Analysis

  • max time kernel
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/06/2026, 19:01

General

  • Target
    meow.exe
  • Size 328KB
  • Sample260608-xplcese13r
  • SHA256 113ffb25b031a75d1397fbe6f3cf4496cc15db8c0150513c07b9a5ea090fb4c9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Meow

    A ransomware that wipes unsecured databases first seen in Mid 2020.

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs
  • Renames multiple (7593) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Deletes backup catalog 3 TTPs 1 IoCs

    Uses wbadmin.exe to inhibit system recovery.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops desktop.ini file(s) 44 IoCs
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Interacts with shadow copies 3 TTPs 1 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies Control Panel 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 49 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\meow.exe
    "C:\Users\Admin\AppData\Local\Temp\meow.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • Enumerates system info in registry
    • Modifies Control Panel
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:808
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c vssadmin delete shadows /all /quiet >nul 2>&1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3024
      • C:\Windows\system32\vssadmin.exe
        vssadmin delete shadows /all /quiet
        3⤵
        • Interacts with shadow copies
        PID:3504
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c wmic shadowcopy delete >nul 2>&1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2932
      • C:\Windows\System32\Wbem\WMIC.exe
        wmic shadowcopy delete
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1124
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled No >nul 2>&1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4388
      • C:\Windows\system32\bcdedit.exe
        bcdedit /set {default} recoveryenabled No
        3⤵
        • Modifies boot configuration data using bcdedit
        PID:4264
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures >nul 2>&1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3632
      • C:\Windows\system32\bcdedit.exe
        bcdedit /set {default} bootstatuspolicy ignoreallfailures
        3⤵
        • Modifies boot configuration data using bcdedit
        PID:2148
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet >nul 2>&1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:5064
      • C:\Windows\system32\wbadmin.exe
        wbadmin delete catalog -quiet
        3⤵
        • Deletes backup catalog
        PID:936
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:556
  • C:\Windows\system32\wbengine.exe
    "C:\Windows\system32\wbengine.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2544
  • C:\Windows\System32\vdsldr.exe
    C:\Windows\System32\vdsldr.exe -Embedding
    1⤵
      PID:5072
    • C:\Windows\System32\vds.exe
      C:\Windows\System32\vds.exe
      1⤵
      • Checks SCSI registry key(s)
      PID:992

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          aic_file_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
          • Size 50KB
          • SHA256 ffd25688d35cbcb4ae7a7a363d545379282f9d32749ba67ca0fda3ee79770b7e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          selection-actions.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
          • Size 1KB
          • SHA256 1da8f20f85839c18fea0dfd28431f33a57e327ed5ae22f0f99c62792b21b1651
          • MD5 SHA1 SHA512 TLSH

          selection-actions2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
          • Size 3KB
          • SHA256 2303bee80c6e99f4cc2bec21bd91e22071d8b64f6093c2d7d495a44dcb0d6fc4
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
          • Size 3KB
          • SHA256 60474cf2bd32c50f7e1127d6f5f405bab2d4d33046409325727d61400af47335
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
          • Size 28KB
          • SHA256 f313be318935e5d562a7bd9c718274bff7d4fe42660104317c48fc0f853535cf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
          • Size 7KB
          • SHA256 2e5bdf16da6446f5e20a51108a4a59c2f5db6c111dc336a64f5e0abaabb401e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
          • Size 886B
          • SHA256 3097e072a74d85bddab79e580922375caee014ac6f4e4c5164eadb6d6d984b38
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
          • Size 4KB
          • SHA256 da5f8c2e33d4748f259f7cd559ad6d347974bdc5fa96cd73c4040d2d99140ee9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 a98e6b217c539b6ac7dbe86f136ba697c15bebe9eb77e743180c1a68a68b22dc
          • MD5 SHA1 SHA512 TLSH

          convertpdf-rna-selector.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
          • Size 175KB
          • SHA256 29a503374e36a442cb72c93756d6a81e8461a79a276f5491a7c05b84b3694c2e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          convertpdf-rna-tool-view.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
          • Size 376KB
          • SHA256 fbb0903e96c2adb72ccdda01c339849a6d5337f8f10e8e3da6779c9e016fdbb2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
          • Size 2KB
          • SHA256 ef72fbe1b6f34df8dc8aaa7099a4301f2d749ce961fdb0a45a2cf891206a8b0e
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 f2aa143780079885c620b787caf5fc15916de767074510fcfb65231a8003c1a1
          • MD5 SHA1 SHA512 TLSH

          example_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
          • Size 683B
          • SHA256 6244724d72d7b2882ddb50368768ecc4992e71085bae0fc0a97be0297347a496
          • MD5 SHA1 SHA512 TLSH

          example_icons2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
          • Size 1KB
          • SHA256 d6907f0ec640d83d4f1f33ad9a24bbcadf9a1131dd930deb160ea11451ee921f
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
          • Size 445B
          • SHA256 cda5eceaffe67fb0c4377c1d98f4bc79719bc6a56f50f3778d1568bd9ae2cfe0
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
          • Size 611B
          • SHA256 23a1161428f47c779da060cb9a65279496cb89ec6978023a4c3237dfdd6b7bc5
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
          • Size 388B
          • SHA256 fb06cbaef0e59c43b19497c421f1458a0bb085118e3ee676077c40b053b0fb3d
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
          • Size 552B
          • SHA256 777e56c794d487312235917a59a1c84e00d3ac465cdbdebb892af672e43931c8
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
          • Size 388B
          • SHA256 3d35c27c8aaefc9cab525cc1cc10a8ce4adcd01974055e06cb29967a319c5a6a
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
          • Size 552B
          • SHA256 f7f49dcfae5df8708667a8f272adff76f9ed5a8911b76395c7c2f59db790c8a9
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
          • Size 388B
          • SHA256 2173fd702c58ecf43c9b58e90669ecc56e1ba9ddbf73354cd71abe0d31151bb9
          • MD5 SHA1 SHA512 TLSH

          rhp_world_icon_hover_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
          • Size 552B
          • SHA256 1a41d87a788cd0fe02b81fd20bf99a27a76905de65fb95131461479b708d53f6
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
          • Size 1KB
          • SHA256 d431d0de7bc61482905ab2f2b27db8ed7212b15e5b16efe29ccdb15790f531da
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 62370ef2d0629524125fb1db4ee196faff2794910180d2a17cf51504f9c7dbc0
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
          • Size 8KB
          • SHA256 ba6a9e684d7a668bb30d0edb141e5fdd5bd2ebca844bf2ee0e770ad636335fb1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
          • Size 1KB
          • SHA256 aa7165173c549002b209bc612ac16322b424bf17cc42ffa1d1c0dbf4c4df4d92
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
          • Size 1KB
          • SHA256 7eb834d4241f9612d4076f674a992c7c326b1dea2570967c7b8825664211d54a
          • MD5 SHA1 SHA512 TLSH

          icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
          • Size 7KB
          • SHA256 428ca10cf3425aecb035c6db53b20c8f87cf4beecb2c2c865d0ae2b2187c2d0d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icons_ie8.gif

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
          • Size 7KB
          • SHA256 fda78e77517356201fe5414b8c7df2ed1dd18cdedf7b23f70d45b3c6c0f1bdc3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icons_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
          • Size 15KB
          • SHA256 853339cd719117fcf04975c7ecfb475b196ccae792139ee011c77fcbcb186fe4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          new_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
          • Size 8KB
          • SHA256 ae458c7b19d17f02bf0d5755c729754025a01f6c73b06ac3191350670b2fe1ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          new_icons_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
          • Size 17KB
          • SHA256 4ce22cc8ce126ae45e61ad7c85ee44ba77d61de96d0715c05610871ef54b9494
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
          • Size 823B
          • SHA256 e1e76e920443efa6faa01dc13041dd0b86f56e7dfa9bbaf9b36fcf06ba9f2703
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
          • Size 850B
          • SHA256 88dad1cb3effbee90d9648fb05283f9706ef2abfff7bfee8f9d0eb41b7454630
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
          • Size 1KB
          • SHA256 0bd5a81dcdcbed74d7b45cbe45934a80ea700a57e2ef5a60ed5c14e7241868d7
          • MD5 SHA1 SHA512 TLSH

          bg_pattern_RHP.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
          • Size 179B
          • SHA256 cae4d02df9ee70367e64f8aa5df1be97bcda35c3719630fe74fa0fee7c31c7a2
          • MD5 SHA1 SHA512 TLSH

          bg_patterns_header.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
          • Size 703B
          • SHA256 4c6c75ffa0ade41f00d8881756070b2f921564e469abfda7219b16bad7dfdd8c
          • MD5 SHA1 SHA512 TLSH

          illustrations.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
          • Size 8KB
          • SHA256 9f2771f695a03a611de370e009a450e717f1a8a7f26ffaa71a8ea35e1c727383
          • MD5 SHA1 SHA512 SSDEEP TLSH

          illustrations_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
          • Size 19KB
          • SHA256 867f150d095ecc79eb0d7ab30f99752b49173891ecc50bb06fe4555e34daeab9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 1280994f922d99b0084e2ed1eeff0dc5ee6ab75684552bca74cb8e79ac51bd13
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
          • Size 1KB
          • SHA256 6c1b05d8631c4716c677763cc2176b74330d10ee83cf5a55958331efc9cfc95d
          • MD5 SHA1 SHA512 TLSH

          main-selector.css

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
          • Size 802B
          • SHA256 43dea9de1dde1a67d1c4b23ef1b1e92ec8f537d3a8830dd1a0c3a420146a7a84
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 946d63edf6b49ceecd1a61dc242cd43ed3a9d2aa7c0d8c2edbc57bcd17524b42
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
          • Size 1KB
          • SHA256 5b63e68df70dbda7ab5b287875e595750362c1d513ee6bf21497b4be818290ed
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
          • Size 1007B
          • SHA256 2dc275cfda34de94ac79b1607d3143c41b58f461d6d0da6d034efbc7a4d87dbb
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
          • Size 4KB
          • SHA256 8690d61b82dbbde20a4a2c337649a90209acc5786e40238c2b3aacb492359376
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
          • Size 12KB
          • SHA256 5a7a54ae06d92e53338aa759e96f73de066f5e3ad91df0f871059105da3d64aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
          • Size 14KB
          • SHA256 e1c3ddc9594a524ec1a88fce9251837aee10ea6fcb9f9bec5c9e84b72393f3b9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
          • Size 924B
          • SHA256 b25e2584e947dec3ca37a0cf05f8cb0b15c38d330b69f550033d58944c500953
          • MD5 SHA1 SHA512 TLSH

          main-selector.css

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
          • Size 802B
          • SHA256 bc7d9b65849f370fa3581f8a1eecae590875d5e5ad3dad970da5dc4075519f19
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 633f860b3000bc3de5ba41c174bcf9a8058fadb479cafac2a4cb446bff54bd7b
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
          • Size 1KB
          • SHA256 591046947d8c2de365d896a0205e58cc71192b2b8a73a66f4649b6a173e87620
          • MD5 SHA1 SHA512 TLSH

          main.css

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
          • Size 802B
          • SHA256 3678e293f0e11facde0fe692fe11ed6663183cf6196b080bc4e08108c32adaa9
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
          • Size 855B
          • SHA256 9fb5305407a1a7ad36f9f4e7c29b88fb47ab02c03896555f7370ab99cb32d90e
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
          • Size 850B
          • SHA256 7d5005f31e832f8639badc878ab7cbae75b3dc1ab31a6957832f82c7c728eb4b
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
          • Size 849B
          • SHA256 46e4de4e77fee0f3caa94b582f3de8c82323e7e85ea1caa3022399276cd06973
          • MD5 SHA1 SHA512 TLSH

          main-selector.css

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
          • Size 802B
          • SHA256 d978412b85cce23d55b1776d30086e03ae96dd3968ba1c0985f8d763ad501539
          • MD5 SHA1 SHA512 TLSH

          progress.gif

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
          • Size 19KB
          • SHA256 06010e088604ca62a4212909ea2f61c9b6fd8128fe5af85a1f9b84094bd9e1a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          faf_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
          • Size 6KB
          • SHA256 583f5643da5e712b81e47083ab670faed2553b7aa4c1b9078c3c738de110eb19
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
          • Size 7KB
          • SHA256 8e6b6bee1f94c6868a9cf45eff256ce89f9fb7fad489fcf9e17f69c30f20971c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
          • Size 3KB
          • SHA256 74a28f259c80ef1993a60a8d544897331fc9b12ef39f73c3db1b7a763b26cb70
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
          • Size 1KB
          • SHA256 fc35f54332410f19a7ecf5ca73a36b633f42c2d6f8f4f75786f54dc08c02c8f5
          • MD5 SHA1 SHA512 TLSH

          bun.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
          • Size 2KB
          • SHA256 5b39777e50642cfaa0593695e13c333e4c04b4e0e175ac8f07e954d7f52800f4
          • MD5 SHA1 SHA512 TLSH

          cstm_brand_preview.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
          • Size 2KB
          • SHA256 27b8b13a8d1e34612dcb302f82dfeff6e226794185b56aff08343e804e7dafd5
          • MD5 SHA1 SHA512 TLSH

          cstm_brand_preview2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
          • Size 4KB
          • SHA256 f63ff3fae86172e539d28804d97dc8b8b5bb3238474d55b7339e31315d879be3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dd_arrow_small.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
          • Size 289B
          • SHA256 5fd5b62e27f5b1bf1c73cb6598efa26c5dfb9a988fb35f2973903000a0e7f01c
          • MD5 SHA1 SHA512 TLSH

          dd_arrow_small2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
          • Size 385B
          • SHA256 5baf1354b1042768ca6e3b478e5845bdaf3c5098f7f9cdcf3a28a31ecd2d4682
          • MD5 SHA1 SHA512 TLSH

          illustrations.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
          • Size 4KB
          • SHA256 1ca7f09ea0b76fdbd21b3f9cd0eacf1b7a74a3a74a59292b7877007122e06bbc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nub.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
          • Size 1003B
          • SHA256 e9916c72a5b5153e12671e08af870e4d0917838f8cb53e86ca801fd579ad3562
          • MD5 SHA1 SHA512 TLSH

          share_icons.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
          • Size 1KB
          • SHA256 bab9983bb2523f362f82ebba0236899630841321387fedb207624e496883f33e
          • MD5 SHA1 SHA512 TLSH

          share_icons2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
          • Size 2KB
          • SHA256 97eb4a377f0b6640576b42fa0f3c9fe4ddc7472ee8c4ad351cce06cdcb6b439c
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
          • Size 13KB
          • SHA256 96f7a49dadcbdc3f6bc7221562f8a68f715b768f7373041fd6ec492f2562d17a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          adc_logo.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
          • Size 3KB
          • SHA256 9a170df10b0ccd8a4a4b1e57bc02e56ec5cbf4bbaf59b13f11dff67b6b7a3dd0
          • MD5 SHA1 SHA512 TLSH

          adobe_spinner.gif

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
          • Size 556B
          • SHA256 c07a264cbdb915bf6eb144a4b8c7a747f82608c0d4f5363abd7a1f4b8a6d43a0
          • MD5 SHA1 SHA512 TLSH

          logo_retina.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
          • Size 6KB
          • SHA256 39e27cf941eeda0b725b22624c717f5a80bcd088d96de651fb6139896e156566
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sat_logo.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
          • Size 826B
          • SHA256 55d2655dba195b511392ea4d6a31e4554a06668629307b8f7af769f03c7479c3
          • MD5 SHA1 SHA512 TLSH

          sat_logo_2x.png

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
          • Size 1KB
          • SHA256 8b1742c0b4de1b7973e865988ad44ffd41a16b4691cb94ed5823f608a56bf1a3
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
          • Size 10KB
          • SHA256 e7ab151f474952ea5412ee260ac853312266050025df09588ee03a7d1a660246
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
          • Size 13KB
          • SHA256 04c9d8e68ea3a0bcb4c7c1cfb9092df82d8fc35434b090892d1cd8357526ece7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
          • Size 840B
          • SHA256 4554deec9fd5ba057e9d2afd60daa603b2b16b6361bbf4eb8b9c2602ba5dec21
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
          • Size 17KB
          • SHA256 3d33d0e70291e0d55712adbe1daa77280524715b4eb9e8c1ec40854153c5a182
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
          • Size 1KB
          • SHA256 d1a8dec6917f7aca21c1681513d99e92a877094641646165ac0a1f20fb81627b
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
          • Size 1KB
          • SHA256 94fe2e1c75eaebeba33fddd3d48f87ec9321c5468db4fa9d3b25af2c85d9dd3a
          • MD5 SHA1 SHA512 TLSH

          ui-strings.js

          • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
          • Size 2KB
          • SHA256 ab4feb83b1548a097d53cb95095fa138c5fe20b4e3770009a5063725b36b8392
          • MD5 SHA1 SHA512 TLSH

          DisplayLanguageNames.en_GB_EURO.txt

          • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
          • Size 32KB
          • SHA256 eb01f811b68e9d949837cd0ea659a62d383a4a04f14a4cd88e8435ef16780d7e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          external_extensions.json

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Extensions\external_extensions.json
          • Size 99B
          • SHA256 07da333001cec1df6c6eda92be3b4df13884e13c12343b9f20559fcaa8b757e1
          • MD5 SHA1 SHA512 TLSH

          manifest.json

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\manifest.json
          • Size 238B
          • SHA256 6863cdea7f7e790adaf2433d3a83971cd8397fca0ed2eac9bdcc96ee88bcaaf3
          • MD5 SHA1 SHA512 TLSH

          vk_swiftshader_icd.json

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 ea8d6f2d8f7840bc9ad82fa92b5cdaf99b7dd02d9bfd68be7a260720dfdae3b2
          • MD5 SHA1 SHA512 TLSH

          msedge.exe

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.exe
          • Size 3.9MB
          • SHA256 bc95bbb7960af43862f4ffb4f159d21d670082a0b5f2f8056343128d94f482ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          manifest.json.meow

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json.meow
          • Size 128B
          • SHA256 06c7a897dc038daf866b53eddd26be6111e555130d7a5d411e5a77c3baae1975
          • MD5 SHA1 SHA512 TLSH

          external_extensions.json.meow

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Extensions\external_extensions.json.meow
          • Size 99B
          • SHA256 68997f26a8d41b1061837ba2b8a31775fb62f5e57e242a4307dfeb729b0370ba
          • MD5 SHA1 SHA512 TLSH

          manifest.json

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json
          • Size 132B
          • SHA256 346395d0b3579688d091908fa8cba6f7e9cac0b3e628291c251ab7ddceeea973
          • MD5 SHA1 SHA512 TLSH

          Logo.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\Logo.png
          • Size 31KB
          • SHA256 80916b06add6597ddb3545c5c4b9d4e1e953f834511de3d95c53ceea19d36476
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogoBeta.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoBeta.png
          • Size 29KB
          • SHA256 983261beaa5c4f15acc1ec814fa4c7d37b84b570a47872dc3dc68d755464d39a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogoCanary.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoCanary.png
          • Size 29KB
          • SHA256 e06980cb6721e021613d588f68dbd4025aa5e84c5fb984476219eaf8f441da6c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogoDev.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoDev.png
          • Size 29KB
          • SHA256 67dd9513734fc79eec0f043afdec3f07f4c2b90e71ba9daa30c6659456b0e24a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogo.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogo.png
          • Size 15KB
          • SHA256 6c6b2f313c5e8675ef5336e75cab99063a1c099fc64e6172cffc77c9f7f9be86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogoBeta.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoBeta.png
          • Size 14KB
          • SHA256 c3a28c3be55b1f0a0fdffa155a8e8bd66bd844b4f53b6d3d8e49f108475b78c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogoCanary.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoCanary.png
          • Size 14KB
          • SHA256 c9c138b8c847ffa580cee4ba244be0c8efee767836818b83c97311cc49690dcf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogoDev.png

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoDev.png
          • Size 14KB
          • SHA256 67a2c5e82a06ef778972f8e6af0bbe361ffdd2a6ee631b76fa16d6be8d5011e3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader_icd.json

          • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 487ba2b5f88d2b9d89dff66c74f0c06c4a706dcf963d0b955c78c4383272180e
          • MD5 SHA1 SHA512 TLSH

          msvcp140.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll
          • Size 558KB
          • SHA256 c02031f8ef2f7d11dc6899bd1bc46fd5065e0c49931244d449d5d005229ae400
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
          • Size 95KB
          • SHA256 132dd3ee467dc586c8ee250a322d09b560d8385cdfdd04ca0076f3d62f3a3c91
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140_1.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
          • Size 36KB
          • SHA256 f581560efa54f23b05273699517d72c2988bf972ef211f7772ccb83ef03445ad
          • MD5 SHA1 SHA512 SSDEEP TLSH

          win32_LinkNoDrop32x32.gif

          • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
          • Size 153B
          • SHA256 a0df6c668ee10a74a58e1f57c0adfb02f407622d1a09ce5cdef31abc847937d2
          • MD5 SHA1 SHA512 TLSH

          THIRDPARTYLICENSEREADME-JAVAFX.txt

          • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
          • Size 190B
          • SHA256 fe88d2aba115484ec30b6119127c15c254df6a1f3ef4261395047906b6b5ddb6
          • MD5 SHA1 SHA512 TLSH

          THIRDPARTYLICENSEREADME.txt

          • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
          • Size 190B
          • SHA256 67140170f0bdb5918be702376d0367c0219fafdfd3a541ae7e908ae3a31caf24
          • MD5 SHA1 SHA512 TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll
          • Size 11KB
          • SHA256 640f3c78ec932eb5bec81d4ee1a74f163455d70e239a60b030f7149f92b116fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-2-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll
          • Size 11KB
          • SHA256 12acbfbc026464c2efb288cc1d41421f4165634a4dd159034646247085a1cdca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll
          • Size 11KB
          • SHA256 ee70470a235a2fb21746317ead0bf7ced1f28378991289421db3507c48eee0d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll
          • Size 11KB
          • SHA256 36e79b3a058c13a89d118712aa6989b74c3ebc72be7f8fb76219b6aa01c4b9a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 11KB
          • SHA256 db1c94e820795a4b6e526ece46e2e7c018c27e30e7663bd83ece21a358495c76
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll
          • Size 14KB
          • SHA256 fc173132731d91902ffef97d4834e25aa91c3aa19c6a2f5afc6f731aedb3c590
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll.meow

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll.meow
          • Size 11KB
          • SHA256 2c6a89e5e16090264082f8e7eda57cc863e354298878fff6c7e5f069b9c5b3d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll
          • Size 11KB
          • SHA256 48ea27a0354d54fc4525e4d1d87904129f74c339a26174090d7cc3da117c7abb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll
          • Size 11KB
          • SHA256 d3a9137439514cba2831a63763bfdd122325d29d9973812ab8b245683cdc2076
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll
          • Size 11KB
          • SHA256 e944cfb0adc99d1737a97ac4595db5662c05dbc5107e12e61a7adc6db02cd478
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 11KB
          • SHA256 e5d43e7bcc984067b4296049475daba2739f3343519aff72021f7936fb79836f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 12KB
          • SHA256 54b2ecba798d7c132e98a9ede6aab2219fa59e3da079eaf085d3cf4113c7554f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll
          • Size 14KB
          • SHA256 1b14a98ed5bafaab19874e0ae079a34e40d42f85b661b0422fe83f1eb59d4370
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll
          • Size 11KB
          • SHA256 2cc69f64bb5b50ca9fe599843557f132d6888409fc51ed2d39cd48c1a18df581
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 11KB
          • SHA256 67d4e7d4367101f6bdf60a377043ebe0909d6f8d441cfc176d3fe6dbccc76506
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 12KB
          • SHA256 8579e8275464032e736b547a99214763cb6af6fcd10cb715b692e658071171c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 13KB
          • SHA256 442229781acae404b70476e73f17d85b09c104d479e5cf67fef4a0c26c3d5e21
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 11KB
          • SHA256 d452e444a2ecf8e4842d1e62fe2808808f3fc736b98bf88a65c248a0153b217e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll
          • Size 11KB
          • SHA256 49df30c5e1575dee8284cc1868030086e4f1a8f9d6b2cf980fda474282069857
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 11KB
          • SHA256 81327368e6c294b4d51b7dc55770a1514321f49567eadb6e7556acd999698575
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll
          • Size 11KB
          • SHA256 cd8bdda2b563abc3c30cacffbb6ae8d23aae232c043247b4f688740ef6c2177b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll
          • Size 13KB
          • SHA256 ff0344c81bb1b3b144fc5d8fcef6b5ddad2c649a8c3f9d030fdfb855c7b69ef9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll
          • Size 11KB
          • SHA256 07243afc743ea149fa41588e37501795354bf85374856ddc358fe6e226435943
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 12KB
          • SHA256 f250019e3a63c1f16b76bac3bf19894c905c9ad027bea4607ede00b26fba5d86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll
          • Size 11KB
          • SHA256 f01953d0bd52c1fb0b116b42d672d4005624a72b291f98129b3dfb20bbbe31ee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll
          • Size 11KB
          • SHA256 4963e77858263cf4cb24a3f104220b0f497ab2ee0125c26e1ad82855d269fba3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll
          • Size 12KB
          • SHA256 2effffeb01493a4d07fed3d3fc0c7db60e9cf53ee17814987ac443f823b11005
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll
          • Size 15KB
          • SHA256 5bc705a11c42285550ba72c7ece5a68ee5da44ad53f699d08767b56340ce2de0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll
          • Size 11KB
          • SHA256 feb704e086801f8998082685ee6f055f973f17d082ef391d23c70c9bec301fa4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 13KB
          • SHA256 f819e6c0432fd58ed787e99acf3a5b7ba56207d0d2ef68a687d6156a13b8e3d9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll
          • Size 12KB
          • SHA256 99ca79bfc2f33ccb427ffd1e0af9f9516aa74dc5968de453f9bd05ee01e7718c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll
          • Size 11KB
          • SHA256 6d4b8d8feb4f97ca353fecbe21d9124b9c5649391dbbdcb468e9892977250e7b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll
          • Size 20KB
          • SHA256 759b23eb7c4d0f13dcac39ec2c34da3d35cceb7b39c45cd9c41c5956d0d9e0bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 19KB
          • SHA256 2fa8f57bd05592a36f7f9fa0a9c3b9b4296e17b66aca1dbc249a539c4891609f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll
          • Size 62KB
          • SHA256 9adc99333e79ef7456c15d059cf7fa30a6108823b5739de8c913555d76aabd78
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll
          • Size 12KB
          • SHA256 aeed87461bbdcb45d7104b927592bd3ee2b36fc680df0f92f9b189ec08085946
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 15KB
          • SHA256 754eb32bdbf0e891bb651a14920d9798c317d22156cd7d343ab245a1b0f9952e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 17KB
          • SHA256 5faaef474d3564ac78b509c972de0b305cb0e3ed6aa7806f1bf4d49cb7dc0c4a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll
          • Size 17KB
          • SHA256 70e7e16892347b557a64badb77b8e8d89813b2e3e0e15159df4306985a94541e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll
          • Size 13KB
          • SHA256 847fed590389f33da2618243cb882358d38c2d2a6608933bb66e4379cfbc122c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll
          • Size 11KB
          • SHA256 4391df943afc0a3a2b6398eab825bdc5b8870a5d78fbee3724a945e85f4dbca2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll
          • Size 1011KB
          • SHA256 d4640fa4bcaa9eecd2b8027a132eb21f28049223c037b440788a8999bd7606d8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          OfficeClickToRun.exe

          • Path C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
          • Size 4.1MB
          • SHA256 e8fa08ed947834acabcfb423223519c8ba38450f5ca48ba21bf73187819fc8cd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ClientSub2019_eula.txt

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
          • Size 42B
          • SHA256 2e2665c8b4991f3daa4bfc96274f63fd8847841a83ab3dabb5fa5c80ee0bb996
          • MD5 SHA1 SHA512

          zlibwapi.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll
          • Size 274KB
          • SHA256 330b1c3bf3fb9c4120797c61c821d87bb63dc87238e23e54b3c76bf8e1b7e88c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          TALK21.COM.XML

          • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\TALK21.COM.XML
          • Size 807B
          • SHA256 a8dffe9f53dd664e81e68af98e841f54c2a603a3c3a915224ce2e50534e0107a
          • MD5 SHA1 SHA512 TLSH

          YAHOO.COM.XML

          • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.COM.XML
          • Size 806B
          • SHA256 c1d4d1efd8954bf920fea494f3f82fff89509a8cc494fa2d2d551dc2a1c7ee2a
          • MD5 SHA1 SHA512 TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll
          • Size 18KB
          • SHA256 f7192948c041cbc4c3e86cae24f9dfcc6cec152e41fbe559af08233c6d689714
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll
          • Size 18KB
          • SHA256 d513ee8f659336cf5f48044f1be6adfd5a52ba2786645e067b2ede26ade105ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll
          • Size 20KB
          • SHA256 44c37df534a1de85fbd2ed6368f02e3bc1910dcf2b2d575fccc5495f17cb2318
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 18KB
          • SHA256 057169ab423b1cb3b169bd69d19479fa16101d06b2c49a2b86dc8773a8618863
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll
          • Size 18KB
          • SHA256 fc154aada8db2b47e7745e2bf808bf2bc634c0a8d43d3397cbeed188ec4fa2a0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll
          • Size 18KB
          • SHA256 abdd4e5af5551ffb9699653cb2e23ab90a4a6c970adc9d9e34d3dabf1ae3aecb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-xstate-l2-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll
          • Size 11KB
          • SHA256 2420e222cdf50c0f95704d653c0235b41652e368fd66d454d87957ad78928bb1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll
          • Size 19KB
          • SHA256 ebaf01b11f3ac6bc619d7dd64a77bada542f6dc1035627d6d1f42b3ba62d9cd6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll
          • Size 22KB
          • SHA256 67c373e0ed70cba7e43f1479c44f27127f1995dfa40ed15103047cdda5d42b44
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll
          • Size 18KB
          • SHA256 ced262932a59cb4ff7eb6cbb3c8c1f2fcc466c6717c2a51236a93bca0bda1496
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 20KB
          • SHA256 d744a1ac95e8c539ea4b1dddbb81e17994aa62aaecb70f0e0ea699dc49f3df28
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll
          • Size 19KB
          • SHA256 924c49d1385a78b93650fce8e48a4e4ceea83b81be7529e2795a518cb3952041
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll
          • Size 18KB
          • SHA256 f6c66ee0a21e32ab134d99fe431e797abb91d3586aab9a7850a528df6b05ce69
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll
          • Size 27KB
          • SHA256 2ad391d8d1b25e0c4477b79a16ba0f3540f84c5fd4ca91c2e7e97887144a1ef8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 26KB
          • SHA256 e74271483ed8601dc68488af342923bb5bff40804db5dfdf5af727ae5dc95255
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll
          • Size 69KB
          • SHA256 14554f3456d8e5a471c21c0595bdc357d28a6e1756bf1c786968f8023143386b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll
          • Size 19KB
          • SHA256 8357e4c6adb2e73ff58610393fc75789381bf0ec0ff549c8e86a38329ed0a5d8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 22KB
          • SHA256 76f65d57fd131aec2d7c6a62f2ff4c2d853afeec857f5ffcf3b2743fa39f1514
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 24KB
          • SHA256 b28d7323affde6fa6c427631a15447982f25280fb0fca1a7f12affad48b31b54
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll
          • Size 24KB
          • SHA256 8256d186290ff5370a68953586d4731c51e90c1e62d187ba10fdc82067b13aa0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll
          • Size 20KB
          • SHA256 66cb7475bad29e5994791a0cbaa2cda3b5020a6d99f11a1c91450f6d06f639b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll
          • Size 18KB
          • SHA256 d15da4be052a9c2bde4e573081a5b737c46a10c39f6074c087c37199af5cfa4c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          concrt140.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\concrt140.dll
          • Size 324KB
          • SHA256 b8e6a40563e78e2a9449660317467593a9f8f37d893fe4531ce53e1a6c976479
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vccorlib140.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll
          • Size 358KB
          • SHA256 f4e156777b4f65ff1b5db8877b6596aa03e4fbbb1b807cef0a6e09a1fc43fdd8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          osmia32.msi

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmia32.msi
          • Size 3.0MB
          • SHA256 35e939428db50002277af1b9a05a2ee5377761582f44912c8e1d105d997462cd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mfc140u.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll
          • Size 5.6MB
          • SHA256 5210765af12321572d4176c0d164d5b3616b66726b579e15919802ce86329c16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp120.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll
          • Size 644KB
          • SHA256 4552dbc35f542bba3d7188aa30bc99cb7c5509c98f307914fbcb83caaa80253c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll
          • Size 613KB
          • SHA256 b882b8a595587202cfe9243f60d9f3f760fddd598e5918eb74da88e4c94e4188
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcr120.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll
          • Size 940KB
          • SHA256 6e33b6f2673c56f260fb059aab4d624b67564154508d7497b1094117ebfcb682
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ucrtbase.dll
          • Size 960KB
          • SHA256 c8c8fdbf890b1ff025823532d4c4960931c1ff5b6be15be993d2ad2a391a5b3e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MSVCR110.DLL

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\MSVCR110.DLL
          • Size 946KB
          • SHA256 b9b0b9e1740df1ce783eccd833758893916e420e1701c00b2723e611d73f1f0a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll
          • Size 18KB
          • SHA256 2baf64c1291207597849aeb243330538ff90236f4d8bfa567fe0890ce34591d8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll
          • Size 18KB
          • SHA256 2f7245e42f595c35b426c14bced99087d18c92b27b77773313048acf3a4a4c60
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll
          • Size 20KB
          • SHA256 0de9056504c78eb286c8c605676848f60f6e08b2cac38127439ad384d050d019
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 18KB
          • SHA256 0ae18af37ebbd7214c980a3b6c4d64d9f15beff9c4cd8baa0b4cacb0d7fae851
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll
          • Size 18KB
          • SHA256 a30ace8ef5ed5f7231a6085b947183fb6eea7b8d30a9734baa4dcc0a1f226f33
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll
          • Size 18KB
          • SHA256 43513780855f2bb2d62766bdd051859bfd65c0061865309fc10417ca5ceffccd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-xstate-l2-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll
          • Size 11KB
          • SHA256 cdba1d4f102656f2d762e5e2ccd63eed509f96cc117c377541bc24a6e278cefd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll
          • Size 19KB
          • SHA256 43b01394a70b3fd11b0ca882de8ce86a85b4edacbbd7b416a4a04217b6b24821
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll
          • Size 22KB
          • SHA256 d8def16757236b85e9ba540438426a5b72ec80487cb42b5a59d58c1bc6c9c4cf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll
          • Size 18KB
          • SHA256 35b57ce270ce3fe00d7ab2d19f2f58d5af12a3eba72a8f9c2179d76442b121fa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 20KB
          • SHA256 db361289192e6c87a3371e2b93758f62d01ffb2b7040b6d3821c14bce3e4a167
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll
          • Size 19KB
          • SHA256 c77f3decf870fa9f540ba840f18cecc8620626a7898d2b0dbac4f7844ac517a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll
          • Size 18KB
          • SHA256 97934c989cc7dcbe23724930eef7a9650e315c553578b0024b76d86b86dfc184
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll
          • Size 28KB
          • SHA256 5aa83e511e00f55efc609ca8352c028806d59ce2e5bf2ae2f15fba19103617bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 26KB
          • SHA256 946db76c71750ac29608c5f5c5e2b933371974223c5e85da7128156c5a046dd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll
          • Size 71KB
          • SHA256 4215e6fc4ae918f11b9826d498dd867895e59ab18caddd348886c0a3931d73a4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll
          • Size 19KB
          • SHA256 3d6caf3ac1ea50deb5c74a70084ed34e47916bcd8fcf9379e66d8986caf58e5a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 22KB
          • SHA256 06fd8b47cff8a10271ad8d2da749a215f101c622042956210954a8a061731f43
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 24KB
          • SHA256 89a324d3cb38db5307d4ecf3165c94168b1341b6225c27d2959d52acbe312f27
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll
          • Size 24KB
          • SHA256 839e3d546d19121737b02ab545b2e11a43ba7893abab53228dc7a56086e31d56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll
          • Size 20KB
          • SHA256 979b0b5c5e3fcaa6e5ae7b1aa4e3c507f8ba38912813d992c87b55fc626754e3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll
          • Size 18KB
          • SHA256 e1bd25cc62e16df1740102ddb7ff8564c9360cc97200a4abafa1ddac62a61f06
          • MD5 SHA1 SHA512 SSDEEP TLSH

          concrt140.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll
          • Size 244KB
          • SHA256 8cdc04e32adf21d4c1abecf87513e792ddd3a33ae4977d26ee0381ec00f4434c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mfc140u.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll
          • Size 4.8MB
          • SHA256 840336228758739b2dfc75e66f9fc1ae4c10ed212e5fbd6744fd1bc81a30570b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp120.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll
          • Size 444KB
          • SHA256 020e3e5259cae7fece93a2a76d11600467d12fcce59cef4da8fd4c70c901c2bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll
          • Size 439KB
          • SHA256 6033d7af8adfa3f2db9e65e32a018ee41cf0c7bb4f999dbb76d0b3adcac55f34
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll
          • Size 879KB
          • SHA256 277f48dc33c414e75c883e13084c875288466179f7fca040c3daa43cc963ad25
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vccorlib140.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll
          • Size 263KB
          • SHA256 91d9aa3d2b1a52a1e98f821685f4fc335890e54c7c9046aa4ea5a64e130d1915
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll
          • Size 78KB
          • SHA256 543c484c433efeea9ebe681e1aa67d2260f42f706c4c9bada596e17d89a32f90
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll

          • Path C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll
          • Size 83KB
          • SHA256 2f0c2db3de4a699e8e4d6109e1d30bae19eca6711c9225c2c4a33b9b36a431d5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          misc.exe

          • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
          • Size 1014KB
          • SHA256 225be2b14644dfd1deafbe0ad5d0b81f0bea38acc0201ce7ae034644fe61ebff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vc_runtimeAdditional_x64.msi

          • Path C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi
          • Size 140KB
          • SHA256 4d8ecad4e29a6d2b55b79eb9dfc54fd4730b98774023f851ce619704d7d946a5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dotnet-runtime-7.0.16-win-x64.msi

          • Path C:\ProgramData\Package Cache\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}v56.64.8781\dotnet-runtime-7.0.16-win-x64.msi
          • Size 26.0MB
          • SHA256 7b56ecb9ffb1805b44fef95604483eded6110ce94104866a92cd7439621306c8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          windowsdesktop-runtime-6.0.27-win-x64.msi

          • Path C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi
          • Size 28.5MB
          • SHA256 3f94eafb25bbf88b0644387b00ec8c4480ad107b74ec5162b5669342bd079669
          • MD5 SHA1 SHA512 SSDEEP TLSH

          messages.json

          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\_locales\en\messages.json
          • Size 851B
          • SHA256 260df32746ae0950f29163e7736404b1ea02b43d8f546951fbacccb97d072417
          • MD5 SHA1 SHA512 TLSH

          winword.exe_Rules.xml

          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\winword.exe_Rules.xml
          • Size 325KB
          • SHA256 b5d8c7291a2df04ba2afe029e18d5b38ea8779346f49907dc18828f93b6277ed
          • MD5 SHA1 SHA512 SSDEEP TLSH