meow | 113ffb25b031a75d1397fbe6f3cf4496cc15db8c0150513c07b9a5ea090fb4c9

Analysis

max time kernel
298s
max time network
184s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/06/2026, 18:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
meow.exe
Size 328KB
Sample260608-xbt3eaex7k
SHA256 113ffb25b031a75d1397fbe6f3cf4496cc15db8c0150513c07b9a5ea090fb4c9
MD5 e19bb1089f583bac6d2c1933bc62675c
SHA1 54a98eed745527362cd6a851c6d2f2472ccfbd7f
SHA512 b5ed73d844334ad0da74de7b06634014cda03eb76d1419c0182b31155440776f2da68ebb7692b3ecc9a522959e3d91fb4904c33f5fe7ff7cf54869df1228ef00
SSDEEP 6144:f4Oi7rsAO/bMd+ui2pWAic3oh/DIDuHlvCK4TKYFaAIlJ+XniCOB:c+ODpWlcRDu8KBYgRCOB
TLSH
T19864C019BAA50CFAE5778035CE524906EA737C4247A0EBDF179007E68F276D05E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion evasion execution meow impact persistence ransomware spyware stealer

Malware Config

Signatures

Family: Meow
A ransomware that wipes unsecured databases first seen in Mid 2020.
ransomware meow
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047

Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs

ransomware evasion

Inhibit System Recovery

T1490

pid	Process
4632	bcdedit.exe
3284	bcdedit.exe

Renames multiple (7590) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Deletes backup catalog 3 TTPs 1 IoCs

Uses wbadmin.exe to inhibit system recovery.

ransomware

Command and Scripting Interpreter

T1059

File Deletion

T1070.004

Inhibit System Recovery

T1490

pid	Process
1872	wbadmin.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops desktop.ini file(s) 44 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini	meow.exe
File created	C:\$Recycle.Bin\S-1-5-21-1636999435-3883760687-346127294-1000\desktop.ini	meow.exe
File created	C:\Program Files (x86)\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini	meow.exe
File created	C:\Program Files\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	meow.exe
File created	F:\$RECYCLE.BIN\S-1-5-21-1636999435-3883760687-346127294-1000\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini	meow.exe
File opened for modification	C:\Program Files (x86)\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini	meow.exe
File opened for modification	C:\$Recycle.Bin\S-1-5-21-1636999435-3883760687-346127294-1000\desktop.ini	meow.exe
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-1636999435-3883760687-346127294-1000\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	meow.exe
File created	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini	meow.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini	meow.exe
File created	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini	meow.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	meow.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\meow_bg.png"	meow.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Control Panel\Desktop\Wallpaper = "%temp%\\meow_bg.png"	meow.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\Assets\Shield.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SnipSketchAppList.targetsize-48_altform-lightunplated.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Icons\StickyNotesWideTile.scale-100_altform-colorful_theme-light.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxA-Generic-Light.scale-300.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-commonjs\components\GroupedList\GroupShowAll.base.js	meow.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vcruntime140.dll	meow.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ja-jp.dll	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.dll	meow.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\mobile_equalizer.html	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\ru-ru\ui-strings.js	meow.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.MicrosoftSolitaireCollection_4.6.3102.0_neutral_split.scale-125_8wekyb3d8bbwe\Win10\contrast-black\MicrosoftSolitaireMedTile.scale-125_contrast-black.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Yahoo-Dark.scale-250.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-white\WideLogo.scale-200_contrast-white.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\GamesXboxHubSmallTile.scale-100.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-256_contrast-black.png	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ko-kr\ui-strings.js	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\ko\UIAutomationClientSideProviders.resources.dll	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\METCONV.DLL	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DBConnection64.exe	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\Images\Square44x44Logo.targetsize-80.png	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\plugin.js	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\protect_poster.jpg	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\FORMS\1033\TASKDEC.CFG	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-48_altform-unplated.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\Assets\SplashScreen.scale-125.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\FeedbackHubWideTile.scale-100.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_x64__8wekyb3d8bbwe\PilotshubApp.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\components\GroupedList\GroupFooter.js	meow.exe
File opened for modification	C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceArray.txt	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Net.WebSockets.dll	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\cs\UIAutomationProvider.resources.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\Assets\PaintAppList.scale-100.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_12008.1001.1.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreWideTile.scale-200.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-40_altform-lightunplated_contrast-white.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-30_altform-lightunplated_contrast-black.png	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png	meow.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\es\UIAutomationTypes.resources.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_1.0.22.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsWideTile.scale-200_contrast-white.png	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\uk-ua\ui-strings.js	meow.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-64_altform-unplated.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.40831.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-24_altform-unplated_contrast-black.png	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\System.Windows.Controls.Ribbon.resources.dll	meow.exe
File opened for modification	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Assets\Square44x44Logo.scale-200.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GamingApp_2105.900.24.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Xbox_MedTile.scale-100_contrast-black.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\Theme_Photo_SunlitForest_Thumbnail_Dark.jpg	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-40_altform-lightunplated.png	meow.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Drawing.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-60_contrast-white.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PaintStoreLogo.scale-150.png	meow.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Yahoo-Light.scale-200.png	meow.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml	meow.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\fr\WindowsBase.resources.dll	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DatabaseServices.dll	meow.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib\appendFunction.js	meow.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.AdHoc.Excel.Client.dll	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.CO.JP.XML	meow.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\PIXEL\THMBNAIL.PNG	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.40831.0_x64__8wekyb3d8bbwe\Third Party Notices.txt	meow.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Assets\Graphing.targetsize-16_contrast-white.png	meow.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	vds.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	vds.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	vds.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName	vds.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	meow.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemBiosVersion	meow.exe

Interacts with shadow copies 3 TTPs 1 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
1484	vssadmin.exe

Modifies Control Panel 1 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Control Panel\Desktop\WallpaperStyle = "2"	meow.exe

Suspicious use of AdjustPrivilegeToken 49 IoCs

description	pid	Process
Token: SeDebugPrivilege	2600	meow.exe
Token: SeBackupPrivilege	2856	vssvc.exe
Token: SeRestorePrivilege	2856	vssvc.exe
Token: SeAuditPrivilege	2856	vssvc.exe
Token: SeIncreaseQuotaPrivilege	3968	WMIC.exe
Token: SeSecurityPrivilege	3968	WMIC.exe
Token: SeTakeOwnershipPrivilege	3968	WMIC.exe
Token: SeLoadDriverPrivilege	3968	WMIC.exe
Token: SeSystemProfilePrivilege	3968	WMIC.exe
Token: SeSystemtimePrivilege	3968	WMIC.exe
Token: SeProfSingleProcessPrivilege	3968	WMIC.exe
Token: SeIncBasePriorityPrivilege	3968	WMIC.exe
Token: SeCreatePagefilePrivilege	3968	WMIC.exe
Token: SeBackupPrivilege	3968	WMIC.exe
Token: SeRestorePrivilege	3968	WMIC.exe
Token: SeShutdownPrivilege	3968	WMIC.exe
Token: SeDebugPrivilege	3968	WMIC.exe
Token: SeSystemEnvironmentPrivilege	3968	WMIC.exe
Token: SeRemoteShutdownPrivilege	3968	WMIC.exe
Token: SeUndockPrivilege	3968	WMIC.exe
Token: SeManageVolumePrivilege	3968	WMIC.exe
Token: 33	3968	WMIC.exe
Token: 34	3968	WMIC.exe
Token: 35	3968	WMIC.exe
Token: 36	3968	WMIC.exe
Token: SeIncreaseQuotaPrivilege	3968	WMIC.exe
Token: SeSecurityPrivilege	3968	WMIC.exe
Token: SeTakeOwnershipPrivilege	3968	WMIC.exe
Token: SeLoadDriverPrivilege	3968	WMIC.exe
Token: SeSystemProfilePrivilege	3968	WMIC.exe
Token: SeSystemtimePrivilege	3968	WMIC.exe
Token: SeProfSingleProcessPrivilege	3968	WMIC.exe
Token: SeIncBasePriorityPrivilege	3968	WMIC.exe
Token: SeCreatePagefilePrivilege	3968	WMIC.exe
Token: SeBackupPrivilege	3968	WMIC.exe
Token: SeRestorePrivilege	3968	WMIC.exe
Token: SeShutdownPrivilege	3968	WMIC.exe
Token: SeDebugPrivilege	3968	WMIC.exe
Token: SeSystemEnvironmentPrivilege	3968	WMIC.exe
Token: SeRemoteShutdownPrivilege	3968	WMIC.exe
Token: SeUndockPrivilege	3968	WMIC.exe
Token: SeManageVolumePrivilege	3968	WMIC.exe
Token: 33	3968	WMIC.exe
Token: 34	3968	WMIC.exe
Token: 35	3968	WMIC.exe
Token: 36	3968	WMIC.exe
Token: SeBackupPrivilege	3144	wbengine.exe
Token: SeRestorePrivilege	3144	wbengine.exe
Token: SeSecurityPrivilege	3144	wbengine.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2600 wrote to memory of 5040	2600	meow.exe	80
PID 5040 wrote to memory of 1484	5040	cmd.exe	82
PID 2600 wrote to memory of 2240	2600	meow.exe	85
PID 2240 wrote to memory of 3968	2240	cmd.exe	87
PID 2600 wrote to memory of 580	2600	meow.exe	89
PID 580 wrote to memory of 4632	580	cmd.exe	91
PID 2600 wrote to memory of 400	2600	meow.exe	92
PID 400 wrote to memory of 3284	400	cmd.exe	94
PID 2600 wrote to memory of 1616	2600	meow.exe	95
PID 1616 wrote to memory of 1872	1616	cmd.exe	97

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\meow.exe
"C:\Users\Admin\AppData\Local\Temp\meow.exe"
1⤵
- Drops desktop.ini file(s)
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies Control Panel
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2600
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c vssadmin delete shadows /all /quiet >nul 2>&1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5040
- - C:\Windows\system32\vssadmin.exe
    vssadmin delete shadows /all /quiet
    3⤵
    - Interacts with shadow copies
    PID:1484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wmic shadowcopy delete >nul 2>&1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2240
- - C:\Windows\System32\Wbem\WMIC.exe
    wmic shadowcopy delete
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3968
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled No >nul 2>&1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:580
- - C:\Windows\system32\bcdedit.exe
    bcdedit /set {default} recoveryenabled No
    3⤵
    - Modifies boot configuration data using bcdedit
    PID:4632
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures >nul 2>&1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:400
- - C:\Windows\system32\bcdedit.exe
    bcdedit /set {default} bootstatuspolicy ignoreallfailures
    3⤵
    - Modifies boot configuration data using bcdedit
    PID:3284
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet >nul 2>&1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1616
- - C:\Windows\system32\wbadmin.exe
    wbadmin delete catalog -quiet
    3⤵
    - Deletes backup catalog
    PID:1872

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2856

C:\Windows\system32\wbengine.exe
"C:\Windows\system32\wbengine.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3144

C:\Windows\System32\vdsldr.exe
C:\Windows\System32\vdsldr.exe -Embedding
1⤵
PID:4908

C:\Windows\System32\vds.exe
C:\Windows\System32\vds.exe
1⤵
- Checks SCSI registry key(s)
PID:2476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

aic_file_icons.png.meow

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png.meow
Size 50KB
SHA256 0f4f80ae373043a475413497c2d48c49ef628577e1f9f26592b241f38783b83b
MD5 c5c8dd747021e04acf3da2dcd7018d02
SHA1 8c6a0414bcc8490c159c28e1eab3de7f716684d7
SHA512 0ff34d36ea60a5e727ca10844047c4132d0ad380fc627e278f4475251a0d652f372052870de301483fb01dc19311ddcf922aab54efab26f1beb27c6c44d17392
SSDEEP 1536:qGn6Pp2/0p1lcXXTwF7oPzO6rqJpd6ijqBU8s68:qGsQ/WMXTwFoPIrIC8s68
TLSH
T1FA33F12ABF2F21F9D2314385C7166B80DC049CE6AB51F0AB15AE52C375114AF56EF0F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

selection-actions.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Size 1KB
SHA256 bf0ebd54b23664f1a8c7ab9af2f48e2906de103988a6df34b55a4b7e2bd6adcf
MD5 9f9d7022e5211222bbeca0d7e55df015
SHA1 7f9ccf1b0b4aaadb33e4e89e4e2d39046c436b52
SHA512 854b2500a398be64e68b75253da88e623f79b3e7ef2290632beabf29c4209d1f0d5d23662f3aab7e2824eec0d954a52d5500b6912a64e90a1f3b9f52a4e4e5c9
TLSH
T18D31F8D42E6CAA57420ACFC394812DF83953766DCE471AFC2067B060E59ACD2BE1754F
MD5 SHA1 SHA512 TLSH

Submit Download

selection-actions2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Size 3KB
SHA256 3e2f0a18a42289c1b01275856f481f75cf81f2cbb65421fc1676f19de10aee3e
MD5 4fdc0a0be55b4077fcf5e36963ee144e
SHA1 251fc5ce9102630f0babb8607969422f5fe23b9d
SHA512 c0e1ad894c8209eca82eb8f08ce06518391e81ee193101a7ce77ed31802380b355c79481789abe4c9301bb8859836664dfa2145a80958de5b036e51ad54726f2
TLSH
T1D2715E52E89274553CADC296487AFCD02DC7D26C6000E19DAC0AA85DF0A762DB68B39E
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
Size 3KB
SHA256 4c7043e879c0bffc96602f5c2afe6003ccde1e2e998648eab43654d3c5384461
MD5 e5686960789363ddc165121c0a068321
SHA1 15316a141abea350afb60617fac4585b8c0a4acd
SHA512 a0df51f38ade04925284479244c26fe532bfb1ce2c4dba85434f19ae91d430df191bd190736b91ba147e3bb52f03f00180e273cc0794dcb41bd11911c271c10a
TLSH
T1A0713B11B490069852903EB6399E3E8034F98F8BF6469EBD1640C0B6DDDB395BC9BC74
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
Size 28KB
SHA256 247f02a55beebeec1a69826d94afa6ec624baa1ad9334d0bd6ba15ccac11157c
MD5 1d9d434140bc56af91816cd4c5510d09
SHA1 31e9f05b8f8dfba106db3111f460d2dd47fc47ee
SHA512 7cf34e156cd67c42cb04e0772d0a73c1b84565f9325ce0f930353de99cf97c7f52f1d0c59760d96cc4f09e22f73465286919a62e58a565bc0c9700246a9f5b78
SSDEEP 768:3h8tYaJpM5WDA4LHjDrPc5ErnPV9pUkyfMdx:Ry6gDAKHjnP4i9okyf2x
TLSH
T1DDD2E166EB9101082BA96253AF4A9CD11656BF122FD13030D2A87533F4FE6A95DF7730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
Size 7KB
SHA256 2dfe01f7a4b3ee23ef072135afd8d0c4144aafbffe996ba3ce18defdc53b85c7
MD5 a8191d4807f51101a3aed608285fd14b
SHA1 ff51c7df1c2767781fdb84a85985f14a9c194bc2
SHA512 2a0ab4e2c238057bb282c94dd613cdc82e253c3bd95809cc9669a02ab4796ef3ccaf385959dd146f49509d59f4434a200adf23321b9fb57a4e2a64ecb0b1d80c
SSDEEP 192:B/jF5dMQ5YXIug2nj/Ua2/0h2Z3bwbEzWHEI6RO07Dnyz4vy8vP1Yv:35yQ5GIugIL2o03GkIO7Dny+PvNYv
TLSH
T1E4F1AE1AA6C7157049E5FDBB98313C827FB48FBC731754AB50994443C4EC761A289098
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
Size 886B
SHA256 14f9b77c889bc616b8505f10d917c4342b41e673ed86e065ee98821a9541c087
MD5 4f256e4a59b0e48bb443bd662ca9a4c4
SHA1 2f1853d97fce047f731ca376a2fa86e03eec2c9d
SHA512 1888dfe826373ca7cd69f23774c54952b1e6cc9b7446411626c794047709c276f3e3d28d83b7db3e5864b64e67f87a0199960e2cba50a28cf81b721e72e98c4a
TLSH
T16D1144A033B66AE06092BDCB086FAD503D5C9B17E20E8D6D0100D03EC59DF08AE51074
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
Size 4KB
SHA256 2f2ad189bc7a61102dc84238a4e4d03feb84c00e8a921811a476111008cc2103
MD5 0a4098d4429d8d09ebc12d6108b84602
SHA1 8c92044b706ccbef00a74bc64a332452fe72c0e4
SHA512 5e962922973a807c58fdd396256fc57785b974a92e3971056b10edef53033571358fc4c8d54251f92b7b0c148aac061c05178a84276ce2586e0e1ee35ea56a25
SSDEEP 96:JzpIvo2M0KokIjOuLy38e085EZi9Zv6qH6poKpQRlDoAsQkQSE:JzpYPM0Rzyu48e0qF9hHcoKCfxkM
TLSH
T1DC915B3803743B8934A63CB227428ECDB9AC6BABF60B1A0C4644415861F7A01AFB0779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
Size 1KB
SHA256 31d1eb9c031b720706f4fb1f0bbc8ec7a0e695b16a5ffb9acfe44a7dc96734a8
MD5 c84894805a814bed57bebabbe4e28e7c
SHA1 2857c803083f37bb1354d0140c5cd00b9910fb6f
SHA512 68660230516cdfe1006da3bb53bd4a6d812284a777913898d7c4b51ec92ba08a6c8ecdfc47364cd84ca751acc3c36dc1d13a3a61927abef658c67e51b2bc40e3
TLSH
T17731076113BE67D425C0BD97256FEED039AD9B53E24FAE3D010090AAD64EF087C90260
MD5 SHA1 SHA512 TLSH

Submit Download

convertpdf-rna-selector.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
Size 175KB
SHA256 5e0d0b3a251c2a45de2daf128918bcde5176c4a02a2aa237f4b12756a0c260b0
MD5 057e12b72d21e18ea78eb00f722c8c29
SHA1 63dc30fba5a40f0e0f548576ee421ccbfa16f3d0
SHA512 64e30ff8f7b610a0e10bf9705a6b809c16fbd7414303d009d5d6ecaabb1a8ab1bc4d3ecc640dc26c9659c0c79478eec813bee000d16847b608b8010291bd7f13
SSDEEP 3072:HvGIxTJmHrJd1jokHAgA18wcptuoK4uB27/Xz:HbmVsPgCmpOej
TLSH
T1B904F13006EB2E027745985BB2853BD67B3712A6CBAA19A1906319B1D47DFF83D0F13D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

convertpdf-rna-tool-view.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
Size 376KB
SHA256 5ef63dd0e49c07c0e531a09d8ece9332a06c34674f98801c1c8bc76c84301380
MD5 a120ad2c17a997f3a748eb844b8127f9
SHA1 7c6f4b0d6fe0be02bc567c39513d572d212f9ac7
SHA512 66aea55598d80043deafa3cd5c188eac8062164c6b606b24dc92993ef214451c200e8993d2b335a49185d8534c771665e132b325a063532702b712cdddc7ebe4
SSDEEP 6144:H8mMf58E5SW9J0rTMT8vmPDegipMDpf9kdprg9ZW+s:cmMf58E4W9J2vvWqbMDpfuvrg9Q+s
TLSH
T196841220A7EB3B36A811E517A34D0ED1761F1DD8832ACCD2911179B0E169EFEFB09365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
Size 2KB
SHA256 50cefd76136445f416567c1a4c2162bf35edff8752739dd5937274cd4b933d4d
MD5 c39fb45c79644b88d8af4b684ac997ed
SHA1 116b21b7e895f029acfe19590e65133ce3015877
SHA512 e48a65dd610b6adb4332b1e2b1fdeacc532a857aa5615856749c569a7dc925f93dea812822c13155f57808baa72e5378045815672406cc605238d3fa905bb48a
TLSH
T15C512C6023A909E8B2407DFB153A8A5039DDEB1BD24D403E1728D11F93EA65CDE114BC
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Size 1KB
SHA256 dddabd04bd5a0f876e9e07e916d4d94600e577e56706bc005d4821d140ae470a
MD5 64963eb8a22f25ae96b0bebb9cb34430
SHA1 711e9521afcc79359404e090970d31f76967dfbd
SHA512 a64f352e0fcbf86fe94e4bac827bc5335477629206d03982176d55b4fc9d0c9e22a89938793f7dde530e6492e5c5d8aa8e3e6d65f6aa1e0186819e56b765a148
TLSH
T1CB2163E033BA2AA062E2ADE3086EFE81390C9747F60E9D2C0600D03EC65AF007F451B5
MD5 SHA1 SHA512 TLSH

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Size 683B
SHA256 a2109d537494704f31fdafb411d2a4f853a202ed2a45ef17f7fb931729cc61f3
MD5 0db89d0827439f5891e578c52d0740d3
SHA1 9f64fbe7b25f82e3bf7ff534eb9c6409c9671304
SHA512 6c9435002bf4029aa7c56c798e588b09f4d6f65296a929efc2077ac8c8859532c12253c580b1cf44d4beb641da9219480a58564861f9be793ef3a3ff7f301e2a
TLSH
T1B6018864D977428C2615AD1A1C00153CF357F7A61538FDAC956ECC7B470ACC4D0482F4
MD5 SHA1 SHA512 TLSH

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Size 1KB
SHA256 0ecc8834fcba5109fe2836850fd4ded1653e7268adeef5a4e3caff146bc4c72a
MD5 96247da57628454914935ed26376be83
SHA1 a7789a16a116f307588a37e9bd79900af83dea1f
SHA512 ffcfbaf15ea301a5be6f685518aea202368c520e32e37e94f4e360c4df6824aab81f1c0c7d80ef82a411bde61cf560660da0802a027a5ec28338bd357023a835
TLSH
T1F721B72218074B9FC9B1EC01D309AC96D76A6A599DC9700BB741C6E09389A5BA06258D
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Size 445B
SHA256 6f4bac4c6de7eb6ed3395f33edeccfdf010e6cdf95955e1fb2238dd1f119bc3a
MD5 edee5b84a6644cc607605e6289acd964
SHA1 6555ca662abbbab9f02c1a4615f2764a9fc027e9
SHA512 418d66e7c398aec910adccd22838b0ff24e228eb9c5c3fb7e15c43076913440657955e8541417259cc027c0e067a513614ebda7cfb36d4469d4b03155170c534
TLSH
T148F0237170ED00CC3283F784C59508509DBFA033BA51001ED7BAA51C6F85AAF3DE8C09
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Size 611B
SHA256 dd8f132f58212f9dc556c7adc2c74702fb8d755d0a346c3db2c573f91494f5c1
MD5 ab0fa2a5eead6474d76fd4c9faebad45
SHA1 f0290cde8bb8a91bec33ea7c46c742e34f0e1a26
SHA512 8f562370410e49a0c9ce1240740cc901da36051e24a4ae9f76741e8ebce4d4062d5a2e7d874aeb85b0f4d8b2f30bc01ac6610764e91ed404cca87131eca613dc
TLSH
T1C9F062718840CC2852028AEB3CC3E0926737212374E8900B4B84B265D80B406BCDB591
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Size 388B
SHA256 4a1e81dcf4415ec3c2a49a1b150e4aecfd602167da24cafeb6d746bc662bb69e
MD5 8f07b23ee50ae5e7efa2cc416869522f
SHA1 9dbb078b4ada10788b18119a5390f0102273efe4
SHA512 74890411fcd9f0088e4a6fc97f08b952d973bab626fb2172f171b2c45dc1a0647164d5eaccb2dc1f6cc392c86ff7b16403691462965008f7350e7cdb81ec869c
TLSH
T1B8E081E88464A430330A63C23C66E082976F850C03892ED881DC000F818110BF3BCD63
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Size 552B
SHA256 10d277c87449d5ce80eff7f8b6cb3a1b7b16daca3917326c3160bfd032853a5c
MD5 8534066fee9b8d08be4b51878ce544bb
SHA1 ca38e42563ee00933aa9a93ddbac6b507952b9a1
SHA512 875881211fa2c853dbec944f9a0b29e71a87e9a416a20efa629b00559859c321c97d3619f6e90ed7035d53d18ebba013b12b323ebcb39c2f6e6465534bbb5fcb
TLSH
T1A1F0265944DEF95C23F140E99670AF21317746F6528EB53E225412D323243BCEC8C403
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Size 388B
SHA256 15d2d19dcd20f9375e62dc79affade2f44647a45c51a993ca78928b87d16a0a3
MD5 ffaaff125e5c45a9b1bddbe456c40f31
SHA1 d71c990ba9925950c22c09a73c889c2085413656
SHA512 d81f15a446dbe306d85f121b461574e8e13325ea113c62194bd9e672a6306d98f772ca38c88741627361cd2505dcdb767b6e5b63d424d7a1ef98fcd0be8e0869
TLSH
T1D9E0FAF65186D4397B1503606A83D1C04D4F5297C34B57EE79EF021741C4014A55DC0B
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Size 552B
SHA256 d9444d2f88ca6572dcc44fbd66ba9e3fa77cb19b0e58555fc7bb302e8b011429
MD5 0d82978a535d496c85502f866c5ac7aa
SHA1 abe990fd1138cbeed2cc600d898510327aba5fa9
SHA512 cc38e0b0d093ef31cf0d9fb27123714e7df8ffc7bbcc646dc2136b75e663d5f6b29c6a3aec031f576001cec83a4dd62115256a47636d7684d54dce938466b1c1
TLSH
T1D6F0201645EBA9889BB000A997A14E31777357BA818EB32A309C01D746243ACEC8D04F
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Size 388B
SHA256 188f058f6d4a751250504e7ed7a46e2bfc817c5438cca48ad71ceb213d2bec34
MD5 21c46b7d2b59354ec7c55143f960b691
SHA1 aaa23a871547bf68e80ddf0f70fadf2ff0c9ae9d
SHA512 1546dbe1bfba245f530453e2807bf96216d70d4cb3623ed165f11217cb29089fad5acd8d517c018818d65f2f2f353833828e5c44fff502ea5eadc1c34e2caa98
TLSH
T106E0F1F446DB705C9F0A93311E43D0C01A9B4378931ED7AFA69E829701C5025BD4CC5E
MD5 SHA1 SHA512 TLSH

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Size 552B
SHA256 8acca8d6102b670958501199ee27fd1f5f27ac21dae2e6a01927ecf4fd1c13a1
MD5 aefa3237f100d593e0721d5823b600df
SHA1 e920fefb21af9b51545d842d2afe188fa6670cac
SHA512 b8915b19858bba81502f84e23e72eeabe0ab2e5cdbaf9cda669bd1c0430e53a1fb76f4627d569c9516f94de7130f836486ff2bda29c9e875bcfce07d7f273070
TLSH
T129F0266545E9B68557B1409A57309E3077734BE8C18E322A368C51C211347AC7DDD446
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 bb147d6726a717cec5fb395d0110879e65a7a061b10f9cf86f89fda8f0b03465
MD5 30682babdaa75c6c538e05e42850c7df
SHA1 4d940be2d6d550068698306adcf9e406bf39b391
SHA512 c343511454a3240a87e2a2c8f48b5257a4b18b1076dcc3ec9bdfffdff044f2fa4d6d2d82f3dee9003a58a147ef90f384c4e991510a24e101c82749c2b8c3907e
TLSH
T10C21779197761AA07051ADA799FFAF903F5CD717EE0F8D3E0204D03A8699744BE410F4
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 afb0c661d1586eee6129957e40a774563f08ee803981a492d0a08f461b25e457
MD5 710664983363485e4753f1560b316fd9
SHA1 41237cf79744ff445eda84c545a638696f6f7ebb
SHA512 a87513c9b3b69c38cef69760e13ce62c6b375f28a8b2c636d3b640760e264d6a3318777870ae2cb7add3f01b6d45e081022d34386741343f5391d33f8ee5aa44
TLSH
T15221D8A1222519D06407BD930E6FDEC53B1CAF17E30FCC6D0600D13D915AF08ED5127A
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
Size 8KB
SHA256 25aa217dfaef6239edc9e0ba28ca0b8b6d3d8d42cdbd93ec3c726e2c46a1aace
MD5 f1c929039c53fe22433ac413f609b0e5
SHA1 3c4e6fa1a5c5cf8f2d4a325a44e5fd64659bfb3d
SHA512 1cc03f38f7cc23e831c0e2219ad9972c0a5d0518c4a79bf3c75a3007873362194376307c76cdb47d6b36d70a6a52db0e144e234d36c5337caff69b39cf4ab676
SSDEEP 192:JlpYPM0R9iuSmOroL9bZqw5x1fhwSUbAV4kgaX9lGsskdSH1DOru5XbctP:6/SmDl0w5PfhwSwi4kgq9lGsNhkbctP
TLSH
T1B512B0BD7C545AE9A1AB704B2162AF5F6A801789D40AC62B2B50403B967058FFCC02DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 505e55c775ff40944e88aafa6dabde7222c0e8a6ae974536ae90b9346b916256
MD5 28b0c492fbb5c15801e04369f79590d3
SHA1 da098e2655cd9cee1612869d97cc0587e66e890c
SHA512 a853ced7fad44822891046b2d2b99c524c17002de60f75230571d31dcb77ab211b3a3773f027d48b90329125db9ed55b223570b65cb4520996c7b1ad970966c4
TLSH
T1B721356162692BE064D2ADDF1C6BAE817D1D972FA50B5CAE0008C07A96EFF44AE43560
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 7c4c3f1ea0e6318b92f6d87589b8531c655d788e352cf4936d68cf95ab4cc430
MD5 3f790ded990b4698c81b6ae8f8b0f53d
SHA1 401f3fc1366ccef3c445ab4d238a92b441069d01
SHA512 6822c55badc573cdb7a1afe2e538202183d8118d5a1e09660714797212848f3d03bde5fff1c5be5698b22f1c10c36c4841b37c566c8c614957f5bd91c353e7db
TLSH
T173214792327126D4B150EDD7253AB9813E58A713E60E8CEE1504C03EC1E9F046D15071
MD5 SHA1 SHA512 TLSH

Submit Download

icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Size 7KB
SHA256 5597de9b58251eee6dede2b0c43aa0940369454f8b5470741c2394b4096d2f8d
MD5 b930acc800d84efeec1e0c66c8b9a967
SHA1 73b6f86ce4010819f27469e0e0fe5d4e5faf88c8
SHA512 c28ccf232e13126fe41b30261412498fb230c8e7e8834faf6aa9e0cdda22948f604003aaee4fd1188afe411642ab59059d16028f5a03446559fa887ccc035e20
SSDEEP 192:DeQz1GWEXRvL7IvbNY29lwn5Fj7iAoHJPwGVbuNt2JCU8i:DeOgxXRv4Np9Kn58BPwGtAt2JCdi
TLSH
T124F1AFCF63070741E7BF35CAFD4C1CFA4516A6CD704DA41ED5E71DA88A142A8A2BDE80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Size 7KB
SHA256 d1cde8870b776f25a1873c24b6f38bf42bd86aa7f2b28d18d46d62a48a979525
MD5 5ef28b1255f15cec4717b2f2df2076eb
SHA1 4c1d7751937305cbfd6b40e9d4b2203dc0110cff
SHA512 7f7971b3127526fa8ef73415586cbd016f145e35c1802fc1520cc5c016070570752075fd6f88015c6e42aaa989fa3a5b23151e7908a2975c4e90ee25988ffcf5
SSDEEP 192:9U9IrK1rTwp45ZmAQPWugSgV+50dGMmVd/yx+l4JoJKm/Yfm90h9iti:9U3rTwpeZmtPWQp0dg/yxZOJsO9u9i0
TLSH
T1DCF1BF87CC9C694F663F52FA9EA3967DCE1E3AE520CF808875DC861473897516EC2E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Size 15KB
SHA256 8f8679f526ae90db1d4a859a3f9792dcf3e9840ccbe1e07ec882a0fc94ee76b4
MD5 0468f3145b6050860ceb0d1163f7ee58
SHA1 7d93b47840aad4158f9a8bc56d78ce4a39fc2717
SHA512 2298fd872c84a704491181b07ace4491d25caf2a66228b8b2dbae593a7684c6f1e976e601aff9bae51bb8dd73027030fa08677bf581038431e1030d238c5fc6c
SSDEEP 384:K2Q6hnceUZ4sOcFLCvH1iwtuRK2ov4b2Vz3gZGUCpa:E6hnYZFOOWDgKXv4b2dSGUCpa
TLSH
T101629EA7DA68F453722A0CD3547F71CDFC8091BE9631916E01D4C40CE269FCAE24B6D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

new_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Size 8KB
SHA256 0e6d1dd33fa0995e837c34fe990808d4aa138cee9f2fc70b72fe936afdb4ee31
MD5 090dd9d3a1ddde4b1b8a0843494df8fa
SHA1 3f922864b94e95bf88f9a53a15c84cb1c6604350
SHA512 7c64440d7b1d4df5e19489d8957a5f95522ca9a8de5d017a721a97fdac7367dc41063a2cafa57aa46426c06d4532a9cd10cb269628ab19fddfb55041218ab55a
SSDEEP 192:vkfh+tTfohMzfAHTUmuhZ/UtcF8+q9oubSbyN8crYYWcuLqyrd6dNQex42:voMzfAzZtcFXcbUyNZrkLqyrSNP
TLSH
T1AB029EC3E4A569452C97FE68485B29C93F63CC12709B753BEED0F98AF510B97A1109A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Size 17KB
SHA256 10ea7881c17389868e00fb3b0bfc5cff34cdc82c0dba692c81bd845ba2261f3e
MD5 4bdc445df8e77d136ee01559f0db655f
SHA1 54b33dfa326bee0c47c67474affac1bde0ef6dbb
SHA512 edbf1efd6b4540c238ed84432f1f60a514934d60674a85becda7052a021335d49d8b33341adc4e70115a45fae6f15d54c6f42aa73eab30577689558325a6ba05
SSDEEP 384:eNRGafdEPOFlB0Qxqoxk94iS/zgah5SmNqlMJiCds:eNRGCSQcoLFh3NI3CK
TLSH
T10582C0D2E8AC620324BF48E3844BF11DDF91D47DF4F255A95119C44C43B8B49D72AAA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
Size 823B
SHA256 a385d1105bd3ed022a15ae2f805ddb9acfd5c80d96ad9eb55f0e5e026d796ee2
MD5 753d3192d59e421d29a7875b81e276bd
SHA1 1395b67bed5d8cde7c4c882949c0c1f7800d5f9a
SHA512 1b0b128d2ea2a3e0c09bae70c7515531133374bd2adc689075d0b966ed9f2be25937ececae0352ecda829049bd7213f01a8eea6e7a031205ded9c4e1e59ff110
TLSH
T1560112A123B66BD06191BDD7187FBE813E5C9B17E60F8C6D0104C03EC6ADF04AE51175
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
Size 850B
SHA256 916c163618ebb641dd25cf4c3b71ba2a6788244f469d415610f7a090c899b809
MD5 0d6208e418ec0a8d54a65dc9a6435f73
SHA1 720e04bf83034b83c2e4437c08269a8ecdefa9fd
SHA512 f4bff31c3dba39cf50e8278b635c85f04a7293aa7758d7151e6ff5a14534032a6a730542c0352fb074f9f6f7154e3c1fc35371eaf99dfc04c180a10178c45a45
TLSH
T18E012FA126B61AD06182EEA718BBBE413E5CDB17E60F8C6D0100D06EC6ADB04AE46175
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
Size 1KB
SHA256 6610b2a447153b479d3581cd5eb34ceaddada6c7431060df94c27731625534df
MD5 5a0a63d2bf57656633eed90ecf96b741
SHA1 19a9b6487fa4d149f8e402b02a703c769785aece
SHA512 b33a2f29e82c2868c9227e6f02ebcce03b6d425e33826a6e2d07c354fb30121bf8557b9ab0cefb0e306271a70d322dad913433803e4801cfee852b325e11c447
TLSH
T17A21B4015BB862E060A1ADDB186AFA407E08A763F60BCD3D1108D0AEC6A9F443F810B1
MD5 SHA1 SHA512 TLSH

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Size 179B
SHA256 4bd56fd7433bf96fef01c4cfb87ad25f6dd1d26970cc480c5c8f7ec8fbbc414d
MD5 191ca74479417380f35d7749e053a16d
SHA1 d7fa9d4de4e7d2f17b5c3184a403631652a375a7
SHA512 799e05752931c86649f046e24504e72d36a000359a7524a755ccb233c8e9b4eb8fad82c618d911032e88c3603a85857890ee22afadf04e03870e99acc6500112
TLSH
T1FCC022A8442B12B730D0064030281C1131033E782806533A0B8861060D9AE4A32DCE0E
MD5 SHA1 SHA512 TLSH

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Size 703B
SHA256 07e4c6c60f80f87d2961d9c3d4a448d328840ccfb7648dfaa8fa959f8b5a048e
MD5 e46c723956de1acecccd297e79383d92
SHA1 9859bc969c70e08a7e1137bd557c498b7cbcc0da
SHA512 995d11893a7f33d50ade1869730103f7e241af52efdbd5bda101f5a82601bf7b74b2aee77a64e16445f2c44d0068ee6ec28af625f38432b9d279d193f0247804
TLSH
T10E0144426B98F5F34ED749CC2DE8EC87AE120292AC0522D2F199761C01B5D36D0C1506
MD5 SHA1 SHA512 TLSH

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Size 8KB
SHA256 c8002d6ccae5cb917a71228d84f84ee475130c2e3855a2a64a786c1cef808174
MD5 411823fc1f6b419191601aba75f70926
SHA1 cd52fda578f78a6194601c1d173f069b0124b45f
SHA512 516cd270e3d355002fb34c4b6c218addcfd277d5a9f07d8d140903606b463a430a2abc0e4b6cf21c28028cb3105f79daa89ef4bd4dd1e94cf02fe7ac0fcd4b39
SSDEEP 192:fifOayWBZAfqbpM2cXEn20AHqUfArKCbYE5hT/7J8jtl7RhYLC/:fif99Uqbfco2JHDfArKGYE5Rd8jhz
TLSH
T17F02BE9EE4DC78FB1A0549D76CB61D11913BF967089096B32A9772E0A52FCE1382C603
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Size 19KB
SHA256 ea420b0f041168cb3366efc5de89099271c4803d423f0de6ba8120ed4f528e26
MD5 63d12fbb9eccfa3d1b1c96e242109766
SHA1 9b78ba1e9c97f59ae5b6381d81fdbfc3438a8737
SHA512 1fa149ca8c1fe22200fb366f7937085b54f9105306e0b341364223c5575bdf45ab12b32a0e42fd5ff242da7c6c1b558c607bbc30ab172d38838ea53815b1e059
SSDEEP 384:fxcLdNG5ZndrjwDSAkqPx0EltrLQB5imH5DGo+rv7xFT3kKIUbpK:mLT+n0Kq5HR9bHfoapK
TLSH
T16992C08B4E76E13D0D3624D405859AE3A4310B837D70AA0537EAC29C35D1829FF56DD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Size 1KB
SHA256 217d846be641ecee4741a8de80071d4324ccfc4704f669bdef1e15e0f7c5c1b4
MD5 4410a4efab668d0e072cc0461f54a06b
SHA1 e0f08044e987f7eb6f895b723b451e6bff4c13ea
SHA512 6405ff419e943cde5242d5a91864ee10267c9761aaaee48dcd184352f7ee6a0100296570f254fe531716789c35088a58fd4b220820353ec296ae08ade9ec29b1
TLSH
T18331B7A133BA1A41269A7AD3187BEE503D694A07E60EADBE0308C43D42BDE099F49071
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
Size 1KB
SHA256 af9e1dfc1113ee2eb1c1ca17c876b938d57583eb968e745bc4e5b66e02487c20
MD5 0964943be202e6cb593dc41afda9dec2
SHA1 2ff238a989c99dfa474143f1691f6b9b66702c30
SHA512 3db4df410d18d4c187b3d7611e5eda5e5f13399c88a799f9c105450f18821585a37deec923655e597b539b4b1729c4354df2766c50479adacf5e0f490554b4ab
TLSH
T10D21872232AA56D02180ACC395AF79413E5CEB17E60F5C1E1100D06DC5AEE08EF51271
MD5 SHA1 SHA512 TLSH

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Size 802B
SHA256 615910cd7ce1b3d5cecf1d3bb7237f844af906193acc469730ebd05a244ecff7
MD5 2e7759a4340ec3177219d091f0f12c7a
SHA1 5370adf4d40f5f17608fe87884440678b6df2625
SHA512 29ea5f22c642c832348fa138b3d3b6ed07bf20b027ebb43570952c3bf7745e61954ba48e29ad42b898ded4c21698f9634b4a3b9884eaf23179acf31061c12d57
TLSH
T15C01F181FBC72600CAA1FCD7B84BACE5F80D37BBE20DC2239159561EC1CFB222414125
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 7d06975725db1e54f2c34d2feb85ac75b089b342f98901ce275270ffc480a102
MD5 a781b51af1cf5d33a150a1f97b4a12e8
SHA1 e3a94a30decdd0b1a4534a77264dc916d2508355
SHA512 d39ee7d139f225f4e90f3a6009c96cda202ed931c8a1043ec2a140ea8033e5f1631bc0c414f6abdaa04b3ca6a166ebb0f66e3e16a7ebf8a82a211df2bc02ff1a
TLSH
T15D11B55023B66BE061826DE7187FBF41391D9B17E60E8DAF0200C03ACAD9F40EE501B5
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
Size 1KB
SHA256 6828ad25930e2c10b9be0d97a27736f8449b1378dc2fb36248a93f6e8d55cb05
MD5 3fd8d5c9ae84c46248f4a201ee7e49da
SHA1 53c4102724e59ad9813d948d37ed27161d764650
SHA512 76f47706ed88a9e9473196a099eec3b7950be85d69b26a1161076c7ddf0e9fd6b846128cf87aaa534515d31b873224768bc7ac72fee24704ef987c87b2971c07
TLSH
T1F411335023E61FE014E2ADD314ABFB4539289B13E70E8D6C0004C42AC6A9E44BD921B5
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
Size 1007B
SHA256 23730ad640edec7842268483dece34da47f443d5470e76d344a6496c672dfe7d
MD5 31c4e60f4677a3c3a90aa6c22858d0f9
SHA1 ba736cc2ffa51d926712850566365db4a7df9ebb
SHA512 e99529f8059beaa4c82618cfc3ce67d4ce654ca86e4346b78bf7cac70c120af4a93d766098e442a2c461be8c220f27d02f27f85816f961c7cf264f50a2562935
TLSH
T1DE1132A163A559E03143EC871ABEBA903E2D9B17F62F4CAD0104D02EC59EB04EE562B0
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
Size 4KB
SHA256 49b3269d7164d54ff4a46133055b5eb64f3d3d21cc68e5a4d3247e52c8432267
MD5 7117f1ca0f1c5aa2490571659200f515
SHA1 7657580d2e72cadbe0183d07e1878e112ac680c1
SHA512 f3a29b8a8360ae2602a27eae9e0dbeb86b272c92286da862689e7fa4b950671daa0225f1d5abf1fa501b09be3a1f4a2a6f86361b00521c0c1d2e474de5f41228
SSDEEP 96:Jy/pIvo2M0Ko8l91N/XESgF7rmKcN+4jCwZ4moQ6g0:Jy/pYPM0R+91NfsFHme4b6g0
TLSH
T15DA16DC4C45DBFAA50EC6BAE14A7A6823E01BB57572F453F080AD897C686B0D2F49068
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
Size 12KB
SHA256 e444843ef1a544c301f8f7f9cb6299cf5f218a387abe3fd200ec92748c3170fd
MD5 30834f154841e14ef32dc962fb02b53c
SHA1 94a9e98a8c0eb91627a19837d07f0b4c2ee59c56
SHA512 e9358e05fc02fbb71e5a497d15181c1070d1f083425e86416246f35f40b53bd3dd88015da7ec0c61055a2b7eeb340bf9528ed264a36e6428ee0c2f0b13721763
SSDEEP 384:uKdZ/CRT3Mdr+ixKrUOsmUWo7UavB76LyO06HdmZx:uKdZ/I8dBnQWUGB76Lh0sdmZx
TLSH
T16152E0683718226DFD24D897AF12FA5E3F2A4E134E29F74250617578252EE0D7F225CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
Size 14KB
SHA256 f264d17c2b49a7fc4e895e00a4da93b8b2052749b6150bfb331d1675453c3005
MD5 6d060f0cc3b48219aff24d8bad825757
SHA1 b5b2798059ae0d18eb172bfab570a5445fe82772
SHA512 7abff29bf485ab9004afd1d408eaed9e0e2e47bee538fbcf701934a787e79f73f004051794a884beefaff9b9a1e542f6847376db2b4a9e4b17f80ab48682843b
SSDEEP 384:6eZ3ylk49O0QW8eGss13H6bvGcvOe4bU5HzWYN6Z:lilkmcyY13H6HvREYN6Z
TLSH
T1D852D0349488F3C159159BD70D938A427BE433DB3A6A6C1C65A24408F47DBAFACE8672
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
Size 924B
SHA256 db5ecb0ae7500b935a6c71a8072fa8222c0bb764ccf8b039883562426ae67e7a
MD5 31f3e857f4f4c190d241ce1d8bd69b3e
SHA1 2b4815039eeb8eeedf656df9abedf9ecd62eaa65
SHA512 2f346a665ca1ef95dd46c1cbccd245a5c9e2f828e625797df07d5de1b3f9ecb3256c792c8c31b1089dc5d41fb7b8a7c7970d1675bd4d44bcba0aaa3b1849eac4
TLSH
T1BF11849027B65AE06092AD93087FBD90396C9707F60FCC6D1000C02EC1DEF08EE460B5
MD5 SHA1 SHA512 TLSH

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
Size 802B
SHA256 33f659a962cb3a4a3e3cdb9ef4ce0d86ec34a15fc9dd467775d36cbccd0db49f
MD5 0c3a18a4cdcd4ac85de25a793c4ea1e8
SHA1 41a41aa2cd8762bace68faf7d3880d46068e0fdd
SHA512 0bc3b7d72e6feba2711ce2c82a0d97ec1048e0b7fa628b9e2c8f8a05ee89128e2c7db97b293858aec3772a5b70c8f816b7c03a591003759a3278ceafd3621609
TLSH
T10301F181FBC72640CAA1FC93B84BACE6F80D27ABE20DC2279159561EC1CFB322414126
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 10502acfa0dff3c695951a622c777b2f7c7072333f756db9357a6618ca88185a
MD5 9318000e2e8b0193cd5b34a38e8df908
SHA1 f9c493482bfe35f49561bd91e7891a45d342aba2
SHA512 7a984269a28403e05fed34134299260bc2763bb44cf08d65bfbdd03afdc39797ddb375870bdf8b85da7f9e5452cc5501f61ea993583c828b27e2c9668774bbc0
TLSH
T1C021B49097B652E02092BEAB08ABF9917E2E5786F24F0C6C0104C03BD5EEF84AE005B5
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
Size 1KB
SHA256 3ae8098986a6b38f1d1f73a95356d2265ab80c833131a6025bc806c961a1cf29
MD5 b9394e5292fcb767678732bde40d5b9b
SHA1 14fba823a7276de9a256788d9845a7cda3820545
SHA512 e9274d1bf5dde81fd97f60d64f5810a22058a6e49975a0a806de988f099b144f8856f96aaa881c60e470685679d406496fe7c17faed00359f0975ea4934ac0b8
TLSH
T1AB2184014BB866E060A5ADDB196BFA407E08A7A7F60B8D7D1104D0AEC5A9F847F810B1
MD5 SHA1 SHA512 TLSH

Submit Download

main.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
Size 802B
SHA256 0112e3b10773debb718d4f5f9561c74e675ca7761f9fc148bb1d2d17c1512c24
MD5 d2f3b85508884d2b506f4deacecc45a9
SHA1 714b631dfabab7ef3841a27f2e642688479a5656
SHA512 3259d992248df3e0a084d9b758852fe68290ac28343292f72ed35651549bc273e172c879142c72f98e62b3f888ddb968760ea76aca3607322e9813713d10603c
TLSH
T12701C241F7C72604C6A1FD976847ACE5F40D27AAD20DC1279159561AC18EB232424115
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
Size 855B
SHA256 d7acc03b3db81416a732e5e2945b3ab571fb28ab21d9da41fd0d8fcd658a9495
MD5 a9ceedc398dde088432880f784944505
SHA1 0cabbde1f896f5718960a1a6301c5ba4784957f2
SHA512 6566e9bf310a482baa9ed7b7a6272c2505faea90f1291b25ce7e48f68a1f3fadb0e49999fd43ee49ee5bc795107502a752e2a6540acc00e31b5f7b4558ba0499
TLSH
T1DA1123A027B66AD07091BDD7187FBE903D5C9B1BE60F8C6D0104C03EC6ADF04AE511B5
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
Size 850B
SHA256 9e500afe6250d1f9bb6be0569e64732e5723eb63bfc1f7a126ebd08bb5f78ed4
MD5 0a62eb66aac275a761035952f8b8f3cf
SHA1 f103327d24746d78e7dcd3d55c5016ba540883f5
SHA512 a9c80dbd58759a8f57b0749b9fff46f277a7a5f70a2645044d26eb9e12e9e82e09a7d74cc0c06e8b9ce5abd791311e41fa47ebe24e93bfa15a0e66a27abda66a
TLSH
T12101236027B66AD06092BDD7187FBE503D5C9B17E60F8C6D0104C03EC69EF08AE55175
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Size 849B
SHA256 50f6362b464fe3ad48677b1e105ad3adf0537c26d04f5b6cc7782d76b5abef8d
MD5 c4f430cda9e8fb72c125468d20ea6c25
SHA1 70eb37a62e3c3b8c703458c42c8f97695d8ba3ab
SHA512 69418f1d28c2d2fe5e496eca589d309d2a8792b336d3b0b5e6220b6d4dc0beb4f4b975ba1e2058e29a3ecd3667f6b3687ef201946b4c23c622fe71f3c05cf999
TLSH
T10B01236022B66AD06191BDD7197FBE503E6C9B17F60F8C6D0104C02EC69DF04AE55175
MD5 SHA1 SHA512 TLSH

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
Size 802B
SHA256 a152fa64e75a57ef5c41d357c8d3cd54e37a74a98e5a5a05f3e08adf66be4b76
MD5 990b48a9a0df59f5225dd24447a1afce
SHA1 5ab50a6edc02a73823bc62888d4dd0b0c0ea1574
SHA512 f6677602cecf4689c6902d5f29bb5f2e341993d12f0b62f58f49c161dd375afdb3cc8a17f90973e50e06cdf268b66fc31ed231d19c9817f2f62b38489bf69030
TLSH
T1F001CE81FBC62644DAA1FC97A84B6CA5F80D37AAE20DC223915E561AC18EB222414125
MD5 SHA1 SHA512 TLSH

Submit Download

progress.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
Size 19KB
SHA256 cb625d2edd3ded58b87c843fe5cb0e39087da51e14214763d28903b940464232
MD5 484f3e83b337ef03b4e0c3a4ba5ba15c
SHA1 faf397b7cb44d673afd23ad15135b55925f4f140
SHA512 51b3fc098fe98388b3e97d29324a64ab4ca7b3e2c3a4ffb9cd24d762179afb7ba8f60a1ca96f3b7cf66607cae72c2295d28dec30f73b3afed9b59e2811edc1f2
SSDEEP 384:J/75FoaaKJpUHB94oEzB1niUMTjQ5ll7mov5kA/BYmqE4dPgZSY0yoUJlhXJlyCo:Jz5V8CLnBMHEv9ZpAJ+MiJoVYk
TLSH
T12D92E1BFEF236265A781C5AEF7407BCE457D6586E6AEC5811EA3321E84435202C4DE31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

faf_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Size 6KB
SHA256 a16e57ded000fcbf9a8ade50fedb334a59d1596387334c7e9de0362d3e22b3bb
MD5 57ae9f829d46d81b19c2434fcd6dceb2
SHA1 d8b4ea66c6d5e86326120b8d413cd96f46a0aa3b
SHA512 8e2e5f74b882d942b503515c3a0e31e2b3bb95c7c54e428baba868259459684e7157d0a60a68ef5a86ae884837486276aaef959a62b06f8f1f2862384aef3e00
SSDEEP 96:BwpAwcX8HAf5Uph3Bzsd2jh3rnHDWHdq2USlhlVoBPBqfjP4y9szd20IM/:Q0XZhUj3BAsBbKHk21GxBqLszd2Q/
TLSH
T1C3D18DE9E8AFD4027E7600D6319DD291FF93E60A379EC08E1990C505B0C9A357477C82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
Size 7KB
SHA256 8a302c2ae5c35d592762a940688fa1ae873b12347639c5fa8341f1a647f5eb57
MD5 8064a74c12c27dd0f104be7b400e8ef4
SHA1 38371042ccc5e8cca65bd26eccbb835f2719bbee
SHA512 7c75717d9f13fa63a209b91e8d1f7acfa7db49c5f73d49546804ba4d97a2912584df062471e1e8ee4e14865352bf647fd100dacae22d131289d939ef76a8c20b
SSDEEP 192:JfpYPM0Ry0/Mpma6A69otMrhqMJg2W3TOBwMrdg0Sif6w6zGMi:8o0/MpmpCt5DqB9xCDRGMi
TLSH
T133F1AE72158CEBF8D3E186EC0DBF4A61541D8917F92F3BFB180254251A1AB48EE81D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Size 3KB
SHA256 383f247d5dd3894aa7d475fc32ffea3e19fe7fabaa885b3a481806b36ebfe173
MD5 c2eb8de85f463da71997519103a06d2d
SHA1 c4a645d2ecdb1c3a9d02d348e7b3f02f3af9efb1
SHA512 014bb8e97e469e423d6b37ac042583dc08e5187bfd433672d4d6e592e56e238f7b27edb10fdd32a6b2b45bf369916139deb376a872503e3dc04c293feab94c96
TLSH
T174719E00D7B51C999444E4DE297FF6903618970BE3FD9AFC01C7E41A5A5320CFD21678
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Size 1KB
SHA256 635f12803677229edda2a62e1e27cf10f29c3b7fa1560b4f633a541b5ecd6e6c
MD5 78da8f5cb3f60e7b56303891cc9c8d1a
SHA1 4b82e623c0ed1ca4f4fbe406fc1a42d70c402667
SHA512 db154f27c204a7792bed9c282b1ca0c2ef994e2e0712ae321848dcc3114387af55a52c801197a211dcc8cd790acd1a5ac14809300d1c124d48f9ba4c3c900f64
TLSH
T12B21961007E26EE0B465AC8718BFBE507E986F33D60E897D1208C02DC2ADF44FE552A0
MD5 SHA1 SHA512 TLSH

Submit Download

bun.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Size 2KB
SHA256 81b999c42418cb9a5a28c7109d28ed9b21e27d4121497c99e12e079a6697aa4e
MD5 257a8d2c9ac61678ff8b71e9519d0efc
SHA1 fd4762486ed29aa8618632a49e56488c1417e988
SHA512 032736a7b9b5f25fe1d3a53dd88526fc6a7634de9e87f6cfba2b4be5e10fabccd1df713c7b91c3c32c54071be8bb201bb14af086e6bebdf15626ab4d9245e7f8
TLSH
T142516E2C4F818A0FD681F57928399893E84B135370377C968177E459594789E207C953
MD5 SHA1 SHA512 TLSH

Submit Download

cstm_brand_preview.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Size 2KB
SHA256 6f59b463899cf747520f458460a5bea80240a02cccf5e6b19e5e65707db7896f
MD5 c8a8ca562ef4449d9ee7bb9518586037
SHA1 da404cb5c1400c64a781f03c3384fae3dd553ddb
SHA512 031092e5d55fc88e67bc9e918928cfdedd86306b772814c1c5238f1f17ce1c0a9f202f7130338039e37d1c6325d4399fd769a634229cee7197d18adad4f0fa6d
TLSH
T138514CDA3395BEAF5EE306CA730C0019968B2F3720F7319181FEBA541C24D84611AF95
MD5 SHA1 SHA512 TLSH

Submit Download

cstm_brand_preview2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Size 4KB
SHA256 1e5bf17385701f59449490b1c5eddb7d0819d38f733c6c4a9f8c14df767a99c1
MD5 03468e6e0ee270fe96a14a3df0fcc6eb
SHA1 429f4168bdf7dba0d9c1c57224330a72cfc35246
SHA512 992cd9639bdbf38e0a679ff10625dd3c7947b438d3c523719b12505b960390fc6ea7c5d6ce254e1b2647b67a9953ce25855031bfbe13f2d74f72e555da3f31d4
SSDEEP 96:IhBxargkyLPdkJXueO85+b/+jrJ6yhmzU+HBGyHcp:ILxa8zLKXeD+3J6ywzUuBGy8p
TLSH
T11DA17ED3855FCA3D216AFDE81899931E847777C022DEFA26F81E40A11DDC189847E045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_arrow_small.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Size 289B
SHA256 b3a08707338545bce52ac3ccfc249e53e70add792a6eb545ed20162d7326c829
MD5 b23aa22c9a8292cef8ebf9d24cf5278c
SHA1 c68b0438045f5a700a3fcedacd94f3b9790d875a
SHA512 7b0147e4aa765ec76a9a137239737dc23808f9a2bd0be0b44e7a1a53c170a780a55374e33580cf5d52196ecc82e52df28d127af0fa8fd080bb0164734cfd7eaa
TLSH
T101D0E7709E34707B208C43097404E61CA1023220B75FF5117DCD8D521A4718FF0F8243
MD5 SHA1 SHA512 TLSH

Submit Download

dd_arrow_small2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Size 385B
SHA256 791a297ccfc7126de57322047844e0238333cda3227b9ca879bb9b4bfac2c8dc
MD5 607c65733194021ea1df26c61c000e79
SHA1 047ab8d30d73495709b6debd0a5588e988d206a6
SHA512 cb6a0e2ff48ba4ef684e79b0350b04530726d44c0c8c953d26bf30f9a4a86186b096a4b2270ec5273fdcf3168e3c72b3af1bb17e51de87081a8c45801b25ba9a
TLSH
T149E0F1C18EF32F5176C8605411DB945192FF5A136187700F945B023A2F91725D948B77
MD5 SHA1 SHA512 TLSH

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Size 4KB
SHA256 b535174ffe91ab613249a3a4656cfbc183f43ff856828e54d64a2e82b154a30c
MD5 279ce2cc0e47fa548634b063fc804df1
SHA1 22dac9080750771ec6402df2bf2a42ec72dcc906
SHA512 e42fb2d74643ce9070d1c77c859b1f97aff359ea4ab1095e3e73cfca7f4b74d07e0e478f0f3c5fcd602fd799f8d3fbecd96364d73497b5cdd03b616fb9434ba7
SSDEEP 96:F6gAUpw3A2PT67UpGsrRqRcTCTTFa4Ml5KlW5KwHxH:UUa3A+6oEs1b2TRajl5J5KwH1
TLSH
T1B7913CD7D06B7412AFF21BC38BAB9596ACDBD64EB5334030660DE18C6C08790F486363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nub.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Size 1003B
SHA256 f4bb2a88ae6580de96d384f87ef230a1bf2644108f47fef1d672aa1a419a15a3
MD5 ac7eefae2f0eb1eb43fd0fa22bce08dd
SHA1 780e8b00ebf82a2d80b3bd0e3bc916092d49c25d
SHA512 0f93dddd2bbbd96c69e1fd99257050691cd8e4cce66dde7500a547a7205f46041131ed7f943a02503794aa30482923c14a3d36c234a7922baf3ee3b3cc34d631
TLSH
T11C11D5126773C3810BC62A95242FA8D20F020293462CD04A8EC9BAC8BE46E306152D2C
MD5 SHA1 SHA512 TLSH

Submit Download

share_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Size 1KB
SHA256 3ed35d800ac3ef0d1d2f7308710a11f919bb9e5072f2cb3f91995b826beb35ca
MD5 ad05dffa162d934e81864a4bc04f0fe2
SHA1 7eb5e6523513b7be172e33c4a267fbf910cfc356
SHA512 1abd078b72fee79f998d40115b0e16ab0dbf007bb0fc3a8f5241c62891523bec0b837a5082411796e6940308fcf260da06eab8c65206cc604025a96f32fd82d6
TLSH
T1722128C629635CA8FCC999BC087490954C40721E79AB9E3230621A7E30BE8CE9928238
MD5 SHA1 SHA512 TLSH

Submit Download

share_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Size 2KB
SHA256 835fd9c346746f5773f1ba76677a0d3ea206c9d0851779eb65be90d1d50ba88d
MD5 2b6fbffa2db25f0cfc62a594288a4dbd
SHA1 5e90811527ff3fca2b3909df0ff702fed69c11c9
SHA512 eb7d243c08dfc9e7a445797029a9900d296ed59583b63a96aa096245b99243bca983c03715cba3061bcc7d93c95773a490813f561bb3120ae73819a11fad7278
TLSH
T1ED513C8F72A022C34D75C992CBFB31879FB22A983474502E28026468B541772B65FE4E
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Size 13KB
SHA256 51e2720c2918cb1558af92d39ebb0e1b7075fc24b38055bb0124f7c836cff8f3
MD5 2256b8c7f5070670117ff0dcd103121e
SHA1 6f9fa922d3d9c474140494c47c335501489c0231
SHA512 a89e083d369a3453b7620b556ca04033ecf1b7bde48accf180ff2ed61566b37650cd1ba92a67f272014b80c0ed4278174508e1f0b7e693f4765c41e84c6f9c16
SSDEEP 384:6LOxFuE5rn7sD++q1sRAfp7qCoRtVJcvOe4bU59DYWM:COxF55r791QqoRjavRsWM
TLSH
T1F552C0886440368475A26EEA2E64777078D0A77F8253EE1EC30A099B6B18FC1CDF4773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adc_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Size 3KB
SHA256 465fa0b08c1bf1a8b15575d64aa50dcd71823c4d869b5cba91c9c6292a03cded
MD5 59cdb3bdbbbe9a60cadc29faf4ec368d
SHA1 e2699a538ed5254f84674160bbb3a51af8ac1b0e
SHA512 82bb7117fdcc82ada33dfc4bec721ca5b112967cf868b1a02eaa0102246df62e55c13b78673ad73c1cc75b95f864d26de7bdfc878d5e82a806a4fc78a08af60d
TLSH
T10A717DC8C1BAAB932777B45286AC5B163E294743143A781F12093FE950C5CDB72A8774
MD5 SHA1 SHA512 TLSH

Submit Download

adobe_spinner.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Size 556B
SHA256 93c5c5d59bce637368a8e5034cb4f8cb6d92e1835c4fb6ef9b11694e053a3295
MD5 c0136e46cc825e37954e756c0b14a446
SHA1 b18da02331b437abbcbaf2a5fedfab5cc60db1f7
SHA512 2146fa8bce9fcad9b5f5b8863816e3aeb26249746be17ccdec844c04cee07bbd88d43d08dd9d620a78958aa3d30a6ba413ba31365addb850656ae4041fef4687
TLSH
T1AEF026A1B524314534F050BDB2159158CE0C246E4CB41F78F5C1CD6154CA16D513F88F
MD5 SHA1 SHA512 TLSH

Submit Download

logo_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Size 6KB
SHA256 763d9ea727a5b72f0f608122f9187efb00d2fc4953fbe5be5d926efd12be4fb8
MD5 febd18d285afd4496d819f2146b02720
SHA1 fdb56d02fef4998751402bd0a444c10758c65e84
SHA512 6287a54f9efe90d8dbffd2d95d0c2676d08de1e32b7575eb7792391cc71f5272c4882d44a2657196f1b4a533e41810dad299167d4ba32702a6479673ffec7baa
SSDEEP 192:gv/g8rr7qiXdPSnOBCmj8BiMOLX3XhJtC7:humhnOBCDBipj3Xhc
TLSH
T15FE1BFBF756B08C52248991096C92F868042197E4F296FCA9F8DFFE6F301D3C1681646
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sat_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Size 826B
SHA256 65bfd1e84372f2936ece8ac1ed8beb1c9fd9cee7e7d502d18d82e1332dd10919
MD5 b20a90b89207de273873a326c4103724
SHA1 cfc6868078bd5601b1b042d4ded91ff40fc714d0
SHA512 d84eea94d430897bba47220a5419c10e2de5e9f48ecf972d9260db4c336c2c7384c4955a0e71976136153e1dca6c1034894defacb9bc162a05f6bd691a466583
TLSH
T14B01D641302ABA2B0843362423310B549F0341AE11468823B8DAC8E07E840B88F08E2A
MD5 SHA1 SHA512 TLSH

Submit Download

sat_logo_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Size 1KB
SHA256 1fe85e95c4908c8245d390478a01a2592d19463ef2d4f4a20140dbd96fcb0dab
MD5 93cb706bacef3fdc6a0bef89ef2a696a
SHA1 10781595acaa57d9c5bf535a4d6ea2ba34088e79
SHA512 74477fea0514886ff8326e965d65d8f7537175a2622150214f8909ac0f08a76b68f3dfa22f22d985808611669837ffba0ac1116863f28cfdf44d3883551db649
TLSH
T1D53108E8FE409D40540B921ABBF4D280ED80D123B9CB89063AEB198E37C0B140168E8C
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
Size 10KB
SHA256 8ce62388b4731bc333dd67700e4bdea29d64ab6091251993fdc4fabb47f610a0
MD5 d17a30f5a1de91bd7f61a6648b22e8d3
SHA1 c469e38bcd63b5ad072a6600115ce3ae185bc964
SHA512 f33700ebed8a2812f4da20332c72cef6fb5dd4368a3aab5bd124905c40604edb0f18504ea2fbeee11b61979ef317538d8f89b507d04ea0c11573e3dc697534ee
SSDEEP 192:JlpYPM0RvnoQvDsfVuVv1BL0ZQZwKTMhMgdJTlVAr8+8arAqt+Rc:6rDeE7gZATMhjNlVA/XY+
TLSH
T19B22CF7C2367FD07259B2919F14AFF143CE6D2359B42F9E8553C80AEE45AB0058508A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
Size 13KB
SHA256 4ec17202f99023129b26008f778c2db0b373e06e541e580a823f586de23b5eec
MD5 c765208db35d540cddb4373770cd3c4d
SHA1 de9a289cdf1bcb583763c7087da5788ad9f1335a
SHA512 5e9fc6035b70485f13b6b06eb065323e4fafcb3a5e0de32831eb03d93761e26304174e99f2fbbc1fdc2424e6a983c30804b3a5606d1ae0886295d6d908162b63
SSDEEP 384:6omq6emhtqDQUvmQg3K24RqwNlIiAYYsUmwNt:BLDQUvmG2FwNyiAYY0O
TLSH
T1B352CF0E35ED4ED1A14731E980B9E9B23ABE5B6ED34C4670F014808BD1FEE192C75836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
Size 840B
SHA256 23c30a48dd8c3afc3f3920f0492f5eeea5e76394a32c4df67df6d04526dbce27
MD5 2ab35961fb827c41a38cd4c30c6255ed
SHA1 267bcab726a94a54754042f99b07dc40a6e9d5d3
SHA512 c03d02e87796198cbe697ac940ad02fbfd4e54b68d40363c65f87e4064daf1564d0bb81fdfd264afb9d167e1cbdef2d1b977c6987955660c8ce9b4c326ebda66
TLSH
T18E01236122B62BD06091ADD7187FFE413D6C9717E60E8C6D0104C03EC69DF04AE41174
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Size 17KB
SHA256 ada595801b13c75ca85d5da40cb7414fb3063320e856b8b4de92dec3bd375560
MD5 f00f1357754a6004ed8cf6a40525a82a
SHA1 51bd0de6da439c4e0ee2e7e410743beb9c681b02
SHA512 63607ea88b816bb7bf75e246f7baf2aad71b54437103ff84909fbb6ec79749c2eae658cf946c9eaaac5f45b319ab867b0184f9fda09b513bec761e5f89ca1370
SSDEEP 384:xhhLj5w198LW/PCmHDlX0ArMzvZwATV1T4tvxQ+R+wpW8ITHWPDw:HhLj5hLWCeX0Nzv/TVoDA8S1
TLSH
T1CF82D0D7A57C2B550D21E5C7246AAFC937AC9E05E77E8448043C0BC99D35C8F9F1907A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
Size 1KB
SHA256 9aa02d9882052b19bc064f625224c8aa3b411c16a8e5720913cddccf11cd69f5
MD5 644e9acab913868f6831eb2438aa510a
SHA1 db638d2f951560a5ca0c471fada768c5a03e688e
SHA512 cbc766e305a1de060ba96187984f2e0d8f96b34e9864c9311d862eaab587750a4aede1c65ac29467c21091ef1158faf1fb235218ac6c207467873f18cd7da2f4
TLSH
T175218401077926D06055AED7196BFA413E18A7A3EA0BCE6E1204D0AEC6B9F447F811B1
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
Size 1KB
SHA256 27ff01e42beb083626094231d6ed97f48d4ef86d35df2046d7d5fa817822a15a
MD5 193649a3563304a203408c57daca2f01
SHA1 9f4f8013472b9ad68d2dc0a0700475f3e7ed2a83
SHA512 2af5ae17e89eca959f7b5a646a17b401df13db5a7fabcfee21082fc3a541683a55cf16a354275ca5128c59d34a2dd275025c30599a5897737b499ab89130dfb3
TLSH
T110218661126A2BE06056BC97487FBFE03D1CD327F70A9D6E1208C02AE6AF6857D54078
MD5 SHA1 SHA512 TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
Size 2KB
SHA256 6647f4a3dc91bafbff461b9e3662837c066135dcc51187dd4904a1f0c226de5b
MD5 f6068f57cf2a67ac723cf826a893a106
SHA1 2aa0e06de78ad395306bc38f9a309cdc63f7b311
SHA512 26c61a918c3bc303ed3c4d719d4422a3186f9a171ac9cc2220fbe3c8ea106e51b009d91a656d48332a9fc98102821317d404693e3a5d85e67a7a88b6cf06bece
TLSH
T165410BB1276E5ED5B8F36EB39CAA2A4039CDE606E0076A9D0109C94FCC36F4E6E54158
MD5 SHA1 SHA512 TLSH

Submit Download

DisplayLanguageNames.en_GB_EURO.txt.meow

Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt.meow
Size 32KB
SHA256 836e57ad799507e4272dabd1528bebdab2d4a2c4be5c8211202c2895311cc871
MD5 1d4d86ea8ed6bda090dee69fd827937e
SHA1 77f89cae31d8372ed8da7f945774ad695b73b3f1
SHA512 a2a0aac2345fae7721c0e520ef1f235508a8617c452d6dd57718427fe4cd90bd317d5382ded12f61c5041b806bd84f201cf65e10c396949afd1690fd3cf8899b
SSDEEP 384:35EHmi3MrzfsB/Bgjbl8WI9OOtU9ORa9uVP+RHynsZJfiq8:35gz8rzfsB/Bgnl8WIAOva9uVPOHzZJE
TLSH
T183E24BFE16AFBE31BEEA1F02852A243EA188C10465163146CBA71174456F72532EEF5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

external_extensions.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Extensions\external_extensions.json
Size 99B
SHA256 5a6b6d35cc0f9361368ab2cb3f0fbcdf8bc1a05f90ef01b2d746582d3643bdbc
MD5 81425dedd09f76a71c9184512b9820bc
SHA1 bc3a7c189cdcdb678afd694ce5a3e91bedfb9efb
SHA512 6591fc5cb089ac2ce7b423e753334a375ec3b11e4a0cdfb9f502b6ad1087d3cb5790b2564dc7561f0738f4aa92151e6c4cda7271acc62408c5b49d0adc94c9f5
TLSH
T1CEB012309182C2C457E0CB1C57134E30661CAEBB640014660701CB4014641E078CE6D6
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\manifest.json
Size 238B
SHA256 adfcb14d3ac533c4a795ec7dae274420850f9485a32ab37cc3441b4cb490aac2
MD5 d135765ede5d8735e31f145873fdb837
SHA1 42cb47c4fa0bf85b3db703d234ca77efb58c6f8e
SHA512 6d1571742c3e0d832f7075ff5025f9ca861bc778ef8575eebc97174fd920bd3728a441a414241a90a7b13919b3825ea4cee8873cb4d761c56ba52e91c9ac63f5
TLSH
T140D09700C30920CE3AB0998620733DF242890F43A2C65202BA95C3020B804192222FBB
MD5 SHA1 SHA512 TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vk_swiftshader_icd.json
Size 106B
SHA256 511170850e3f106d5eb803c7fe59712a34a34a651efbe5da240525725c57bbab
MD5 552aa789619cd8bb9dba350c3b7b0c1b
SHA1 89f6a6d91cdfc866908c1ac899debdc0497f1e5b
SHA512 c8360c0e30701ba018ab81ed86a3b529844fbb2e668e5be2f99c169d199d0918200333fc353259890b1762e3c42822cb38937b760c223a5d5564e0b75b147d0e
TLSH
T128B01201A1F2DC2FACD6DF0CF3507A891FE070E15300C86F31E85BA1D94D020011A427
MD5 SHA1 SHA512 TLSH

Submit Download

msedge.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.exe
Size 3.9MB
SHA256 322ce44501bc99ac15e76ccd0fad742916b81120cc8c4c7954f2fda44573de73
MD5 4c43c04dd8549c51afe1dcddc38d77e3
SHA1 18409f5f0817aebed7269ef96e765048ea0a977e
SHA512 f0ba8857fa3102f96ad36c158c11752adaac112a3fb4b6fd3902ff0b50791064659ad423ce164024f9f1e572a7257ea21295581a607590f03270c625085e4a58
SSDEEP 98304:+sLq/RuEJttPrReBMFb0dWz/5y3wf4pWKYvX:+smfJbf/sFpWK2
TLSH
T10A16AC95B304A8321B94324BFC30C2FA78E0D9F81B38B4DC6E611DFA64FB254E65E955
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json.meow

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json.meow
Size 128B
SHA256 082485cb991dfa46dc9decc4fa709fa589daddeaf25d08b4e8cb807eefcef4f8
MD5 d2aa8d7ab6b9fb04a5f1f7ccaacb0254
SHA1 a08cee4624ca961e5a817b793591cae7dccce440
SHA512 b237054efbe9c49e16ec50e90c332c1e21aef4109e603d0eb33b01fc61100f0b7edcb7e4ef723696fed9759a5b07d7a67d3397a9195f0e5ab9bcf709d9ce776e
TLSH
T130B02B8089162C04A321E7D8042344F3E62E02CFFE5C068701C0045C08FC155EDBE202
MD5 SHA1 SHA512 TLSH

Submit Download

external_extensions.json

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Extensions\external_extensions.json
Size 99B
SHA256 e290c60b0960241ab04eed66ba2b1dab5a96adbc998dd2778ddb5c68e6ed2199
MD5 16569fd6384be3f9e766a697f8405484
SHA1 259bda9a7d0e52013ebc0162e2efc66bd5e6893e
SHA512 5821ca31c6bd7239c637a21de6c8166f29b61080da0e8ced4ca59b17a966856948d9090a65ef75d28424ad8e95e348065faf99be0403614d122b997f8d33d59c
TLSH
T18BB092972E92884621A8AB2F1B6001A5A612EA0227842280513B08A1E096122886ABA0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\manifest.json
Size 238B
SHA256 2f9c680307a09c89ba6f66c5ee9448e964e76b0e1576d1a77fccaa48897e6d24
MD5 3fbfc4ee2dc2156f9b16226ba6a9c455
SHA1 299d096d0a584ae8d3a96121945bf9cd70887953
SHA512 5739e3a5d6717c1b3c4612e7b496b522fc573f0dcb09f90ef7619f4f8276b20f9533312308a1d1b46d4a15f460d3603aa43dd4124f669847763ff7c3c806ad6e
TLSH
T134D0A7A0C969CD2B45A8911B50C4F6A2619AFE1E8C83AE60374B13149352E6A5C239F4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json
Size 132B
SHA256 88ce66c32b632ea3bf4d6d559232484e35309a7e9ce1e0fa97455ad80b88daf0
MD5 92a5aaac9ca95ea90049aad977e76efc
SHA1 17815f32c1aba3fc6df0fd23d064a1f71fc91ea9
SHA512 c2575b75968e28fe0f43286069bec350350735158fdd2e794a438315eb86aad31fa266f9b168b89f9c5961036d3d98a30f204c40f204d5e978e1ce5e268dc214
TLSH
T119C02BC44CAC0867C3E8C27DF30080C7F8815540EC14DA1294A003802C105B80813249
MD5 SHA1 SHA512 TLSH

Submit Download

Logo.png

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\Logo.png
Size 31KB
SHA256 5bce1adacef08762cfa54627851636b24acbd56e761922f8a879e51e5d16aed4
MD5 54cd05bde9814b1795215c3d75b9647e
SHA1 4565bf9b1307e7f2b51adf0e2f5afe86b9fa75b1
SHA512 6b98489d8a996acb285b9440a16e798f2aa5a49da24226a2502a1bc1f1b9681d445ce7cbbd1d721809f689b18ee5ffee8f80e44b6ccaa4c5f5f4fce404d9d0d6
SSDEEP 768:MaEh+i25/GD9YrjYdP7IFDZA5TF5h2HuRD:HEg5jUhEYzUC
TLSH
T158E29D05B7046273420466AAFD71C7BC3AE2E1F5667171AE7CD889D3A5FF451F00E1A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LogoBeta.png

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoBeta.png
Size 29KB
SHA256 12639f46d432537887a7925e30fa6e217aff41b37bc0d914dd07490eb40d0553
MD5 e31cc66163666dce764968977ecfbfcb
SHA1 acf2280a4c7a42e200f970e704e241535792d1cf
SHA512 6cc662ec82707a0891cc79cdf0489b7f1ca12a14d24b88c5c1849e9a19c2caf70f8ddf624fe0d8b0bacaea74494eb5d57dc351befed891e43615039bf89fad09
SSDEEP 768:940ZvNaitSjt+tWMiKpMlAxH19yBzo3KbbdFhdcB:3uB+tlr2lA9yP+
TLSH
T1DCD2BE69F3856276660935AFFD34EAEDB2A0D2F113B9719EBC064DE300EF15AF214810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LogoCanary.png.meow

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoCanary.png.meow
Size 29KB
SHA256 6d9507252cd5b9e9c540404dc30fa9b86e0d4e3e8ca113f3814210642761c040
MD5 ca9df141554d086f93b1c9a52f4d8356
SHA1 71e19bc107bbc7060f42e336e47e4de201e3f77b
SHA512 eafae5b1a48c48b392f6c8726535bf9caf99ee99036a7b3eb5f9f9d3ed8a8755d88da9dafeed61b811916751d4130439734456082240838cef6236c824ad3d9c
SSDEEP 768:7wjoITmPYjX0itBf/y6ceDgU7OSdmjvUk5ej+7zgrhzTLd:cLmPYQQ/y6THDmjTGkc1TLd
TLSH
T12DD2BE52EB1161726314B9BFF8B0E7FCB680D4F48B76B2D96D294DF200EF215E668011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LogoDev.png.meow

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoDev.png.meow
Size 29KB
SHA256 17d0c57a0c0605eba4466acd3aecd2b9cda6bc5c794ebf8523307168cbf6e938
MD5 0f957a5d409b47539a62f8c698519a4d
SHA1 968f624f5e9bce804e9e8b639a9ea76aefb16728
SHA512 47435a09ca43716b21d23c3b81062cf379170c4fb2724cf9ebc691a0c25f5bf1f90536d92a494d54a8d83a3fbe424daf512ebf52718d72a1fa80f9f649a29686
SSDEEP 768:OB4rAVjJd/EfNO9Dwe6eqkakXZxDl6Z01GT2HgCvq5i:VrAdSO9DH/1hXEdMqi
TLSH
T161D2BFD5F79099732A9838A9FA7BD6ED2DC1C1F11BB435AD78010EE796EB0A4D11C201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogo.png

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogo.png
Size 15KB
SHA256 5b7e4241ca45645ac606ff3ce5c931b497ccacd6564a8b2df58d0850e2ef5d37
MD5 8220c2d15a40081fc5cd5c8a46e98013
SHA1 765b49ba68ccf34fe74b7363612c9c064de873ba
SHA512 bcd700919161198bc0abb8dbc9ed2097b3f4df01e6372a91e83065878b3f23def8a05d401e221fb37d8db31e05a15c06ddb166aecf83611c1615cce4aed1e508
SSDEEP 384:zVHfCSZ2dSwRl/LQLA9uYJzsYbPmZe81NlS:lfCdl/LQLTJM
TLSH
T1F262C0BC50A649B0EE668E042276B5D40D79FED9BB1200198A9F4344C97E6F0F135F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoBeta.png

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoBeta.png
Size 14KB
SHA256 b2ee58844a47560c7137b3a31ff31d4300613048360e38c93fd03cab4094d675
MD5 9028c9755875aaf753c7fd6ce363da31
SHA1 08f3b35cc30765b389576c9ab76793f6f4811e6e
SHA512 da10449511fc323e7bc9ee6efcdab031597e4a63a9e49d259ef1020bedb8637f8cecd46f746b2d5e63e0bf36f0a9ad49ac946b59d4a70f163d65d265d45e32e7
SSDEEP 384:uG66jB4t25mKWQv17r+H656FQGKewYWC2:/jB4t2iA1f2FQyta
TLSH
T16362D0BEB2C0FC61D46B8392E0D9105A543728725E872789DD66CDF3B90787ACC9D620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoCanary.png

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoCanary.png
Size 14KB
SHA256 b7abcffc910535ad9f3bc1b4ead5c3f568196d490dc907ecaaa4aa85d446e596
MD5 d40e2f51fe80d7a2d6a8359e185df1d5
SHA1 92ccc95ea22c039910eb55dde032a217b78557af
SHA512 19b98c33ce72d367d5a4c4b4a5fcc99daa76b38fb799e0213727794dd89e2b320b2ce37cd3c29abdc3958997603024d06cd5aea28ed33d5f44537b9b5126cbc7
SSDEEP 384:8St85W5NWedWs2VhkmgVQ6Yxz+fBsJwg73MYXk:fG5W5lWsMhHgVQ5kZsSaMYU
TLSH
T19962C094E2525B8FDE37F61EA099F36985ECD9D8C544B93902427AC13429B7FC3141D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoDev.png

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoDev.png
Size 14KB
SHA256 9201eb303d2a55aead8e1ef7fa8f369d865346e12ce94e6a241486b35727cb2c
MD5 a8f1add952f82a24bc1e87ed1bd1be41
SHA1 69facb9c081e9ff68b51159e088b80acf499fba3
SHA512 107ffabb7401ab6ce55732b5c6d5ea3f3bc94d42e26766a6c2485303f38604089ef8b622c1781c9b0158c44eea2f00d99e554c81dde28ed49ed73b9571d747cd
SSDEEP 384:Krc1qp701h5LlTZ9AGTR6+aoAYAKKdtFfn5dsJ:Krc1qo1LLD9fTFKYAzdtFf5S
TLSH
T1E062CFD5C78F33D87A24ACA5C27A66B4361C1009BE35FB79BC7F86035E0E693521C950
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\vk_swiftshader_icd.json
Size 106B
SHA256 bd75fd15e1520cd032afbc9def5d5657eba12bf3ba796f62eb4461421a8b4f15
MD5 c9bb55f7771d8e032e0d479e2fa675b7
SHA1 194fa016810bb58277660b14a7fc407f813870e0
SHA512 722152be0a99593bede9236f80b8914bb9a37dcd3d78e627475f9bd503bcb4a8ffa52d35afb000b953889b6592413e77ef879307409c0daa8217ce8c000d0b15
TLSH
T1C8B0125005F050D5DD706D70E1E56866A00DC0590904615CBC5E592D45C9E2FFB87EF3
MD5 SHA1 SHA512 TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll
Size 558KB
SHA256 d818b15df8fd4195348781b9f24044fd3e16aaa5e83e4c1cc033249d64c046cf
MD5 ef605584f795a98be65baff93373d077
SHA1 1fcdb7cea0e56683b920b87a202d7a594902d779
SHA512 80937af9a50c6bccfdc5896bda25a553c356f94a033eb93f1733b53b64424fb6a0702911835cf68a4b3563ae9dab2f68f5274fdb40892c6a3f116eed6088c6dd
SSDEEP 12288://nbIEcmXvsbJH1pk43IwcRtm5G+tmrQ67aYGoPx1Ri0F0ChbfdHIIcku4LTpMT6://xZ/Wpk43IwcRt1+tJ67goPBckspuXn
TLSH
T192C402C2D8E6B441791A828BE1AF60CA7DDAD9597474C5268E09C42DF0C37E7720F36B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
Size 95KB
SHA256 caac7af57bdc241d70c9e5685a46f162823e3c93078f1b3729669fb5dc8dd1a6
MD5 36c9c457260cfb5ad52382260f538f18
SHA1 9ca47e7ae9738a7e33ac3c72809952d681f30ec3
SHA512 ef76acd2d23de89171b2115f4f77bc4953fdea7316884471a813f41be9c7d39358c1c00336245209f557ced43ba86f95a30a3cd3cd66b637be4b2fe14a623d88
SSDEEP 1536:LbGgdjDqhngLCsS1l0AlhsnrfBr05IaiI52tGuzV26Amu4vd+kIG+EnZCERg:NDqhgOX1lzUrlqIarux20bvd+kmxERg
TLSH
T18293E1D3D1D0F016B63F708B903A64D87D94C95825B0C61E551AD88EB667FE0F8837EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
Size 36KB
SHA256 cb02f41d8ca0e133aa5d4b16fd55406e4b1a5e60985b391a2021190a1dffcfe5
MD5 d015a8ce43d3bd008d1bf7b780f8b003
SHA1 7784749a86d41313c451f1755b509b0e75081f02
SHA512 813eec9e3b2e53b6a3cb7c6d74db5af9a34f672501ff2062b78665aca2460dcd59618a5ef2dbd5974d50ae0369352452ba38a47d1aa69d3f0fcbe974247dfaeb
SSDEEP 768:XPVVoKRKenWmgjSadKKWGTH+Iusgpmyf8FMBe9IeNLCqJ79aS:foKujS9RGXuFeM85ZCERaS
TLSH
T155F29CC3E4E4F086B93F189B007B66EEBC96E59C21A0D40C4984D55EEA21FD1F8477A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win32_LinkNoDrop32x32.gif

Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
Size 153B
SHA256 7b2808f9fc7bb6c97e95c3ab1325ca597f342e2a2350b95994ccbc0524703e9f
MD5 2eaa80b89af62a18780f4235a0aecb03
SHA1 142d48e0c07163236ccec8bc282ea474df3d5b7b
SHA512 e48134851aafce069fd2282fc67e479f6713c658cba7656f31744c4c0159af167668daf81815cc39aee1217a2355716a5310e34e109884f5c0f27f724600dacc
TLSH
T1A5C08CA0768EC90E22DBC28828A41F2A1A7CB1800108BA38F060860180A368420C98AC
MD5 SHA1 SHA512 TLSH

Submit Download

THIRDPARTYLICENSEREADME-JAVAFX.txt

Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
Size 190B
SHA256 8590cda3db1e557f5df11fdfd6e21fc6ddc72714f3dad696f802ed5fa1f11831
MD5 2dae0b5654fc0315d8770372953da640
SHA1 9df8fcb849ed5b8ba9c4acc5e892010e6775cdfd
SHA512 c1ec9a63b1928bfb7874b35e56eb311b0a7fc88d4a469bada0a90cc3bc7b9cb726f8f70c22230bff9bc94bf18fde939f50230bfd32dbfb8e1a665556692f5558
TLSH
T11DC02291083B8308A47CD8EC903A0305C60132424848608BB2B8243AD866184DEAEF42
MD5 SHA1 SHA512 TLSH

Submit Download

THIRDPARTYLICENSEREADME.txt

Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
Size 190B
SHA256 b2fce08f3a4a5248f0bc29cf0be9532ef2ae327f101e410d50c927d4bd7ef794
MD5 375ef3a6d7527c8a7275ae7f5215ff70
SHA1 f8e0c423a50e5a4efd2958ef43a3f0a5d350408b
SHA512 a193645e08c3bd619a1299c8f29ca35b734aa4b252cfc6c96b33f75e6c577868711a2bee71e287d6bb9a90b3cb67c8e4093df9c427f2038a9657d5464b006443
TLSH
T104C02282183CC221AC2AD2CFF8604985CC30B0E3592030C433A528B331E33E5D217E05
MD5 SHA1 SHA512 TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll
Size 11KB
SHA256 42f8c985249d76beec730df9483d108e7ea7331f041f1c2948b933dbdd8d9ff1
MD5 e5234360d5fcef214969e1f5d79b6734
SHA1 3de8a81e41fa0e78d45f3d7112aabd49965475c8
SHA512 9d8dce4dd9e3e6441f14d8e7bbcf3c1ccaac9ad50c592a65be3de293acb8baa3db7433923422985008c5d950eaa0525658c6ec4e0b1b8d5272dfb523399f6209
SSDEEP 192:Kc2L5GkGhzA+HZB1jNjNyII/g0W+XSwtcMXHREZv9tVKvUHu1Qnu0G2pVrQ:xDhzA+Hv1l7mgzySwtPGZv9fO1QnRS
TLSH
T10B4216CBC1E0F587B07B41C7243F2588FDD295AD32A0946D1489E009B420FD2FAA63EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-2-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll
Size 11KB
SHA256 4bf1d7d33bba2c8d193a28240159f479bdc139c8083b89fdebfda24d99973fc7
MD5 759d619fed6def6b4353ad93eef4ce1f
SHA1 dca6087dfba01c7f99ce42f2542ddfe7cb9d8167
SHA512 196621e01c05a2abf361844555aed4912e88cc248359ff93c8482c6112fd6769ea88ed31051b32ddd85ab5f6f64563e31fa11ed0d0e742a7bee701e3b974c85b
SSDEEP 192:Kc2CSJ79LJipZqZBgjNjNyII/g0W+XSahdCHngLvRUny9bIosmglsPVA2rTwKSYE:/Q9LJipZqvgl7mgzySaiGvRU6dsmqs9m
TLSH
T1BD425BC6D6A2A093B47B80C3622F22D8FEA2C66D3724C46D5484D54DB530FD5E89A7D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll
Size 11KB
SHA256 b24858fc0696dd2c37c86aebc0f9fcd39d87addd32e76916a175b695129a3176
MD5 a9d214e66624aeb963aab242c251efe2
SHA1 585f5c377480e8e676a099eed940cda8bb1087aa
SHA512 2f38e008b8dc15f506c75537cceb1f5d169bfab9429942af9af7e3ceb572ff876c62b2a73093e6eb56f201b77c703f58ec05ff63b718169b5172605685290c1d
SSDEEP 192:Kc2HZGzELZBWjNjNyII/g0W+XSepo4bSPp1sb+RZsOd7ut7ULH8e:CTLvWl7mgzySedbWvsQixULH8e
TLSH
T1B13216DBD1F0E01770BB418B66AF62CCBE86D9AC3A61804D5084E048BA74FC6E5463E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll
Size 11KB
SHA256 88395bcbd707afc58df90be14f9c4aa0f9ab130aa5acf9f72a358f085c1b844e
MD5 c6e472694f2bb3db341227533c326f03
SHA1 dc4ac03114ec19c658bb54a402b063faa5de7227
SHA512 c65f5d0e98d673f14d3cd51d0ca19281bccbbaad62d62ba694c80e905694f806e4b87341d2c3f58f1c14a7d1cd6a2caabfff5c48599b090ba451965137cc57b3
SSDEEP 192:Kc2JFWZB+jNjNyII/g0W+XSwN1xRbH6PiVD3vUHu1QnuD6D:Xv+l7mgzySwLPbH6YcO1Qn08
TLSH
T17232F5C6C4E0E492787B849B657E36C8BED2855C29A5D4190489E04DB830FD0F9A7BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll
Size 11KB
SHA256 f159dc01dc73d30a34197677e39963dad034dc73f195ac47a918c5b0423ba873
MD5 0252c9f9c5fe8761a8041d12c83eb051
SHA1 d954312c1ca47e5ad662f6bf2335632db2426b78
SHA512 6fbc39921834dd816f8c8461c5270607ecb60ce65e6ab347cc0936612a087880acd663115523581a9a6128b07582723eed62f49e3c3e28db988bd4404eb2ec80
SSDEEP 192:Kc2Cv5K2pU3ZBuUjNjNyII/g0W+XSi6UI2JkaZMGfX52lNMiq:/vFpU3vuUl7mgzySvL2JkaiGfXwlNc
TLSH
T19A326ACBD1B6B00B703F9583A12A21A8FEE0D91D3656D48C2480E44DBA31FD5E4227EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll
Size 14KB
SHA256 b00f43a93c7a1ba716ed54ea1e69eef59edf68796a2ff02378810ec6f7407c6b
MD5 d771a7f4c6ed3561b6e9b98f19953390
SHA1 01018c1af98824554802f04b7f8f139957ec602d
SHA512 e02e45cd82cfd2b73a0b75100536fd41a2a8c2d50497908e6459409eb348d8853e47bb86eeda26b27a23f1a8496fddde13213897f85cd20e8d94f2ab90490d62
SSDEEP 384:EtBxvcxc+Zz2In5z4PBFl7mgzySAxcHcc8SJyD6LVk:+Gc+92Ind4P575Evc/9y
TLSH
T11A62AECBC0A0E44731B7C58B946E308CBED1D9AC2616842D5058D099F9B0FC9F5A77E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll
Size 11KB
SHA256 61a726a9cbe0b8ddd78b7e408d2ba5b27719e01b684bc405ed561977bad96141
MD5 f09a5735a3b791acff6f543f09236fc6
SHA1 e4d9e12e88e55090fc6e26b862a82732b76446c9
SHA512 d33ce1975463830effdafc6611a969ca5771826c92a44b54e0c11d33c7ac60ccebb4a986a4fabd657e661c80364a70537c5a476f5e74c6fa2c84ff8d36c4fda2
SSDEEP 192:Kc2rbHCsBZBxrjNjNyII/g0W+XSi69hHejAemjX5CEZzVd:iHCGvxrl7mgzySvjmA1jXRZzVd
TLSH
T136324897E1B2F593713F04D7502A2098FEE0CA9D35A6D45C9980E48DBA34FC9E816BC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll.meow

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll.meow
Size 11KB
SHA256 cca890dd9e0c69f2297893a36b41088da3a8e5c65042cca832b323bb40f0dfc0
MD5 63a7bc094c1741e91d50a8a5b5f0d1fb
SHA1 778df3c532c7be5099dcfd856541927ce0afded2
SHA512 15599db320f556ee2dbac4a6d622ad0fef6b7cf80af2089d87f9a4e2a0ab415e859f6820904174387bd933d88968e558fa82a408b514e9426c9f04e34282359f
SSDEEP 192:Kc2wrsTW6hbbZBVjNjNyII/g0W+XSA+rI17h++Re0ICHssOd7uvlYH3/RbRTM:eFtvVl7mgzySAJNv7ICHFjl+PlRA
TLSH
T149328CD7C0F0A01B707B828765AFB5CCFEE698AD2611845D4488F0097A60FE4F1667E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll
Size 11KB
SHA256 f53fdc3c615147068aeeaf9a53429eaaff0767d03868352e809f0bd373611e3d
MD5 075b262b18e42a48fa13c9071e0849fb
SHA1 9d55bed6b0d935673697ce877ec3619726cf89e6
SHA512 462ac7d8d76f629be9e28a5a1214b5c68cdd0d0cc61ab3e6c47d9ac8eff89f8336f6c6248720ac10a53c8bd90f071afaac9912f9a119d405d923e132beab4412
SSDEEP 192:Kc2/lwz11WZBcjNjNyII/g0W+XSe50p1sb+RZsOd7utRF:2wHWvcl7mgzySeKvsQiTF
TLSH
T1B73227DBD1F1E04630BB42CB252F628CFE9295AD3A14C45E5088E448BA30FD6F6427DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll
Size 11KB
SHA256 65b46916f5e7f2db5d2e1caaea145bbf63debab4633b90e98e62eabdbc7ea21d
MD5 3712e8294892a46197fb813f5408ade5
SHA1 81730b82bd7510efdaedbb5edf53aa08f9749ef2
SHA512 e9a9937b366548919ae5c06a1bd21d910b06020eeca9b64a40b7c7bd20f512de4b4ab1f5284252fdba0fd54bc85d4f13f0eae22b824326d615761f0b881679e3
SSDEEP 192:Kc2TeRI7XFZBpjNjNyII/g0W+XSAy4pwpHI+REhsksOd7uUDR8mZ0YD:gN7XFvpl7mgzySARpwNLAyI18mCk
TLSH
T1D44227DBC1B0E45770BB86C7A5AF249CFED6D49D2621902E8480E048BA30FC5F256BD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll
Size 11KB
SHA256 2e720912e19e8e6a63139e15a5f8f74b258c9a853518b0a089722509aeca1e9d
MD5 33f9d299a15b1b094ad51d763e1e94b6
SHA1 3ecd61e905c732633a293900ce040b3bc7b2fcad
SHA512 32a9a53929087ba29c785dff729f0b7d598ae9373881837fac8f2fe2ff4a0c7853b55bf24679d44ba265c08283b485ba7bdd399411fecbc98f8bbfdcff1dfa7c
SSDEEP 192:Kc2G/MbdWPmcZBMjNjNyII/g0W+XSwxMIJ1QVuRVOUHu1QnuaSwLWInE:l/MbEPTvMl7mgzySwx1CVuJO1Qn1RVE
TLSH
T1D4325BCBC4E5F156707B0187193F24C8FDD2894D39A5C82C4885E1497424FE5F9A67E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll
Size 12KB
SHA256 ee171086ae96c6ca827b49cfbd3afea3f978b41a1ddd39bd326deaf72774c2c5
MD5 3d6153504e526296b8e1fd465b2443b9
SHA1 143a7f27e7660918feac603e96c090a9f42ff41d
SHA512 245880df14a6f5100017ddcfd4262d4cb9e149a4a6372624d70aa6758090d00a5cc2d239a6b17fc59846f3a0adc604fed806535352b87fde8d86949f41b6a0dd
SSDEEP 192:Kc2Nxku3IQMF4NZBJjNjNyII/g0W+XSwA8fxQfRbH6PiVD3vUHu1QnuD6I3:4H6F4NvJl7mgzySwA8CZbH6YcO1Qn0D3
TLSH
T1454227DAD0F0F4A2743B818B6A3B76D8FDD2850C69A4D00C4895D148B820FE5F9A67D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll
Size 14KB
SHA256 438e941f5a87b5512b4607f27319ccb8f8c272b0f5a8799647b62c13d49a778a
MD5 e55badb1051de0e96c8d4a997890bbe3
SHA1 78e58b898b478b14afb2ab48f964f3c6487f1697
SHA512 d06b38cae2f5bce915d6376f0caf8159b3fd062a308f5a60276830a39bff5055d37c513f017cf18c2e8944a7ed88c2cc79a13fd403dde13a01e157cdfc460631
SSDEEP 384:PA5YG6zAIvfl7mgzySwYjBRUAWPO1Qn6m/iJy:PA5qzfv975EYjzmaQnT/iJy
TLSH
T1FB6249C7E5F1F48260774087603E7A88FCC685AC2660D41D5085E249B934FE6F9ABBE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll
Size 11KB
SHA256 461bda66f543ec197cc2a443005b78b53a530b86908073f80ba4d95d815af06c
MD5 0eb6248df6419f24ca52317072485ed1
SHA1 f5e95d70978c46e6575926373f44634c2125cc4a
SHA512 6af9afe21ebb34e788193d2c31bcecbb05902137e89a94bcfea578c0d72dc6daaeee70346a51de4be23f38ef94b92c4bf5a47afa40ea980dca46230d83add315
SSDEEP 192:Kc2yQG8aMIZBtjNjNyII/g0W+XSwznV/XkJ1QVuRVOUHu1QnuaSwLW39nn:BQsMIvtl7mgzySwoCVuJO1Qn1RGn
TLSH
T17A4249CBC1E5B193707740D7263E2088FDD2985E76A1C41D0485E24AB034FD6F9A6BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll
Size 11KB
SHA256 a8fd1f3e65f1aa92603c60dfacfd2b82a461f178082cd01ead92543f25b8a819
MD5 66309012cf0ca846c11f2fd6ddbea092
SHA1 b6a288487c01d061a03644bc75da5b863e051f3f
SHA512 babbf26ec438679c48ea6d3d0acaa16dacad977cfe6e8294021b2d1b97b255f6a80bb943a58690e2520456e100506eeae70af3c2a2ace28feaf2c25d6ac74436
SSDEEP 192:Kc2PCMmoC7YNekQ8ZBQgjNjNyII/g0W+XSwK1p86RbH6PiVD3vUHu1QnuD6bO:0PhNbvLl7mgzySwx4bH6YcO1Qn09
TLSH
T113326CCAD0E1F5927437998B353F66C8BDC2925C2594C42D08C5D049B820FD2E9E6BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll
Size 12KB
SHA256 ab4dc4de3d5c703826adeefabcfd7517afeb85e1fd604aa3c3b1bd7884790e9f
MD5 a1e92710b100917551ea8cb04e08dbdf
SHA1 193b65be251ee53fbe0f73aa9fb6228024364d57
SHA512 8be451ad087dcd27da4fd711c6901fb462228d019332670a8a54aaa634b0a27bef323bce815c1c9c66eb2caacd86257d9f83cbf51e29fa4685b0331adc0f8148
SSDEEP 192:Kc2gE7otP4XsZBwjNjNyII/g0W+XSwrNQJ1QVuRVOUHu1QnuaSwLWCPnVu:IkQsvwl7mgzySwQCVuJO1Qn1RNA
TLSH
T1BB4226CAD5E5B593B07B40CB253F24C8FDD2884D2964C41D008AE14AB870FD4F9A6BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll
Size 13KB
SHA256 f37d4233332c72f7bf5ed0d440b2d3b71604fff366c4df33da09c48ecdc44b38
MD5 522e9a4e62ff68ff42967bd0ce760485
SHA1 2017494d414c219322b794c34e5b3f7d0c8ac0d2
SHA512 67454ca60b3d3ba61403f256660ef7f691f8bf8e52bec5e42e11c6bded2574ad621a96c120755462a90c00dc945ee6a916e149770c349723870fa19cea128add
SSDEEP 192:Kc21ftVPhDWJtsZG62/ZBgjNjNyII/g0W+XSwYfvEZv9tVKvUHu1Qnu0G2Zlc:8gg2/vgl7mgzySwfZv9fO1QnRK
TLSH
T17A5226C7C5E0B04770BB40E7293F72C8FCD6855D75A5896E0488D049B460FE1EAA77AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll
Size 11KB
SHA256 1663c992e41dcb7fd5f807b876da6d0d7f45103c3d357dcc22ca3a5861afd75b
MD5 801a963aaadf607dee718211cca12fbc
SHA1 e65bee7a79a40594fe208376345de3770af07dc9
SHA512 d306529bf912bf4f625d73ea0f04be10fb1b7a86b3e6445c3b5debba949bdfac540ca11958573d104530e5f8e6ea8bb9c445481c3d4c5411fb5095caff13a13e
SSDEEP 192:Kc2RqyKfSQZBajNjNyII/g0W+XSw4OGmRbH6PiVD3vUHu1QnuD6P6f:KqXSQval7mgzySw5bH6YcO1Qn05f
TLSH
T1EB4238CAC0F1F4A2743746CB653F2598FDC2968C3A94C00D4885E049B820FD6E9AA7DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll
Size 11KB
SHA256 46b05455036542d8e343dc8bf2f7bbecd03fcd34f60f4b37cdfb923884a55382
MD5 ba1101f94e243725b8e5c0a153ed38fa
SHA1 83d1c89cc8fa12cae780391203421f402e1c7f3f
SHA512 4e51fed9dd282d0907686f2c893eef650f6e1d352eff84270f5e36b41bc01e2d295964b52f9b41853306f3d208dd93836a5d716f6b29c197e8ec2aff4eaa3018
SSDEEP 192:Kc2EOGZB/jNjNyII/g0W+XSwtHbRbH6PiVD3vUHu1QnuD6TI:XDv/l7mgzySwLbH6YcO1Qn0L
TLSH
T14C32F3CAD0F1F4A3343B459B253E65D8BDC2D26C25A8C0294485D049B870FE1F9A7BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 11KB
SHA256 90ae543f38a1517792407135b765e93b0329f4263c7f4e1ac8a57d2572288375
MD5 5e68f9d70d1287f2b24d36c8b184f8ca
SHA1 609f3d3c52552226ac778c74b740d2b8b28addf8
SHA512 a690e254d15d96ed9da7fa33fffc7464c815c19d9acef269d1495ac6affbc9922733ef3127855085a33da2ebe2aec056465259208a745f2019f09b2adf8fe967
SSDEEP 192:Kc2TV3bBa3ZBVjNjNyII/g0W+XSw0Ns6x7J1QVuRVOUHu1QnuaSwLWwwxn1s:+LBwvVl7mgzySwKs6xFCVuJO1Qn1RQ1s
TLSH
T10C42268BC8E5B593703B41C7293F20C8BDD2969C36A4C81D0485E14AB434FD1F9AA7E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll
Size 11KB
SHA256 9d7e104d6a2f3c405b808c99a47677ae9966f47d1f4ffcd3bddf3e180e0af6a3
MD5 cf031931a5d66da1e200d82526b55236
SHA1 09e5f1b7ac2d107b3e2ace2c2a6547e74abd5fbd
SHA512 467e0ff6f3186a9c3ee9945b16ba41b1bd01dc8ef1b76764cfd4d6130fb2bdd9900d0f614584f24c9bfc2569456664f91819370b139e4401d9d0b16a1cdfcbe2
SSDEEP 192:Kc29IU+fNTZB+ljNjNyII/g0W+XSwRnB9ORUAWoVDLUHu1QnuVeh/z6oh:7PlTvUl7mgzySwRyRUAWPO1Qn6m/uO
TLSH
T1813248CBC9E2E452B0774087283E26C8BEC2D56C35A1A10C1885E2497870FD4F9A6BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll
Size 13KB
SHA256 6b813e608e3e7461c1c93b26d62bf979c99b1874bab0ee5973abd5ea56e3203b
MD5 063a0d3da4e580246724e405f81704f1
SHA1 bae5df606cc584b383817a6cec3d3a28acb5cc15
SHA512 992d9463d50d836086b457ae8e4960dc97293448f899216e5d5f27ad5e804d22f1b18aa462344c0fd1ca1def85132497dfdf3c541914d212012ab45afa84d76e
SSDEEP 384:OvlFk2yDRaWv1Jl7mgzySwyRUAWPO1Qn6m/hXYE:215Wv1v75EkmaQnT/hN
TLSH
T148525997C9A2A493603B45C7243F75DCBCD68A9C39A4E01C5482E289B870FD1F1D6BD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll
Size 11KB
SHA256 1882b64d441e72ae6bbd20ec3def143df40783f27e5d8d06b769a71974a010b5
MD5 292f817bd840b10e5cb57b2fbbe142df
SHA1 a2078f1a1c56e766f19846d02e31bf1d7bdfb325
SHA512 928a22013aeac5f47e42c77adb21ffe4404703b44d0266072532c892afda55bfad1fbe27d26b9c91f63ba73595730ce7074b57e97df8ac8f9ac0c2cb6635c00f
SSDEEP 192:Kc2CY8at5RJRAuZBxjNjNyII/g0W+XSwzCRbH6PiVD3vUHu1QnuD64J:Mtpeuvxl7mgzySwkbH6YcO1Qn0lJ
TLSH
T151426ACEC5E1E093B433018B613E3AC9FCC2925C2654901D0886D10DB930FD6E9A7BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll
Size 12KB
SHA256 f22ac9a551e26cb0aa4f792a576b23f5100ff591e7a5fcf3a2d4d2c562e1f295
MD5 88b95b299dd9a5b719e12878ee184d9e
SHA1 fc15b74d8380acb480651509112b8b4d3ce17dab
SHA512 2dc6f7797334d9f692c4a2f622349671daa3bcd6605dc46e3e5048f862854766a6fa4e481b8a2d09d7935d09010f7a7e89c17bf11289cb963f66425792aa3d41
SSDEEP 192:Kc2Qmq/q1ZBoRjNjNyII/g0W+XSAiZPlpHI+REhsksOd7uUD5M:7mq+vEl7mgzySA+9NLAyIdM
TLSH
T19D426BEBC1F0E42770BB86CBA6AF259CFDD2D4AD2625905D8444E048AA30FD4F2567C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll
Size 11KB
SHA256 6779cda3be3996f37b533e1180f7e15a22362a94ea627be7051f27b90bea622b
MD5 5a4bb9dfd3a38acb8652a65bda8a50a5
SHA1 5224524619a953f36c69522927b7f5767a6f01c0
SHA512 80ca0979de5872720be8ee599e95e17fe48b6c96ee61995b9737c05155c0c86f68f4218e90d9e1fb432f48cbccea9fdef5248b0c29fde4f823f3cf98cf2a61f0
SSDEEP 192:Kc2d3vn36lW/ZBkVjNjNyII/g0W+XSwgZwnEZv9tVKvUHu1Qnu0G29baF:wf36lW/vkVl7mgzySwU1Zv9fO1QnRLaF
TLSH
T1E7426BCFC9E1B58270B78087682E36DCFDD3815C3660941D0449E24AB470FD5EAAA7E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll
Size 11KB
SHA256 0465bfe41d1866f08669f10105797725da4f49afc79c65ca2c3f8a274a27ba38
MD5 a9ce0de75924f2a92ac47852f9d4490a
SHA1 35ec5ebeb6ea60b9a662a9f7eda39bbcf98ce3b0
SHA512 ab970d5414075fb9b36b7c03229f3c0392eb994762bd1cfe2b0235ffe2daeaca06dca4534e001fb780724b0d8b91cbeb399f5daba65259bc65475b3f393bbd30
SSDEEP 192:Kc2kJJ+vZBHjNjNyII/g0W+XSw/MOunRbH6PiVD3vUHu1QnuD63Xwv:B/+vvHl7mgzySwE7bH6YcO1Qn0M+
TLSH
T1BB3216CAC8E1F892743B8087653A36D8BDD2D19C25A5D05D0889E10DB830FE2F9A73D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll
Size 12KB
SHA256 81e79caa9e7dc4035b8f9f8d092a734fb777211b2e728b1600cb44be6e854a44
MD5 b55e02c6b17cdba23fa48ec935151156
SHA1 521d2d4f551a7537e75ac1a6500f4725b69bf980
SHA512 a3cfdb219ee230cfa91df550882119b857887b45cf7673f39caf182b40cee484d6c9fce188f847aa7729c8f3805d4ab25ce1f779b0fa791e6dc3c896f16f7777
SSDEEP 192:Kc2p/hxtPhqZBU4jNjNyII/g0W+XSwiFa/RbH6PiVD3vUHu1QnuD6gADL:ChxtPwvU4l7mgzySwf5bH6YcO1Qn0C/
TLSH
T1A7425ADBD4E0B493787784CB653A359CBEC2866C29A8D01D1485E049B834FD0F9E67DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll
Size 15KB
SHA256 5f97f4184b720e0f5abfd9f733a1011a2927726b9760e5a5344a2436177235d9
MD5 df56158c601922b315ac6ee5c135837a
SHA1 e85b9b2e7b899ed790bfbb7c2efb43aa24167faf
SHA512 ce7b5725e3cda8b167ce27ce86f9a8787eab1d5d0332f9811f885cd36f1da0d7b974913c96c157a7630dfeeab6e3e7c8844bd41c3682ce4d68ab20f2def02a3d
SSDEEP 384:OHvrPAmZPoFh7FJ2C4il7mgzySwo6Zv9fO1QnR8:UvDZPoFBFJ2C4E75Eo6jaQne
TLSH
T137629DCBD9E2F54370774187283E61C8BDD2C96D39A9D8190486D209B064FE1F9A2BD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll
Size 11KB
SHA256 6ca4c2202b7ffb882ccb229e97d03e4bae4ae6f2db74a8739559efaea120badb
MD5 d006c1c1a270348f0dc59ac3c330a057
SHA1 f03bd0fb536b507508cf512c6ae44b854d1a3251
SHA512 0531518d0409fcc12577f49f7c11e8ebe403b05170e7fe904d6afd9ef4fc3d058f3696e0275015db4916a9875bff45b8cba82ab45c50ed3196b1b65ffa3efed9
SSDEEP 192:Kc2Q8TNkFroPrZBSL3jNjNyII/g0W+XSwK4eRbH6PiVD3vUHu1QnuD6a4t:AEoPrvcl7mgzySw7EbH6YcO1Qn0p4t
TLSH
T1DC4237CBC0F1F49274774587257E26D8BDD2965D36A4C01C0885E189B830FD1E9AB7EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll
Size 13KB
SHA256 1690540aed2c0b0c2878b2e54a86699b6636ad74b77d18311420663efa14284b
MD5 de3cceacb3cac4c4a448fdd066c38ef3
SHA1 d632e0a6c69baea34e4c25e83822f811ab1052c4
SHA512 b60c047c4259244d80585484a80e70b26e04a7e8150ee37e81dff98c4a553b70df9a75136cccda2419325436a08ee7def40e6df70b71bca87eefe2199ddb10e0
SSDEEP 192:Kc2ei4vtaWmg8iLROLKZBUjNjNyII/g0W+XSwRT5EZv9tVKvUHu1Qnu0G2fi:bvUXvLKvUl7mgzySwEZv9fO1QnRw
TLSH
T16B528CCBD5D2F587347340CB293A72CCFDD2895C2550942D1885D14A7834FE0F9AA7EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll
Size 12KB
SHA256 8e25d623eec66acb9eb0876632b467bb0ffe4d75663a498361a91da7d97fe188
MD5 3b8306735dc1722cdcf4c58c9bf64412
SHA1 1420bbfb4f27ee629c3e20fff5a20ac9540b7507
SHA512 83cc0b5e508a8ffc56c7f4b59cfb643e3cf8b8e751a2bb2e8168f27513fa23689c40f4cbac09f1878c4fc24a831580a699b6f81dcccf929cb4c80d87b89c097f
SSDEEP 192:Kc2xq0JycjlOZBQjNjNyII/g0W+XSwvAhRbH6PiVD3vUHu1QnuD6Sf7:mWqEvQl7mgzySwo/bH6YcO1Qn0XT
TLSH
T14A4216CAD0F1B492B43B48C7653E29D8FDC28A5C36A4D01D4885D149B460FD1E9A7BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll
Size 11KB
SHA256 ae1fe3249490ac15b19752ce14638bc1ba2d809727b603af5f82a4141fcacc3c
MD5 16a513444b17f769a0dfe9aba00816a1
SHA1 1c23862ae02a2c5857654b368da24042d8726ccb
SHA512 40244b6161a40587f795f557dbce493a8096d7ec42e8c6f1f12982447930736705d35ade8d83582ce0e9831ab10a66878e8cfb951e5062075c8002bd5984dae1
SSDEEP 192:Kc2r0cIZc1tpZBmojNjNyII/g0W+XSi6rRQPUUGC63X5VwdHh:3cIMtpvmol7mgzySvdQPUUK3XXG
TLSH
T1D8428D5BD1B2F497347B8597213E2198BED0D94E3297C98C1841E08EBA20FDAF416BC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll
Size 20KB
SHA256 6321bd06e202c3aac644bb7c7fdb038e240481f2b35974cb9df499619b7e282d
MD5 c9655cdf1e5a289641a68521989ca271
SHA1 c9d9bbc71c067b41bb9d3e20bba40d5eb7240071
SHA512 a2ac023ffabb6bdba8356aace1eb335d34150325a7352bc58a908ea40e2a78042bf3f3b6a6f15f51b730b993f3e1200903e19a697e6b896cf13df6502da7892e
SSDEEP 384:bp9u5lfrorE4XebeqmknnkhELtmW7+l7mgzySwrZv9fO1QnR/b:mTCsm9hkj7I75ErjaQnF
TLSH
T1DC929D9BC4A5F427B47B8687692E228CFDC1852D6868456D1A48C10EB034BD8F5ABBC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll
Size 19KB
SHA256 2aa1d6558c23de74c4a074d4ca8a26369270286c223cb0495f01596ce0a090e4
MD5 02c9925ce5f588a2400324c698724a2a
SHA1 b2f25f496eb3d64496c5656106a105158fae152b
SHA512 1caf656bf30c0fcbf0ac3599673c5a352d3b5e3f61bccd5893121671e36a1e8c29c497b0c0a22ec1cdc3fe980114458c375b4561e5ab93b92ddaf22cd2dc2d11
SSDEEP 384:rdttnbiTlW6W/Bt19r7ol7mgzySw/CVuJO1Qn1RcB:BtxbilWNBt1J7q75E/O6aQnX+
TLSH
T173929C8BD0E1F042747B02D75A3F64CCFDE6A42D2959D4AC0485E14AB428FE2F8963D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-private-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll
Size 62KB
SHA256 8a5a60bf46f00e87cc90eaa0794ffdb617eb78d7d4ce2a0d315a9fe11a21578b
MD5 8c33489c18b5db480324887ae8bccc89
SHA1 5465c6b4b3ffb0ce7a33f869ac3061c871f73248
SHA512 832e1d26eeb271f0f717a6170df45b7fb2dc8e6cbf6e8a7481bf0b17454833936178dca24b2cdd07535527c2e67e9481eb16705ba174305ebe113ba61c6b5358
SSDEEP 1536:VoiSZLRgJfS3gsu5bKbcOKqkO9ExsUlEo1T47EZglE71Yk:6iA4ffsu5bCcOK49EaUlEoF4wZPak
TLSH
T10F5301EA8502F4C521BB00AB21BB74CA6CE2599EB48BC53CC742D58E7D30F91F953396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll
Size 12KB
SHA256 8a85980fdb481141da7a7481733e7619141956f800aa90a5f9d569ecbf336a46
MD5 19e2ba22eaf472767383a53f57173901
SHA1 8173715fdc9e84d50a5d6c89da0dd486f039e13b
SHA512 32848c191548007d2b964ec2cbb11c818ae6ca1e3f9d3460310c7759eaccb5d65f17e9f743555a0e4f3d2ee247a82ac278780fcd8a0edde264b49b4f905293fa
SSDEEP 384:unV5tNJO972Sxvil7mgzySwYriUXCVuJO1Qn1Reak:un/YvE75EYriUXO6aQnX8
TLSH
T17B425A8AD0F5B192707B45CB253F31C8FDE2998C35A5C41C4884E189B424FE1F8967E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll
Size 15KB
SHA256 2fa91af1d6787cc56ecceb9f7084a4e77f366e660bf0181632f158a37e5c4b7b
MD5 8547a32d033f3632728b6ba998cd1d6b
SHA1 7af77084ee507b62314b5f838b3556649e1844ea
SHA512 f53025e80ac462813bcacb98f281e4155ffaaa4f1316cf2c5b0f2d94659305702aa599e23305f761643ac79df2a17a54017aa0edb9b1d395536d5ab9dc58f905
SSDEEP 384:1t3bvc074OOThkFZfv146l7mgzySwuGCVuJO1Qn1RSQj:33bvbf94c75EuGO6aQnXP
TLSH
T10B729D9BC1E0B197203B0687993B66CDFCD1944D39A9906949C1E14AB468FE0F4A77E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll
Size 17KB
SHA256 be3a6629b5dcc5689852b565c4b0d2e739952b13d9df59c1a06661862c09bf55
MD5 0ed478f78920b8291b2993856869752d
SHA1 cf090981f8278ce571583c387c67e06144a5183e
SHA512 532c2b18c48845048764a4d290d796e81c5315e3edb520ac8b95b05c8f09ddb3b1cfd58b8e0210d858468671e0815c6f4f749307b384e1389f813c56f2241217
SSDEEP 384:4a+tOJQ5GHnDoeWEGsh3ko8bFPZ0s4Kl7mgzySw3YCRUAWPO1Qn6m/9B:QEJksnDoBEGkNUH4M75Eo0maQnT/9B
TLSH
T16E829DCBC8B2A993B0B20583593F2288FDE7D19D35D8D68D6481D2447920FC1E5DBBE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll
Size 17KB
SHA256 d981f959bf41df4f6dc056f8a61edc6889f746ab8f4f239221e8fb71c2a253fb
MD5 2b65e4e5d1f48251cf07b77ac42b2802
SHA1 144a8945cfbed66d233c54fef6a8f689ee52e451
SHA512 2938b97ba2ff82e0444ff23657a7343ce7dcb39bf8d9cd4f7838ec0ac395b52a2a2dad142d867a06691ef447961a69acc1d2f2b3e5929ebbf43de33ab07e1d7b
SSDEEP 384:Rd0vQ1abbyyQnICToS+FZU64Jl7mgzySwpNrgCVuJO1Qn1RtX:v0vQ1abeyQOFK64v75EpNkO6aQnX9
TLSH
T102826B8BD5E4B582707B558B297E21CCFDD1C42C2669C46E1840D98AF034FE1F8A2BD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll
Size 13KB
SHA256 694cb40d486410ae10ecc3517de8dfe6c444af435d798956b9fba26919368228
MD5 14c3fe9782ee1f36d71b2d89471decd4
SHA1 aca4323fe90573aeb05eb2a911939dfc0187fe26
SHA512 cc9297cd1b71ddd61662ad79ebdac25fcb45697f17ced1bb3d5e1392d0e63edf7bd8792147420e2a2332ee056c62315ab41d904733c50255fd06fdfb95ffb00d
SSDEEP 384:UVhs7ZuvCuTtPDofnOSvul7mgzySwNZv9fO1QnRcAt:oCuWfpvY75ENjaQnaAt
TLSH
T18A5259CFC5E6F84774BB0097A43BA48CFDD2912C21A4C4290889E04DB160FE5F59ABA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll
Size 11KB
SHA256 234e3785f848fde182998f2fb7e01e8daf1ddb133576afdb7b9a06405dccdb35
MD5 316e5c22210ea092ab2615b717bc8e7c
SHA1 5a8538b95e305083d7b03780b9e0551eee507140
SHA512 684d3bfd5266b06fcf0fbdbeced3a4b74ee57c1b838a778f296531eb0328004afaf6ca2f386f2391f262a6cd38c895d1d76b2b6a9b249296d123affa1197564a
SSDEEP 192:Kc2xMUA5u4q7ZBdjNjNyII/g0W+XSw5qNRbH6PiVD3vUHu1QnuD6GA:8MUA5u4q7vdl7mgzySwwTbH6YcO1Qn0M
TLSH
T1D7428DCAD4F1F4A2743781CB256E7AC8BDC2D29C3594900D4884E14AB830FC5E9E67EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll
Size 1011KB
SHA256 42eee72062a5ab6a42159dfb2e436211ccadfde992c34d07255d9ae8b20073e0
MD5 12244159a0436b45e6aaa8f9261bc4f4
SHA1 6b2e1542bf1dd7e8d8d4c33608901c00adbc1349
SHA512 1caafc06def81cd3bb57a26bc09905c4422ed379155792b8b5703c11b93a12dc0a862a05084e56993d1ac059d5efb00bbc4b56ee7a366cb8033375ee2cd481f5
SSDEEP 24576:De+M2csF2GAZPGh75KuTIOXqvsE+MskaimWMUiIYg7PBNAtWeX:yzw2NZ+h75KuTIO6v23imoiIYCPOX
TLSH
T1972501C3C468B0D1EF27B7BD4F6610C57C90C5286DA9B62822138E45612DB75B12FEBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OfficeClickToRun.exe

Path C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
Size 4.1MB
SHA256 9b269e6fcc7e6d3cab1a8b9a82b64814358e193c7482843ab44e7899f4445925
MD5 afc818a68b5f23fe62d38bed3ee18c70
SHA1 4cd36bc804c3ae6033833bf2ef8576621c274788
SHA512 6553a0e8d75450ed935828d345a7ae51949d3d5cf5833a6327716f9e22dc4356ae887a4d2e52f70530e3636d92f28d3d8d3113ca791a1f0ff6ea1e3819cb3abe
SSDEEP 98304:gd6YRWiSmfj0cjbcQ/2UgMXASgYK5ricyx8K6DM8y70V:gd6Yhj0AbcQuHMXASLKJgj6DzP
TLSH
T13316DE87EAF4E927393F40DB682F61C9FDD98A9D7424E92C0195C149F928F94F423293
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClientSub2019_eula.txt

Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
Size 42B
SHA256 5675e72d41eac95f324f4c250fbdc7696dbc8a738eb76c8ac38ce6df9655d2f8
MD5 75a8016f484a4197fff465eb542aa385
SHA1 8eb14993777593ca1eb74582a842234147d59db5
SHA512 74cbfaec8e7c836193f757d343e74e071cd2544aecd8e66c4c8b375d3af39ca351279f9a0955b0e788b2b82bc16e407931fdf7afe5c0f0aa2c5c4737ee054ee6
MD5 SHA1 SHA512

Submit Download

zlibwapi.dll

Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll
Size 274KB
SHA256 0e885e692f0870cc89352e9b860d6ff10c2221c533072714ae94fd7d1dce2a66
MD5 de316d215993ca1a9b6bdbb70d660214
SHA1 09b9d7973f522fd605e4a776aec6613ef5017a32
SHA512 b7cc8d1f2482842b89e57b1cbca9238d99d7a48a86cbd4f915b91ab01bd22eafcd512227fe884762204f0ecbeada6861ca857b5ab15bb14b40718214789b8572
SSDEEP 6144:g48UjHZocCWVLwc5Pck0IsAbETxUd+VQxZSWJeq5Iao1f/Bz:JZNgWVcCPckbEKd+VMZSW8q6h1fR
TLSH
T11254F0E3D4F0E142727B11E3927EB5ADFCD9E50C64BAD029858AD18DB461FC0F0867A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TALK21.COM.XML

Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\TALK21.COM.XML
Size 807B
SHA256 1f23c4ec3f6a233800449c8271b9aa5d9794b350fd0f3f7c2b58bc0ddcc67a81
MD5 f4b6e836d3ff899ae2c8bf7db3f3bf64
SHA1 41cbd9df1380ad4a409ee420a0eb52ab1cadc862
SHA512 c814f710769d9e2e9bd30c8a013f3b6713bcaa0b56c3cf47bf5caf87d878ce38bbfbc577ab015afabbbdb4c13dae7c3cc0046700c3eb9ee02bcef7b1ad9913dd
TLSH
T19601707CC88FF17065B75AA458BA213EFDCCEB2C62A202C4A3F0DBC1533109D0099A62
MD5 SHA1 SHA512 TLSH

Submit Download

YAHOO.COM.XML

Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.COM.XML
Size 806B
SHA256 ae83f29da3b533a8a8c6715112ffad517956c8f53308df7de8596a19b7689997
MD5 8be0ac973c72406cce36721abfedc18a
SHA1 81eaf0963f45e1cd3e8f8146280dca67adf99d47
SHA512 9bf14b63ed859db8322a984fa05477e2fa8754275a19586e97c35260260af13c9fcdb7f705bdb7857167fe75864ca3e6eb67d467fb3f3e6952c04d38d6fbd08c
TLSH
T1ED017AB1DDC87431602406562DC6D2E1FE8AC5386386DDC1E977DD9970084E445DC63E
MD5 SHA1 SHA512 TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll
Size 18KB
SHA256 46d8c8ce1d5f5e014d6fa0799c43f9451a264d4489ec9289d7546ba1fdf29939
MD5 10992be4a7f12f8a94c8e98f1a7c0ad0
SHA1 e74d5d5c0550779a4a1d52d1e5472c2b5ba2095a
SHA512 c6b7b64f7f218daa61e664e392129c4b1e43737d5db63e516ba9f274ea7acd921e29cbde2f6eb2b7b66bf6138e4fcae3c03b672ea11a00c3b9df610f82529a20
SSDEEP 384:YaxBPzHMIPiA0pWeXWrDiKoP54Z+CsQT2iVzNsg6cyg/35PZx:1BPzH/3ynPs2MScyupRx
TLSH
T158828CA3C6F1F107613A569B697F68DCBED0E6587411E91F5409D22CF238B90E0A32E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll
Size 18KB
SHA256 4548d5b7d437e8b990b6db50e44d1b8fa37bc925cc504d8abc6dcfeefb482bf7
MD5 f2bbb5d6bfdcfd4735f36b858c098731
SHA1 a962f794e16ba22110e6d3570ea6891877c89d19
SHA512 1b02599b2b34db191d3b1348adb350cac90796259cebdf178a013062f16d07ac7f7f25fc80f99c4e4702a5c1baee0e4e300df2a7c5d59cb70f7b0cbb353a38b0
SSDEEP 384:KfFX5Pz3BHiA0pWeXWrDiKoP54Z+CsQ0C38w2VzNsg0sygBYpn7tIwA:W3Pz39ynPrC38wghycCnhxA
TLSH
T1F182C093C9B1E11B513A969B456F6DDCBDD6E2482401FA5A5404C33CBA3A790F0E33E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll
Size 20KB
SHA256 280d475906c409a7fcb13ba0d486f684c84ff3955960dcfaa380f7a9ddcbbac7
MD5 01b18f9b218805048d84efb071dbf56d
SHA1 98b832656add4aacb110e84a9f2212f4f7fc3781
SHA512 9b9eaaf281332c1c11195d842ef98bcc0dfa345e18033837777f19fa3f03adf9c2f9247c885f9940508e2e1e11c1a8dcafae29d078414eb01ec93e534c15801f
SSDEEP 384:7YvzPz+BHiA0pWeXWrDiKoP54Z+CsQeAmX+YsTFVzNsgfpyglNIWLGpp:7CzPz+9ynPFOYsTjnpyQNbQ
TLSH
T13792CF17E6E1E103427693DF961E4AA8FEC5D9182001ED1DA044C3AC777A7A0E0F23EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll
Size 18KB
SHA256 555746d29de7ef7bebc5d07e977ccbb068ca4fb7cf2ad88dedaaac51645a2334
MD5 f3a08be120fc4d7d93102e9da7c933bd
SHA1 1ca1ce9bd40f53b71e94cd433d11912f316f9b43
SHA512 2a27e52ada40e98f4bd4f6a21fdc71bc86284bc04b397506cde1415e5373a037b922b78351523a56edd4a8188b881a6baaf9c01d34d785443e1a8c8254e5ba5f
SSDEEP 384:/XpSPzwBHiA0pWeXWrDiKoP54Z+CsQjRqdY/VzNsgwVygBYpn7tIw4:BSPzw9ynPWqdYB4VycCnhx4
TLSH
T1A382AE93C9F1F1076136A6DB4A2F69DCBDC2E6583445E90E9404C22CF629790E0A33FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll
Size 18KB
SHA256 8f6fb0c95ee5c44ffb8a7a1a16feb825307237156b7d93347c6e69d41468e7d2
MD5 6dc3c4b117bee4a6262c218f04a7f75b
SHA1 06d231fa0a797766508bf71eec3a1d0673b7014e
SHA512 64064ae8bcccb5dedfa4565d802e636fb409220bc2a38ac58e99837fca502ac20d4bb8e0a3ffe5d254a86454c3365d29fb4a21e3db51d744f59e27227f624ec9
SSDEEP 384:wGpeEPzkeDCUiA0pWeXWrDiKoP54Z+CsQ9/NtVzNsgkkayg5qGljzRH:wmVPzkerynPSVbVay49tH
TLSH
T1B582B09BDAB1E003523656EB252F38E97CC5E6583045F91A6405C3BCBA397D0E1A33E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll
Size 18KB
SHA256 c1aa64f849391a6981e9fda3ee5fb8d78d0a3412dc0ca8332d9ed212b6a079be
MD5 6db041f6893a7f81efdf2227aafff7e9
SHA1 c187e90d64758a6865f0ccf0471901d695abb947
SHA512 fcfaad33e6239d8e17115f8bb6ae6cc1fc4d24f82ed3cce6139a60829a35b785157ae13e385c4e12a198f54fed3978e2d5c085eb675731e1caaf216d68076014
SSDEEP 384:rf/hqWvPzKMIPiA0pWeXWrDiKoP54Z+CsQEqPlVzNsgv5ygafJ/x1i0MA:jvPzK/3ynPjqPDZyD13/N
TLSH
T17382BFA2D6F2E203923AA79F292F5AD56DD1F6152801FD0F5005C36DB739740E0B22EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-xstate-l2-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll
Size 11KB
SHA256 1b50f70754f4031b17a301186885dcc27fc9f29620b7f3944294a6dcc9ae9110
MD5 bab7eb2635cb363843f3b3755378ffd7
SHA1 a2996b6214d760c4c31342340ca48be2906027f8
SHA512 5f8be09f92847eb616c0f325f6df26681e915394dad78283783c0e0a0f6608c9e3d923a67943be0ce5e4c2f1700dc4662d0fa88d2072315346cf2f9eac8d7d47
SSDEEP 192:2cnNH8lhBDzXpKFU1Cb4ASPCU7AvkwG6ZfLVV50Zn37VPxVhSmIpS7nw2:rclPzXIb4APvkwG6ZfLn5qn37VnhS5Mf
TLSH
T1B43218D3D1B4E182A27F49C7A57F30CDBC85D19A30329A696405C80DF535FA5E0AB2D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll
Size 19KB
SHA256 1d831806d5eb2d5e414b570984e421f9fec0329433d1d964fa1f73105e891405
MD5 29454ef636f0e0d14b773e8648c83918
SHA1 0bfaab94e2c0d4ca9ecf3c944426f401ab5ee926
SHA512 cc09ad6f144ad66335ba733c9b47a4dc23558d3b6816f035c4c8aaedf7c126c3f0528eb088be0ece28d0c4c3284f2a042f60fe199cb3ad5fc7f86543e4397970
SSDEEP 384:3GP5PzCMIPiA0pWeXWrDiKoP54Z+CsQP1q5YkglVzNsgIygBYpn7tIwE:2RPzC/3ynPO1q5YkgDwycCnhxE
TLSH
T1E892AEA7D9A1F507613A96D7553F25E8BDD2E1443012EE0E5409C63DF229BD0F0E32EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll
Size 22KB
SHA256 c12216b3fe619b29cea489a6b88cc60b0a84235291b753dcb0bc4c1ee4a30312
MD5 4d08c3e7da66a75dc96f530004927cc3
SHA1 27097300158d89b2ac2c7d4b77bc7c8d80b00446
SHA512 3ee75794cb4d0cf1d751fab8c715681092e6491ae5f8ab20c9c2c3f470951f9b0fe5aa5f64f4c1ccd076f848aebbc7fb205cfb5c2a9ba66b626f6602d130596f
SSDEEP 384:BYsL4AVZPoFh7FJ2OrzLeDCUiA0pWeXWrDiKoP54Z+CsQ7oiOTVzNsgo8ygafJ/H:B5LpZPoFBFJ2OrzLerynPqOVg8yD13X
TLSH
T15DA2BF97E6B2E513913A939B217F52D9BDC1F2143816F81A5809C36CF235BE0F0622E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll
Size 18KB
SHA256 d28cc22aa26dd61f3ceea03c721b20d1e423c73b3325d4909a70af1641ddad52
MD5 da1dea36c1276b826696ff64f69c5cd6
SHA1 b30553d1ee5c23e3df47844b5caa27c8061ac656
SHA512 d4cec3409ba8086e7615e0e557c5fdb33e6598b7b0b98b6ebefc19947ca8e4cd3f78d6286c46c4ef7eee74ae5deef0016c3a1942514651229b93c6961aaa400c
SSDEEP 384:QddoPoPzdBHiA0pWeXWrDiKoP54Z+CsQ9kVVzNsgnwygafJ/x1ivHD:QogPzd9ynPGkToyD138
TLSH
T1B2828D93D6F5E107613A62CB593F26DDBED1E2582011E91E5404C2ACF67AB90E0A33E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
Size 20KB
SHA256 26bc2688f5932929efbda5749ef2bde79428d8f9fc159f3848fd85727ff5e1eb
MD5 3d8d3f95d80d397ad53a85698d84eeee
SHA1 25074753dd57424c6165399362f44c5127478fd8
SHA512 4d36b99633e400093b8d3fb38a425e53e6dc14596f158429a34c48aa0f5b0fe36748ff93fc569aed891438c5b6e4b707ad5e3c63da749c943b333db0630edb0a
SSDEEP 384:V8rkVLOLPzjBHiA0pWeXWrDiKoP54Z+CsQprQxUiVzNsgAAygafJ/x1irSp1:erkVLOLPzj9ynPuQuMfyD1391
TLSH
T12E92BF57EBF5E103613A92CF5B1E57EC7DC1E5142401BC2E5440C2ADF63AB90E4A23EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll
Size 19KB
SHA256 ee1675a250f8573916ab09ba6a16ebb109c6370b5b751bd13bd8f2f296c5c024
MD5 f1212a05d18ae8132eb2d6ca5e3bee3c
SHA1 92c61398528c153d5dd996b8019985de1067fffe
SHA512 8e5bd21e2dd249ea601700766c8bfe878358a86ab50d08988a864e7c537975a903a28d59abf263b72dc61800768ce4e236bbf6e62fb377fc7191e8a2750139f8
SSDEEP 384:B2q23PzGeDCUiA0pWeXWrDiKoP54Z+CsQzL0PUVzNsg31aByg5qGlji76Nn:B273PzGerynPUYCf1aBy496In
TLSH
T172927C97D9F1F013A23A5AD7157F28E8BDC5E51D3441E91E9804C26CB678BD0E0A33EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll
Size 18KB
SHA256 09dcf1da5994297c3bb4ffaa7e98634170a0da81d7b8a529b6b47e208135d5f3
MD5 0017d38ceedbd5704cbba40b62c8f9aa
SHA1 43e27b749d0dab75cb39b18721ce3747a70ed58f
SHA512 4347bb8988dbb57d5d4d7208bc1999c57ec0f5cab7ecfd00fbeda1f719e11c03e7717f1fa692cd6d403d6de701392ec0f905124b7f6d92c950c5c2878a90ef1d
SSDEEP 384:MvMtyPzFBHiA0pWeXWrDiKoP54Z+CsQQX1VzNsgBygafJ/x1iSf3V:MvMtyPzF9ynP3Xz5yD13p
TLSH
T16382BF82D6F6E113913B96CB691F16DC7EC2E6582042FC0E5408C66DF779790F4A22DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll
Size 27KB
SHA256 b359e2c4842e107a4beede9bbddf2e532c3eff4fa74a31c5dbcd5282da810402
MD5 9d0461627b731b4b3c85e88c70a14fc5
SHA1 d79752f4425c3567f8d91ae1bb4e64c5e2eb8901
SHA512 8d7f2a063ec22c8af81e74894315387663fa9eacf4477ab63c9263877b23e1032ad22c2093c94ddcb4eaa98a9cad68ee12b057977513dee039cd3886e6618f29
SSDEEP 768:XF0VvCsm9hkcuAzf/3ynPNjjTm9ncaQnn4Scivq:10sNRzzX3yP1mxjJgvq
TLSH
T106C2CF5BCAE4F113B23A8A97082E765CBDC1D26E3805EA1E114DD25DB174B84F1663E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
Size 26KB
SHA256 20fc62543db631e6b664f453a842aff4e39908abfbf5efd9d69d58050dedb9be
MD5 e43ca747d7949622c7050fe88ddf5fb7
SHA1 07b13c9bbd8e266d51a2716941c39d19355cf68c
SHA512 0d2576b33cd2ca3abb01cac6bfbce8cc05109f93d1c39ff39e4a2ab2628c70cabb66d528fc8fad4906743dc75d542e67ac400470ff177ba5c958fac8aff54820
SSDEEP 384:6xH+lW6W/Bt191dDAzYMIPiA0pWeXWrDiKoP54Z+CsQEVV9mVzNsgqyglNIWLGR:6IlWNBt11DAzY/3ynP/RwSyQNbG
TLSH
T19BC2BF93D6F0E003753A66EB593F69DCBDE8A41D3005E92A5445C62CB235FA0E0A329B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-private-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll
Size 69KB
SHA256 d9801d6d066891b35c0b91c2cf087a7c846334488a4ec5dc5a34c2d9e9fdf016
MD5 a12cfa84373e0f73768ffe1bef40ddec
SHA1 6d3f43056707e38c614dad688801722ddfb530c9
SHA512 8c7fe94c7ef56c007c93c252d9b129ee4fa8e5567141dda621319e99b152833de0dfdbac365283a885ba6cf65a398f323c421f08bc9f108c2014f7c58504764b
SSDEEP 1536:UPcxEOyE5GG0qCaxntIFzsWFGhd2BsczoryPh780:c1Oy04FAj+zoO
TLSH
T1B06302B387B2F850E1018A96717E64C97460D74A34149B29024FC77D7E7E7E0E0A53EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll
Size 19KB
SHA256 9e03de53dbd6fd11162d7820a3774f76e8ef82cd9a9add03c899943f82979566
MD5 74be7658f98e35369597cf22f77ae4ac
SHA1 54305713c0a17b4bbbf7b798b6cdec2583377cff
SHA512 f268cba7e6e365dc8046f8043c9160a589a2ae4b98f7ffad527c9470b358ef0efcf44e9a6c85c15a0192ad75806b23d0b5bfe9c99aebd500c89018bef2d28808
SSDEEP 384:kJO972ScPzE6MIPiA0pWeXWrDiKoP54Z+CfQMw7lVzNsgbAU+0iL2NECCL:kNPzX/3ynP8w/jAwk2iL
TLSH
T16F929ECBC6F6F106663761CB512F3498BEE0E2593455AA0F4155C2ACB235BE0E4A33E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll
Size 22KB
SHA256 46ca600b2c1fa27639982664eea11f9041d14e3a44b649f45ac308fbb359a28a
MD5 7b7cdc6a8d5fefdc276dfb105d819216
SHA1 313dadcdeda8764159418c251a16c23df55fe763
SHA512 1a56ab9076f11a11a52a97fa9e3721eb7f968eff83dccf193b0190101effd0630223c17fe2fede022a80ee062c6029e138133bf93a1a75b00a2752ab18221d62
SSDEEP 384:fZ4OOThkFZfvNbrzhMIPiA0pWeXWrDiKoP54Z+CsQZ8jQ0VzNsgaygafJ/x1iPGd:TfFbrzh/3ynPC88iCyD13J
TLSH
T1C5A2BEA3C6F1E203413B5B87593F66A9ACE5E1413816FA1F4850C22DF668B90F4633A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll
Size 24KB
SHA256 b4713f38a6b93054f7df4bd2d0bf1e5d9941012db846198605b0a11dfd99f561
MD5 416691007a055738cc3b373da0da02ad
SHA1 336923df85574814b35b0a57a28da52859517d75
SHA512 afa83ebe40696389374bc1cb5cd0abe2573d385aef1b8314951618d34b3697c25b3fb1d97cf5431e473c543cc29e27589fdd18c18c2e880b0758eb014951aa02
SSDEEP 768:W4k3FksnDoBEGkNUJrzL/3ynPXCw2duRyupRyn:W3RDokczL3yPSpgDRyn
TLSH
T104B2CF93C7F1E247A13A165B186F26D8BDD1F2447489EB5F4405E22CF239780E0E72E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll
Size 24KB
SHA256 2baac5bcb7c144e888393a85f62f23ce5f989b89ce89d34b38c83ce8b9c925e0
MD5 fe795f3844b284abf62bf5049a49a227
SHA1 b5172b1ebf8d9bfbbe119e1bda74d20da79aae0a
SHA512 882b37212064bcaa43e586a0dc00346ca4f13ebb3e3f14911a1ca2b633811afb5b9120dad8c6b6ad7697f274f2c09ddc981ba92fda172ca8c8790b25c42cb3ff
SSDEEP 384:lMdaxvh6yyQnICToS+FZUHrzsMIPiA0pWeXWrDiKoP54Z+CsQtzdVzNsgjygafJS:lMsHyQOFKHrzs/3ynPmzrryD13K
TLSH
T119B2D042DAF1F106453EA68B2A2F56D9B9E0F0542506FD1F6804CB39F72AB90F4611E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll
Size 20KB
SHA256 080b2fd0d8009293420d602047c538490814b8090c84eafb3942d3b8922d164e
MD5 7ee6a022cf343ac48bc08e0fcfdd621c
SHA1 b23671c1da19c5bf39c1aab3a09d9c22b898d5ff
SHA512 ae9f10fb2bd7e92663c780216f4add7fec0c22217b37543b4ed96411620d8c8082b779dadfbcd011969e4cb70a49d2b9e79369345a9762f68cba072013336ab7
SSDEEP 384:KxuvCuTtPDofnOAPzpeDCUiA0pWeXWrDiKoP54Z+CVQdmVzNsgUYfvkwG6ZfLh5u:KiCuWf/PzperynPLw8GkU5v7EuS
TLSH
T1B992AE8BD2F2F547A26A08CB427FB48CFDC0D6162425E91E4545C26DF239BA0E0973F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll
Size 18KB
SHA256 f50a3d113989df421ab8c9aa1529d54c7b29288e76640c06215f296185c84a41
MD5 eee06308464d7d42b6974de96796f08e
SHA1 d48a4964f2c0b6c05e8a61eba4784196f209c261
SHA512 0d23a1bf7c93d8fcef02fc87bdca2afa124c1aad3bc258838704d1795a565287c391129f10c850930b52abca2c804e8aef3c50fff870c4dd7d6e5c23b6532efc
SSDEEP 384:j8/4qtPzQMIPiA0pWeXWrDiKoP54Z+CsQlJmzIVzNsgI3JryglNIWLGjI0:ja4qtPzQ/3ynPuszGGryQNbw
TLSH
T1BC82AFA3C9B1E207613997DB556F28D9BDD1E2453401FE0E644AC32CB629780D0B32FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Program Files\Microsoft Office\root\Office16\concrt140.dll
Size 324KB
SHA256 56e9ce9fc7a1345a6a1d319017e89eee5442a3566fef17581c9bff625542d917
MD5 ee188dcd60b823c2bcac5ed4802d89b8
SHA1 a0596f0ddc08df7ab759e2c0b595fe4561af85c0
SHA512 af283bb430bda1931258bc923d1b0bc2d48eeef262fd6bbb2f10fc243e0bc4056b7ad4ef2a91664a5ff47babbaf2cfde099ba305bd98dca76e7c7e909baadcdc
SSDEEP 6144:bCG9rQTqRxTeJJxOTNlqaeGgWaucC35Wbos9hBa+GYFq:bCG9r68xTeJP6NUG0ucO5Km
TLSH
T1826401C7E0F6F010A57B598BA52F67867CCC41683006D2AE90A6E91DA14FF98F8177C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll
Size 358KB
SHA256 391d27e79c5f011f738edf090431b6f3c5afb0f461dd6715dee86b4ad1124515
MD5 19f847f6076bddae81021330fcf48d78
SHA1 3c4c7b595bbd4b8eb84ca5b19918f39a73912bfc
SHA512 38188c5ef956919efd6eb7e9be16b4efbad7e560702f11d33f6b4e8481b7b83374cf470415f876a59a0a80057aba5f55c9d1376e1b2737ee694e3d3c71a6f2d3
SSDEEP 6144:1XdGfiHSMgUpE6L5vJVDStSbHA6uvQJmt5vefBqN+u0SVh6gCkD2Xub83:1sVMpL1XmtSPs75vIMN+fSjCrug
TLSH
T12174CEC3D0B5F412A5BF11EA2A3F29D4BDE8C11CA82AD56C4982E90CE551BD8F1537E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osmia32.msi

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmia32.msi
Size 3.0MB
SHA256 e55ef7cda2df694357717af6b0ea724071dd7887ee3fe72ca73ff2330a29c671
MD5 bdf9b4bc03f05ceb766079dcb26c2fcd
SHA1 11e78728a279038bc4bb3e8d7236ba57b3e238fe
SHA512 fb78303da49a7c63ed6eaa6d126e04a090cfae8bf3203b9c7894b6e879e7f22bffaab5195c46604c8388ddd6f5595bff0e903b5cc64bb805ff9bf6ab3f94effa
SSDEEP 49152:2e+gqBJBrHuP1gA1oaCfaZTcqrCINekEPNJ4/wpFQ4hqAdo8qgn+NaswHA53LTVT:2e+9ZIgyh31vElFQ4hqAO3YM
TLSH
T1DBE5D8E2C5EBE502343F80A2643F61CEECC491B92265D60E9289F45DE635BC4F42B7D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mfc140u.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll
Size 5.6MB
SHA256 7858922d96df1b31142c1ef9a040f80fd196e62d694fd85173097f771d4f9f20
MD5 9bf862df4616d03fce077c058d059f1b
SHA1 b19278ee1b451e34e1165d8f24e3d602aa20a3b8
SHA512 21b59fa2819ed56f2fcc8dba3106e5af5b5555ec2fc9769ea6536c3253d594bbf2430eb99921b6e94178128f434161e845236509370e9c9ae1645f1791cd7c7e
SSDEEP 98304:czrHWGve25GJjhO9V+iCCs8e8pagLNFIeNpSsK4fLdHzEBvitd9T:czrdm25GG0BC9e8p/NFdNpRK4TuaJT
TLSH
T1CA461281D4FEF101723BC09F91BB12C5ACFC685C293AD51882A1DA19F565BE9F106BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp120.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll
Size 644KB
SHA256 a148266e40fcedc90db051b59d24baf08c86b3213d15252bce1ebe34fa20a0ec
MD5 c3d14122657030700d644c67733e50ae
SHA1 7adc2c4afd0fd4bbea8a211d52e036600a5c866b
SHA512 cf3224d31a11f52abe8a85f444312b2e394e8ebe9c568916f698e84b6ba8d3884252f6b9b021aa435eb5eb2f9e64acaf27f12f2b9a35a2d5438911f32d7dfc44
SSDEEP 12288:9WywtVEpdbywCLGdqe/hvYfVDxAiKKDAxWfwPI+rdb0XM/yvgxsDoTU:9WyUhwCYlZwE0DAx2L+P/HTU
TLSH
T180E412ABD0E8A1057E1381D5DBED749CBEADC94DA010C08D964ACA5EF0E7BC4F51B386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcr120.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll
Size 940KB
SHA256 a78dd92f9b1e17f1443d2bccfc562ae6057d4c3b15dedcf908bc09feabffae7c
MD5 9cad5e258ea350fe048aa11f538f4cd1
SHA1 774b1975510796254281b807a3b2243a0103cac1
SHA512 7e5664925473689e34b863324e865213780bd8a617b01c73545feb4d2badf7bfd2632bc50e10809ab5a706569d40d3b6086b2b30ecbc1548599c71d831c94dae
SSDEEP 24576:AR+a0B/nPWGsL7+vaNBNUxYVV+8IMiYTL9LyKR6Tl:uS/Pji+yjeAriYTL9Lyy6Tl
TLSH
T1142512C2C8F5F2137A3B66D349AF14E8EED9895D7124E10C951AD649B820FC9F20B397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ucrtbase.dll
Size 960KB
SHA256 1f69cb6dd54a1e5d212810548a63a7e983497d9888ac20f0239577eebe7e1112
MD5 18d487d06bca92dcdf22da7893200ea4
SHA1 125faefe95287394e5ec4a3309f60b35316a1592
SHA512 781e33d30affd56038464c86dbaa020426753643116e79bf4ee3382e82929b1bd2e940a5a87da96182e01a7da5d3aee666e3ccefdbefde4b31cd4629beff2435
SSDEEP 24576:GVJxoWU+FLtHnCdpIo/zF0/J4kBajipq5rlNQTzDnrIAb2xQmBlC7IY1+W+Cfz4:GVJaeCdpIqzF0/J4kerBlNuPnSxTw7I5
TLSH
T1902501C384ACB0D1EF2733BE5F2A61D5B850D5295DA9660873039F48A06C6B0B16FD7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCR110.DLL

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\MSVCR110.DLL
Size 946KB
SHA256 ccebc4c9e9e8ce64eb327b8e35a5e9436628b4adaf70f672e79ed0cf2952f0f5
MD5 01814cd43960fc3a3cc307ce19873d10
SHA1 93a83ed92c2264ed5f0eb7f2a4913b1a7df7c159
SHA512 376d7cafc58d7274e5bc3b518f009af56c7e668f766bf1d50ea5a67c988d913389a11c3c8b4077f9a95941d9749a0a51517c28ad79674bf50b3e1a3fd130c8c6
SSDEEP 12288:+qTAB4rexCkvZ027LtaqScIGhSaUJMAY4TLmzS7VtMeliEKENscIssSekW0rDa4Z:+h9ddLSh84vY4TwS9liE5NNf/JB4s
TLSH
T1332500D7C9F0FA86713AA8EB153F618EAEC4D00C7871C6185101E54DB866B84F5ABBC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll
Size 18KB
SHA256 e3a4f4b6ef737fc415e7976449572fd51ba68c0c6eedb50d4bcfbfbe08e8a9b9
MD5 d0ab7bd14d42fd312a81f13c3707eb8e
SHA1 ada9314fa88841d79db83d9ec2d8296825826a3d
SHA512 78a50c14064066c8f47fa40ae54e57769e48d8078c64ee60b7f63488b673011c5755c60f4714268e18b8fb7a1dd736117d0d20e67dfb05c9a48c8a11ead3e0e5
SSDEEP 384:RA3PzZ1BHiA0pWeXWrDiKoP54Z+CVQ5uVzNsg5svvkwG6ZfLv5vSuKV5vZ:IPzT9ynP7ISXka5vSuC5h
TLSH
T15A829D83D6F5E543726B59CB427F789CFDD1D26A3412EA2A5004C25DB238F91F0923E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll
Size 18KB
SHA256 9ef1f8b6581d294d0618f1df9fe4679c79f6f30abd1810f24894e7eb9c5369a9
MD5 8e0364be994761cea2354ebcb84dec5d
SHA1 ec16d0ebc3229cf4a38e9d29547d29551dc5576b
SHA512 75250e9767c95cb5fc6b4e103c999ca92e2dcc97698047e05a7753b1b3501a3e6ae5ed261eb343cb4ec0104f983c786e80e569d857c3212910f982e2ab10bea6
SSDEEP 384:yGFtPzVBHiA0pWeXWrDiKoP54Z+CsQxzjVzNsgbpoyg5qGlj6529:yGjPzV9ynPuzFdoy49689
TLSH
T1D682C092C5F1D503522A96A7567F2CFC7D91D2683000F92FA804C26DBA79B90F0A33E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll.meow

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll.meow
Size 20KB
SHA256 1f910d9e4796c636993f9e0415d67693a44a2cc3adf3f837b3bd63e9cec25cc8
MD5 a955124e54b3c6d03afe937a7cca7602
SHA1 1e5b8f779c4c3ea70c22570933fc748b601717f6
SHA512 bf198b474a7ab8bb116611113154313971a8eccb29f59df579eda1e64c0ef4fb859c7063fdbb4361f80f92b2edc5359e6decb66333b3a60f75be9f7b8f200194
SSDEEP 384:IYUPz8MIPiA0pWeXWrDiKoP54Z+CsQN2ZX3VzNsgtyg5qGljP/8:IRPz8/3ynPEyXpVy49H8
TLSH
T1A292CF93C6E1D103423653DA6A7F1AACB8C0E5692041ED1F6444C2BDFA79390D0F63F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll
Size 18KB
SHA256 9d010dad4b884e483f2e40daed2c0749700459873cbc56e824ca897e7b80efc2
MD5 4e38a6547ceb59c65d688273648d324a
SHA1 c55e03c497f1439c14f790d5a5dba7a5d865cde5
SHA512 7f89d7eff0c2b8963fa5508a21b4709b6f3f00f9596bb08f1eec142cf84c0fe05c94dc2525ad15ae743e462b1f369452a8dfe0ac47e22861e429dccb4d0b7019
SSDEEP 384:XXdPzbCeDCUiA0pWeXWrDiKoP54Z+CsQyfSmmnVzNsgDygBYpn7tIwzY:dPzbCerynPBY57ycCnhxk
TLSH
T184829EA7C9F2F50B602A96D7592F25D87CD2F1583406E90E5804C26DF63A780E4F73EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll.meow

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll.meow
Size 18KB
SHA256 39958d6b1fffde6cdf042b23353bbea9076a168c5e94c5a872ec7aaec06451d6
MD5 ff0e56030d950008c9c6c4ec3690bdc1
SHA1 02eff64f7d912ee3f21607e03b726aaf5d7d78dc
SHA512 77411ce91bd792df39500457e8852a10edb55b0691a600c12dfd4ec55e6c7c95728f9ea5848f93b79d27fbeedc71e8035c93bf2f2b7951f90e6d7e7c3d0fc835
SSDEEP 384:hzlvpe2PzLMIPiA0pWeXWrDiKoP54Z+CsQftxsVzNsg4yglNIWLGk:BlhTPzL/3ynP6xKwyQNbb
TLSH
T10882AE07CAE0E1176A7922AB592F29D47DC1E6493005FA1F6045C37CBB79790E4B33EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll
Size 18KB
SHA256 a2087a04aa5539df073d796a00ea9744540f4360fbdc1347f51f5688f3f22f5b
MD5 dbfaf8db5aac3fe24f79f4620e81d9db
SHA1 2e3214284f6a9bd3ed4b24ce005529c1a24bd0e6
SHA512 d5a57fb9f005de42c8999467a506a2baad259b9821913a918ca151443ad26665f0237bffb5463f74540ad84764e8782ca19b31960f8b5b07f0388c2efde20b7e
SSDEEP 384:sNrkf/hqWgPz1eDCUiA0pWeXWrDiKoP54Z+CsQApvVzNsgLBtygxBfLUtiy79u:sNrogPz1erynPLpRryUNLyhu
TLSH
T13582CF57C5B2D60343226ACB116F59A43DC2F7616808F91E5804C36CB73A790E5BB3EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-xstate-l2-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll
Size 11KB
SHA256 f995de14c5ac4a0d4ad3882f0bfbcba5bdf1e150d6a39961c8971f780db9fd1a
MD5 652fa7e83738865c9ce845cf411b5564
SHA1 ea3988d702f9f68ef491e9f71d219cf2ea8e5500
SHA512 8b8a0ec76441463faae15b547c20fe4982a1a4eb81a3f040771588aa52d27edde5103a1f09e2c2d682b9705b94f1ec9e725d3a1e27e1ada1b70fb28bf2fdb459
SSDEEP 192:2c3yNH8GhBDzEpKFU1Cb4ASPC12rTvkwG6ZfLh50ateQUAEVxloBSEp:JAcGPzEIb4AUvkwG6ZfLh5veSEuUEp
TLSH
T1A63217E7E1F0E082617B48EB69BF30CDBC85D56A30328929A444C849F535BD1E59B3E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll
Size 19KB
SHA256 9bd9ca9d99fa90513df2ac2fb5a040cff3ef8a97c8de09f85056b941c867acd0
MD5 17b6e966aa5747195fc4f4dda5fc9f6a
SHA1 83b4a14ab9642f490d1f41e03216ec86e9f8af94
SHA512 ae199d1abe179f5410d7859638c525641bb25127f4bb31af788d6d8ea9d322de6009deac0b168c60e356cbf94a5bc1264573ec10aef0b3b5862fa0074030aeff
SSDEEP 384:nDP4Pz1eDCUiA0pWeXWrDiKoP54Z+CsQBhNjUCTyVzNsgs4ZtygBYpn7tIwMX3:DAPz1erynPCj38U4ZtycCnhxMn
TLSH
T18192AEE7D5B1F10BA12A96C7513F25E87CC1E2686446EA5A5808C23CF735BD0E0A73E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll
Size 22KB
SHA256 6b5e3b06e28b8357bcdce71efb5a1f6749baab55996b7f1b0d7f1d4fe2035271
MD5 6e3ad202c8ee6e887dab7779b55d4d40
SHA1 bedca4a6e763c50522352131b6036161ed9bc0ee
SHA512 2e48796110381ae972fcaaea4b3cb213307a6e5998cafdde01bfdcf68d30740980235a781af53e949cd7b965b29e7fa9724a38cc16144fa361fa51f19960c64a
SSDEEP 384:mi/OZPoFh7FJ2arzmeDCUiA0pWeXWrDiKoP54Z+CsQRWqVzNsgHyglNIWLG31E:mi/OZPoFBFJ2arzmerynPKWkfyQNbS1E
TLSH
T10EA2AD47DAB2E503A1368697557F46C8BDC1E5593804E82AA048C36CF37ABD0F0A32E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll
Size 18KB
SHA256 cf7e4197dfbb39292c05d3e932a2380a7a56d9035773c2975d255806257833a9
MD5 1e642d081a46d6efec67c14476b3e7ca
SHA1 aeb5711923d754c1a98c8abff587ed805a60eab8
SHA512 8b925582e850ac9625876641ac2486d7391f83e02bb1c583b80fbf7f9845754709ad1e3d5c8850806aa0b7e38662f4cda89bfeeeafa09789196eb06507f61303
SSDEEP 384:uIoPzPzTMIPiA0pWeXWrDiKoP54Z+CsQVtvVzNsgcZyglNIWLGR8:uIo7PzT/3ynPOtRkZyQNbM8
TLSH
T10B829D93C6F1E107263A66DB557F25D8BD91EA493001E90E5046C2ACF675B90D0F33E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
Size 20KB
SHA256 ba74dff152a26dd728f138714b6d1b795ccd0484c1acd4c9ba958980f9c85269
MD5 8a86b85ca1593e43991d9cf742aa9448
SHA1 13779a8dadd81b334dbd1a0f0f61f75cfcdbe079
SHA512 342528b846a29964f288db001ddbe48ecf8857cef16327a7080ba3e0547571d576892c0d8b4009830f34a45836e865428a2afdee9d458a33b57eaad78fc994c5
SSDEEP 384:iFFLCPzcBHiA0pWeXWrDiKoP54Z+CsQavHQoVzNsgccyglNIWLGUD:iFFLCPzc9ynPfvwmkcyQNb5
TLSH
T1A392BF27DAA4D103253656DB4B1F55EC7EC6EA142000FD1E6445C26CBA76790E0E63EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll
Size 19KB
SHA256 c0206b97002799f0aa555a8c144747628aa5661fd59c88ea82ba2cb2f3569362
MD5 04b75e2b5de24b77c36825bed79988b3
SHA1 6c1db7ca81d43c69ea3f454c896e82d60d5f39eb
SHA512 c9db0b3ba954e2aa80f51619004b75825880feb2e5c06a1f9ca73b4f478b2596e43dc471c833903b82a86074de05eb9255c95851c25f055a69dd50c96e47b9f4
SSDEEP 384:R1AKqMPzHMIPiA0pWeXWrDiKoP54Z+CsQ/PCVVzNsg3KeygBYpn7tIwN/5:RrrPzH/3ynPECT9ycCnhxNB
TLSH
T1B7927CA3C9F1F107A23B5AD7593F69ECBCD1E5583412D95E8408C22DF264780E0A33E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll
Size 18KB
SHA256 d9983bd545ef35b7e08e07c2a0c492ee2c31f67855b1d19a5393be17ceff0179
MD5 718e4330d0d1c2acfb6b82a53be1b2c6
SHA1 a8ace0ab255f667bdc9c28ee96165072b173a45d
SHA512 f3bc6974beda8d36ffdca613f41a47c93a31c3c8cd53b60aa59d451e65387f9684abaef0cff59aaba7f74ff376c66d44ccb4b075644706c27ad1e7e8b2e040d3
SSDEEP 384:8QXMthPz+MIPiA0pWeXWrDiKoP54Z+CsQXwBzVzNsgXKygafJ/x1ieI:8AMthPz+/3ynPUwDyyD13U
TLSH
T1CD82BE83C6F2E216623A528B283F5AE86DC1F6052441FD4F9404C6ACB729790F4B22E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll
Size 28KB
SHA256 31714b57e1d98276a0d3ce5131df34d730d04c8312a25b63e219d63a687cd9d8
MD5 0a7ca74e862924396055e8df410caaec
SHA1 8cbe63137e0d36928b23a651760b3b4b8bf2e014
SHA512 006e897bd10926f8d425883134632fc1d040c722413d16e94dcbdda6237c3be00d760c18a53a4e25e26bb522a26967d23f3bbf8d2487b52d05c769e90a42de9d
SSDEEP 384:p3zvrIN6Th/P6jwJz8cTyQ3hpyhRMGAz+MIPiA0pWeXWrDiKoP54Z+CsQk48VzNm:Hhqjm8ceEWhNAz+/3ynPH46VycCnhxZ
TLSH
T189D2C0A7C5E5E50B653E679B482F76AD7CC1FE583406D96B0004C22CF6267E0F0A23E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
Size 26KB
SHA256 e6b694757cda86d5d262f2f94cb84641e7acf1c9e7e6bdfb051f1fac71c15646
MD5 c44c8ed64bf8893a7c9de7a8f029f54c
SHA1 cf2e3cf2392166051c464362e67f3c87db918ff4
SHA512 cffbc0fa1764fdc9d491b5ef0d7b51a31f721994dcc63868adeacb44e6c28644d59c119dd861960af0981fd1ee9d64435327ea2662876a8d2e4d98a409f9385b
SSDEEP 384:KCI/vUIlW6W/Bt19zAzEMIPiA0pWeXWrDiKoP54Z+CsQxlwQ0VzNsg1pygafJ/x6:K1/vUIlWNBt1BAzE/3ynPAwQitpyD13c
TLSH
T1D4C2BF83D6F1E207A43A57EB593F6ADCACD1F16D2412ED1A4405C619B278BE0F0232E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-private-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll
Size 71KB
SHA256 d5c2c818892181e19dc07b98c7f41a512fe1137131c2c72da3d8de9074e3897a
MD5 87181137db27ad31d1c6e7beb7c51d6f
SHA1 d11aa74759ceb04d922a6846c6e7242c8b62bc25
SHA512 48d428b92530af4393babd5f52f710390ce5610f4b5c8f708da3a532ca309961291eab4b1ed4033ea4c11452f3cd62036d9af7615c8ec35f823cc1a23240826c
SSDEEP 1536:6uqR/zFxLQGxX/fS3Co6xvi/81E2U42wrbTTz2XGtkzv3yP0x3R:r8xLQGxX/fUZ2vzpkzh3R
TLSH
T170730283C6E0F11B66776587293D66ED2CB0CF491401AD9D8059C3ACBE78FB0F267295
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll
Size 19KB
SHA256 d9a0ce7400bcfcbc1ce3707446983fe3b77711e5444e0836f97b4c117a341910
MD5 68e18227bd434ca708c2a51748a59916
SHA1 7ef0bdbbc3847caee056baee1474d08e553ee705
SHA512 4e8529a993f96eb3e1a0153d4195ebd7d8a7da2f5c71cb7671e2babeef1e5e64f91caf8d2038031f142324b932de6ec30c288b4b0d0929246e2631e5f387e395
SSDEEP 384:P0JO972SpPzTMIPiA0pWeXWrDiKoP54Z+CsQ7maLVzNsguNtygxBfLUtiyMC8:P0APzT/3ynPNa9eyUNLyMr
TLSH
T1EC92AD53C2F1F103623A52CB297F20CC7ED5E6553005E91A4808C62CF23ABA0E1673EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll
Size 22KB
SHA256 76c131b7f7e7bfa96ab45b53842965104b4bda84675f4bf650bc2801fe2064c4
MD5 7960aa7041b6ed41e15789897df524b7
SHA1 af55a88ad980315a33a12fe36c0070234700ca04
SHA512 e347d336cccb1811e647e6260a192c284cc7b9db9e7b6f352a14afc0de6e1ed5b4a4994062ec714c2eb56d92bf5c4b17708189bb7ada9e5fe5e090d165c81315
SSDEEP 384:rarySfB42n4XVprzcBHiA0pWeXWrDiKoP54Z+CsQ9d8VzNsgQQvgyglNIWLGoyJ:rwYXVprzc9ynPGd6ngyQNbaJ
TLSH
T15BA2D056CAF4E10707796A8BD65F68A47D80E8441505EE1E2404C76CBBBDBC0E0F22FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll
Size 24KB
SHA256 510c508be161ee167e3852b8aef125a87a237b67d43b3e1ca92f5466e3b1243a
MD5 e58574e56e47769faaa25e225e7d2af3
SHA1 88fb90f83641cf419f65603fcab9e95d4a627f3b
SHA512 0de3db0c172c89b2b8d722007a1bb7269b861425661381b61efb097743cc3f4ee24a859c94a5ccda29af4a1140fdc93e20b2fcc0766f5789083f200a9c04136e
SSDEEP 768:x2HksnDoBEGkNUvrz//3ynP+mGCyUNLyBC:Q/Dokqz33yPu4P
TLSH
T140B2CF63C9F1F04A52766A87056F16D4BDD6F1A47844EAAF9400C33DF636780D0EB2AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll
Size 24KB
SHA256 f3a9708a7c46d9a0779c2e9e0ad82524231dd749dda5f1ca01b7d4a8825d5077
MD5 1670458e39cb3e18d025c24f9f1fd4ad
SHA1 b590a7acc13c5776499efa6ccff85fd7fafdad6d
SHA512 0375add607f907284774991ba46a02667196fd849033539c1a14bde44c7a911e3735faf566485f87947149c714d1320cedbebac59d5a83ebcbb6a8a5a6a64e42
SSDEEP 384:RGKGeUyyQnICToS+FZUyrzJ2MIPiA0pWeXWrDiKoP54Z+CsQ3x5bVzNsgsyglNIJ:RAeByQOFKyrzJ2/3ynPG5tkyQNb+
TLSH
T1DAB2C053CAE4B2062A3A379B9AAF0A98BDD5F0543505ED1FA405C678F335B60F0932D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll
Size 20KB
SHA256 502621bc685c215a7649f515d5ada9751c6bdfb61b327338863140ef09ea86f1
MD5 faf8387f3b5d9953d90ef155b2d93918
SHA1 97ae56f28ff4e1c55cc5c9c0608b8e8f7e549246
SHA512 559033cb4a9971254a5095591ba73e53ba1c297c4e67c7cc24acae185f786688917d101d028d9e457312f35823228d63d79b9a2343fd43534bbaf1a6ea4256f7
SSDEEP 384:pxvuvCuTtPDofnOqPzBMIPiA0pWeXWrDiKoP54Z+CsQajqpwWVzNsgotygxBfLUu:p2CuWfhPzB/3ynP5m+AIyUNLyU
TLSH
T114929E97CAF6F103623A169B552F64C87EC1E5512805E95B9804C23CF2B6790F4A33B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll
Size 18KB
SHA256 0dd10f240a2c9e0793878b5b68d3fb139cc9bee029b6460fa4b43e5c9a7501f9
MD5 81a63332988aef9c3563d9a50a73305d
SHA1 b67414b90741caf1664f4fa6c7217c8a5f55113f
SHA512 db15c40c39005c72a46e777e6a4826077117a61c12b10f6103afd531c1da026f0dddb02a54dbb0a93aa6eff1f4023e2ed08f22243adfd42fcc8f55ccb2b4a7e3
SSDEEP 384:JVy/4qDPzdMIPiA0pWeXWrDiKoP54Z+CsQxUfVzNsgo6yglNIWLGy:JV+4qDPzd/3ynPmUhg6yQNbB
TLSH
T1F882BF53CFB0E213623A57EB296F29A9BDD1F5592401E90F6445C32CB335790E0B72E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll
Size 244KB
SHA256 b38e72d8ff9fcc2ab184b380dcdb314f54da3b67e36a7b55e5c2ef465cd56925
MD5 59d40061b26d100d7605022614996d50
SHA1 4458334eeb6d66f5a70d11e5819493c2a00ac647
SHA512 f73d542298bb30c4f5142a7031c80bd67f6c7c78b860bf612f1c8167b29256a6be3aa26f9881be54944a35de0e6b5390e5eb53bea848fef2b1704e2818a924a7
SSDEEP 6144:d/cGZCMyYLRgrzt6vpHueTnDF5u79txROWVId77FMxn:fCLcRcchH/CtX1G7ZMh
TLSH
T10F3401F6C8F5B089A86A60E7263F66C5BDC4816C3012D64E0168F59DB0B1FC9F416BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mfc140u.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll
Size 4.8MB
SHA256 2d79addc342f1e51f375fd2d1363d78944977abb0293dc1758705f73c113e1d1
MD5 7923fcfc559eabef3353f21a92cb3b36
SHA1 f511c95d915ee561351165cc60c6e4bbd82c853b
SHA512 47da98c9aaa3aacf90566a3051c0906a019910a0bb2842e904025db398b70e5e2982def0b32b39b3368ffdb7551f8aede9292e75d868c6dd6d115eba376336bf
SSDEEP 98304:aXTOvgQkWjNaOYeKelTbzuVhUZ/eIsWvUqrXnp+qRQlsK4fLdHzEBvitd9BB:4SLhjieN3OUFfvUqrXnpp2eK4TuaJ3
TLSH
T1893612DAC5FAF086653F62C716BA6088BD89905C3238E52D4195C22DF329FD1F647AC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp120.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll
Size 444KB
SHA256 edffa7ec6a14ecbd18e36003a4227a3e7320be8b2321a1486c609205d44e765a
MD5 39027135ed49d6c8dffac199a4d63d2f
SHA1 d5633284dad545d387cb23b5ce5b9ddad5e97ed1
SHA512 e2b33d9883b1b14dd66d35cd079736941f05f56369f7558633abadc6170b5a1bc455c11dfdd75af04c29db9af6fbba3dfbc35c1c98e266a48f52e52c7745e8bc
SSDEEP 6144:2cDsFg7ztP5SxULZ14AkR/Hb6DpN94umGAsC+98jwfCAeRwuXr1nNsGuAWUF55ZB:2PgvtPsc+NR2/OumGK3aWb1r5Zwa
TLSH
T1F8A41287D0A8F4C1B855F206C2EDD855FFEEE88538A4921DC519812DF1CDBC9332B65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll
Size 439KB
SHA256 c821150caf618327355c91a6a1d4ff9e945a3d1288dcf9f78e2698e630ed7230
MD5 333f258fb8af469ee1f1294a76f0b029
SHA1 883c35d8bd2aae3b72b15469724f39e9a0cb7d2d
SHA512 72b40931bbc7283a8f5f65966f4b0c066b9897cbacb98676710513053555b536711107d1f479ad747d6e9d815b90d90f5c55f3015d28c6994349d8f878d46902
SSDEEP 12288:0glpsrYZsxYcjiIgnmhr+4dH9LlgqBU0OUDOQ1fCYYS4f:fQ6CTKO+MXakSVYqf
TLSH
T160A412C1C9AD74C271555584D77C78C9BDF9E85C26A8E0B56E0E009EF103B873A2AE3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll
Size 879KB
SHA256 ad254d0d38d8393a6ca2686f305a5688b87fe2ce4b18cfb256ef7d74a4b3a41f
MD5 b7baf8cf1af69cb8479593bf792b58d4
SHA1 7d9f67d2f3d3af1f941350bb9adaa8efa95114c9
SHA512 e2e2ceda1e84ecd9af0a8d2f835a27e2f61c0d11595240e26ef79950b640611739be0a631033a16c2587ff4ee2f2ae00f0bac08aebd63c2817aadb5717a96724
SSDEEP 12288:m6JKsXHU6N0l6dm+cavmyX9f+bku3G8qCfYD4ODgMN4cHGVnMs8JMd+ukoN:1LX06aavmyX9fYkWNAD4ODBGMBMdxPN
TLSH
T1A21512D7C899B482FE4732BE0B5E31C8BF86D4196D2A63481613D744540C769F32BEBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll
Size 263KB
SHA256 33d22daad6931da5be0761dba38f3cf008078a5be7d4be627b899d403abd2829
MD5 b2341117500824f0f4e007e8326a6a3c
SHA1 fe622e73fc77c64a718fe5efcdeac91b4a955708
SHA512 91915583342b2ca3701713536db327c0f12ca3813c02d5f06adbfa3ecc09616c8bfbe7be892b1a8f589c277014cae33545ad2fb8decd84004e3551236ff98a8e
SSDEEP 6144:LkEDsT6R5vkuLPuvjSig5SgYDF1BGm+Cd7WF97kb:g0R5vNLPuvjSig5IbdqF9Yb
TLSH
T18E44128094BED745717FA7E781EF214CBF89C01D292198048B5A9C48A87AFC6D65F32F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll
Size 78KB
SHA256 06b8cf477c4adc624edd998c48d0b9ef35b58f58c82021db8dd4a324e18f981c
MD5 a5a121f8d3aae7c38d5c7b0d8a80b7eb
SHA1 ce166e360c47d72bc3bce817f686c16c12aa0297
SHA512 fe487aa08fbb7ed647058eb0aa818f999fd3927445afff03319a4c116ec60bf7b90e89afb4f72889b943f6db8944943ed7f6097cc222f885a85b792cd2e1b15e
SSDEEP 1536:zgdb6NGHoxcABXGi8ISnTvjXkNc5Nc3lkTkLdgIsd2PfMcPSMzkt8LC:zgdbYGHo27FISTLk65N4lCG3McPSMfC
TLSH
T11083F1C5C1B5F003643B809B7A3F25DCFECAA0582575A81C498ED985B8A3B51F9337E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\Microsoft Office\root\vfs\System\msvcp140.dll
Size 613KB
SHA256 6a2ca9ad1898a12cf6f726c8d09a590feae54cee2704ad68327a7a3f0a1e483e
MD5 a92d6a5943f82e665bc7f7a8e3669e13
SHA1 19c31e9e95745a3e1ab01f61c781297ec7b38716
SHA512 2b77ad599fee91f1a73bf9b3f21af3b610ecf4ec24de64c8df95c2ca1b22836a72e9154edb3ad399d2750cd25c5be3f40fad84d89e06b05d2bae966a1f8a2c6f
SSDEEP 12288:xSLniyvmjBR4RZyd0+YGPresmFbDvVwJsEsHW+BsV6oxmzjRAfc:gjjO9R4byMGPresmFPvVNEsvBs8Ea
TLSH
T13CD41297F0E52D547426D149E76F62D6FEDCE50C24A4E0B0A706C88CD09AF5BAB1F382
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll
Size 83KB
SHA256 9df88a6c28f05912de5236b3deecee6a148a750359b542c366642e9cf186774b
MD5 3b9ce3c8f5205b30a0f078fe30d786f5
SHA1 95dd1f97e897db423f23ef350cd7cf826449f255
SHA512 ff2b5097baa96448c8174636131d802a0cdaf216b4a5e62dfd8d63651342d13946d49df61c5cd151100a66f6a464f468b9cb54f61ea3a983645606bf84a87b23
SSDEEP 1536:DAK+BLUiZq0n/HfBjDpA1M4kRv067aSVkbWVaH:wUuq6bZd0EEH
TLSH
T14483DEC3D1F5F482B53F90C7117B329ABC90A54A78B0C8681816C928FA65FE5F846BC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

misc.exe

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
Size 1014KB
SHA256 7f54c6fda5f64281888c6d2e4ff15ed79dfcc1211764fc28c7f1f40ba6797663
MD5 185a677da65d51130de451423e6c0e35
SHA1 e7a0f2fbbb3c828fdb0b0defaa52562514ea06bc
SHA512 5d7771c718f14c40c0f570051b99f7c3adbb8d00ad6d4e87154ed0344aafe4c5a1510b808d9175f5365175dc042c0028824792a857071f1c667b2a2e80ee6a5d
SSDEEP 6144:Oo8qg8oNGGGBeCI6AM/FG+NaTQwJNXOkcra3RFtttttttttttttttttttttttttw:Oo8qg8sJ+NaTQwJJA53LddxggRp1Q6
TLSH
T1FC25B7E2C5EBE502343FC0A2643E61CEECC491B92265D60E9289F45DE635BC4F42B7D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vc_runtimeAdditional_x64.msi

Path C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi
Size 140KB
SHA256 57cc6b5e4a452cd5cbc32fc52648334d2002f77831bcbf76f2b244ac4cc4c7b3
MD5 d21cfb7886e960bb7375201cea51f818
SHA1 f774325ba4e2c470591befabf374c4a4dd9b06c6
SHA512 98cf3a2785059743c0bb4a6ca0286c137c99471a1643dbfbad0884c1a5d4b9fa215e757018a568862f5d152a24763d430a1154dcfc91cc731bf6603ba62255f7
SSDEEP 3072:hfLgfqIcQ2V/87qUiFfSGSrNmOoQR8ft5Q:pCqvp/FUiFarNRTCLQ
TLSH
T113E361D7C9E2BA12703F50C3543F20D9BDC9800C32A5C55D8286E95DE6B8F88F56A6E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnet-runtime-7.0.16-win-x64.msi

Path C:\ProgramData\Package Cache\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}v56.64.8781\dotnet-runtime-7.0.16-win-x64.msi
Size 26.0MB
SHA256 af96602ab2ecc24d727793c4b19a583f0cd76dbb952005abc33f2d6d8f4b5763
MD5 4b97f9c9815383acedc02ac34aa20b41
SHA1 046bdade6fad4d743a5fec54b39489db1665aace
SHA512 6ed2dbb937d71766bb73c1b971af6cac3d9146310db1f5a3d05237cd864ba55ef9e9662137c572b464a9fcc4b497af022a0954cfacab374b0c45bb449cbed3c6
SSDEEP 393216:XkUeOqi6KvsBeawTBPhYXn2B9AK0oQsbKChNi/tbNoSOsXBWgLw2FunuMbsz:VeOb6KvscaY5hHB9yKbKvtbcIWgLR3/
TLSH
T12D573382D2ACBB467D6B64834D6D30EEAE84C61D6434E118C11CC5DCD67ABC8D973BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windowsdesktop-runtime-6.0.27-win-x64.msi

Path C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi
Size 28.5MB
SHA256 7cfe04c8d1724db7965e8a9a9229aaddcb5073f7963aedc45c1ffcc95cbebd43
MD5 89dd50a83d7f814f1f5c716d449e1d79
SHA1 5b9e0e65c879cbb03f0f41d947d674603c7e239e
SHA512 fb4f4a653bfc97e9471fac041f3f9e14f5163ed75a15b87629c7e54c47c2804e721dba4da5b0d7bbfdabe1c0ff9632803684b47acc7729e3df7e756df05c94c7
SSDEEP 786432:2qF+tGNr3XnV2sG4zhFyGHgYgzV6MYJvVJRIItH:rEurHV9G4zhFyGzebYJvVJRIIZ
TLSH
T1E7673352D6ADBB037D6F68874C6E30E8AE40850DA574E168C00DC9DDA52BBC8E47B773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\_locales\en\messages.json
Size 851B
SHA256 38f65bc7d39b1545e8de5d723cf9bc17f11b1f1656fc475ab5a288bf15534dba
MD5 4a071794260304d11ebef2dae88e398f
SHA1 a192dda125c715ca61f5b316e851c93d76b0f6e8
SHA512 5e83097c86c83111cce89d3a3fcfebe9417d05d26f70e24a93ac2d937e66ee9ce76672511a2c78d6fff1b0321724e15483d2ddf5191278ced71e6b3f7274f565
TLSH
T1A901E6EB91782096C212AC60AF565CECB85DE60AE00B6084748C3CC983500B237C91A6
MD5 SHA1 SHA512 TLSH

Submit Download

onenote.exe.db

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db
Size 24KB
SHA256 623807667b3204b2ded59f3f92a024a6090cdf1ae48777fc2bab5e2cddaed51d
MD5 f91e066950d16543ee12993bf9d85ba4
SHA1 7527a2f33c7a865c14590bcc17138555f3fe42a1
SHA512 56db9ccaaf14e49486447bc5da9188bd823f3cf6ab37a868308732891cd4b16f5da2977be57b78c3d4f85836857b0f243b93978ca8116ea4254a76d34943359c
SSDEEP 24:kdjYC+KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKL:eYj+rvKGhm2oWaax
TLSH
T1A1B211C2E4F9F14A313E88C34A3FA4C9BDC28208B429C22C482AC05CF061B81E0236DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads