7a6ff82cfbbd7fdcc31ae76968bede0e90b5db6b6c4e68d06a367e4507d9b254

Analysis

max time kernel
129s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
Size 342KB
Sample260814-pxpe2stdkb
SHA256 7a6ff82cfbbd7fdcc31ae76968bede0e90b5db6b6c4e68d06a367e4507d9b254
MD5 b9f39a1b85ca52db5099c8fed26e2bc0
SHA1 428d3258dc044f885a3ed2a8e44f2d244b3a6e56
SHA512 cb4016625cf326170884acd6b6b3c6a58e7e480eb16fa61b5e2237e9d911856ab31c51766ebad1d33299474d41d5281058a40aae5f63c2d1622488d084785562
SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR0CO/x9qqDLuBsL27aR:OAQsgScEyd0C1qnug2mR
TLSH
T17B745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Malware Config

Signatures

Detects command variations typically used by ransomware 9 IoCs

resource	yara_rule
behavioral1/memory/468-0-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-1-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-2-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-4-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-6-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-7-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-9-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-19-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware
behavioral1/memory/468-533-0x0000000000400000-0x0000000000463000-memory.dmp	INDICATOR_SUSPICIOUS_GENRansomware

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-2937465464-4167303362-2236413517-1000\desktop.ini	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-2937465464-4167303362-2236413517-1000\desktop.ini	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\desktop.ini	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Common Files\System\Ole DB\de-DE\msdasqlr.dll.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Buffers.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Xml.XPath.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\System.Windows.Forms.Primitives.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\UIAutomationTypes.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\PresentationFramework.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\System.Windows.Input.Manipulations.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\7-Zip\7-zip.chm	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File created	\??\c:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\how_to_decrypt.hta	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.SecureString.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\hostpolicy.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Runtime.CompilerServices.Unsafe.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File created	\??\c:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\how_to_decrypt.hta	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.Xml.Linq.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\PresentationFramework.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\msinfo32.exe.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\msdfmap.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-core-handle-l1-1-0.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Transactions.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.ValueTuple.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Formats.Tar.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\ky.txt	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\fa.txt	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\zh-TW\tipresx.dll.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\System\Ole DB\msdasql.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\api-ms-win-core-console-l1-1-0.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Resources.ResourceManager.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\ReachFramework.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\UIAutomationClientSideProviders.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\PresentationUI.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\ReachFramework.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\it.txt	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.tr-tr.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File created	\??\c:\Program Files\Common Files\microsoft shared\ink\sl-SI\how_to_decrypt.hta	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.IO.MemoryMappedFiles.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.IO.Compression.FileSystem.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Reflection.Emit.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\Microsoft.WindowsDesktop.App.deps.json	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\af.txt	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.fr-fr.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\ipsjpn.xml	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.IO.FileSystem.DriveInfo.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\clretwrc.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Collections.NonGeneric.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Threading.Tasks.Extensions.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\es-ES\TabTip.exe.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File created	\??\c:\Program Files\Common Files\microsoft shared\TextConv\how_to_decrypt.hta	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.CompilerServices.VisualC.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File created	\??\c:\Program Files\7-Zip\how_to_decrypt.hta	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\de-DE\ShapeCollector.exe.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Drawing.Design.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\UIAutomationProvider.resources.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\uk-UA\ShapeCollector.exe.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Handles.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Linq.Queryable.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Security.Cryptography.Xml.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.de-de.dll	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\es-ES\InputPersonalization.exe.mui	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
File opened for modification	\??\c:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad.xml	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1z4flg766l1iu6zmhlw9yn7z1x5244ih4718etuj174x671.0r._R3gzYG

Path C:\$Recycle.Bin\S-1-5-21-2937465464-4167303362-2236413517-1000\1z4flg766l1iu6zmhlw9yn7z1x5244ih4718etuj174x671.0r._R3gzYG
Size 2KB
SHA256 e292f455d843f6f1c70052375af93fc80a9fa45d8e7f04d16226d226dba96967
MD5 3b5ad4ddbeafa34b977a3bd63a0b9ab9
SHA1 184518654a3fcbd4b68120b2722ce4f33c11967d
SHA512 c9be389798fd418406e3a3c7453d265dbfb12b29d914d965a709a1febbc02d2b06cb9c98f4ae9572ed5dabcf3e133bdc6e6930ff5ab416fbc208783fad6d2c86
TLSH
T1BC511973EF0119E7FEA73CB48E94D263EB050A05EEA9470AA17167660711047ED2C9B9
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\$Recycle.Bin\S-1-5-21-2937465464-4167303362-2236413517-1000\desktop.ini
Size 904B
SHA256 bc19767aed22baa03e5eb5037a4c72437cb1c1eb0ffbbd94b5e5a6be71d34f5a
MD5 7704201a9a2d0870f1a0953bcd6957f4
SHA1 e61e6ca5abd5fb11a6be44b25753b0c572dc97c7
SHA512 70519c3204cfbd2d6752a2772afd45b6812faf615bd0fa18c3ef80408181679760ac81516218832cc3c2e3bc47d24517693d0af61543b65cfbbe84d93cac1f6a
TLSH
T11D1167476A0B9B55EF8FA0F44CA8C11159250E541C3B53168578B74546A03826D3CDFF
MD5 SHA1 SHA512 TLSH

Submit Download

Click on 'Change' to select default PDF handler.pdf

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Click on 'Change' to select default PDF handler.pdf
Size 183KB
SHA256 268075b9f4ae5d12abba7ec7599c8c7d517a8a5c767869b5b0c200a7b703d01a
MD5 7ba64d661bf1fa2545cba8348a393223
SHA1 1a93f3dc7cd9d55ff2c6fd8231f27d1da0300775
SHA512 b396ba0038bd01871650e4c4d249b7f2c3f60c2249da9e1e6fe51c62014115bdd8bb3d13498051afe1a3d7baff4cdfca50addd7774fa9aecd3a6417583e34f1f
SSDEEP 3072:bssls1MS60xwZODn/TJTHuX2T/5/dGc4uka2AtSyNLMDTJ5MtvVmbvJ:wsls1b60zbJTuXa5McZd2At7mJ5MuzJ
TLSH
T17104121AD5D1DA66234812D467C41D7ADCC2441804DD1E1934EEFBAF8B38FD688EEBB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

s_export_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_export_18.svg
Size 8KB
SHA256 9d884770eaaafebc39514e23ddcf5d00fe82f5df44dec20666cb406654ea719e
MD5 e306cac1d11c20e73e2c4b7327639ee2
SHA1 cf54bb017b7bb51e70c52b0bf2d78123e71cd320
SHA512 6ee06174edc04a25ad45f4d0a9512ff3c6d63d29eb548f80c4154188dc79394ea04d51ec54446ecb667ccbd2b37bdc852092162c4d1b00bba812638bc783a420
SSDEEP 192:qhxbTSAVTBdQKreYgs8dXAYLlUwxFvjPh67qLXuBPZgvRppmlI8ai:kb+Ar+dhlbRPjLO+v7wmk
TLSH
T15C02E7F517B483FCAE86AF48EB379845BB4D5CB53FC4CAD5C28198D4842A5ADCA1CC20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

createpdf.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\createpdf.svg
Size 9KB
SHA256 e87d62f641162183480e22cbe128d4160eff8641b1fe36a6a54ad925cee07ff5
MD5 f2695bb39ccf34125b628f584b8ce6fe
SHA1 2fb8bafffc08405bf529b9186dfaeba9e9900f5a
SHA512 91b1590d524eb1a3687b26b6049cb0dbfc9bb7366f4d99e948dc966d3bc7e3b6f2fcaa1473a595eb307cfe46c1b26e08b0234fff94063b878a11d3a6055b1416
SSDEEP 192:vPGSKtSdRS1jRkYzOfzjkGnmJ/5RS1jRkYzOfzjkGnmJ/PppmlI8am:ygc1jCYzsghJ/5c1jCYzsghJ/hwmk
TLSH
T1A212D7F417BEA3FDB7858520E92165217EA83CF6BED496C4D0A9C5E0B7106F1D4A8C31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

s_download_pdf_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_download_pdf_18.svg
Size 8KB
SHA256 2c33dc48b549c0f01c3f66a307a2238884f1a2fb3ef1fd630fb891e0eaa8bda2
MD5 c231c053c7778901426243b3b589379d
SHA1 eeba3cabaaae5a878792bbb99eb058206e47cfcf
SHA512 14deb88d8e47dbe76cdd797b8392a534d60546f0c06592f9d91abb9a4a77b5b18a2ddb309e153795f2ccbb47854d0330df6b754cb712059c135cc62df327b8c0
SSDEEP 192:6hVKT4gNVdJ+nptl8Li+LDVdJ+nptl8Li+LWDkf9dppmlI8aR:P00dMHKi+ddMHKi+ykVXwmT
TLSH
T1AE02E7E113BC97FDFF45BB58D63629127A881CF639E5D2E0C5C384D19849AE88958CB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-ma\ui-strings.js
Size 9KB
SHA256 f5e6275d1a9220fe8c9fa508d82596f9a7d7c4badfc91cb59f1916fd3998e5f9
MD5 b644bd513ca1b056f3a74339b20e2f26
SHA1 33b3f611f4d4cc26204915cc8e26ca27d99a597e
SHA512 0c699c36bb1f5a98b0b208bfd6b6081363816f2be161995f82e74d1e588fca7b6a58b21330e6296ddc0ca54f64a545d374edb1e124af6e2d45c778d5e2756e94
SSDEEP 192:JaYfZ3N2CeU/+cg8USjKo2oTZL0bqIy7Nc56ctIEZu8yUft4yCVfmppmlI8avv:JT3dj/+p8USjKoHWbqIypcvyIu83wm1v
TLSH
T10B22A62EB6801DA17F8336F27445A6C7AE34411A93547252C46A722A227C8FD81FF27E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exportpdf-tool-view.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\exportpdf-tool-view.js
Size 394KB
SHA256 fffbb116cf27d846c153059cec398eddad8364429c6b6a5fd2f2d8d1ed0bea5d
MD5 6941e347bf8e6df1ef3cca370c6856e6
SHA1 2c5076e7bb8c384ffe95022f612d7dd0b8fcf4b5
SHA512 ce9d6759c53115670aea0c2311218a32daef938706bab237f54e29b628443682908149fd86ccb79fc63838a955876c61f8f6e2bfad50da67c9d3ddd547f00431
SSDEEP 3072:pOdoAGmD0ffCKykIGX98fDbbKq2lIcI/VQtd/X:pO4mD0SKHIbR2lIcIU/
TLSH
T1F7841887F580AC34126BE1653C2B0641D975ADC394054B48F8FDE5864EFEB0A733B6BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ui-strings.js
Size 4KB
SHA256 8edfd176bcad2b8a223c41a83c1ef17059ab238144c7083ea16711bb525cfe65
MD5 3295638b68ed763ad5fd923af8e66353
SHA1 1442d0fb704ee316fe6a5c7da486f5c6f6b0c657
SHA512 18f5d28aa1f32300df5f3870e846bf51e0076d798a0908cad6fdb1f4d345c1f8060cf435972962f7cd12b58b5f1f36c742ea89d87bf764c383a2cc3794b84bcd
SSDEEP 48:Bf8FKPUfLuvX3se+v25mlXlTusueewpwnv5+YneTIMNeT2vRDmm3tGRUV3hxVW5S:BeDfSiN1TniXkxs9ZcyUSQqEmlI8a/tP
TLSH
T11991824E6A06FD4646DB367B6272C3E9C8E8CC07DA5990684179B10322CF5B843BD7B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

core_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\core_icons_retina.png
Size 20KB
SHA256 acf13515153b50392b0577e8afd4a2cf7c1d5342c6d3332fe93a2d08e86b4ec4
MD5 457ae6ed754d7e2227c2de9327eacb94
SHA1 7b3caa91c9d5995bb27b2aa3971802307ad2be51
SHA512 9880a81eb6eb5b859be07f9f723305b379a80d09adbc98703ee49d5ce81813cc38a3c9176d9b31067204efdf9fd9b3e52046763d619991b435e18c16911caac5
SSDEEP 384:YQmsxLGTRHf8hWmFyxzdpRSDNxWoiQOpsqWVIGyOV29mKFdwma:/xGRHfgyxzdbSDNU/xps+GysfUa
TLSH
T1F992C0007CA7AFDACFCD55BA8A416024FB1BEDF54E40F8554137B028967654527393EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\themes\dark\file_icons.png
Size 24KB
SHA256 92f41bd979679c5de9479c645c433be0a2b8532dff1c3b9274d1a1f7f4d30076
MD5 668b854789c574e87c70a47decbc0919
SHA1 959d007813677b78e3391ccddc23edc732f98a3a
SHA512 2782ef7d206a23d1dc560ac06c54c1f3e2e6b5d2368e171de88329670764b0222556703fe63fb03fc6585f8e17863c58bc2ca84914f6d7dd32b92134258c6fa0
SSDEEP 768:zKg38sFf2GzW8fazENNKzpjA+ejbEezK6yYa:uqbPRNKz1AVbNzg
TLSH
T11AB2CFC2A3A9CBDCC0E6B6DC0B37E5F59B610035F8638EDC006BA30A66D8583DE594D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\fr-ma\ui-strings.js
Size 6KB
SHA256 1dd3764eebefb380dd9c6999e70d3231d05e9284f9cd68025d0133295445db35
MD5 1671f63f896978486f88f5bedb233033
SHA1 d81df54005043e02e75e006d0beea025eafaf957
SHA512 0dc90a28db2ca8d2ee86f36337ea1047772e258bb3501e8b9a36248173ac748dd6e2b65971e636f2d05b7be0ffa233d1d795bdc1bba8bd363ede50898bb29361
SSDEEP 192:CDf+TZft4aYNlbm9Ep2B+qCRN41sDcppmlI8a93:C6X4flb6RwmP
TLSH
T11FD1B75BDB800E823A6234F5B579AAE95D3BD064F201E094465FF33E133D0B5A37A5A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppStore_icon.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\ja-jp\AppStore_icon.svg
Size 18KB
SHA256 aa70d1da72404ee13bb23552ade8be8d0b45d9f2b4e37c7af842dbd5f86bf08d
MD5 7538c882e673d57c33f61718fa16303e
SHA1 303b838d70fca88f083ad02a8b04b89cc2c5b534
SHA512 20b06aa1978a2cd164a62b5766188084aa7edd5469ed77b308bc3b118959457e11281a520a024e3f98553466a609cd7536938314ab866a181eb2931b53b26d79
SSDEEP 384:ilLH4Z15Pe2IoQzauLLzQ5j0YcHC+2phwmf:yUNILL6QIpFf
TLSH
T1938298F801FC03D8F2856BCCF2A7350AAF756AEFAAD40601F24E1D498F76A955685C70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\en-il\ui-strings.js
Size 14KB
SHA256 d8bc172f43a45c896d21ae5e8664b216027f60a769995a17a1a8b45f4f9a507d
MD5 4ae517117662e0ee336d4878e4b8fc8b
SHA1 19edba6415fa17a817f459ba3a73ac9dd67dcdb8
SHA512 ea37391ec69596fadded7a5578a613d3707e3bab32120ad4dd7168eb2a1fe34b1a06714e3aed150630b2dd9b68a3e9f34f40781eb78527208b14f89741f03e45
SSDEEP 384:EqnqsjnfG6vlGBvMeFW9m1far5Umss+qXitwmd:5vmMe8NlsFqXiZd
TLSH
T13862D72B9B422EA4694361FAF79617C6EC77406ED3341161C47EB02C22BCB5562FF0B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-hk_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-hk_get.svg
Size 6KB
SHA256 5eec01b953ee36b16fd7b192b5f0a255d62ae98cb8e50006b53cbbdd5f9c3b83
MD5 efb840f8b6d91f21313bad1e5fa8b258
SHA1 122f867b62f9621b46f4c31e4711e46406108532
SHA512 a40fa0585ea9ec149acde26e65d00fc9c7e47a45a9c30310258446bcab524b29af03199f7aed5b682623495a9551642d65ff09c310675c28b25807a60dbaeef3
SSDEEP 192:DZIvgckg9s8ASAScJxZB3eN82T7xQPppmlI8aLBC:DZtrJ7B3eN8KywmW
TLSH
T19EE1A63B53086A77E196C398DEC8805922A895C7F5B4D2DC9FE2AB0F1D115F3847CE60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\fr-ma\ui-strings.js
Size 16KB
SHA256 a994151f810b7904a320f6936af06c660795377f32087a5b69f3fce67856d320
MD5 58914296c207b6f57b857e347524cf4a
SHA1 4292adfdacd0a89baf28a7381e1db20b8f187986
SHA512 d1415041af1680eed4b84289ec5a6a20d79c8e08850cd41e1b286b483a3782c9750a7f5bd175f8b65bf0dbe9971efdedf315e0c827406559aa83dbf13478566c
SSDEEP 192:EDfjagFkL2GkckQHaO4RVI7rD9lLH4PlEgPOadcsLFRNq6x1YElohO+wzhc8qYVb:Eok0f43ITcE2vg6x1T+wz5kx0aZupwmv
TLSH
T1E572DA5AE9C02ED43A860277F751E7DB2D3A4245F239F120D479B608266C97C82DF1FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-il\ui-strings.js
Size 14KB
SHA256 40c764dce800acdf5d066e20f6bed4d92eb5408b971981d63148e0e5e0ec7ede
MD5 cc466d80533116273b04eb274a632ea3
SHA1 d1a9fa78ad9f9f0e64701b58c7c3dd3be94dc70e
SHA512 ccf72d2a37a75e67b97eee7e44a6849b882a8617df7ef8ffabeee0f46e3e4cea4a98c0ee7cd0cc39d38c402f0a856dcfcafc979cf2f8994428c3ee2b59778d19
SSDEEP 192:EDfEzOEnhahIpjnnf/+yBTQevL5SoR8bVUyvMebhlo9dJ7OJREsIlLIeH0mKG3g2:EZKqsjnfG6vlGBvMeFW9X7yar5UmEwmI
TLSH
T1F862B42B9B412EA56C4261FAF79A17CAEC76406ED3341161C47EB02C31BCB5162FF4B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ui-strings.js
Size 22KB
SHA256 d7cb639b44edaa82d7f926c5bd49552975217e5b7cc6ba284036758ecc32f37e
MD5 49ffddba43455c4afe1769bc8910fe41
SHA1 56cc200c240c34750f1213776d964e42d819110f
SHA512 a1e8ff81029d30937f72b8243bb5935e54e2082302150870820cc6ad4a4a26b8d9e32ff40f721dd387d6ab533c399c4094166f52267b1707b603ee2808c54b2b
SSDEEP 384:AgS6tDkeJm7ZYv4pQ5yzaeytaeNmDvudkbZYAnS+ni9Bx9/2A8aNqEYAfwwmM:m6tDkx6UzaegfsDvWkbZYmS+ni21aNqq
TLSH
T1D0A2961AD9C01DE227871173B691F3DB9D368109F219B220D47EE11522AE8BC93EF5F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaws.exe

Path C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_78859\javaws.exe
Size 465KB
SHA256 d2096ccbe1972fc2d32b5ba0bb74c452a3d0b13f20c79550e4e7d0247c52f8bd
MD5 c124289fc89beaca675045d8f8383445
SHA1 141e4591fdbc4f977a438306faffed98f7edcf0f
SHA512 d1e6f29a3687eaee99016795f655ecfebb39f836288e0b92e9042a6f694bbd26106b84f0cfc7c4b88dc588d12b63f25711bfd94f31bd4c1131e62340a18de169
SSDEEP 6144:ViYB2nEaKTRnXtTkCgwCzUg/HpjN4IBwu7QTLbpqmHdIvWl:Vi4e7WRdTfgwCHKy7GLbbdIvWl
TLSH
T142A43A90F3E414E8F0B79A3589764511DAB67C5A1B71CE8F03A8661A1F33BD18D39F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Workflow.Targets

Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
Size 5KB
SHA256 37ede80f405e33c95d771254b64ec85e217bc663208d84ed2dce09688230b649
MD5 8144199cb88377349167a595705f4e35
SHA1 e06e073ce128930312d52cb21a90057a75c19b5c
SHA512 cbeb7d44a8e90f1234c47365a2c5ca6ffcf85974db2acfa0e1679f99215dae3acffa0bbb86942a95263bd456901c8c37cfec1f9d021c4ae38b4000e196605cb9
SSDEEP 96:6KXf+b1AO1jbNdA5RAKEUA9AvRUAkcGgW3+B19Ej/PFWKIFUSQqEmlI8aVr:5X+1AO1jBGAkA9AyAdF19A/PFWKIeppt
TLSH
T14FB19327B64E8F712AAAD6531B3351927B6C9190387500A4FC4EF02A23D06212339DFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Workflow.VisualBasic.Targets

Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
Size 5KB
SHA256 e30ece95d41b09a25fef3ddfc0f8a63b003e66fe197f65ef4d7709c54d736e1a
MD5 8e26e93eb2b9ec630ce7ab4243b64aa7
SHA1 35674bb89327d021efb440793ce2e507dff29039
SHA512 74cf7461da3278762067036f15561d57e22e3c486d5d6e9dd050ecd2227c569fec0eaf7db8ee3d6bfddb19e1a5ea02fe3e1e751fb74ffc0f33b7555d1f8ad181
SSDEEP 96:fZ7E3PbAlNH4FEUH1BHweRUHksO1HNgBlZvd9EjuPFFznYUSQqEmlI8aMK:h7E3PyHuHrHsHjO1tgBR9AuPFFzndppb
TLSH
T11FC1616B254E8F702A7AC6125B768457EF98819B68B10094FC4CF2062FF0A121337DFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Dev.msix

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Dev.msix
Size 53KB
SHA256 99751483ae2c1ed85c13a7f3bbbdf0c66db477c22a9785f7c201b11024f1ff0d
MD5 868a14d98a1978c0c6dc35d66636e979
SHA1 d893ec39eab33c8806dd4d9df7c152f848aa21cf
SHA512 935b9db77c030ef3317fceca9d38d420c4cda2f6168f60ab49888f9bdffd15062fed68697fb61efac74e1844b1d3ff55c8ffa6b730fabab1dd31923975d1fac8
SSDEEP 1536:Dm5wsXBSJEqHh/WVkVy/uQvykaabloYuGMzIj:DvaBCphBQvykauGIj
TLSH
T11033023B1084BE7FF492E1B24797006CE6404E20298FF699A65D1A4A87F9EF5431D4FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
Size 2KB
SHA256 dd0f2e67bc85872322c6aff79201c8cc1e6490c6611304a0595fec94a9e8f4aa
MD5 836160472f0fa58366ca08f252afb84b
SHA1 33bb194f6496b4a8b00e2352ae2b08ad1a6168ce
SHA512 9127d5fce0cfe60dc6902ec3b5fd95281261f8c3a6d94448e98de0e24353005875e5ccc47419742d08c544793cd0aed3646bbb14e55203dc1a0eca6003f81ef8
TLSH
T158411AD1FA0A624ADF6541910CA8C95A8E304EC02C36C6A700AED2694D993C26E5D9BC
MD5 SHA1 SHA512 TLSH

Submit Download

MicrosoftEdgeUpdate.exe

Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdate.exe
Size 202KB
SHA256 d6773eed40f9745ba16b8da46ce86667f3ea5e62f2f0162715dddcbbc9c2b838
MD5 6dc78bc481cd3ae5bbc8bf183c4f5fb5
SHA1 f37a6f52f570550326ccae82eddbbada21214f37
SHA512 73d7c8f365535512da67f0687f5d9c468c62fd0af293691e54882998e78c1b081a1e25eeb36d5065075b650410108306a26c1053d27ef426ed22f7614ac2d442
SSDEEP 3072:PHrfzYJc6X/YoW4l/DReos0gXf+EvC6C36eCWdMuoB+NqLZC8eplV/iYD9XvUasA:SAel/DRfkTC3dM7B+mCtz
TLSH
T17A144E1237F84A28F8F35E305D348F29A93EBC31AE34EA6E1650119E2D35A519D31B77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Social

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social
Size 1KB
SHA256 c80a46b6d9b6d7382d6cf6ef52d9b172f62183c165695cbf84db8268b8ab390d
MD5 48f406ee543d9837c334defa1b82dfaa
SHA1 6caf29d5a37feb9e0ef89710372e33bd43415687
SHA512 ad80b60921016b4b35259366d5dd749ef791f17ba412d17eb6f77273cf7f0e33dd36a36418260cbd7007e567dfc214ff80ab94c280633d8e28076369daae5f1d
TLSH
T1692142CB3F095683DF5BE0A1CC9886389D300B74483FE5D68299F53721A4643A46DAFA
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
Size 891B
SHA256 aefeef4727fd43753b8c1f8e6cb8e832b112417013369c65f13dce4c377f437d
MD5 43b996ca8e881019a51b86417b95d798
SHA1 ea1ca3603979437ceb2c80902688cd3269f337a5
SHA512 1c4d3b38ec07a12ea6029bb8c4fafd8b2091ba9b45c54100ae292dec2f9a0a29720b83f0472e4d96432afd6dcc9c244d96de001d29f9f8bd0c0d1467b728f8c9
TLSH
T1721163A2B942564EDF9A70E04CA88614A9040B86283B914B51F87D1516513C2D93EFFD
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
Size 3KB
SHA256 48927e2974e9c3a71ba40defc46b9057d3afd638a3cd3caf9c63ebaa40b7f7b8
MD5 eb854a7064b7467aa8ae600d55dfa064
SHA1 8f6ca56b44c48a45332fa246fdac114120bc2406
SHA512 a0ccee459ee13124b394e8aa806307300e9ba7732ed01ad4e7e18852e6f73926756bdf954e9c3826f0246fb5deeb63b7ae639b2ec28c7c7239802d5a8223e996
TLSH
T15661A302A7A035956E2F0099D81C9F8C3C68037441A7EACDCBE1156272884E37ADCCF9
MD5 SHA1 SHA512 TLSH

Submit Download

Analytics

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
Size 1KB
SHA256 019abb28c54b77809ffbedff141373a0517829eb731de3c5898a04c5311eaa00
MD5 344a038eef50661efd9b0c80e81581dc
SHA1 d8bf5f30f22d46c63887a02bbed353dc118e9660
SHA512 81768029e02330d76f0577105c787b92c87e8868b30f1d1ce2179e9be9726410b618ce9d03a5fb306572ed3c421146a31cf6180eeecf5feaec10d7d25dbc60c7
TLSH
T15E21A7026E1415458F5B60B1EE4C4258ED200B3410BBD2F747A9ADAD80A43C33DE9BBD
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content
Size 819B
SHA256 573e4a6ab74f49a5d06cf94b797fcaf1481aa3b30d7d4a2e1af38e2a2a7424a1
MD5 cb9378f1304b80b907591c9faacbeb0f
SHA1 e90442dfb9bed26bfa9b29ac908649b9c2063e7d
SHA512 6f6cd7947bc7b91d20b3109228a4ac65470ff74fd105249aba6781a5b806f6a258afd215e47bb118f03ef864e6be22926c73ce38046297d3f0bb487b4073ce78
TLSH
T1E80186977A456A83EFAB60F40C8C81709D110B401C3BD15681AD3E2505503C3E928DFE
MD5 SHA1 SHA512 TLSH

Submit Download

Cryptomining

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
Size 808B
SHA256 778bc08f493ca4dfe0d312cfaf7afb33c1bd89b7b15ed1d97dd858adb2afb07c
MD5 24147c6cb56d29393d04614970de6e7b
SHA1 18ba18f9b23b87cc2405757ca38b38db7d1d07b8
SHA512 cfe577b640166cff78cf9d9d5859f18537279b19b2f16419c5104743071b639d2d56ba3690abae87e6ec0cfa132ab9d9c8a87759a66bb58d8b99b2518234e065
TLSH
T1B8014187BA059792DFDFA0B10EAD86649D200B44287F521B91BD7E150A50386A92CDFE
MD5 SHA1 SHA512 TLSH

Submit Download

Fingerprinting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
Size 950B
SHA256 bce16db28d2822121cdf9d0de1d21ef48b902f989621bc429ba7bbad72803bfb
MD5 eca63f927fd13be728be5a9444778e7a
SHA1 2ac69de246f46b4f191c20c844fdedc9480b987a
SHA512 f851f917daa9d0f30e5a5779ea5399f889ef0a51de2090929f6124267b4c769b94936959c7a9a1ffe7065a48eb00a9b3ad67112aecd9e3848f847b8421b695a7
TLSH
T1BF1184837B0619829FAF60E18D9C422CAE210F5C147BC2968539F66606607C7AC38EF9
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
Size 837B
SHA256 63eba5b03094f30ce8bd78e0b23c9d3b2635ee20150d01ac701cdbab65044582
MD5 aff99f1dbae8624c203ee1d278a949b8
SHA1 f49445c534d4aba9ecff20ad58bd3efeff881f99
SHA512 6d64b6f0b0e4fcb87138276208b843e4304fe4d055397434ac87afda8a29a28fe83811a7f0f0b4175edf6c762463676493ba8ff39a26d571f25ffff40611d5c7
TLSH
T19D0152437A025782DFAB70B10D9CC515A9000B84287F525742687E5406A03C2A93CFFE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other
Size 860B
SHA256 a3947df85e0aa75977e1c051cd57682c03c33a9f7d7fd1299ec3fa31abd4fa08
MD5 6422a7f53aa5756edbdd564c284dcfe3
SHA1 979aef3d000f44d22119e2377f812263bbabc7b9
SHA512 7224970dc14daf6568d538bd09a48bb7df941960169a7d4f92308c6e463254651c9ae866732d4c15eb9033d954f4912cd9c38180cac3acf2fc3d3843ea093022
TLSH
T1321156977E0255C2DFAA70F90E8845289D110B4C183B8256D56DB9150560382687CDFD
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social
Size 4KB
SHA256 5ac215faf73a1913c2080f1a9ea2f18de1f5870ed1e1eded2d7a48e81ec0f909
MD5 a70b56d7451fe9c6e9cd1af571941ccb
SHA1 9ab5b95dd3b00749ec94eec7226ac11c8c2ee560
SHA512 16348b721768790d6aebbaf949ea2f6030f556aa310b16972396eae2a6cba387c8d37bcd6fe512f8652dba23d4e5c84934283f898378fed18f553928f77240b2
SSDEEP 96:/MmKwhubhs5Kcvh3d5hZuHrVRoatUSQqEmlI8ak:/Mm5xZ3d5hZ4x5mppmlI8ak
TLSH
T157811033D640A9932E5E0C51EEC45E304DD8067ECCA6F4D287B082F8B06D8977D64BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
Size 2KB
SHA256 4340fddb3109439c1276c294721733cc560b556bbbafcb268843ab3a62e7a56a
MD5 db3c0aa7c7473e44cc56bbfa42b72b96
SHA1 d4ea7c3acb99e26841b3696ccc9b10f0bedf1e17
SHA512 1f075f2fb2ba8ee9e44b00aba08729f96551b85a853aea006eb26c010cc85d3e0dfb302ac12b4878580cadb8863d895e2e0e30999f9e8aefc5012a30851b8b22
TLSH
T1A2411AE5F906D78ADF8641900C68C917DD310AC4287AC2BB41AAE16A09B43C22F9D9BC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\manifest.json
Size 1KB
SHA256 c64ec3707326494e05127307cd73b00a8e79fb8388a041c5b064a77cafb027b1
MD5 4a7ec3eb311ef0c53e23313af8120f9f
SHA1 a68fed6de0f831badb5ab59cb052b1a051f3e7aa
SHA512 97ecd9bcc57e28afe3c13950bb66b9b2faba74b79395e03f0f383466d4fcc7c070c9e2c3f46c7640ad4669afbe61bacfe9ec76f6dddb695e5e4cc474650bc674
TLSH
T1683143019D398E836BD9B6A20CCA481597210E9F0CA37E55339E2A094F1C59B96367BC
MD5 SHA1 SHA512 TLSH

Submit Download

preloaded_data.pb

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\MEIPreload\preloaded_data.pb
Size 8KB
SHA256 27da1f97c65a53ae099c0a538942d0891014877a29ab499fe747b0bf4787bc0a
MD5 4fbcf826e340a248d1ef25ac6699312e
SHA1 42ad8eadab929dba3d5ef1dd4438701085e95320
SHA512 38f35d6bbfdac97b2e09afc979c0e8f8a2539f36c9b25e189609ccf2a28070640e3b112a2ec3634dcdd9d5e7d1e7f7c9375ae60136060721e53a25ede3efd3b6
SSDEEP 192:bTOpyeS7AOv6EVp/m3FPKk15jjKVcOmQppXavFbeLfzrLyDppmlI8aR1:bTOk7AdEugo5jjK+5QppXaBebzrLy1wu
TLSH
T146129E95B714297A0E3920C24C50A35D7B72AFA9D6EB68A8C71D1B015422A4D3C38FBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_proxy.exe

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_proxy.exe
Size 1.4MB
SHA256 72f5fa54f582159136bc889f8abf3d065061a1d6e7d89a7b3bc43172b7ef69b5
MD5 cdb1d706ae371fd250536e8c8c4141e1
SHA1 1d35aa7f65ab77893e9f467eb61db373d1d8408b
SHA512 5dc0e05078d3c4728c77fc234264edd4e11d28b36c0c48614b8943f8faef9f9cae1bf2b6b18a31d55470d696470397b3229b5ae1d1df478cea0f88678615636d
SSDEEP 24576:qyoteh6euUHmEhK7eTuNdfxINakEtv9kWG2L1oaedpEukUoygGmq/S3:qfehjvHHKTdfxINPEt99G2Bo7EukU1g
TLSH
T181657B03B2D801E8D06AD1B8C7568536E9B2BC450B24AAEF0B90B7551F7BFE45B3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Uninstall.exe

Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
Size 101KB
SHA256 2b481e4f57e043978cc2604b3c449bf96a4f8443da904751e342e4a6ba91a705
MD5 cced3f12010655d6f44ab0d21e514d2e
SHA1 83c121653b91d154c94854be0a5e94834c8e5cf4
SHA512 fac98b6860e2eb9988002c9b7cfe837b9cdcffbb710cd22ba54601a16250280143c4301aea08beacabd5760f903031740f9ddb32d3ab1c82a57c448f39f7b044
SSDEEP 3072:YNRCywDw1DiJku6UNRD5bCs57y4jem7y6tr:YT4DtOUjD5F57y4j99
TLSH
T1FCA36C01BBE0C9A2F9F20B303C769B365F71BC265DA08B4B2350774DAD72781D92A756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

maintenanceservice.exe

Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
Size 272KB
SHA256 cd325dec9572626dd5dbd15454375b7fe3ee8f7c79560355d5b96bdcb2ca3cdc
MD5 e82cb16eadaa97c35d53ffbc136ee53f
SHA1 cdf5dfa9b45814ccfebfb7cf8357c7a47231b30d
SHA512 35d3605dce18ea05d777aad927e216be4f4e18a31d805946f6019e3895f75372f88cce865380121ee4371b45204125da905e3e1f0b5c52862b421ec9ba9fb8fd
SSDEEP 6144:Xr1XLss/oct92xA1YXs2lRBN2/iJPsfUrcAD:b1XLsswWkxy2lRq2czAD
TLSH
T1FD548E2977E408F9ED67827CCCA28512EA73785547A0E7CB03E489651F233D85E3EB91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSFT_PackageManagementSource.psm1

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\MSFT_PackageManagementSource.psm1
Size 24KB
SHA256 6abac62c62652cd752004a312506e97c054408c3f0715be6a08c6ce1ac33bc00
MD5 24324af36dfe7ca6f06803d29d3e1d3c
SHA1 45c2d409e78091ef611dc89929332bceb92fd4d9
SHA512 2663d390e82a3e777b0a6c011860f4e1f4d1b50e53b0c082e204c886909f4286f5e68f6c1e4ddbbbddf97054d847d7ff694546d606d6c49cc40316f6b01df4f3
SSDEEP 384:oswsj7wiFjIJEV/DvhbjGMiHwkoFbjOtvOb0sjbNwhFowuFY23oBbvwmTp:oYNjWKDv9ibEZ5jhIF
TLSH
T1F2B26942A7EA0508B7F33A886ABB45744F77BD66993DC65C018D644E0BF7E44C920BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSFT_PackageManagement.psm1

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\MSFT_PackageManagement.psm1
Size 13KB
SHA256 e752bdaa2e6e0b491d18581da55934233233024b190785594a2328cb00bbcdb5
MD5 5ad609e6184c85dc46552e073fc4832b
SHA1 98b6b66b9148ecda055bcdec54b2e346f0d2e67b
SHA512 a4df71421e2e7edf6e1653f7c940e870effb024d5aa8f53f31cc0f6f87ff7f2e4079e3380735d2e28f9d37ab6a39c2c713833c6b895c087c92553db5b47cfc48
SSDEEP 192:vdTLrRdatR9eyqEZkZfZ7zmW2t9dTLrRdatR9e5VCQBodTLrRdatR9eCVCQBhkZe:fuEZfZMDTYQTAZfZHCwmR
TLSH
T17F522D2BAB81437517B207657C59A055CB6C10BB7C3B0180F8ED91944F3BE68EB27E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackageManagementDscUtilities.psm1

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1
Size 9KB
SHA256 804348d26fa309a5ac25a8974ef3cb89aedf5031ddc61ffc2731b5e581397812
MD5 2a285b6d86a9335463e0dd495a65be17
SHA1 58634bcac6fc8c187d45841553d5cc19311e68e1
SHA512 18ff443d0a61954a360bbabd71ef186c32e2b94d61dbaa07451dd2c410ecabe7734a7ba6a5436e1bc6628f75fe1a8f3fb2c1089b2b7a30a4d445ca5335c4f002
SSDEEP 192:RVMzjcUtD8fzTuYzn0z1Cn1e2n1uCkzU5AAd0bd3Z25VTt+ZzJ/H820fHXcG4zSQ:RezLtD8fzTuYz0z0n1zn1BkzUKjZ25VO
TLSH
T1AA2276663B8742AA57B707746DA9D508D7B412A73C7B1A15F8CC80C01F72C98933BE1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackageManagement.format.ps1xml

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.format.ps1xml
Size 16KB
SHA256 bca2c040d4dc9cb89c9fad92d4c5932046a6b72ef05bc0db53695305b581c0e8
MD5 a25949afb1a94cd8762c5dba7fe6c130
SHA1 8825675900e2f95a23ab57d536064ee95d033197
SHA512 d4d6252bfc78b46abf96d41528c11cbe69ddbc7eb03af8e22ed79fff28e92d57f64d737e0b0cf135cac95bf69ee51672facb056e4a251f2ece9daf4cc91e7947
SSDEEP 96:NDF47dHFfvosjcWjc5QLHjcbjcQQ55RjcyyjcyFQpgjcyHjcyMQLItjcyKjcymUS:vqdHupc0MZQZWbSDppmlI8apDO
TLSH
T13372950B63C476D20636C859AAAC6569CE25715B1C2F7AB1F7DC930B1FB1D064233937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackageProviderFunctions.psm1

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageProviderFunctions.psm1
Size 11KB
SHA256 234efb10304ce3e51ecdcf7e97c75817dd993ebfce39ff9185131741c4a6c52d
MD5 06606e2e6f4a6ce2df2eef332e1b3a28
SHA1 346dd75ca7622823b2090c448ddff08f33e53d50
SHA512 2370687ec108506fe5809e9eb8040fa1632ec09fe836ec61ad0b0d2f4c418fe055d1ddc664ff0b59687c8ca4f9e3c6c137551e7af9a1e9551295f4fd23ccee1a
SSDEEP 192:zQCXHocucxy60CYrXJIahKE3bvG7K2KMYRaLPO+5USAhoAU9ppmlI8ah:zQC4cucxy60CYbhKE35b8O+zwm3
TLSH
T199325229364AEBA24A8B22D5BC76D151EE3D9113317C65B0F1EC89C8133BD64E239B5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSGet.Format.ps1xml

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml
Size 8KB
SHA256 bb4b54d60b078c0a12d73d72c36e418ead5b68c58f9e45d4699c6fe308f160a6
MD5 c006723af7508f75c2dfd428fc6a252a
SHA1 7bfe6f8e37602474b343db26e7a4f0230f4deacd
SHA512 81af5b48af49f317311b85048c1cfd4ea611d93c2f543ee52c13815549b074d7b463064e40bd7cbf108de031ae46a9d7c8d776fc7a5dc40bcacf12ef61464e86
SSDEEP 48:cIBa5L19hul2IJUl2YbC+w7sYTC+wU1nUS1+qSts/lI8sjeMAGpz:7B6mSl2iC/sYTCQ1nUSQqEmlI8avz
TLSH
T132128F0B53D47AD20677C85A9AAC5569CE21A11B1C2F7AB1F7DC870B1FB1D068233A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSGet.Resource.psd1

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Resource.psd1
Size 78KB
SHA256 102679ecc22322708c1e7ce9ec98f359271245c1c6a8af5938c76f74138b1986
MD5 1fcec347892216319d5e60fdc767e24f
SHA1 6cf24b6e54ac06f82899c68b0f691f76d20cb52b
SHA512 cbdd03ddaa28500eb373d77d67ae1822043cec9723b64f0049ebd486d7bbec25cbeea0716c728cbf8a163c8f5089f0fc7a04b8bd8674306708199186988db6b2
SSDEEP 768:oB7UuR4iU/eYAJB/cWh7TWqza1Mp66H80eJWj:+7UuR4iFYLWeMpPH80eJo
TLSH
T112833781A7F98658F6FB7F54AEB512A00E7B7C5AAD79D21D0648810E1B73B40C9B0733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSModule.psm1

Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1
Size 571KB
SHA256 bd9c4ef4cc103be517d71567949c4c48ea3570a41f4f315a2989e1c27066cc7f
MD5 f4226e3fd05c67e07050a219675136e6
SHA1 434629e1fb134100cce050596aae3a32726e8123
SHA512 249aed5acc411ae47c31cb3ab6df337d5a419f346058cd9afe619322a062cdf4cdb63ec2623496ef009a5c15dbd29523d87308d3635ff14b15ba7a699b107a3e
SSDEEP 1536:2CPFFaTENd0xr0ASJfDPuiX+t5nN9TtStsbB2qvLJKSB9nGjYGipewYxElzIFGJ+:JPFFaudS0at5nN9TtxbbZGMLv+
TLSH
T11EC476693A45825A51FB13BAEDB7C000EFB5207B60B84614BEDD85C01F71E48EB2AF5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.exe

Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
Size 6.1MB
SHA256 1f36c02719f92f42709d334a7d0cae6d56b2376fdfae0bf558ee7301951a3df7
MD5 c3e167e7e806ddef53d959e27764281c
SHA1 596198fa564c072db24ef55bd6d7e052e2601d9e
SHA512 f5b0baf750beb471106fa72ec4e1f60f653b43b4abc89a502110c00e12aaed6876b134c3c63b92b5f0c492832b482fa6e58a0ce6b8b08868af7d3e9b15bf7e8f
SSDEEP 49152:8j8dh0WHt5BUp3DJf5SUYLoDpgLjSTYlQcGeKAaLSF259ruMHwpXMi4FqJLd23Ul:TQRQyi36YOcP+Lvw2gAf+PN39
TLSH
T1F5565B13F3B501E8E05ED974CF3956229B357C4A8BB092EF259436E11A72ED47B38B21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
Size 15KB
SHA256 c45d7791540299868572d9445f4a69b9181102dbcf833ac5feb2fa69513da067
MD5 d885019e8e4155de5e6d3a456b9591b3
SHA1 481cc93a0a32163d26fc3c46ff4c6100850d0232
SHA512 44181b21ff01221207e3b24bdc0349af7f575ac1fa4515ee7917034dd8d020053371731a6343e43f0cdc53e8528fa3b7852d1b5b04b9bafb4c6a0300e5a04997
SSDEEP 192:RaNYPvVX8rFTsoWthWgWf9BvVVWQ4SWfMaPOoI80Hy5qnajslBE87QybppmlI8aM:HPvVXqWthWlN2WlslEE87QkwmK
TLSH
T188720C93D9B4E35BF98FAE315192C8436D384386042580DA1BD8E39D3CE73C6D798A9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
Size 14KB
SHA256 9436c35f59b6f71dd0e3b1a6c7936e2410f07e4ee2d7c724b3dbf3cdc506099c
MD5 49be79e54263d131188633882fdaf9b0
SHA1 aab67f1ea967e6e183ef7f6fb10dbedef91be09d
SHA512 cd368f2bf760514b64a76c86774f5a6e3e04a2af2eef7d0cbef094a2222974770e99d28a6a02f73e858b0eaa0502a68ea0ca8681edc7c1824d333652e6cfcd0f
SSDEEP 192:/uUk1Jzb9cKcIzWthWzaWf9BvVVWQ4mWmrcLUVT/gqnajKsrCOHppmlI8aB:/bk1JzBcKcIzWthWzXNz1IlGsrCOJwmD
TLSH
T1E0621AD689BCD183F98E68706295E5537D3B878A1C3A813205E9F2E93DE73C2D61493C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
Size 12KB
SHA256 b9823bda0cbb326c23527d900a4b389a95f564fbfde9e58e2dbcb44d1a485462
MD5 628a96c3e5d956dbc89bad3dd521dd2b
SHA1 eb1a92c72472d8df782fa4f6e447512a14e4e1c0
SHA512 5b6dd761a6040af911d7bec670f4f7315d43d5a51683baa478b8e235c0f9ae32cd30ad4207439b4c89bf90b4f065b0ccd48ae8958ed3d5176fbd63feb7697be4
SSDEEP 192:Ha2WthWKOWf9BvVVWQ4mWNOrVT/gqnajKsrCkTppmlI8aS:Ha2WthWKTNz1IlGsrCgwmI
TLSH
T1C34209D3CB688403FDDB6EB007E9D5937D3867DA1820816A15DAF5A92CD33C5DB00A6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
Size 20KB
SHA256 9b5e3c7bc842c50a125ebe3d6b07e21955561c03d757efa7e6baef7d6ca0d9f3
MD5 eaac42985d5a9514eda624909a22af18
SHA1 eab6af969f2a4149dba2b33bfad5c7740507d028
SHA512 0666d1c491538d56c72986a8c36a900cd96ad63f8b5ecf1909bf0b09f307edea7ffd8e878e153fecddf79b147c00f62272b11b580309053885fdcad5eaf847ad
SSDEEP 384:8A/kPLPmIHJI6/CpG3t2G3t4odXLRWthW/N5GlGswzBwmM:3/kjPmIHJI6manplM
TLSH
T18F92326B8EA42E11D68FD7F3B5F6C7C62A354FC104C07375E26B95483841AD9BD42E14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
Size 12KB
SHA256 200950855d9db63ae418f80a418ed8460f0a351c42a3190fea6a1ae0047d6d91
MD5 d1c6f5aa307f3867c45383575bdb122d
SHA1 c7260f2db315a14ee92425dc18851a8749506aa0
SHA512 b8f7e237e19f3a1b5d2ddf3694603dd49df7f3bf4824ace2b41da1e67ce522f3c5f3314b155e6514fe437a8d2ef16cc05dbc7326e4fcbb23e0debbb53ce80722
SSDEEP 192:ZjfHQdufWthWCWf9BvVVWQ4mWMlUteSP+CjAWqnajKsN0YppmlI8ad:ZfZWthW/Nd4P+CcWlGsN0+wmD
TLSH
T121422B939AA85543FA972F7052E4DBC3BD3D5BC2292182664156F19C3C837C1FF11A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
Size 1012KB
SHA256 7f798db7ec45dc1a7038876342cba881d089babe6ce4ac2b951b12860ea74efd
MD5 69de7ba66a20aefb53945410cee7ef46
SHA1 d4b1ef3f842a2535e4c19d6fce0c3a0757b921c6
SHA512 2c00291af323366c9274d304fb67b8708aad56850a45bf38dd88a480508a80c77d045401372cd8f18d12ef37659b57b950223865b304d1e9171942a0342ee300
SSDEEP 24576:EsKxVJ/pRRK0Y/9fCrl4NbpjONcncXEomxvSZX0yp493:lKxDPHQCrlQBXxt
TLSH
T16C25AF64FA5D0EA9D57BE13DC91B560FD572380207608ACF03E64BB96E2BBD91637320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
Size 37KB
SHA256 45dca7eb1aebf73c7f8b91d5a78b10f8da56284f7ba14f620dd809f3870b6c64
MD5 a9931b865dd2a762dfee5881af18f39c
SHA1 de578c1f01bcccda06621b296f238f33b2596dff
SHA512 35291e1331514ca0c20202583e6ced1721cf9c1660468115a580b3604643de35cb6c1452146e43f63c3fd43c26d18999e008f87252e71fb7c4feb355093405dc
SSDEEP 384:1JfphjEpTUUtKldl3864/vc5fqiu85mIlRWNQQbz6Yf7ZJA/U3qJrWr2KW8KLHRg:Phh4pTUUtmUwqiu8oSRjez6S7fqHwAef
TLSH
T18F034A9467B88446D55B86B0C4D39E17BE3CF9654B50938F0BA4C29D1F23BD0AB3D32A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages_zh_TW.properties

Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
Size 4KB
SHA256 29344a8a9526c26a2a58f7f3d35eeb814e7bd5468b81f8cee87ccaeb71848db3
MD5 8c6edde9dae86f69a120f1f7e91cdb0e
SHA1 7a9c8b5903ace060f453d58a6669543ea20b858f
SHA512 93b09de6e3f286c9fea2f551565238ce486dcab9eb95fcfdf13bf177136ad7a51e2827ed7ac2602aa04365db262fc627af80abed7431dd3c8590f8e3ff3a0e57
SSDEEP 96:zMWCQv8u9/IzdG/JvFWlHaQzWy/owZFomWdYQCfQ/ydQCyqjUSQqEmlI8a/:gWCQv7VIxG/JodaQ7PoHWQaQ/6QCMppD
TLSH
T1D79171BE1A1622432ECB80F0DD99958BDB62EE44B132812BF5FD6D01375635BC913A78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xalan.md

Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
Size 12KB
SHA256 45a7a2f0d1f8d75cfc5a8a56044d7ef079025a812f098346a13e58c1e8217792
MD5 6f2d9c7878bd383f8db6cdac6795094c
SHA1 fb19652722a19b34c4aa92969cbb03d82c4d22d3
SHA512 b660713d5fc5617d72e73711c118925f0a2af3aeca9a5e6334927e4bb41bf5a538aa11d5366ffbe0c9fc730461410b86aa8bd3003c1ebe6c97a8c28f774b8c85
SSDEEP 384:ulsxNRrM21TiA+8VL+EKdXNt9xkTYE3owmj:ulsxPBTiA+8VLtqPPkXSj
TLSH
T12142857E764C037706C201A2AB9B64CBF21A903D3B562524315CD0781F5BB6593F76DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_2.dll

Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
Size 183KB
SHA256 899ab5484dfe7fd3b420eeab843c5d53ca626e153c31bef05f284cb66510a106
MD5 a71cf1282c2256ea7eaa502020c164f0
SHA1 a99778b01dc2685e360bdf1d4ffeff3b5a9669aa
SHA512 acda13683c37f39bc50662afaf9dc0839e42bf4326c49a4148bfb1314c2258926d8be3f9675be2206e0267329988429e84e385c15bc4653076cdc95d716f2712
SSDEEP 3072:7p7IsDQtnEzmvmebbqU0KGGYU0ZnEsInNgo82lfRrU/9a7DvFfyMQyvS:7VrDAEGjbqUXJEnEuCA4jFf2yq
TLSH
T19404484AB95901BEC4A7B4B8847A312AF533351447B4C98B1BD30F2D4F1B7927EB3A25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LucidaTypewriterRegular.ttf

Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf
Size 237KB
SHA256 2330e58ad0ceb6db88f9812169b503e4929e9b7a4f73d6b90483aab82a672d55
MD5 3f2714b3f493cfc890ad4fe1b8659a2e
SHA1 961edc924d1600b1fb166cafcbc2adf1ee6461f3
SHA512 74b8e534b7e8fd248adb4b2b4b1eb4baa182c0a99e784156243fbf42b9657c1a76462e9e8a0dec384afc798fe021a71fe48b1e8976d318f16e6fe228cef34c84
SSDEEP 3072:VwzZsJcCrn271g+UGFDUnrrHqMyBtlc3+fzx5R1zeqZdDgfSkecUfEDpEXzSyPMj:GWcCrn2C46Ak+naqaucYEDpEX3gZoO3
TLSH
T17234AE1FD397CF3BFA22207AE26673E3D67274036F0BD69BA68D5631C0C52729604586
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IntegratedOffice.exe

Path C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe
Size 3.8MB
SHA256 73fc13e7e05370167f27a5380fb335506cc013f7f94f2bcde88fbfbd9b00f981
MD5 929020260f4b9ace3f27a93f065b3a74
SHA1 bcadacaa81ebcb423222821c2a3225cee7d65437
SHA512 8e8dc80bce4468fc63d28a3b7bcc658b5a73c108b1de6792fb30e7ae1afd2f92b0129201d4a1f727c92f4c5144e63873beac11ff319bcb5904ea166b003ad487
SSDEEP 49152:ZQIlquu1Gn1jKm4ptlQzJWwbwLqd3ZrzsTfov3/euNw5TScWwJb9DN5J8NRV3THq:ZQvGAdlCEL8c/bRNw5C
TLSH
T1CF064A556BF880F4E1BBE178897ACAB2F7B278421D30A75F0291C66F1F336505D29722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-environment-l1-1-0.dll
Size 19KB
SHA256 749fb1a63b207fb17b596096369ae2b1227cff200779fcc3ced0dc86cfd33d72
MD5 6813886e1f7f0a87d985c81f1b0c8aa4
SHA1 eb6fc66f2520473b609aab6260128d4cee7a44ec
SHA512 d7f1147003d3280a42933ed390baf58eb9656c6b0a6e6bff65a602d054e025d29954a094bda913c5b87a1418987a14ddf71ea783461573cadf58a5685dc1fe7d
SSDEEP 192:L4WVghW/mvSx9YOCAs/nGfe4pBjSfXaK5RWNArXVWQ4mW3nvYXqnajL1dHx3tKrx:cW2hW2SUA0GftpBjWaC1flXBtFwUowmX
TLSH
T1A5921A824ABC9183EDC75DB052F8EA837D3CA7C21D2051261569F5E928C73D1EF2562D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll
Size 20KB
SHA256 4464f0c7c445ef9ee7e4ebab01a563a89ec392d09e91ff2605ca1a81a457f9e9
MD5 46735ded902cb0e1bd18f97760ff85a0
SHA1 6c51a6d7ff3e38e5fef41aafc893de5c7059efa6
SHA512 fc44e2e23a10bf849393c9b897603a3958e8b9a49dc2f7ba9ae8978133fb899faec3d7d4171ec6362672e2c5be07a318b5e2419ad513ade59b60bfddec59202c
SSDEEP 384:Y81nWm5C0W2hW6SUA0GftpBjGO0nQlXBtFwiHXwmI:YOnWm5Co3igKyKI
TLSH
T1F6A229834AF8A943ED971F7162FCDBD37E3D97C209515222802AE4E829C33D1AF1596D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

available_for_trial.8n8jl9a35278sv3z9phhv75zdu33w.vnr._R3gzYG

Path C:\Program Files\Microsoft Office\root\Client\available_for_trial.8n8jl9a35278sv3z9phhv75zdu33w.vnr._R3gzYG
Size 21KB
SHA256 4be7c92475124d5dcbb0a05054cbb0739072e67964ebd6a676bde25fde217328
MD5 34431d4ca1bee74222f1e56f8654eb9b
SHA1 3159c8431e22077a41d9157ba2baad2861a6a5d6
SHA512 d5088be8ce0c0cb028613b887d2b131fd484a6d573b1c352c08e7fab1d7111b41eb53c1195fb69b6dd99e81e603905478cf90e1f3b3dd10d2cca1d5c44887d43
SSDEEP 384:EPEzgW2hWF7QA0GftpBjOlT5lXBtFwg+wmC:a0E6yiQFyRC
TLSH
T186A2F88385F8A943EDC74B7162FCDBD77F3847C219906126416AE4D839833D4BE2692D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
Size 325KB
SHA256 6dced91a7f890eedacc3459140c967da3406e3ee6ce793bc09d41dafe5b0bc2d
MD5 ffdc4defe083e78b7a4d324c70369bd9
SHA1 9fd068fc39ab50e1aa96dcfc812f0c38955b69fc
SHA512 9e423ca9b59c726cfcb7ad266ed96f549f7616235e5b0677a89c02ab45e3ed2d5680b97fddae2137fdd37ab25c8cbc253764b3ba1b65452325b57fbe983afeb8
SSDEEP 6144:tlBybiGsY4lxA6c40PMjoTrDPbv+Xipv6wfnWzgcpw2eR0:tWbzsBcPPlbxpvIzQe
TLSH
T13164299A7B544CE6E923D13A8553854AF3F3B8006B66C3CB0265835E6F637D0D93A732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
Size 359KB
SHA256 229178b691f99205e4ad35a1b7d49826c579933445345b4756d5e3414bfa05ec
MD5 44f7c836792f6b893e0a4cbc4f509464
SHA1 7d57fd2c9a3e566d99aa717d1778a45d224a1be8
SHA512 9120a93c7139081c62967c23e9353df3b679170234ca202cf2b9a5b2f5c2931e78c604dee96406be627d2f7dad6b98569d4a7046fb6c0b2d0ccb3481cba14cff
SSDEEP 3072:SYXnkAiObjnmzH0nZxbwUSEHuKJemWtaOkic9VSgtH/5BhhXarUX1RdlWiNiC/0k:SAkAvbjnmMN9XVFP7/09FS3
TLSH
T12074E567BB9C8CD3CC21A0790EA38348E7B268550BA1D3CB1195471E5F3B7E4AC3A675
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkeyconfig-office.xrm-ms

Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
Size 905KB
SHA256 93898b163bffc296c2872d4a129529645f2de34d81be1a1f9c09893b9ea850fe
MD5 b0a18e799fb86c84ca4070a41c74b6c4
SHA1 31242334cd7d580eed7ddf372ff0a4496f1f0996
SHA512 fbf6e1821f5f2a9a9ff6596f488a7aad0988e8e73784b6581436674ba0231e36d1b5d548732dd68e73f9db6d5e859d553bd9cd3f37971f80464000da8a318b84
SSDEEP 3072:pdm23DPtQYh24ksT16eJA9dx6IclDUUfAVbreg1PQMSBN+Rr9PRUnlq6Z8AZlkd3:82d59wr30pBIZUOyI1cbA
TLSH
T174157393CF239D159F66080AC5FCC0EB157FBBAFC612A5BE5A1ED26C86AD541CC82710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkeyconfig-office.xrm-ms

Path C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms
Size 621KB
SHA256 94620eca6a13cf1e7c95324f0c87f058130fdfa99a726c20e2e2eb6cb270ea3c
MD5 2f880243963ba5f18688f8d8155a7f4d
SHA1 66c73d9eb2d064a25aee1fd6dec9f6c31ffe373d
SHA512 37a384fac249c28f270cd3356be7f05da167914ff21653f0b2737764d13dc4880a65fec0b9c09449cc523f25597ef4818246c1edaeba73476a2d491f06ff2ef2
SSDEEP 3072:Hs5p8Bkf75Hs0wPi1f0JLhFzCFLwVlpTjeTLiMitTl3Hl5bT9w910sIJBvXMWprm:89OnUtiGNdS+wX2IeMG
TLSH
T177D46393CF139D159F66084AC5FCC0EB15BF7BAFC62164BE9A1ED2AD86AD440CC82711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6pea56h4.1tr._R3gzYG

Path C:\Program Files\Microsoft Office\root\Office16\1033\6pea56h4.1tr._R3gzYG
Size 278KB
SHA256 f3189d56b344d10c672011058073fafda898d23e1d462b5dd6e61467df6c1d67
MD5 5606c2c4991a166bf52b917a5cae8fe7
SHA1 b3939356e24cd3172a7b324e5edef2d2462ee648
SHA512 a99c71283f81abcb29ee3a2c15464182445c27ec8b175bbd51e19171675b586861439ad711874fa3d8d6c62134932939edb3bc490137a8ab1adfe1817c6ca6be
SSDEEP 6144:ysoIek4/QUfG1zwtOT0CRNB1kS15Ux6Ud6CAOVhwJ:yFIe+kozwtOTrp+Au6UdLACG
TLSH
T109541264E8003A26D2977238DC39C59D7B26DB1B5263180EF2DD399B7B0C591A91F3CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

available_for_trial.ev37.2029u8pr._R3gzYG

Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\available_for_trial.ev37.2029u8pr._R3gzYG
Size 12KB
SHA256 7741286c2fc159867bcb51702a5bcf5b4bf00213d176d76c08527b704b4ccbe5
MD5 809c7c9042ca9ab6688cc19a1a984ea3
SHA1 74e5aa4dd8a2dbc62c16b8984e3127346d6dba48
SHA512 f9d41f6ec3e93464a15b093dd45399fb20a6ae38b7ac471c6b55cb1ae3c46283810fac35275beb2954843a9c942a5c1c79cad66957418ff7cc4616803b5f9044
SSDEEP 384:8omOfECDZZbwRVsTXDCLGxceflSG+sS9cewmG9:OgZbRTXrH9SG+/m
TLSH
T14C429D679A032B32D77281FDAEE12068F4105FC1D7C6E46B7A1538C47E4158A6B1D76C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ISO690.XSL

Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690.XSL
Size 265KB
SHA256 a954c015905e5143bb398596a42b42538066ee08e924683f428f2bd167969ec3
MD5 c2359bd3cc24a6f246fc2bb3889110e2
SHA1 ab45eca49f01ccc32354084ab55f26ef5bdbe463
SHA512 fffc9aba831fad1816f6b08e7e8a907b2faeb2fdb09d156deda65fac5fabac699ff26509eb0ccdca8190e00781b33b811015fe16079cf1b0bc6e2c5793a338fa
SSDEEP 6144:JwprAi5R95vtfb8pDbgWPzDCvCmvQursq7vImej/yQ4SS1apSiQhHDOruvoVeMUD:Wn
TLSH
T16D446AA5E6D9CF144BB1F23FD8A53092EA1DC87B29341D41F1DC733717AE948822B662
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-1_1-x64.dll

Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libcrypto-1_1-x64.dll
Size 2.5MB
SHA256 504f476256b4ab555248c9b195fbfa30e0e77af02e5cbb3ee5877938414802b9
MD5 7d617a17efbbe2957e309d783716db1d
SHA1 a18650dc19adf04f33dc97f54b98f85df6d26f23
SHA512 a0760f01bbf7e1d810e4c8c4dd8322b81cae4b160444adbd6ac5896300f9914dd9cf4414ed3a89b108d3c7b86b85b4f39a4cbaa1e3033207cf135ebf9422d2bb
SSDEEP 49152:NBTQEwdGlZeVaTewvgfajFu/4TkPmEYdm1CPwDv3uFgsPc:3QEblkwVjFuurEYU1CPwDv3uFgs0
TLSH
T15CC58D1AA7AC0584E57BC27CC5530B17E3B1B91A5770ABCF09AD45B80E23BDA273E744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-1_1-x64.dll

Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
Size 633KB
SHA256 11e409c64f7d0b913f7da28d188827bc3e554c8fde3b4eacefe7c63742bbf69c
MD5 989694f5f1f23860284e396616fdefaa
SHA1 c430170b5f501b4add7ecebdb78c6892c955d1e7
SHA512 9f063dfd7aada95f370b89a5084e6db3a1a5467395f919604b6d8445dd3732252274d3cd1d83ca4c7a1fce85b34397235c2e277735247b05cba4a7bf35917a79
SSDEEP 12288:8UjT+1GHdj/ku9tZwWnuL6x+H2/PDD34I162IH8AkOcZr78jNfXQCBcSxb6HSO5b:ntTxG87npgcm8
TLSH
T1BDD45B41B3B415A9E463C23D86638A16E776F81513349FCF07A8997B0F237D82B3A365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcr120.dll

Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
Size 941KB
SHA256 752279858b5cb5d6e765180c7650a574de15eea15359cff0e4530bd88278093d
MD5 0ef93beee2f89f3d737224f63f14d848
SHA1 ef47c41fbaee48890bd1c455c13724f98988b161
SHA512 f3ee719d1900741dc886ac6c6ef92113aa61f885a10dcc8fa6cdb5cb259dd172037c3c315c996d7abff21926ff12b27fd3da4c2e4393d9d243aaa76eb2536efb
SSDEEP 24576:Klat+j16xw/86yY4B9xn0Tbcsfl6mqLkO1kCyomWym2X3:qa9P7DZ+Mk1CIn
TLSH
T12A25BE4672A106FAD463D2B4C9A79607E2B2B85B1530D7AF02E4866D3F23B30975F317
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DBGHELP.DLL

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DBGHELP.DLL
Size 1.9MB
SHA256 a818a126b06552e76431cce71d7c6d2e374260765974000cde07e438076a76ca
MD5 b4031cc7c892905ac2a68de0bc673b8a
SHA1 fc5fe7c04c1e1afa8d6e1217ed503d0f138cd381
SHA512 37ace138a1264f8b8ca35e0b8c0104733da7babeaf5dbff19149b5f2d7f6ef523475a025a27b332a24bc2390c7f6559e552ec06f5e7de15a5edb74cc0a556275
SSDEEP 49152:6Kf1LM1TuepykjpCrmJHUnf/y+wEke23Xd5y8:xuTuhEh
TLSH
T149958C5797AC01A8EEBAD13CC546851AD3F078041B218BDF25A8C76A2F13FE7573A361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sql90.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql90.xsl
Size 128KB
SHA256 83f11ee824506fe08e4643ab362430e44eeaea95e4271b8b8729766e6d2c6f51
MD5 c010939ce777d80d1956450a9c801292
SHA1 561d114befb55bbe20ec0d517668d49ae1a7a502
SHA512 4b81071688b11dd5adc6ea1e6aa37ae80d821241f26fd7ede9a405f93943e5cea438f1091b8f861883de9be009359252ad83c073625271d6f4ad495357c5df47
SSDEEP 1536:EHSSL3BxDWkfsbqAoMZ4nl2Kr9qTSXDX7X2X0XiXuEPVOLDqwLJz:EHSSL3BxDWkfsbqAoMZ4nl2K4PVCPF
TLSH
T1C8D3E1D0EA56DFAD573830BDE9B76440E7608166AF2A1693F1CE633317DA60CC2B8513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlpdw.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sqlpdw.xsl
Size 100KB
SHA256 301876814e716e02a8aafc90bde9b5afec072b50dbc45e8e5cefa2e4d88446a9
MD5 2a7123fd34fe328b16bc0e0bd3d7d4d8
SHA1 5af10a81aae9fdd02bc073bd622b9a7285a09f87
SHA512 0654831db209974d4ff9ac2f6848dc0fd3f1c3b22aff7b896ac878b47a5731a3c47b279f76c85bfb923903ffb92cabac7016a458c1c60e82bbba5a0ccbe88b68
SSDEEP 1536:dE3BxDWjibiElvK0TSXDX7X2X0XiXuEP9NpEK:dE3BxDWjibiElvKgvpEK
TLSH
T1C7A3F3D0EA56DFAD573830BDE9B76440E7608166AF2A1693F1CE633317DA60CC2B8513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp120.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\msvcp120.dll
Size 445KB
SHA256 4cedd22d191aad9e22f3dc4550377a705ffd4023dc34deccfeeda1dec9249752
MD5 7baa6b8ebb490ba825f5ad22401ac369
SHA1 5549113fbf84b38324b2ef5db3d772893ffc576e
SHA512 f26cc5c517c271a33f8edef45630a2bb21bb94482f7c53f67fff5eae2884fe2330d4c8729ce34b263ee0af1283c7044b8773380e78b7c972fc664f453b442e3a
SSDEEP 12288:g4XWeWENKfCv9tYKt4jIWhUgiW6QR7t5ss3Ooc8DHkC2eXLS:NXWelZv9Gi4ks3Ooc8DHkC2eXLS
TLSH
T1C6A45B237B864CF2D19E53B231C9531557FABC2541B1F343ABEEE1693FA6282E123611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\msvcp140.dll
Size 440KB
SHA256 ec74e7e0c64545b36213781f243bd47e3216fe2ec9dd01117d1c0c7a7c5cb0b6
MD5 f1862452b042b5e7b2e203274ec53362
SHA1 5076413d93f0b89ea055bb10bdd16d259c4e5898
SHA512 8b648792b5bc768ba1e50e5bb76cd2b2a04dd3118a10c8b9bad5db5d6435f38dd885cc43fef395064a0fc8648369d0ae73fe0be281a5f2f8f688e10e8b0657d5
SSDEEP 12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWF:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eL
TLSH
T130A43A22BB464DF2E59E53B671C5532187F5FC250360E3C393EAE0296F662C2A733691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcr120.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\msvcr120.dll
Size 946KB
SHA256 8fc7a96a673df2aae71df980042e72c008ffda0b298fee37f7164bf486339cde
MD5 7e156f475c6febde241cef829c84a65d
SHA1 496053398a697ddf2583726aff301174fa631642
SHA512 e957c39f804fd7549bf214a426b57e19c0c1edd6dce0ae90d9b1a01133b1a5a74399356e3a7b8b630193d49663edc8cab2e3337d754416558028780722668fb3
SSDEEP 12288:LmFyjz8amSUqke1b3SErOfnQ3uIbwYBdIsYvT4yolvgaN2lZxmgYZp6+N0IDYi:LmFyjzMSPke/OfnQ3uIbwuVYvT4hpQIl
TLSH
T1EF25BF12BA82C0B2D57302B11529E672197FB971443598BB7BD98F0E1DB46C0FB27B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ucrtbase.dll
Size 879KB
SHA256 ba0c89d1c4dd470f4b4823dc7d5a8e121b7d5b6faa4e709caee733c490ab306d
MD5 0503f4f7ddd8b7cc5a5bc102bb571401
SHA1 1024843cb1a4803ad0d1861e58f2840a2094ef29
SHA512 0a31a6fa7f5d39057ff0f1eeb6603dffbf4f16abd05c734eedd3e65115b949664d282df20a07743743dff8f8287141a5a645e7a5ff5329eedfb6097014d8dd57
SSDEEP 24576:Nqaw9+lq6qElzORB37mV60TZAty7dmcvIZPoy4NJ5:Zw90dORBFAZjLr
TLSH
T113155A227885C1A1CCEA71F81A9EF232057EB6944F21A8C777D41FFEF4241D02A7765A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\vccorlib140.dll
Size 264KB
SHA256 d2501651c687fd2a9397714b7e18bad71955275b11b0ccba9a24835479ae6424
MD5 7ba9765549086eb81463d2d31a8d0438
SHA1 b73b6c1bfcf8b28d7f13d7979765ea2d165e6f55
SHA512 fb8f5cccf074f7299b10a3e20a83bbc20493c8b1e1c87e5d928fd19deb63aa2ee25e2cab5b60bd0e67d1a586c4e3830617658faba27e1a30656e0660d28d5c4a
SSDEEP 6144:UGRqOVlbqCDAqsfeP67SKJpxL0Me83g/2WAOgo:UG0E48APlOWkAOgo
TLSH
T190445C317A8CA8B6E57F1338E994967810AAB0804FD1D6CB2D90DFC91EF47D05D34A6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\vcruntime140.dll
Size 79KB
SHA256 07424a99743b4864c6f956e786407bc9330a501e0ade187c376e8caf5667cce2
MD5 3c900da311e0276d43ea2b435fe49ec0
SHA1 590959d3529f369789b4ffd9ba236d90dea9ad78
SHA512 6d7fde5bf21503a9b09860caae759813c721bd8b25efca8a0b6ad273b7c11ada5c26e4a96bdcaf8c07994eb022bdfad6da05f4c02cf2d4c93ff33727d945752c
SSDEEP 1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+LW:lw28V55At/zqw+Iq9ecbA2W8I
TLSH
T1D0839E12B4D140BFC5668470527AEE036B3D9A610BE58EDB6F98AD841F79BC2F730217
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hive.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
Size 80KB
SHA256 5f7571c56337b38753b15661f8fdc512a837725997e5bac014118d9a2a936c16
MD5 c658426825fc5a05dab7db1e99417e27
SHA1 d3384e8377b499fd1914761194a115b59a034854
SHA512 d33916523cd3ed0252157a4565b457fcd5bc943d98833ca2195e4fdcd3a17982a25efe5d51f5be9a6e678ef72b525d79fab36f2871b9ca4b7af9cc51d09088fd
SSDEEP 1536:xHAKMs0wVYnuGaQGqhn7JRPF1lZ6t606F6w6z6Vz0J0AKbTN:xHAKMsxVYnuGaQGqhnFpz3p
TLSH
T1AD838990F1A9DB691B39302FD8F76482F727C87A6B7A1581F1CD7337079A948C226523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

as80.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as80.xsl
Size 17KB
SHA256 635e78140fb0c97bc3d64d6e94b50a3a7f461112640ba922afec8bcdb62ab9e3
MD5 8bc3723fa0210da2d071d457c8ca8310
SHA1 08aa5c595baa97e1f1d546bda9714140aeec6294
SHA512 66dae6936105d05a8ad58752d0c5268656532fc07ab88175220d5b319fa7a3bc7391058dbbb71d624092b43a841827dd2bf62fcc2528ab0ea16e7a63c85c3f2a
SSDEEP 384:f+XZiiHr3iHrnFBbs5zdVK7OTIibH8wmw:2XZSKdVKyTIibH+w
TLSH
T13382EEA0F186DF2A0B25702BD8FA6442F327C8763A392291F2DDB337174FD149225626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

as90.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as90.xsl
Size 20KB
SHA256 746f0c2749a93bbc2db5c87d924c1a17962dc61bf588dc2bc794ccabef9be2b3
MD5 6a5d7bd9d094ea7d9cb777689b5dcf1f
SHA1 dc92ae534e8489b2ba73091dee5d197bdc4ac6a4
SHA512 a67f1ccf265b8ca750dd7d4c22583538a2c88456ee226353cf68a39e419cab9a55b6e9d76d13ee9e55a2397284cf904bc371d8d702d5278039fa113ee5479af3
SSDEEP 384:fwXZiiHr3iHrnFBbs5z7l16VKuOTIibH8wmw:IXZSK7l16VKHTIibH+w
TLSH
T1B392EEA0F196DF6A4B25302BD8BE6442F727C87639392282F2CEB337174FD149265536
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db2v0801.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\db2v0801.xsl
Size 30KB
SHA256 c35ee0653ea53682d88f90de2137c7c90a832e6dab3cdab75b333c4d62b0016e
MD5 13e2d8570e20ba4996a7d84f093d42a4
SHA1 136441ad72c100235939856f577e2af61d136bdd
SHA512 6ab9462bc69b026086da2559258597459469f5ccaf8af4c490fb8b918e2f3a40f6d77ea15359a1da005171425323d73e40de20c4f3cf90e0e74596b710e6a3ce
SSDEEP 384:fNDXZiiHr3iHrnFBbs5zs0wVgYxDZKNnYhnnPnKWskcV/k5A5T/wIibHuwmX:lDXZSMs0wV3xD8NnYhnPnKK5A6IibH4X
TLSH
T1AFE2CDA0F195DF691B34702FE8BE6442F727C8667A391282F2CDB337078FD149665522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msql.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msql.xsl
Size 126KB
SHA256 d92ece7e97613a05b43adf933bfdfc81b0f8466d52a1e762836b6bf9abcf1bd8
MD5 7d9ac0f7df53e03041950a168a71a695
SHA1 694d3fc3f7f309f7d9bfedafdd53d01df3b92ebf
SHA512 6e0475df13e3aff2fc026e4ef197ee10bba01804e2ad2b7098c020ab4036b4bd0c5d9928caf1d257592760e32555ac28c2198924ca2c8bbcfdbd6badadc670a5
SSDEEP 1536:Mry3BxDWkfsbqAoDZ4nlUKQ90TSXDX7X2X0XiXuYNORWtLDqwLJ4:Mry3BxDWkfsbqAoDZ4nlUKXNOMPe
TLSH
T1C6C3BDD1D95ACF6D173830BDE9A36490F7A08056AF262693F1CD633353DAA4CC6B8913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

orcl7.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\orcl7.xsl
Size 94KB
SHA256 d229b693b25252e2d845b3ce1002363d269f0fe941a97e550e86b0204c4d6e7f
MD5 f56494b15b55a070de881239fd0628b9
SHA1 b026415dcaa0b65345937dfe7709bca2dabb2a47
SHA512 91ef3ace825b1c0353714ce0c05c402a5497b7385b480eaed23010f1e9463d4803c1ee900438f3916e4caf413cb67064e36ca59f28ca34ee04a37252e66db88d
SSDEEP 1536:p/bBSb3BxDWLY9FHZ49lQKlRsZILQ/BPApuXOIezuXOmesuXOAe9acvz:p/bBSb3BxDWLY9FHZ49lQaRsZIEBYpux
TLSH
T19893F3D0D666DFA95B7830BDE9BB6440F7608466BF2A1283F1CE6333178E508C6B8517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sql120.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql120.xsl
Size 132KB
SHA256 e192d003d15ff679a1eda1b6546eddd05d18afd251615f4231dd365c415d5a5e
MD5 e2f242be57bea6123c79b24aa3e7ebd8
SHA1 e4175d1de0881f922a9c4accf4478d693f9d7d12
SHA512 9d959868b1b64b29848e0a2ccb811661d19fe3604777671235c11b8c1af8343296e2b1f95ed15f319d6c4f93bd4489a4428a4ccb38e555b76a4da5d9730166bc
SSDEEP 1536:CsNSL3BxDWkfsbqAoyZ4nlUKy90TSXDX7X2X0XiXuYNOOLDqwLJO:CsNSL3BxDWkfsbqAoyZ4nlUKhNOCPk
TLSH
T1FDD3E1D0E966DFAD577830BDE9B76450F7608066AF2A1683F1CE633307DA60CC6B8512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sql90.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql90.xsl
Size 133KB
SHA256 1bc5455aaed15174f7433e06e81dd6f12eb666a42eb7a2e865e122042fd626c5
MD5 ae70b2d872ec5ea81682683b086578e4
SHA1 6ae4f286baabf2468a18f9f10e0702e3e66bc557
SHA512 37e740e9cb4062aa2c412250a5cdc96a83238cb113be5f188b9134a1d2f92d5a122785a42b192d9c63cf2a61180f580805321e6eb87fe9fcb8ede7fd0fd8ad51
SSDEEP 1536:EkwSL3BxDWkfsbqAoMZ4nlUKy90TSXDX7X2X0XiXuY0AOLDqwLJM:EkwSL3BxDWkfsbqAoMZ4nlUKh0ACPm
TLSH
T1C0D3E1D0EA56DFAD577830BDE9B76450E7608126AF2A1683F1CE633317DA60CC2B8513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlpdw.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sqlpdw.xsl
Size 103KB
SHA256 54e0d4fc2da8d56230db1a7146f3da0be77543439aa6cb63f59b593ec2122e00
MD5 c63603904b749dc5898f973e45df1fd9
SHA1 4ee0c6b93f48ba87087d94870af129fb207b1b2a
SHA512 4536da00f96eda73e7a7063d2ddaf52e85d1bc488a6e1aa618031bfe99222c78569cab4962e7f8286d0438c5049affb826d862025d7e1412f2a0724237401124
SSDEEP 1536:0l3BxDWjibiElZKCTSXDX7X2X0XiXuYh92pEN:0l3BxDWjibiElZKKKpEN
TLSH
T1E2A303D0EA66DFAD577830BDE9B76440E7508166AF2A1683F1CE633317DA60CC2B8513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trdtv2r41.xsl

Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl
Size 104KB
SHA256 f9ef8dcf3d33757b24d5596051e90a53fceedf198ec47042c1fe1c832fe4d222
MD5 a6c1a4f9f3a634d4385dd306c67de91b
SHA1 5b52fafcacaad376afe0d5e11f4e5217a1c356de
SHA512 af724838b4a870c9e0d7c3a4649e4be5ef154d14d01179e1f75f3872dc6957073e275330543453dbd633514f5a2db39ee66079be31d44433257e9245b20a69a5
SSDEEP 3072:YNg3BxDWfQ3LbYqplqbKSW1eP9Dc8+kJ9xpVx6PEpv6PhP9QHRP9vfO:YNg3BxDWfQ3LbYqplonW1eP9Dc8+kJ9U
TLSH
T19AA3CED1E566CFA99B79307DE9B77480F3608069AF6A1683F1CEA33313CA54CC664523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo
Size 605KB
SHA256 13dfb2b93664d9cd96c007b21cee069b960ce00483cf2c7e1ea96db2514b8e9b
MD5 f668938b9c4bed9e6c5aeb5eed16e03c
SHA1 3407300dea1fcf45bbc22ac922cd356622ff4679
SHA512 426bfc61f16a28d08beecbce2c7a39d641a0ee019dddb432326307f6c29313326f7a41cf4014560bc9fd4f44853c662e50d3868fd823e8a306924cfeda3c98d4
SSDEEP 6144:QJ/UTPxpcH/eu0ZFltZtgEe5B7SsRoimsA8eBYEp+jmIvbaeDatw8lkKSKspvs8w:Qu3cfsVK5oJByaePjnKspjtLlMSEyw
TLSH
T1CBD47C1EDA401B34C64A02767BFF82B0673C435C036AD9A66C5EF47533837598BB2A9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo
Size 784KB
SHA256 800b3b6ed4ec16a3a8b75aaa713c13ee8cf15d09f33ed94bf5e91fa26b3f11ce
MD5 51ea8ec44b957f6386853ceda849aa61
SHA1 4d84256f653ca6dacb3e9696baf71f4517fc26a6
SHA512 f95361803d0ab82600f3388c8eee9f95caca1593beccf3a5b906b915d6ebdea9848c55b257e0e658142ac40c01407d433eea4a62a2bceaa9e781b7b06181c212
SSDEEP 6144:hRxWoSrYUX3bwdnWNuOJdFhjB8KuuwimFnklEpECm7w6POGZboYsD44B6i0u6Bde:h8YM2fWD8Go6PtoYsk4BQP0/jF
TLSH
T14105004CE77DF3388DEC74BA3A4C0D3BCAB95531C3F492661C98B2E59942CB0455B6A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscordaccore_amd64_amd64_6.0.2724.6912.dll

Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\mscordaccore_amd64_amd64_6.0.2724.6912.dll
Size 1.3MB
SHA256 bbfe91d8c8b74c0195dd9bf53127be9dee6d6ff1c52f4d3b425c5262033dd94f
MD5 ddd6749ec20978c2b44f38d17f5be555
SHA1 ce8f1f3a60d8ca23fc3fac24f8e8335e732f4c7f
SHA512 58ad6c8124166beeba34ea651e10731b82285ffcc92fd75064355730b6cd7f03ed06698031d8f40d87803f2444c0ec57ed44d0cd4e7caecd3268b64b88b1329b
SSDEEP 24576:V30cAqMN7SL3FexdwXSu+I6wnWdqv6InSITDfeZWp:VTW7SAOSXGn+qyIn7Tztp
TLSH
T1EB555A56D6BD4499CEAAD1F8C507490FE7B13801037067EF4AE08B196F3BBE56AB9310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.DiaSymReader.Native.amd64.dll

Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.DiaSymReader.Native.amd64.dll
Size 1.8MB
SHA256 efb3dc6ceb5f14f85e8a7d8a00c0f998e8e7ed62236b1e67c1066bf7ba8c47be
MD5 48025d33259f6c61c5d4af9115a46409
SHA1 c9d26cf6fcdeab26fbf623ee11a7d84439b7358b
SHA512 1621829ed95f625214aecdd21fe9352d255d4e4411031652a640cbae1ca297756d7ba8d15e52a513c450e632bcf63cc4f1d441770c38a06d658a1ea0f4bce5e9
SSDEEP 24576:qz0s9kT3H8I0bo5rjwjnbRCJMy37DjZ3IrVynoT/RUqtMAIEohkGXTwImgg:qYs9m3H5rjQn1CiAnZ3yV+oTZQEoTT4
TLSH
T1C2856C4796EC11A8D5AAD13CC667520BEBF238010320ABCF12A5876E6F37FD55A3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscordaccore_amd64_amd64_7.0.1624.6629.dll

Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordaccore_amd64_amd64_7.0.1624.6629.dll
Size 1.3MB
SHA256 799dcf6cdb5a74a726c8d88badb1fa8f0d8d0916827e6aa7dbb10d6e737d77a7
MD5 3d1d5ce699151ed759c33073ea94aa8f
SHA1 b4ec72ec17716fb81779ff77c0f4c526c637a2ff
SHA512 98b87ca1de99dd5b6c55a7f84c0b3fdcc45231cc6d14101a1f184c68b85b1c9d9ee3226f89c3e633b9a9e9e13388d7d49a77cb482d5026dbf9b407c86f1dc327
SSDEEP 24576:1L9hAFjMds4zK+0lRiBrtfxAwyqC0DRb42de:BMFIds4zxrtfxAwnC06Se
TLSH
T135554956D6BC4499CEA9D0F8C547891FE7B23801037466EF46E48B1D2F3BBE5AA78310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscordaccore_amd64_amd64_8.0.1525.16413.dll

Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\mscordaccore_amd64_amd64_8.0.1525.16413.dll
Size 1.3MB
SHA256 a8e29c772fb06fd48cf17fe9117aa0c2726e1aae26f6feb43ad2356f1ab39f46
MD5 f2867c05ba4d7cc84e9862323dba88d8
SHA1 72bea9521b7f828a5ae0b61e8688bca92b23e675
SHA512 bdc1d0c1604703b029f17a48acfcb755d6f960b6ab9f97023aeaf7671c19bc0c6f7f28f333a320baecdedc4343a16a410036130255b706343314fbd475b99d74
SSDEEP 12288:6l6O/cR26sQmMzq7Ce/m2S4peJlZrFL1jm6NoS5f4Y/DWbudWh+qJ6pHrIrO3dFC:6xZMzq7CwS4p16qS5fXcAxL33dFxixj9
TLSH
T128553A56D6BC4499CEA9D0FCC547491FE7B13810037466EF46A48B192F3BBE6ABB8310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3DCompiler_47_cor3.dll

Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll
Size 4.7MB
SHA256 eedc0f9fb7645745e70153236d68b60683c3677a7a4282bb749a7974d6847df9
MD5 b9d467f224f9fb7d1c7d87934ad56c97
SHA1 fa12c4b39d3a8a1ab45aab87c3253d98a7b84583
SHA512 b4b951ea7f7872d95b47a04da55d6cad14cee45023a05fa14084509134a3e70d392ee3a7890619eac68ba1d00cbb0cf9edf4f88d833e694311a57b7dd6674c60
SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN0:oG2QCwmHjnog/pzHAo/Ayn
TLSH
T1FE367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_cor3.dll

Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\vcruntime140_cor3.dll
Size 117KB
SHA256 0f89455ddd322483c6e580fd5d90dc169aa3f95b18f77ed183c2ef10de842523
MD5 f26c376bd7c539abf7208bbe9bbe870b
SHA1 a7fd2ea75105ed63858de4633e7374be73ea393b
SHA512 f7e4b663666507a64262d40d4173ebf29689b18687af46602839e332c86e23826a6067f9d796643c44570ef82277fef056755a0fb211e0908f1bad0751af99f1
SSDEEP 1536:KqvQFDdwFBHKaPX8YKpWgeQqbekRG7MP4ddbsecbWcmpCGa3QFzFtjXzV:KqvQFDUXqWn7CkRG7YecbWb9a3kDXh
TLSH
T179C37C4573A802B7D62EC274C1E25E46EB71B5418770ABCF03B599AA0F13BE19E3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

how_to_decrypt.hta

Path C:\how_to_decrypt.hta
Size 12KB
SHA256 0d290d02b00dbcb60fd296c74b7f7baba26d5866f85e190caddde9855837c251
MD5 34b341973fd25c64403865adcf85c4a6
SHA1 2fac02a0b2feddb1589ce300e38d2ea16405376c
SHA512 18560fb8d8f4c085a075549e86fcfb05ec5577edd3df225b6072e68be8e3c611f676c95964018ce685faa338ed6a02ab4f8bb5afcd1d971c9d2dcd722a4a8bcf
SSDEEP 192:tdupscGsDTQLhkja5InWheqKZW3TzsN9VCq9iqCBtklKTbaB3VsLM:bupscGYTckj1nWhFK4zydQxM
TLSH
T13D42641453F60404E59290A5AE35DB4B3B01A647628E87193F9C9CA2FFCE5A79D323C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/468-0-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-533-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-19-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-9-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-7-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-6-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-4-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-2-0x0000000000400000-0x0000000000463000-memory.dmp

Download

memory/468-1-0x0000000000400000-0x0000000000463000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads