340911a0c4f659fb65af3309063faba72aa6222
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 3044125901869536ad55194ad8552f5612172766b86ea9b8a3920fe50b466659
                    • MD5 SHA1 SHA512 TLSH

                    example_icons.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
                    • Size 688B
                    • SHA256 8ced530a3735e44d600c757ffdbd0d280fb84dbf5ef0ae6974ea2bf606680b67
                    • MD5 SHA1 SHA512 TLSH

                    example_icons2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
                    • Size 1KB
                    • SHA256 5d11b1af8b7fb66a59b54ad56bf5f48c011f4479d4624923587c2b0179c281f0
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
                    • Size 448B
                    • SHA256 189dc809ae1952f1026308a3fb9afb6bd87b554fd3f52375e697d065bd0a26e7
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon_2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
                    • Size 624B
                    • SHA256 b9115e47954130b6d85339ffdb3a242227d117a35c90a313110557e87ad870a8
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon_hover.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
                    • Size 400B
                    • SHA256 7b8008cb883e015f53ee75c34e919c7830bec4e3d6e54c038783fa9cd99259a6
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon_hover_2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
                    • Size 560B
                    • SHA256 6af5f44a8185db79cfb92c599a3a8b496b7ba90e2677c68baaa9bd8abc38b03f
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
                    • Size 400B
                    • SHA256 9c4fd8b73c049c0ffc869dec7ab30554d209880fb22748414babac88971b6386
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon_2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
                    • Size 560B
                    • SHA256 a27712e936ad1fd2f3a5361e7476c193ebf3c323891c8da7885fe071c9e9b8c9
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon_hover.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
                    • Size 400B
                    • SHA256 1ea966a23e618fc1de4ea096dc08af8ef04366448db0e3602e66c1f9731b9bcb
                    • MD5 SHA1 SHA512 TLSH

                    rhp_world_icon_hover_2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
                    • Size 560B
                    • SHA256 f63d00712778365b7131de33f391e3afe1b7dfea1c0f411ded5c1becbf83f743
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
                    • Size 1KB
                    • SHA256 04abb096394d90a08e79c1752c25e96ee65fdd6e3ab2544664490a2a1e8383c3
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 ad4bd2145ef5a9b9109d20a99667fe6701f17b2ccf9529999047da26b704956c
                    • MD5 SHA1 SHA512 TLSH

                    s_checkbox_unselected_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
                    • Size 912B
                    • SHA256 c4675afede5ed0c20d6171a47c49a95d045f273451fba637446f4357b0cdca59
                    • MD5 SHA1 SHA512 TLSH

                    s_checkbox_selected_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
                    • Size 1KB
                    • SHA256 000c01d0844bcf509d675ed71cb005843f164fb4e1078416924f5b65cbd93bc5
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
                    • Size 8KB
                    • SHA256 838065e33d84d2930e7bd79f6810edf5bdb87bc9cd05846f462fd7aca0e3bf12
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
                    • Size 1KB
                    • SHA256 401ddac873fe3b6cf6af9ed8a3bd21ed82643a0d25eba54caa79d0ba9c5a3924
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
                    • Size 1KB
                    • SHA256 6b4cac1c8a01d44f002d1758fc1656d4b81a277789915797e85830d1c8ebc3e5
                    • MD5 SHA1 SHA512 TLSH

                    icons.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
                    • Size 7KB
                    • SHA256 70ba35b04ccc97cfd4ceaac53ad53c0ecedca46b0a37c7809fa9a47202a50083
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    icons_ie8.gif

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
                    • Size 7KB
                    • SHA256 7c2f61b3ec8a38c71e695a79042c278b32d53ffd4473671e249df1717d42b17d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    icons_retina.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
                    • Size 15KB
                    • SHA256 7ce8b5e02949de67b68cdf5a99529f907abf45ab2881f08aa4a042e7dea1ec12
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    new_icons.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
                    • Size 8KB
                    • SHA256 476055e74dae94b6ce12c355475e97e89f6b6f7eed975581971a1562214b64a5
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    new_icons_retina.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
                    • Size 17KB
                    • SHA256 8af8304819e715bdfd04700aa919291f8e4bb5deec0b4c7299a7113a9d334adb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
                    • Size 832B
                    • SHA256 54f0603bc53a66239139886e5b65da84da9ab8381a9b74dffe200f622d1b08ed
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
                    • Size 864B
                    • SHA256 db8f4cd5f9f23f8dcabf9b4bc03116cef9177572d9b11967921f3a5e53f04ceb
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 68f706bba7405a61e0f8ead373c9b01b15d4ccc9c9ea4401138724463b0c60ed
                    • MD5 SHA1 SHA512 TLSH

                    bg_pattern_RHP.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
                    • Size 192B
                    • SHA256 f3e751ec0ff8fdc6d17c89da08d476790a376bc3a66be1d7fcff2c63c59fea55
                    • MD5 SHA1 SHA512 TLSH

                    bg_patterns_header.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
                    • Size 704B
                    • SHA256 8890db3f0eef3ce42c7c4595f41acb4374ed4e852a4b245949f450a0f4fd8830
                    • MD5 SHA1 SHA512 TLSH

                    illustrations.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
                    • Size 8KB
                    • SHA256 1840741aa9ac7b150680eff57b429c2a5c91e37c624098fd1ea4dc874f2a585b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    illustrations_retina.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
                    • Size 19KB
                    • SHA256 c06b7eb5f17ce270bd3dc0b6b9286be3aec75bea8a653e940cbdafdbbca823cd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 697a9de42413bfab719e6e09eabb0cdd6006b27a35321454f6f8f15709862d8e
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
                    • Size 1KB
                    • SHA256 a11b6701ef5911565c622bfcc5bfaba1871f3c86565321f99f2bc31c15374622
                    • MD5 SHA1 SHA512 TLSH

                    main-selector.css

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
                    • Size 816B
                    • SHA256 266eed00bd9c6519e685e4c4cc2aefe4c690f38b5599c4b8d31d872a8e7485e4
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 97ff0ab38162578b546a3f9cd88aa6a5139b653a15f940f5a1ce8ce40c2405e8
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 e8d25e20043c83a91dd8d3a5f69a02ff7c00ed4dbbc1ae4b74e2c5e68783e948
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
                    • Size 1008B
                    • SHA256 0d25cd2a309c063f703b55df083be7e29b6a309ae1caf86431969daff507167d
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
                    • Size 4KB
                    • SHA256 d2a6760f7828d96c323cf1fbf8019f869f8b7a407fee5e0db14ed8ae1dfc8d50
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    PlayStore_icon.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\en-us\PlayStore_icon.svg
                    • Size 5KB
                    • SHA256 104944c035dd93779b9002a17292982d8525516934100852a0f66623d040d580
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
                    • Size 12KB
                    • SHA256 69349c00b8c288e038ee43288ff804953340d1cb6e81abb29e2895ee646cb4d9
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
                    • Size 14KB
                    • SHA256 a4f02da63172be9922c12835be2ff9bcce6a8b514735ce22de6713e84afd30a3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
                    • Size 928B
                    • SHA256 69ce941067d3d56d33a3033a9c4d3612717330569676a4a09c4a8c6d7c45f5c8
                    • MD5 SHA1 SHA512 TLSH

                    main-selector.css

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
                    • Size 816B
                    • SHA256 87e199126ac469b5f067562f3f07969cf7bfbd9f80aa21940090c6b968b22a2f
                    • MD5 SHA1 SHA512 TLSH

                    Download_on_the_App_Store_Badge_cs_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_cs_135x40.svg
                    • Size 18KB
                    • SHA256 3fa57066d09e1bbfeab0d541c9d062eb28c12f6ecb65073ccfa5be2e60c2e4ec
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_da_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg
                    • Size 14KB
                    • SHA256 723905446002c2587df865e8eaf94ede84929847b6494f6e643ee033bc482c93
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_de_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_de_135x40.svg
                    • Size 17KB
                    • SHA256 73b5f2bc1ec357549cb5db903b9140193c804303aa9e369cba00d23bf7ef9068
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_es_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg
                    • Size 23KB
                    • SHA256 283079f00943e1387904354bf6a590a297b974d67e274e6b894b15b7de814a88
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_fi_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fi_135x40.svg
                    • Size 18KB
                    • SHA256 b8154fbccdf4e8bd27ff98a6618f1bb60e5057adf1c243f5fb381e062e5ee016
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_fr_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fr_135x40.svg
                    • Size 26KB
                    • SHA256 d63735760def4059af4554d65a0a2c9ab55c6dd3b7d3720216ad28ed0c9e95a8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_it_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_it_135x40.svg
                    • Size 19KB
                    • SHA256 5fb1ee62757ab04186ce93903c02211a00451c66175d82341127a47bf1caf7cf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_ja_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ja_135x40.svg
                    • Size 17KB
                    • SHA256 a5b528d15954cf6ebcc74cee4b9c7178fb7304318fce5e1efaadfcc0af206b80
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_ko_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ko_135x40.svg
                    • Size 17KB
                    • SHA256 e35c86bcca9d85861e0500101ef4d58787c6e9362dd9b21a4b6569dac3348e5a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_nb_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_nb_135x40.svg
                    • Size 20KB
                    • SHA256 3018ac62b49f4c11cfda0e0fbc4790110e0d4900ce68608a43d9ce73bd80ba87
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_pl_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg
                    • Size 18KB
                    • SHA256 1cc233a993851bff030d6867a0f0dd130bb8172382e67176c967d1814129c666
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_pt_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg
                    • Size 18KB
                    • SHA256 f855fb3e41f462d10dc5bc1b6a171eebb5c169c317efdf258204b3ec73b0c7a3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_ru_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg
                    • Size 23KB
                    • SHA256 7a60576808646fbc545dd069ea83193238c02414f1e234e66de18557f60076fd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_sv_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_sv_135x40.svg
                    • Size 17KB
                    • SHA256 852a7dfec08c3a026456857c618e381c01faba1051d043bdbb516184327e5fc8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_tr_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_tr_135x40.svg
                    • Size 20KB
                    • SHA256 c3fecd38c37924af5a65a339bb2df6b715fda87dd014ce2be8fbd781269eca75
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_zh_cn_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg
                    • Size 13KB
                    • SHA256 0c5d606df3028360d46f6d4e5aee45b5dd91cb73e00f23de86797a7d22d35535
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Download_on_the_App_Store_Badge_zh_tw_135x40.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_tw_135x40.svg
                    • Size 15KB
                    • SHA256 77b7e39526c4cb6e7fa98db2901f38ab4c9de6b7fc66742d38e045f621c685d7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    cs_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg
                    • Size 5KB
                    • SHA256 5e366c57370a21e3edb1b14cbba528bd7d7f0f34e23bfc90b5aeaf8c7cab2a48
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    da_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg
                    • Size 5KB
                    • SHA256 798ad03ec82b9a98466d69613f4eee3ee6557bab64b62a8739019f7ead332b65
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    de_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\de_get.svg
                    • Size 5KB
                    • SHA256 6059ed8ef88f777f89e6acf9fa0cc54b3e076231aea12524259a8324843cf32b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    es-419_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg
                    • Size 6KB
                    • SHA256 90e5e0b37dd024b94657af12f3e29b986ff38ebc5584918df4f1114ef4bd558d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    fi_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fi_get.svg
                    • Size 5KB
                    • SHA256 bbf53495e43e3b943c60015735d4315ed97dd563aa524a208cc2e8c838171384
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    fr_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fr_get.svg
                    • Size 7KB
                    • SHA256 846c641db18fba91cb4ed86c43b747f2fc9c325e5433a4ba5428d5ae3e852c16
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    it_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg
                    • Size 7KB
                    • SHA256 d1c6a5a26284ede6a12c5bd567dbcc8212868ba6d927f8b8858d15b4400f47ec
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ko_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ko_get.svg
                    • Size 5KB
                    • SHA256 28096c319d322c9d9c54e7a4bfe9cdbdb1fd40689ab6795c7f263d01e19715bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    no_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\no_get.svg
                    • Size 6KB
                    • SHA256 c6187de93c4d260f1a9adc4cc82cac44d84c160b09d7472f4e98e840fe5964e4
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    pl_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg
                    • Size 5KB
                    • SHA256 cdcdf828f1583aa43ab0aea638bc45e2564746ab17341db8c85a5bfc232ae839
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    pt-br_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt-br_get.svg
                    • Size 6KB
                    • SHA256 2b66e7ab75a8d270d056596b38eb92df8cebbb21a0ede4f5f42472068f57e3f6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ru_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ru_get.svg
                    • Size 6KB
                    • SHA256 16d02646fef0f00dc3a97b88dccc8aeb3b6b6a68e4cfaebf11c095cbbf65da24
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    sv_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\sv_get.svg
                    • Size 6KB
                    • SHA256 99813dbbb16ce7022d07a14eecbfce787c883c1421281dc5589537d32ea2fba0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    tr_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\tr_get.svg
                    • Size 5KB
                    • SHA256 8423c4b90519e04168e83caa365089a4d2599b38e963bd1ad68f5c7116ab1efd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    zh-cn_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg
                    • Size 7KB
                    • SHA256 20f387e7d275024c72be73df232f6e1f6bff0fa824a00c687245c4f1fa1e4c32
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    zh-tw_get.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg
                    • Size 6KB
                    • SHA256 547b20b5b4cb9fe4b94c9786ba7bc2390eae70cdab1e5d793972cde13712dd63
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 94ff65bf6353d1f8a53047355d188f40f4bac0e1ecb682494f161c7193b0adbd
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 b6d4c8fb53bb7157d012a2228f9c9d621550d3570ce5abbd15bd11736260db59
                    • MD5 SHA1 SHA512 TLSH

                    main.css

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
                    • Size 816B
                    • SHA256 31591b4865513d579aab072d58be9b48fb1c16c00c461f61f52a946e6ecb260e
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
                    • Size 864B
                    • SHA256 46c28132e55ee64faf52d245f746aab11d4c40afec824e67299e8bb68fdb7f3d
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
                    • Size 864B
                    • SHA256 83951db5fe53126e513ff9bb93bd1c89485a21c6051109709c0a636f7da1d6bd
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
                    • Size 864B
                    • SHA256 752ee03795d73fc2bbce816011ac22cbdc021000a01e60db07956dfd6d0a7ee9
                    • MD5 SHA1 SHA512 TLSH

                    main-selector.css

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
                    • Size 816B
                    • SHA256 d0b1e09307c9910d7930a401f355103afdf3b33917da2a6a9ad4212317ae1976
                    • MD5 SHA1 SHA512 TLSH

                    progress.gif

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
                    • Size 19KB
                    • SHA256 2a5ac7724abfda434012fd3f7f0e0ca3e9c21d1103f52efa38db501ca577021b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    faf_icons.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
                    • Size 6KB
                    • SHA256 4a81a57c3bcdabe16a3521c1e4aa929af6cae93178077651ef5a08938e117054
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
                    • Size 7KB
                    • SHA256 5aa28532393e99008fe25893ceecb83f22c598eb1a1f2a2d5ad4cbf64c25b9f0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
                    • Size 3KB
                    • SHA256 fd4c918e9df2873cb10b94d41fb898c604972e3428d6f65d296e93e76e6e04d4
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
                    • Size 1KB
                    • SHA256 ca0c3f10c0ecddd5c181ad5ad9d599da7d8bad5e9e5092c9164a6088fcd77543
                    • MD5 SHA1 SHA512 TLSH

                    bun.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
                    • Size 2KB
                    • SHA256 0811d5688654568027b7ed43284138b9dc03fb2837650070546a52c358808ec2
                    • MD5 SHA1 SHA512 TLSH

                    cstm_brand_preview.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
                    • Size 2KB
                    • SHA256 28b8578132f059557a932742b467821729e77def85176ba995209cde8db4ef04
                    • MD5 SHA1 SHA512 TLSH

                    cstm_brand_preview2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
                    • Size 4KB
                    • SHA256 101d5f7b9e20665787965aacc057e236571e98d4f025ea5ea27d070c15653bd3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    dd_arrow_small.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
                    • Size 304B
                    • SHA256 f8b0d0bc5835248de922fc794e9ddd2fb8ced7b9a81e060d9761df4cd2b8bc2a
                    • MD5 SHA1 SHA512 TLSH

                    dd_arrow_small2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
                    • Size 400B
                    • SHA256 7798e2826a702b61d332e00956b7a8d390f7ca1dcf2ca71ed151282fd18c5876
                    • MD5 SHA1 SHA512 TLSH

                    illustrations.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
                    • Size 4KB
                    • SHA256 bb5c75176953c58aa021f4c0ab474ea00e818442fb191318711c81b79db477bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    nub.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
                    • Size 1008B
                    • SHA256 e38ae7de5e98c6b5c9148463ce44e07d94e78e64ffaffecba7f4fd784a7d47f3
                    • MD5 SHA1 SHA512 TLSH

                    s_filter_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg
                    • Size 816B
                    • SHA256 cb04eb490cb7e40afd33ae1383e23c18e547a1054d64c21c05b1cb6e10ea2bd6
                    • MD5 SHA1 SHA512 TLSH

                    s_listview_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg
                    • Size 1KB
                    • SHA256 ec2d646f73ac78c596121836a906a6e67ea5bf4542640d19c3e311268fdc982e
                    • MD5 SHA1 SHA512 TLSH

                    s_opencarat_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg
                    • Size 864B
                    • SHA256 0fc7c07fc8d3ced0d94eaf88897bdb07caca5693d28e9ebe295c6e565394ccbf
                    • MD5 SHA1 SHA512 TLSH

                    s_thumbnailview_18.svg

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
                    • Size 1KB
                    • SHA256 38d72a3af5c1f516bf5247c30c7248668654498f1ab3ff87aeda5a240a82895d
                    • MD5 SHA1 SHA512 TLSH

                    share_icons.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
                    • Size 1KB
                    • SHA256 076d45b7f968a0d98156e7ce9e76880af0cd5e38eecad518b633f0155635fd37
                    • MD5 SHA1 SHA512 TLSH

                    share_icons2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
                    • Size 2KB
                    • SHA256 136ee01fab239b0bec0e7658200b814e9d930cd9f1dd6983105fc6976606ab49
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
                    • Size 13KB
                    • SHA256 d71b4c68e76f353c0b34ec3a25ef5db07ddbe0086d243f6a5a7b672c40015378
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    adc_logo.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
                    • Size 3KB
                    • SHA256 e1054ede1d9d000f463aa79f2a0ec32d0730084d6239c20c29bb5b4fb1160479
                    • MD5 SHA1 SHA512 TLSH

                    adobe_spinner.gif

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
                    • Size 560B
                    • SHA256 a9e38ce8cd6f0df84597e8e940719d0d5e2e9bf1298673275efd43e03f86f599
                    • MD5 SHA1 SHA512 TLSH

                    logo_retina.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
                    • Size 6KB
                    • SHA256 e8ae9f481ab1cf663d02f3ece3c4dd7d332424c57a3f75b1fcb05afa458a84c0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    sat_logo.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
                    • Size 832B
                    • SHA256 e3ec8e80992668f607137c2882c519901caccce6d1df1f2b6a35f4c43da54030
                    • MD5 SHA1 SHA512 TLSH

                    sat_logo_2x.png

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
                    • Size 1KB
                    • SHA256 4bf714ab56045637bc98da09a9b1f9604b180b957f7f2f07134250523ede46b7
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
                    • Size 10KB
                    • SHA256 8904b0a040f3d101f5e28fc7a68c69caef1186aac3c6a40ca1517e60d252eb68
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
                    • Size 13KB
                    • SHA256 67b863ec032ee81a0d289cc5da79565279d5a08b7ca637ecae019ba59e890764
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
                    • Size 848B
                    • SHA256 5a6bdaf6e22d9517189d91c88b44427c5e6ef034728144993bcdc8e3f103fe6f
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
                    • Size 17KB
                    • SHA256 03b3ddc9704d8921d81989aa22b6c7d77a4446615d70ba04092a7fda42eba829
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
                    • Size 1KB
                    • SHA256 c38091a12678fdc7cd1eca547fa12352aca6f44ef2d61ccc22d10ec2c9ff0375
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
                    • Size 1KB
                    • SHA256 ab398fbcbc09ac6ad808cb993e8425bc6f9a7ddd7d5b62d763e6092689637527
                    • MD5 SHA1 SHA512 TLSH

                    ui-strings.js

                    • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
                    • Size 2KB
                    • SHA256 21f117b215ca6c230258eaaaf357a308860a164e2bcde0212e827e71e84ba1f2
                    • MD5 SHA1 SHA512 TLSH

                    DisplayLanguageNames.en_GB_EURO.txt

                    • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
                    • Size 32KB
                    • SHA256 7b8464f1c0a0cc7e7a1087a2bc701aab926044ae417c7f04b8153e40b46cec78
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    dotnet-host-6.0.27-win-x64.msi

                    • Path C:\ProgramData\Package Cache\{3A96B93E-763F-41E7-85C7-1F3CCC37EF27}v48.108.8828\dotnet-host-6.0.27-win-x64.msi
                    • Size 736KB
                    • SHA256 5a68e2d3b90d95910f76c15d0b86c61de68b59c7eebc0e94e44b1fc6d2199b19
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    vc_runtimeMinimum_x64.msi

                    • Path C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
                    • Size 180KB
                    • SHA256 27d66fe99d5fb56f5f73ce58f8c1fe4bde23143fcb16651a58bc69212b379a92
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    dotnet-runtime-7.0.16-win-x64.msi

                    • Path C:\ProgramData\Package Cache\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}v56.64.8781\dotnet-runtime-7.0.16-win-x64.msi
                    • Size 26.0MB
                    • SHA256 2bd5f5cede3b0fbf9259ad1714636d623d37ae5e72d0044653acd8e317307199
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    windowsdesktop-runtime-6.0.27-win-x64.msi

                    • Path C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi
                    • Size 28.5MB
                    • SHA256 eebeb5265bba084fdb1076ec3ac67d8b03ba8051bfeb32064242b929858ed6b3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    RESTORE-FILES!639117324543622577.txt.cat

                    • Path C:\ProgramData\RESTORE-FILES!639117324543622577.txt.cat
                    • Size 2KB
                    • SHA256 7e14b34ba360233539aba3e4a28e513feda062317b7039bfd7230f00b1b95b78
                    • MD5 SHA1 SHA512 TLSH

                    USStmp.jtx

                    • Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USStmp.jtx
                    • Size 3.0MB
                    • SHA256 33f760b73822b229cb51d42be939d0064fe5b20083e6673420728e609be768e2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    data_0

                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
                    • Size 8KB
                    • SHA256 580c5d5882aff0479f5e2947e1ce3c5f8839132de560db74b4d4654c3e457a07
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    data_1

                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
                    • Size 264KB
                    • SHA256 e1d479fa3d8cf63b55c22a9947542db4cc36bd5bba645ecef3e067f58d1f2946
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    data_2

                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2
                    • Size 8KB
                    • SHA256 e40d27b38679640dae1618ed9efb1769b750fa983bd60935604cd6b573594527
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    data_3

                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3
                    • Size 8KB
                    • SHA256 a45fbb33cdccdfe90a8ff5579e555d20166caa804137e34239e1d70dd81ba1de
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    index

                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\index
                    • Size 256KB
                    • SHA256 e8f2743e4db98f7288e263869d84b7ec2de5384bf7a91b88e705a79bf8d6bab7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    index

                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\index
                    • Size 256KB
                    • SHA256 b6488dadbeffe1ced00f797eb97a4c5720ea928659dbac17ca18c0349731ee1a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    powershell.exe.log

                    • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
                    • Size 3KB
                    • SHA256 dbd4136bc342e3e92902ec3a30d165452c82997a7ae24ac90775e42d88959e6b
                    • MD5 SHA1 SHA512 TLSH

                    DiagServiceHost.exe

                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\DiagServiceHost.exe
                    • Size 263KB
                    • SHA256 23ed51909e20f1e128aaf46cd8bc76f5c91488f80e9def6a101e0508a085629b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    StartupProfileData-NonInteractive

                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                    • Size 1KB
                    • SHA256 a59425142993eafd45520a58aaf14ad6fc3c1d6f1ab90d188e85a6bd21d39df5
                    • MD5 SHA1 SHA512 TLSH

                    StartupProfileData-NonInteractive

                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                    • Size 1KB
                    • SHA256 27845ed84cb47c4ba2883bdd75c0a0be7035060f6ac845ca256a391bee640716
                    • MD5 SHA1 SHA512 TLSH

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat
                    • Size 8KB
                    • SHA256 142226969689797d63989e210d2a72d130510cfc379e383b65f723e1dc4ae666
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    https___java_com_help

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_help
                    • Size 36KB
                    • SHA256 4ad0e416232013d2b0803e69115ecf6f1db6d16fb8e7ab4784198345f52f653b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_charmap_exe

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_charmap_exe
                    • Size 36KB
                    • SHA256 5370fdff9460173327708c29c999bc853ade0eee11a0bc258c113f733890e2cb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    {6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_VideoLAN Website_url

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_VideoLAN Website_url
                    • Size 36KB
                    • SHA256 7804976cec76df35fb293fc386337c7e2ce5f7cd27775cb82462121d6497aa0a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    {6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_vlc_exe

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_vlc_exe
                    • Size 36KB
                    • SHA256 d168643414aa060b715658aaa546b958de35030dfe5a1184f69162e46355c748
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Apps.index

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{9b802213-d1a7-4fdf-8650-3e7363619b7d}\Apps.index
                    • Size 1.0MB
                    • SHA256 faab837ed2dfdfccab11dc17b7449b6095b646c499f11762c2046474e5d58d96
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    AppCache134142059654461624.txt

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134142059654461624.txt
                    • Size 77KB
                    • SHA256 95c538875d618399f1fbbc100752758c1819595a03c94ef9eebfcab8c7dfeb4e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    AppCache134142060205632461.txt

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134142060205632461.txt
                    • Size 51KB
                    • SHA256 3919b45a8505a34255640b0a121f8b5a48e380af60b5a1fb44cf1b83048b1f35
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    AppCache134142067214666558.txt

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134142067214666558.txt
                    • Size 63KB
                    • SHA256 af8da265323acb2d438c14efc130801cc91b5c35a1a50d30ed1b9ee96474da4b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    AppCache134142069191092154.txt

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134142069191092154.txt
                    • Size 74KB
                    • SHA256 2240737a9ba5044c1dc0de8da204002e922571e81ba92eb9c9ed676132267e83
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    AppCache134142108539007099.txt

                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134142108539007099.txt
                    • Size 77KB
                    • SHA256 ec81a824411451e483d9201e99291a36d6d6aa7b25b5b164d866ed55d44155b6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    1.exe

                    • Path C:\Users\Admin\AppData\Local\Temp\1.exe
                    • Size 131KB
                    • SHA256 e04d77494197accdae6c2959ef168fcfccb320030b5b71479754ea863f740fc9
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ComradeCircle.exe

                    • Path C:\Users\Admin\AppData\Local\Temp\ComradeCircle.exe
                    • Size 377KB
                    • SHA256 fcf187d75ec63c7bea8a45b18c558418bc0d1502cf01bbee76928e122c5db6b8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    __PSScriptPolicyTest_ilgani3h.ok5.ps1

                    • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ilgani3h.ok5.ps1
                    • Size 60B
                    • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                    • MD5 SHA1 SHA512 TLSH

                    cats.exe

                    • Path C:\Users\Admin\AppData\Local\Temp\cats.exe
                    • Size 126KB
                    • SHA256 61cd0131cb4bf090c5ee7761566f6f7a778e78b37d220f0506f98632a2663ee8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    update0.bat

                    • Path C:\Users\Admin\AppData\Local\Temp\update0.bat
                    • Size 66B
                    • SHA256 f6acc27f297681ba3c5d7c0983fb9a5eda6da3f87c6d3b92a511d5d375d58a3a
                    • MD5 SHA1 SHA512 TLSH

                    update1.bat

                    • Path C:\Users\Admin\AppData\Local\Temp\update1.bat
                    • Size 101B
                    • SHA256 e6137449cd45bc870016d5b0416ca9baf6da5dbd2a415e1931fbedaeb437aa96
                    • MD5 SHA1 SHA512 TLSH

                    places.sqlite-shm

                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\semwmfoz.default-release\places.sqlite-shm
                    • Size 32KB
                    • SHA256 3ebd84e1c096e4a17ce40823e1538b8f970d3bef28453387e6b900057bcada6b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    2823318777ntouromlalnodry--naod.sqlite

                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\semwmfoz.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite
                    • Size 48KB
                    • SHA256 2046e160d7ae6d40a7613a37685fa4cf580fef78d0ea59df428f48283f5b6353
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    delback.bat

                    • Path C:\Users\Admin\AppData\Roaming\delback.bat
                    • Size 35B
                    • SHA256 325de85e48afabcc0d53d5f6d9371314d0ed6e46d91c271abceccca58cbbd238
                    • MD5 SHA1 SHA512

                    memory/1512-43-0x000001445AD50000-0x000001445ADA5000-memory.dmp

                    memory/1512-44-0x000001445AE50000-0x000001445AE5C000-memory.dmp

                    memory/1912-10565-0x00007FF7AF310000-0x00007FF7AF370000-memory.dmp

                    memory/1912-10566-0x0000024671A40000-0x0000024671A4C000-memory.dmp

                    memory/1976-8-0x000002C97F010000-0x000002C97F032000-memory.dmp

                    memory/1976-18-0x000002C966BB0000-0x000002C966C05000-memory.dmp

                    memory/1976-19-0x000002C966C20000-0x000002C966C2C000-memory.dmp

                    memory/2372-11145-0x000000001B460000-0x000000001B46C000-memory.dmp

                    memory/2372-10854-0x0000000002290000-0x00000000025E5000-memory.dmp

                    memory/3212-10589-0x000002BEA1C40000-0x000002BEA1C4C000-memory.dmp

                    memory/3212-10588-0x00007FF76AAA0000-0x00007FF76AB00000-memory.dmp

                    memory/3216-10718-0x0000000002540000-0x0000000002895000-memory.dmp

                    memory/3216-10702-0x000000001B560000-0x000000001B5FC000-memory.dmp

                    memory/3216-10701-0x000000001BB50000-0x000000001C01E000-memory.dmp

                    memory/3656-10719-0x000000001BE30000-0x000000001BE38000-memory.dmp

                    memory/3656-10856-0x000000001C980000-0x000000001C98C000-memory.dmp

                    memory/3656-10855-0x0000000002EB0000-0x0000000003205000-memory.dmp

                    memory/3660-47-0x00007FF7AF310000-0x00007FF7AF370000-memory.dmp

                    memory/3660-48-0x000001E461590000-0x000001E46159C000-memory.dmp

                    memory/3788-77-0x00007FF7AF310000-0x00007FF7AF370000-memory.dmp

                    memory/3788-4550-0x00007FF7AF310000-0x00007FF7AF370000-memory.dmp

                    memory/3788-46-0x000001ED87100000-0x000001ED8710C000-memory.dmp

                    memory/3788-45-0x00007FF7AF310000-0x00007FF7AF370000-memory.dmp

                    memory/3788-49-0x00007FF7AF310000-0x00007FF7AF370000-memory.dmp

                    memory/3788-79-0x000001ED87CD0000-0x000001ED87D25000-memory.dmp

                    memory/4236-76-0x0000000000F70000-0x0000000000FD6000-memory.dmp

                    memory/4236-8779-0x000000001B9E0000-0x000000001BD35000-memory.dmp

                    memory/4236-2553-0x000000001B9E0000-0x000000001BD35000-memory.dmp

                    memory/4236-84-0x000000001C030000-0x000000001C070000-memory.dmp

                    memory/4236-82-0x000000001B9E0000-0x000000001BD35000-memory.dmp

                    memory/4236-10725-0x000000001B9E0000-0x000000001BD35000-memory.dmp

                    memory/4236-83-0x0000000002F60000-0x0000000002F6C000-memory.dmp

                    memory/4236-10849-0x000000001B9E0000-0x000000001BD35000-memory.dmp

                    memory/4236-10850-0x0000000002F60000-0x0000000002F6C000-memory.dmp

                    memory/4344-14-0x00007FF617F40000-0x00007FF617FA0000-memory.dmp

                    memory/4344-15-0x00000294895B0000-0x00000294895BC000-memory.dmp

                    memory/4824-2862-0x0000000001370000-0x000000000137C000-memory.dmp

                    memory/4824-100-0x0000000000B60000-0x0000000000B88000-memory.dmp

                    memory/4824-192-0x00000000013B0000-0x00000000013BA000-memory.dmp

                    memory/4824-2861-0x000000001B620000-0x000000001B975000-memory.dmp

                    memory/5088-32-0x000002161DDF0000-0x000002161DDFC000-memory.dmp

                    memory/5088-31-0x000002161DD20000-0x000002161DD75000-memory.dmp