Resubmissions

17/10/2026, 15:07

261017-shgnfagy8q10

14/10/2026, 10:32

261014-mk7pratsc110

Analysis

  • max time kernel
    148s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/10/2026, 10:32

General

  • Target
    jaffacakes118_Trojan.Win32.Scar.onhj.exe
  • Size 708KB
  • Sample261014-mk7pratsc1
  • SHA256 61aa800584b170ffe9959acd057ccaf784bf3088e1d3aab39d07c0793f6c03df
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Jigsaw Ransomware

    Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.

  • Renames multiple (3679) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Executes dropped EXE 2 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Scar.onhj.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Scar.onhj.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of WriteProcessMemory
    PID:5112
    • C:\Users\Admin\AppData\Local\Drpbx\drpbx.exe
      "C:\Users\Admin\AppData\Local\Drpbx\drpbx.exe" C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Scar.onhj.exe
      2⤵
      • Executes dropped EXE
      PID:2552
  • C:\Users\Admin\AppData\Roaming\Frfx\firefox.exe
    C:\Users\Admin\AppData\Roaming\Frfx\firefox.exe
    1⤵
    • Executes dropped EXE
    • Adds Run key to start application
    • Drops file in Program Files directory
    PID:3184

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aic_file_icons_retina_thumb.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons_retina_thumb.png.epic
        • Size 50KB
        • SHA256 e1d0a469662547bee42325e60b84dee014a90f6cfbc33a541db3e03b1b9d61d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_reject_18.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reject_18.svg.epic
        • Size 720B
        • SHA256 0e4597a138295f9507f7f2d5e747ccaae23653030871d54ab013e166c886a7c9
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sl-sl\ui-strings.js.epic
        • Size 896B
        • SHA256 4c7a2d093d7c701eef3ade4c33eaaf393bd3e7a2880397b61c079a7f1f0e2107
        • MD5 SHA1 SHA512 TLSH

        bg_pattern_RHP.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\bg_pattern_RHP.png.epic
        • Size 192B
        • SHA256 be491e31a837174a7607384786ccfd9225ff73ff73e4f4f050e996d507e2af04
        • MD5 SHA1 SHA512 TLSH

        bg_patterns_header.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\bg_patterns_header.png.epic
        • Size 704B
        • SHA256 74cfc1312bf67243c5aaec42004f205180af43165223e3e56f4227514445d09a
        • MD5 SHA1 SHA512 TLSH

        illustrations.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\illustrations.png.epic
        • Size 8KB
        • SHA256 1da6f9faeecb7ac6c3e684b4412480f54f4b98e4a75cb3a44bedb9d50ddb124b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        illustrations_retina.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\illustrations_retina.png.epic
        • Size 19KB
        • SHA256 85e78c5909b5d443cb990fa141bd32a9f63ddc3bba1c13a64a2dac626299b01b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exportpdf-rna-selector.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\exportpdf-rna-selector.js.epic
        • Size 175KB
        • SHA256 d82500e2e478aec787d221e42a622717c417f0ab8fe5fcd80f6a9272dbff2644
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exportpdf-rna-tool-view.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\exportpdf-rna-tool-view.js.epic
        • Size 385KB
        • SHA256 e907b1f7c9bac0244c23d98c7bfb38533435196f6c9240818b0cef51437364b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\root\ui-strings.js.epic
        • Size 1KB
        • SHA256 94938840db650f1761d86130d1b7f12425a6abc9ac945ce416474d0436a76673
        • MD5 SHA1 SHA512 TLSH

        s_checkbox_unselected_18.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_unselected_18.svg.epic
        • Size 912B
        • SHA256 09a09399fc9aba58db40d4b88b765f3f7dbf77c574f7b75859edeae4deefa0a4
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon.png.epic
        • Size 448B
        • SHA256 099d2ffb48692e81d4d0177a7840c8c2f12dd341b91ac64bfedbbc65225bbb2c
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_2x.png.epic
        • Size 624B
        • SHA256 13ca246fb5ae0b6036b42329456875efffd5e1c1cd3c86e52aae76a707bd3b6a
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover.png.epic
        • Size 400B
        • SHA256 516bb0b3f5d09b6d40f11b75452222e6cc3416b7f2b26a074380849b6112cc88
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover_2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover_2x.png.epic
        • Size 560B
        • SHA256 0cf4190cd626657f08b9b0047a35a0a25287b70a552f01508a4f7b59d9a07789
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon.png.epic
        • Size 400B
        • SHA256 730466da4d96bc4e760f6bfae3ddcadb58798aa4218ad4c124ab23217b1dc26e
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_2x.png.epic
        • Size 560B
        • SHA256 bc31d687c854482fe240ac33d123acb121c0cb26ad8eee69833d5218ed065ee6
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover.png.epic
        • Size 400B
        • SHA256 1cd4f0530e0942f9514030dd7bd3e4b91a0d362e09d3bf3eb0315d0f9da71635
        • MD5 SHA1 SHA512 TLSH

        rhp_world_icon_hover_2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover_2x.png.epic
        • Size 560B
        • SHA256 2daf947d5f0e19714b7e1e9886fd980b95e6010d422126e12d71df68529ab58d
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\root\ui-strings.js.epic
        • Size 1KB
        • SHA256 bf89b2117053e217ee97de28c71f21bc29f583cd5507459e1f13bef9c9919a4c
        • MD5 SHA1 SHA512 TLSH

        example_icons.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons.png.epic
        • Size 688B
        • SHA256 85adcc3fc835a0a4391903aa2cce0cc901b6b47a3b6423500767927da44e4121
        • MD5 SHA1 SHA512 TLSH

        example_icons2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons2x.png.epic
        • Size 1KB
        • SHA256 2642a0627c235d3201db0ea8d41e34a8379f9b0427f89ee6c6e19a3569030d97
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\root\ui-strings.js.epic
        • Size 1KB
        • SHA256 823c48a2c5f7d49e1dc69e0372a50fa7385fe41df0b46a3abbdde3cdc4cf13da
        • MD5 SHA1 SHA512 TLSH

        icons.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\icons.png.epic
        • Size 7KB
        • SHA256 34580d7e1f8494aa961ca3b608943d8a6483cea4f0e0e9286c54ffae997c3370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons_ie8.gif.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\icons_ie8.gif.epic
        • Size 7KB
        • SHA256 0a8865890192ce8ce71a5316a75657942af6a9554d62cc22fd15667b3757fb6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icons_retina.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\icons_retina.png.epic
        • Size 15KB
        • SHA256 a3e07644a2042a6945e17935166c07fd7e114447090244954d234c94e262455f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\new_icons.png.epic
        • Size 8KB
        • SHA256 a0f138a869b345c13771172169511a6925d1f888ffd192c235b6292aa3e40f6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons_retina.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\new_icons_retina.png.epic
        • Size 17KB
        • SHA256 370c4d081312749f9243485ba8ac3311fd6d94027030cf78a988bad7d709a5cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-gb\ui-strings.js.epic
        • Size 832B
        • SHA256 7350d52d67ef8c6362a080301c72adb9070ff9887861c67667ff4c9661bbe979
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ui-strings.js.epic
        • Size 1KB
        • SHA256 3525cc99286bc498316d8cdea302433ab811b2fc24a3ef2d7eb956aa807c46b2
        • MD5 SHA1 SHA512 TLSH

        PlayStore_icon.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\en-us\PlayStore_icon.svg.epic
        • Size 5KB
        • SHA256 efc75cdb827becf3cbfeaf31ad0481954b7260d518c72300844660d83c3b66c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ui-strings.js.epic
        • Size 1KB
        • SHA256 9dcccbdac8b3204f1f82ed5f26b4e2a0087932c4ce2084346576eb14d90fd8dd
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\sl-sl\ui-strings.js.epic
        • Size 864B
        • SHA256 4ef67667596deb3257252bce17869c91830856330965578d8861f97b01d5c3e6
        • MD5 SHA1 SHA512 TLSH

        progress.gif.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\progress.gif.epic
        • Size 19KB
        • SHA256 bcb3db8348812fd60b49d86991d0882aeaa9d24d96698a12f8c42158de248977
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bun.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\bun.png.epic
        • Size 2KB
        • SHA256 1ee675c664e95205e2bb6b2371be24afe616cae0f1380e21ffd0e28bbc066d54
        • MD5 SHA1 SHA512 TLSH

        cstm_brand_preview.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview.png.epic
        • Size 2KB
        • SHA256 ab46019888ee92ee661951b8ce313a1497b2b5abff1f662ed18120b965bcfb80
        • MD5 SHA1 SHA512 TLSH

        cstm_brand_preview2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview2x.png.epic
        • Size 4KB
        • SHA256 acd50101b6031980d57d3e98c395cfecacf1d23f2a2b7de37437d1c2f68a376c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dd_arrow_small.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png.epic
        • Size 304B
        • SHA256 b375f35b9c2a253eeaff113bf92ee8a4ffe6fc53e5f6d21d0fb6c2de5f9a3500
        • MD5 SHA1 SHA512 TLSH

        dd_arrow_small2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small2x.png.epic
        • Size 400B
        • SHA256 2ff15c7c369d6d307db07ab8fa23a162832f52ad33a3fa522ff274af05f157f1
        • MD5 SHA1 SHA512 TLSH

        illustrations.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\illustrations.png.epic
        • Size 4KB
        • SHA256 456ec691652a67366ed780cb04abe2580c9253b0c68fd55929e1904c6744248a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nub.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\nub.png.epic
        • Size 1008B
        • SHA256 23794032932efda7ce983b6e9d07eb8cb072f16e4fd784865c2198ac426c554b
        • MD5 SHA1 SHA512 TLSH

        s_filter_18.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_filter_18.svg.epic
        • Size 816B
        • SHA256 15ca8672b8725782f374e24ced9a3f5dc76fec9772d623442bdb4ce2739d08ef
        • MD5 SHA1 SHA512 TLSH

        s_listview_18.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_listview_18.svg.epic
        • Size 1KB
        • SHA256 8f00f9870b76693d1338bb633132f54e752917be5a9d3244981be6ad074c89be
        • MD5 SHA1 SHA512 TLSH

        s_opencarat_18.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_opencarat_18.svg.epic
        • Size 864B
        • SHA256 3aa4cd1bb4db9195dd203d544f1067641be2b4b1a5d2db0deb0b83c3037aaef9
        • MD5 SHA1 SHA512 TLSH

        s_thumbnailview_18.svg.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_thumbnailview_18.svg.epic
        • Size 1KB
        • SHA256 7c6199ec6c9f3e1b36bb164c7ed50da2c4c1cb6321cc9862df3c3cb2d072c8f5
        • MD5 SHA1 SHA512 TLSH

        share_icons.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons.png.epic
        • Size 1KB
        • SHA256 3070208251f05fe78c378f2cded28e6cfdf175fda5bae8660bae14194f652c40
        • MD5 SHA1 SHA512 TLSH

        share_icons2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png.epic
        • Size 2KB
        • SHA256 a83c91b4e2e09834ae4e44f5dc049781059f4a27ca96705971bc1299bb6afe69
        • MD5 SHA1 SHA512 TLSH

        adc_logo.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\adc_logo.png.epic
        • Size 3KB
        • SHA256 6e681a7e6e7cc1068e87357962abc2494f32c0ea12eac597125b4a2bfed0ee2b
        • MD5 SHA1 SHA512 TLSH

        logo_retina.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\logo_retina.png.epic
        • Size 6KB
        • SHA256 a925aef8f6612176253af6088b2845f6d7d0eac7c801d2369cd69e72f24b465d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sat_logo.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo.png.epic
        • Size 832B
        • SHA256 72f26b393a0f7f8a96a4329f11d451a141eee1d3324b06f56dfdf61b3ff3b906
        • MD5 SHA1 SHA512 TLSH

        sat_logo_2x.png.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo_2x.png.epic
        • Size 1KB
        • SHA256 1559127350628a9953d41e725fa2493d5950a7342d4bf04f7ba98cdceaf56162
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js.epic
        • Size 848B
        • SHA256 df494f5d945182e5920c9eb3e700bfefda1317ed1fb9ee9649d6dd9e7ff44d31
        • MD5 SHA1 SHA512 TLSH

        ui-strings.js.epic

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sl-sl\ui-strings.js.epic
        • Size 1KB
        • SHA256 e1b3f9bfb792af0c806f50a0ea6eb77ec8a28334527b454a70bc1c34eaf2c744
        • MD5 SHA1 SHA512 TLSH

        DisplayLanguageNames.en_US.txt.epic

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt.epic
        • Size 32KB
        • SHA256 e0293ff64971ec192c67baaddd01c4a1237799de255cf509ca56b4b3af8d324d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Edge.dat.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Edge.dat.epic
        • Size 12KB
        • SHA256 86718e52c5b38d1ba62cd31ba3b4b83d72005c106025f84576d81a1218e1a0b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        EdgeWebView.dat.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\EdgeWebView.dat.epic
        • Size 8KB
        • SHA256 000a5bd47b241d081149122bb5cac373e591d58904cd46a1b9aca0aa9a8595b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Logo.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\Logo.png.epic
        • Size 31KB
        • SHA256 665bd052a9e1a3919fe4bbd15ee4ee3625c1c0d84c5ed2aa45161f282efddd3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogoBeta.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoBeta.png.epic
        • Size 29KB
        • SHA256 d29f0e7b05aab1295224ca0c45fc65adddaf97c8758513d190bfefa9ff7dc846
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogoCanary.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoCanary.png.epic
        • Size 29KB
        • SHA256 c73e150a265ff61ce910fd00eb6b7116f8b3360b7400f656c145d0d290ed4e04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LogoDev.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoDev.png.epic
        • Size 29KB
        • SHA256 5763c519f57305bb670ad7318256e2b15ae22e954fd4a43d3a4ed215147a80dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SmallLogo.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogo.png.epic
        • Size 15KB
        • SHA256 eee2a36285463d271dc15b89624e09c869c07cb0a3571b03b8410b0b69c09080
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SmallLogoBeta.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogoBeta.png.epic
        • Size 14KB
        • SHA256 2b3e8bd65e3cbb1d94dc0a51c70e0ca8b4ccfd7ee159619b1d33e8d71c812428
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SmallLogoCanary.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogoCanary.png.epic
        • Size 14KB
        • SHA256 5192b6bc5a0acd1bd6b2a1f18fe43c5459e3f9a81cd276a8290988c222bdd3d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SmallLogoDev.png.epic

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\SmallLogoDev.png.epic
        • Size 14KB
        • SHA256 b5e70d9bd605148102ed87b076a2c9042da886f49e8e058de883a7429497d056
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32_MoveNoDrop32x32.gif.epic

        • Path C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_MoveNoDrop32x32.gif.epic
        • Size 160B
        • SHA256 fb34096246d5a77a658359aace4568be64b9cb75c12760fd62ff544dcd61e755
        • MD5 SHA1 SHA512 TLSH

        WacLangPack2019Eula.txt.epic

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPack2019Eula.txt.epic
        • Size 48B
        • SHA256 700842cfabd4749cf488d41601ae2812a77a44dad14fea9080f5ed05a462af94
        • MD5 SHA1 SHA512

        winword.exe.db.epic

        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.epic
        • Size 24KB
        • SHA256 9b04804c5bebde907d40114e119777b190f3147eb5facd93b53b3fed19a1567b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.dat.epic

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe\Settings\settings.dat.epic
        • Size 8KB
        • SHA256 bc5e33948fad45211bf827b9d45429eabea865bb86d6d1bfcc83a71801ed592b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        {0914CC50-9E04-40B6-9B28-D0F0D469DC0C} - OProcSessId.dat.epic

        • Path C:\Users\Admin\AppData\Local\Temp\{0914CC50-9E04-40B6-9B28-D0F0D469DC0C} - OProcSessId.dat.epic
        • Size 16B
        • SHA256 6339a6420754cc9903c55eeb503a0b57b23c504864efffdefbccad5e35d514d5
        • MD5 SHA1 SHA512

        firefox.exe

        • Path C:\Users\Admin\AppData\Roaming\Frfx\firefox.exe
        • Size 708KB
        • SHA256 61aa800584b170ffe9959acd057ccaf784bf3088e1d3aab39d07c0793f6c03df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AddRead.wav.epic

        • Path C:\Users\Admin\Downloads\AddRead.wav.epic
        • Size 389KB
        • SHA256 c91be66059001c914d8f4f35f0114704856c66e91a964d0d7b3bc732b02853ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CloseUnregister.xlsm.epic

        • Path C:\Users\Admin\Downloads\CloseUnregister.xlsm.epic
        • Size 399KB
        • SHA256 19ec6305e6c1bb66807d773f1dda075d6605b195fbba5c4d1db03d9ea25c2136
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ConfirmEnter.3g2.epic

        • Path C:\Users\Admin\Downloads\ConfirmEnter.3g2.epic
        • Size 272KB
        • SHA256 d90ec6e90261203aa9ccbfaa3e71e326f7b2f5a32c4217413e8c6d6db3dd32a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2552-12-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/2552-13-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/2552-32-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/3184-19-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/3184-11-0x00000000025C0000-0x00000000025C8000-memory.dmp

        memory/3184-231-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/3184-230-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/3184-14-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/3184-232-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-7-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-10-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-3-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-5-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-1-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-0-0x00007FFB16EEA000-0x00007FFB16EEB000-memory.dmp

        memory/5112-2-0x000000001B9B0000-0x000000001BE7E000-memory.dmp

        memory/5112-6-0x00007FFB16BF0000-0x00007FFB17628000-memory.dmp

        memory/5112-4-0x000000001BF20000-0x000000001BFBC000-memory.dmp