neshta | 2d98dd0d3b2a13e5143bdb5ba552fe6e57d624277016cff98a9becb45ad880f0

Analysis

max time kernel
150s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
21-02-2023 11:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Size

238KB
MD5

70614578f63f24345f7794d5e022b986
SHA1

e0e2ae538c23c5709d9d81b0280d2f7337e6f87d
SHA256

1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6
SHA512

cdf0bd590eca7e46a11a6c21bac375e57b9b865e42b99e3445404b71623f9719ace0d881a12f1064b1355d5aec41926910cb9cf3644b24ea3aedb5d32b00d82f
SSDEEP

3072:sr85CDvxwgHX+MB7+4TFs/ahEFA02I4T8uUQ1jSqcOj/UxNyN5c:k9DvygDBa4yFTprO1Tc0cY+

Score

10^/10

neshta xorist persistence ransomware spyware stealer upx

Malware Config

Signatures

Detect Neshta payload 10 IoCs

resource	yara_rule
behavioral2/files/0x000700000001efe4-662.dat	family_neshta
behavioral2/memory/2956-1133-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-3467-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-4582-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-5863-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-6305-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-6307-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-8096-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-12633-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta
behavioral2/memory/2956-12764-0x0000000000400000-0x000000000041B000-memory.dmp	family_neshta

Detected Xorist Ransomware 18 IoCs

resource	yara_rule
behavioral2/files/0x0006000000023132-137.dat	family_xorist
behavioral2/files/0x0006000000023132-139.dat	family_xorist
behavioral2/files/0x0006000000023132-141.dat	family_xorist
behavioral2/memory/4832-200-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-1477-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-3656-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-5327-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-5957-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-6306-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-6308-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-9846-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-12743-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-13237-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-15484-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-17038-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-18348-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-19400-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist
behavioral2/memory/4832-21110-0x0000000000400000-0x0000000000846000-memory.dmp	family_xorist

Modifies system executable filetype association 2 TTPs 1 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1042

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Windows\\svchost.com \"%1\" %*"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
persistence spyware neshta
Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist

Modifies Installed Components in the registry 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Modifies extensions of user files 1 IoCs

Ransomware generally changes the extension on encrypted files.

ransomware

description	ioc	Process
File renamed	C:\Users\Admin\Pictures\SyncNew.tif => C:\Users\Admin\Pictures\SyncNew.tif.LoMiAt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Executes dropped EXE 1 IoCs

pid	Process
4832	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

UPX packed file 18 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x0006000000023132-137.dat	upx
behavioral2/files/0x0006000000023132-139.dat	upx
behavioral2/files/0x0006000000023132-141.dat	upx
behavioral2/memory/4832-200-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-1477-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-3656-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-5327-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-5957-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-6306-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-6308-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-9846-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-12743-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-13237-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-15484-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-17038-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-18348-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-19400-0x0000000000400000-0x0000000000846000-memory.dmp	upx
behavioral2/memory/4832-21110-0x0000000000400000-0x0000000000846000-memory.dmp	upx

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BFIwtR9PL2GvV8g.exe"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Drops desktop.ini file(s) 64 IoCs

description	ioc	Process
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Favorites\Links\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Videos\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Contacts\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\$Recycle.Bin\S-1-5-21-2275444769-3691835758-4097679484-1000\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\3D Objects\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Music\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Pictures\Saved Pictures\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Favorites\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Pictures\Camera Roll\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Public\AccountPictures\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Public\Videos\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Fonts\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Media\Desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Desktop\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Links\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Searches\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Public\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\OneDrive\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Saved Games\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Public\Pictures\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\Downloads\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Users\Public\Desktop\desktop.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesdistinctive.dotx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Outlook.scale-400.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hr-hr\ui-strings.js	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\fr-FR\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\LargeTile.scale-125_contrast-white.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\notetagsUI\styles.css	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-256_altform-unplated_contrast-white_devicefamily-colorfulunplated.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\progress_spinner2x.gif	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_pt_BR.properties	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\OneNote\SendToOneNote.gpd	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\ja-JP\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files\Internet Explorer\en-US\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\msipc.dll.mui	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.scale-150.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\root\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ja-jp\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ug.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.AdomdClient\13.0.0.0__89845DCD8080CC91\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\AppPackageMedTile.scale-100_contrast-white.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsMedTile.scale-125.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\WideTile.scale-125_contrast-black.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-white\LargeTile.scale-200.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\caller-id-illustration.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\nb-no\ui-strings.js	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-72_altform-unplated_contrast-white.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNotePageSmallTile.scale-400.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\BadgeLogo.scale-100_contrast-white.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\eu-es\ui-strings.js	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\de-de\ui-strings.js	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TabTip.exe.mui	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.scale-200.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\import_google_contacts\googleImportError.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\BadgeLogo.scale-150_contrast-white.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\7-Zip\Lang\hy.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\LargeTile.scale-125.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\BadgeLogo.scale-100_contrast-black.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\en-gb\ui-strings.js	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Java\jre1.8.0_66\lib\javafx.properties	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\ONENOTE_WHATSNEW.XML	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Resources\GetSMDL2.ttf	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\da-dk\ui-strings.js	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\et.pak	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EDGE\PREVIEW.GIF	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\7px.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\AppxMetadata\CodeIntegrity.cat	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSplashLogo.scale-150.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\Icons\jit_moments.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-24_altform-unplated_contrast-black.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\INF\SMSvcHost 4.0.0.0\040C\_SMSvcHostPerfCounters_d.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.5\fr\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\fr-FR\WorkflowServiceHostPerformanceCounters.dll.mui	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\33ddd1d414c8f8d6deceff1a62363c2e\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.resources\v4.0_10.0.0.0_it_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\ManageAppSettings.aspx.ja.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.fr.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Speech.Resources\3.0.0.0_ja_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\UIAutomationTypes.Resources\3.0.0.0_fr_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\ImmersiveControlPanel\images\TinyTile.contrast-black_scale-125.png	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CreateAppSetting.aspx.it.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\diagnostics\scheduled\Maintenance\de-DE\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\IME\en-US\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\INF\RemoteAccess\0409\rasctrs.ini	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Diagnostics.StackTrace\v4.0_4.0.0.0__b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.resources\v4.0_4.0.0.0_de_b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.Resources\2.0.0.0_ja_b77a5c561934e089\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Cursors\busy_i.cur	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Provider.aspx.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppSetting.ascx.fr.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\addUser.aspx.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_sml.gif	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\error.aspx.it.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardFinish.ascx.fr.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\diagnostics\system\Apps\RS_UAC.ps1	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Windows.Help.Runtime\v4.0_10.0.0.0__31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\msbuild.exe.config	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Fonts\cga40866.fon	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\v4.0_10.0.0.0_es_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Policy.1.0.Microsoft.PowerShell.Security\v4.0_1.0.0.0__31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\v4.0_4.0.0.0_ja_b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Code\ProvidersPage.cs	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\de\DropSqlWorkflowInstanceStoreSchema.sql	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations.Resources\3.5.0.0_es_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Dtc.PowerShell\v4.0_10.0.0.0__31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security.Activities\v4.0_3.0.0.0__31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\dfsvc\v4.0_4.0.0.0__b03f5f7f11d50a3a\dfsvc.exe.config	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net.resources\v4.0_4.0.0.0_fr_b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.Resources\1.0.0.0_en_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DebugAndTrace.aspx.fr.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe.config	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Boot\PCAT\et-EE\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Activities.Build.resources\v4.0_4.0.0.0_es_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services.resources\v4.0_4.0.0.0_fr_b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardInit.ascx.es.resx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemCore\v4.0_4.0.0.0__b77a5c561934e089\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition.resources\v4.0_4.0.0.0_it_b77a5c561934e089\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.resources\v4.0_4.0.0.0_ja_b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics.resources\v4.0_4.0.0.0_it_b77a5c561934e089\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Code\ProvidersPage.cs	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Boot\PCAT\ro-RO\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Cursors\no_i.cur	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744CAF070E41400\15.7.20033\eBook.api	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\Policy.14.0.Microsoft.Office.Interop.SmartTag\15.0.0.0__71e9bce111e9429c\Policy.14.0.Microsoft.Office.Interop.SmartTag.config	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Drawing.Design.Resources\2.0.0.0_fr_b03f5f7f11d50a3a\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Branding\Basebrd\it-IT\basebrd.dll.mui	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Fonts\ega80866.fon	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Globalization\ICU\windowsZones.res	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\napinit.resources\v4.0_10.0.0.0_it_31bf3856ad364e35\HOW TO DECRYPT FILES.txt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\SmtpSettings.aspx	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3908	3220	WerFault.exe	38

Modifies registry class 13 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.LoMiAt\ = "YPYGXWAFFCOYHMN"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\ = "CRYPTED!"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\DefaultIcon	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\shell\open	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BFIwtR9PL2GvV8g.exe"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.LoMiAt	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BFIwtR9PL2GvV8g.exe,0"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\shell\open\command	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\YPYGXWAFFCOYHMN\shell	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2275444769-3691835758-4097679484-1000\{D170EC87-697C-4ECC-937C-3F99FC9CD1EE}	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	explorer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Windows\\svchost.com \"%1\" %*"	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2972	explorer.exe
Token: SeCreatePagefilePrivilege	2972	explorer.exe
Token: SeShutdownPrivilege	2972	explorer.exe
Token: SeCreatePagefilePrivilege	2972	explorer.exe
Token: SeShutdownPrivilege	2972	explorer.exe
Token: SeCreatePagefilePrivilege	2972	explorer.exe
Token: SeShutdownPrivilege	2972	explorer.exe
Token: SeCreatePagefilePrivilege	2972	explorer.exe
Token: SeShutdownPrivilege	2972	explorer.exe
Token: SeCreatePagefilePrivilege	2972	explorer.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe
2972	explorer.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2956 wrote to memory of 4832	2956	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe	82
PID 2956 wrote to memory of 4832	2956	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe	82
PID 2956 wrote to memory of 4832	2956	1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe	82

C:\Users\Admin\AppData\Local\Temp\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
"C:\Users\Admin\AppData\Local\Temp\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe"
1⤵
- Modifies system executable filetype association
- Checks computer location settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2956
- C:\Users\Admin\AppData\Local\Temp\3582-490\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe
  "C:\Users\Admin\AppData\Local\Temp\3582-490\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe"
  2⤵
  - Modifies extensions of user files
  - Drops startup file
  - Executes dropped EXE
  - Adds Run key to start application
  - Drops desktop.ini file(s)
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Modifies registry class
  PID:4832

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 464 -p 3220 -ip 3220
1⤵
PID:3960

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3220 -s 6580
1⤵
- Program crash
PID:3908

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2972

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

T1042

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials in Files

T1081

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2275444769-3691835758-4097679484-1000\desktop.ini

Filesize
129B

MD5
0b2785bc33717b23bb42a1cf3faa7160

SHA1
49de2262d9b2302faf3eccd1be240a2497c332eb

SHA256
f6dc6999e2ddeabe401d1e8b4d0d4446c8b2e3f7e0da8a2f76e58bf4d045af19

SHA512
d3015c8c89c7bccbe85e774e23ca2942277f385ec522d7c932de5392ba5eeff2313eb21736a8362dee4e22ecb4460707a314470aacd59d08e3570ed27fc17922

Download Submit
C:\PROGRA~2\Adobe\ACROBA~1\Reader\AcroRd32.exe

Filesize
2.4MB

MD5
8ffc3bdf4a1903d9e28b99d1643fc9c7

SHA1
919ba8594db0ae245a8abd80f9f3698826fc6fe5

SHA256
8268d3fefe8ca96a25a73690d14bacf644170ab5e9e70d2f8eeb350a4c83f9f6

SHA512
0b94ead97374d74eaee87e7614ddd3911d2cf66d4c49abbfd06b02c03e5dd56fd00993b4947e8a4bcd9d891fa39cab18cc6b61efc7d0812e91eb3aea9cd1a427

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
ab18de5b32cfbd3595a8f4225ef1fb7d

SHA1
8b373e501f1625b6e10b553e5e83a0a6d3b3f488

SHA256
ae8caaac078f37f56bcb2fd6f081d5af3834f7322bd99da6a99846dc0649ed57

SHA512
95f11cfb495dfd3d6e5c13a4138c84daa0e545705876be90e160889d0e41fc0c7eb35399701cc88413d3c18d163a3115dd057f2bdfc9cef3e500f80517fd7c66

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg

Filesize
711B

MD5
371041f00d0b4d6e3ba9c00ef77ea2c8

SHA1
99ebf33089693c5ae121f760c82cf84dd82b0719

SHA256
3b8194a414eeddaf3ed935472ce236a8d98486d0e197fa0f16bed1e132686888

SHA512
d996900ceaf886a903324f6791efcacd2ea8ae6172b434ab47331b089b64f3e4f3625e7240fe1be4a00e88826a915e305cab21343cddbebd45e4d5d1fa5be248

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
00fe2e8d9a3fa4c216dc6d8a9e6c6b16

SHA1
16cd730a13747d8bcd228f15d481217ec366bb96

SHA256
68604967b863de2d01baed5ea3c5bc76945b8261e4ffd94dd82720a97d1be4d4

SHA512
82f0f3dc7e8c969d805f7d12507b93036fd938dea91036a9658db7377db8f78b96557c0c540cf51b77c63917c2b4cb27c07e166da6e42e34529804c2beb1778c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
5975d7e84b9ca8eab884fe2255b283d7

SHA1
b465c9ba6a1a40b939c1195e00c17a797d4b65e7

SHA256
c62eaa2dbbc1cb5fabd56171e4ad37ddd63565c9cebd9824ec69989ded19eb60

SHA512
c6201e93dba39e5edcf4ecacd09631b98735c34d1efa69f3649ea91a03892691c1e27efebbc56752e37d4928f7b89172da63d5cdebd4bb13942dd473156eecef

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg

Filesize
1KB

MD5
ec68c5259e5512f5148ec7138b53c758

SHA1
14a336c0f60251d2d8a1e488fcb72510b0036d6d

SHA256
8a32f3d79f98edbdff0884edf0aecdbe7b531d8e2922808b14e8219e8d8ce818

SHA512
0edb3c972abd9491764c67cd24525310c7fce9375bac0f7a1f4fabc3f4e225dee7519c57da4a856d0b9ff850ba8c608df7681a8aee21ce8888e1b7265bcd8f65

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg

Filesize
1KB

MD5
70ea2ee61499bc73f1f47330eb2e473e

SHA1
1cd60d7fa9827cb1fc94b841fe4dafc926d0dff8

SHA256
549398a729ed5799f08ab2ea5ce4220b0730da464dac51fc6814675d5f2911d2

SHA512
32136d6d9d98f1c078cea450c5550b0709d1def9a7d080a2e1c52d3c6929e367647e051e686f281a1ed319d2d7c7cbdf5a65c78c1e78c4a3794396940e0fd166

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg

Filesize
552B

MD5
94ace0bc7757040054ca4ebe68521090

SHA1
ca45b8fd7a8121245d138e0671f90619b207c192

SHA256
6cfd5009f06dd7fbcf56de4ee1cbc6578f0675d6758d1ef5cc06f60f7c325839

SHA512
b083dfd17d33598556374b0d9d6afa1f260b55d32c54b2eec89d449ce40489c9c2641ec86c9f6eb536d8f3449112617fd6ae1e836fa1e5607cb6646a1f9016b3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg

Filesize
2KB

MD5
1742641f33c6c5e222ac38832f9c68d4

SHA1
7713da369055786ece68648fd0e2b929973f85b4

SHA256
0d6d8478a32677f4cd6d96cc34bb66b9e79439bb658775e9ffc87ce6f431b4d4

SHA512
10d0f9a380f188bd04d2aa5627f70e3fda30efab30f2c1fbbd1e7d8e06b40bf4c923bc597e059612ec7016e7c9e704090d9fbf205110770b08aa63f13e7bf7dc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg

Filesize
1KB

MD5
814fd43a843b9ab744c888dde0b22b68

SHA1
aedc8db7c1b569a1ea24df673822b9977ae85f1e

SHA256
91b7e505f8d2e1ee0918883865eb3da0fdb1f305b716d7f156c6b98609d84922

SHA512
9d143707dd5378d1ba258973bc8fdb6401b9c25106e3d24fed9c2ba1e79104dba5b22f4102da215f99d52bd34252235f9a98fe12a5ed14f2f5556d25a957fae0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js

Filesize
3KB

MD5
23855ebd379de0d96474a40c14444a8e

SHA1
7b89c9c721e7643478d2fe08ba413cefacc3420b

SHA256
c5ea70f9a2a781256d0d88aa5900a552207302c58045a98a0368ace72f377aaf

SHA512
6c623741184960ee70b62bdc034761fcdacb140a7071474861f23488f3c6728958cc34b1645af8ef055773d80252149d0b25c8269d0e8043e1efb5bd77504503

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js

Filesize
28KB

MD5
988eb4894d21b6e4c508ee106841d9b5

SHA1
b04d69df2785b2fd404b76f84fd0b5eecdd0734f

SHA256
4a0f6de64c9ef5dac4e1a3b55f124dc3e7e7d4cc22957c56e0c55c9493a9bbac

SHA512
438652e841d2e73cb54f985201892d9407bf65f76bc96e0b0c294d80d9f47b46460376b160a43f75572e72950b38ea2317232cd9f5488957065a2b8e992b55b2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js

Filesize
7KB

MD5
2584824940fd03ba01ef27c9356a8d76

SHA1
3efdfb88691694b72f8feac025a322ca78ef933a

SHA256
071f1562fafd89b3d47fa4edc87ee00c8ef60084cdf4feacdbbaa8c0bf32748f

SHA512
fa3dfdc40e9f727fc4d09a22ed9d53f5d1162d15299eaac1763ba4d615026be93410d92c6478a236e58b83939ffa07815a677eb8fc33152ec65686ccb0c44f51

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js

Filesize
886B

MD5
3b35747afed2a1b9c20947c844b6a4c7

SHA1
43629526f85df4b03b2054e5d7f90631f937f7d2

SHA256
ab366dde393e2b40507e5e5eafe6cdf9e8db22d4fe995a045cbca528cc741900

SHA512
1a283b572adf6269e33c5264d036daeda3b51889acba942b1b948a73c1527a92852c130dcb19644ce86a0c4ed263ca433fc3be8fda25e7a8ce989d70a08cd452

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js

Filesize
4KB

MD5
cd39834485e1b7c62d15900691323818

SHA1
9db05ec696e22c9d7cd4f757bbc4fa0906f4c362

SHA256
74e46a6d46adb52fce4cdb5aadb7f167c99f0c63dc2c8d1318b0672b55a261cc

SHA512
54907b618a54efddffeac85e61cace61968d92a21b248e101944d442059bab5d31937db47a2b31ef9a2e3795b23bbad9ff8e0cf6fe4b3e1bbc252fd9989ed6bf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js

Filesize
1KB

MD5
4b25dfc6a7e17c277048edb5e9c509e7

SHA1
e37fd2cfa02cfae3df7e0e6093cc83a3718f9a41

SHA256
4e244a23b78d7dcf244c80007b4827b146d73d2182d51c32a7f3e20568a88c71

SHA512
e0af32f1c81b221ba5e4f4f8d1c215e2d97be18b84d05e4be9813fa3427447cf8c2639d6355eb804461ce0e1270f78395c33b571119181f2e0efb1a680010b9a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js

Filesize
2KB

MD5
fe3c564a580231ff98c3a6fbda4021cf

SHA1
e94f41f67ff1afa42cc4b1897eb615f55635dfc1

SHA256
cf6a3ee911fd2b2a9cc1c944c1eaaeecc7a01912b3413ffefd968658d9630fb0

SHA512
ade57307a784c34f0d9828d7cceb786c75545c8af17ae21d7b2f7fc828ce439b7f5b71bd2ba5aca48b452537c55961fb0fd4a351e392ed39439cec30a23f2e61

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js

Filesize
1KB

MD5
b796344df714435d28fffdb168f001ce

SHA1
3ac3ffdfe4edacbbb76fcba3a2cfe8c58461b654

SHA256
0ceb88912b1dc2395d4ad5e9991444e25f657e83e21159ec0adc35cdd1737ede

SHA512
9947b27c8ea84fc28810e556e22536066f431a0cc91d95779a455f498ef35b18126e142b225042625846ab6133a8d8d2675cee831367df468447028e963ff968

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
2eb457cdac6ca785f0ae8a7e42366d97

SHA1
c29c648a0cdbabfe6edbd568580805b69f4ba9c0

SHA256
7f7bb14fddeecae2b7573c0a7e05b2531ca9a8d160e8ac61314e77e5cea29cea

SHA512
316a3ecad890cf744f8ddcde422a65f87ced9ddf47d0cf3b0788dfb4adb9437dd63c2d103218997bd47c9a934e8e6d0e3d5e1a54ebd6efec18f86afa62a9b321

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
f9aaec1acd90ab5c9939a1bf76c0e734

SHA1
70f2c0b4f0da9c256442285dc053ab7b461043d2

SHA256
a34e1ced2200ca822de41afe69d9e97c21cdddedebbdcfe0f939e043483db51c

SHA512
f66afc2eaa5c18bb676167eeabe003b00c25d53f89a1ab1da975ce98c309f652ca728a4e72d626d17e41648510d14bf760c5f5ec870ee8d8a0554a90ed0b738d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
fb141194e99832d9143152b70bb96f99

SHA1
0c6cf996b0cc8eaba4321146b2fa27540fc02500

SHA256
0c224664d57a3ea857afebe6c15ed3c2df8c89f4fd1e5166061e817221e73cd9

SHA512
cdfda993af287f674ff63edd76eddfbbb3c36c755d64dc0c9c62fa8ed4a6fca69dfc517c918ab1741fbac67a7128dffb7982803622f3f72a7dcb9addea237afd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
23b11ccf9cace98d3bc9ee88a66e48a1

SHA1
3297bf6b4d3fdb4d2e62851d89c6a1435bec8af0

SHA256
c65307be2130acfee3ef3f42fd41a88c8c49b9431bc68944637cff64cd27c96b

SHA512
8e57990eecf677b9513840faf66598351a54df868c348c25499b9571c0e4e01a4fa87c9e15455d7f42500d7cdbee931c186b43a55c33cea3deade6b9f0743b0c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
dbf5f83e52473ea2bb5ec924a2bd66ef

SHA1
65f72e1f5548de9fb27a0a01d7e12ed02bc94ebe

SHA256
57bbe28709fe5097d58c58a65cea0202f54f35eb4b3eeb67bf702fb38655b90c

SHA512
4ff363087122841da7f240300d2452a4d98c5e5c358a2e789b3c08ad47bc543fe27bab6648a314a1b9719d341a28b0c1143299217356b8ae6f694df95403a404

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
04c3774ada468ea58e0027659aa7087a

SHA1
46d3dcfca5fe3043eef2c76613d42493732eec67

SHA256
8a58502fc9f9e8dfebe74693ca4bd0492cc1bee08e0c4d803988401c26e7a486

SHA512
00ae1ba30ded7d388d8f1657faac6c3d7dcb58d9931837df0a0bdcb2ec9b8336662405618a3751e67c0513f821f26bebd478ed7973c0c91653333ce193dd10d1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
fdf4da5c41646bc2154ef91b2e29f141

SHA1
59282421e8b70c101d45079de789511316735619

SHA256
619443f6c5627ad58606024e77477ba1cddedf413e89672d8164fc6b83ac1202

SHA512
446db4a88a65d875847fb3f37f256043a9714cff0d33bf2bfed7c7498c1e67cd5616d230aa5d415623c2c055f3c21d7d71251a76331a67618d44c3b8859306bb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
0f179442fe10c29d3ce9bfef7566f0c6

SHA1
502939e8583baaddc56e91579010495d6f3e4458

SHA256
3167d06244664f339e386e09b7166da09e0d60e9f0b9b1c29311429fa680c909

SHA512
3d934259c560605ee2a28cae7c15ed85e3fe4c0f3b4a0887505cd16da56b7e3fa1cab9f371d02626d8ea19e970a62e6fc6364fd87142d5c997e940fc5bea7e36

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
cb3147581bef35851f500cdb32f1bd6b

SHA1
4876058e779a9117b35f7cde09ce04359f3d54bf

SHA256
1deea04adddb1ac22bb07715d267bbd96ba083800207a62bfc7e2141dae86421

SHA512
419ef81691c02b2848c06b7274a9b35ca1e8e6964deaae4dd7b68099f1343bf84059ab370799d840c015e51d09b591fb96ce70a442d5e0d96b757b124c2f3b3d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
f93733e726f14fe9f6b103e82b77bc3c

SHA1
4fefcfb0f8f43cb7cdb84038254d47b6898a79b4

SHA256
46e0a64528cad287617171b95231dbbfffb53b154217115340b941a544178cb8

SHA512
e9ec067f909232d6beac5c6d97f6a8b58a785f8340901916b7ff11b60e62df9acc3e1ab1b55e5afb08d2dfb5bd3617a13405d74ae3a34bbd3ec29e739adbefdd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js

Filesize
1KB

MD5
c0e6f7b9ec81305a02b537049be66255

SHA1
67a444f5328a777e2d112123430a7a8214be9822

SHA256
c50c2a378d0ecfa9df44124dc1d2a73f5d2e79c1629cf599e696864329af68b6

SHA512
b30ad537dee9de5697b6c847a71f140c27fbab66e2af0604c0722720c1649748be6cfe9a7047670a4818b8e4fd6030196b9fba6b1e699b7e2f1e882a978b05f6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js

Filesize
1KB

MD5
6a1e8328648cb3635625ce3d7cabc0e7

SHA1
6fa2de86c6f307473b37b87551fafd7d225582eb

SHA256
4040b0ddc25c29025bca0e546a59d2f4f4fe30479e5afe68d3c372eb5ff592ec

SHA512
eb627598176f4d5f60d51d4a6ba8d95049bf4381f290e93c7b4b632c8551ec44d553851f666b2cde1d895c497cad8e2ff9b41ef1ef550b3474dfad86cbfbff8e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg

Filesize
901B

MD5
34b7d59d5c5efe95cdd07a3d3ca0aba9

SHA1
7c05bbe96dd418a0a50a943f09d0bfd318556c9e

SHA256
8c7c99008d1a322d4aeae4694a649077c60cbf72e00187ecf1a2898fb4e622a7

SHA512
b43275bee3ae0af50fa618cc225b50b7cdfc2ffd7887fc08554261d88402b3db2d591f4eb3686357f957872bf8cdffc751f166f146b3130c22f5ef9bb49fb59a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg

Filesize
1KB

MD5
e2f1303f91a8b82b3e31d01bc12010db

SHA1
fa4bc2547115e78f3b1c7c61d5eded1486f0e77c

SHA256
b479f79991c1c2f4811ccd0fd46101719ec06c254719104aec7740dc3ca5a7b0

SHA512
1656565ef25edf6a0dfb27aaeab0f665391daad694c546a13037e2d3866b8144e1b2d8a226f5d1d34c713ba9d780c8afa5664c9339cf7478a1c85434dbb2232b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js

Filesize
8KB

MD5
6d54d6765bb4fa9dc1485a4571b1f218

SHA1
200e26b1bd2b039d2aa404abd87d1d0fadfbbb35

SHA256
8c93faa4a6343dcbbeb612e23aad77ecd7ebfb0d4c82097d7b216beae26a6d13

SHA512
1bee9de341c82872aee6ef879d18df2817d01eaba562a445d4e8b97d6a71d36c5bc207e888a3a411b9361ed5a3e32854a2b1dae7cd6a0f568b84fe0ff1881b49

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js

Filesize
1KB

MD5
0f005ef2cfdbd7890281f18a7c2d495a

SHA1
2bda94ffde11296b7c858d8b70f8aa595c3da5f9

SHA256
680a0031ecc7d1328365491c6babaab358327f94c49fe32a82f9aff60148ae69

SHA512
44b589cf3584f6b072bc6e51473220d3baa3250f60c6c571783c999696617f69475abc095cf202e1a91f0a626e9a4cfa1c42d5abdeebab3c7b0fd07f9c363f8f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js

Filesize
1KB

MD5
aa7704a6c3471b4207b23aa28ce17a24

SHA1
e67ec1a4debffad221df52fd51a7be7bf73d6c29

SHA256
57b96ab55565daf169d04a6609811f11eccc7f429b9ae6557bb949dc3a51f305

SHA512
7d4e14fc79177772094b9dd2acf6a5e6bc1653b5c345bf80c5c0b6e5fcd1f12e423ca04156b9f22d25009d9f7f8befb6ae5bf5a574aefba61d9ce3264d0637e0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
ea3e4f415c48b51027072d26c8694c16

SHA1
019b7a89b4fe8c458848538c1f4757757d758a6a

SHA256
ab56e71835e9c1812c61423bb8314291b012938b7a305040f056809508059850

SHA512
a444b2be6f74019c054a95e9f40386d5871fde95d051094ce1a0c215b12ca9739f7a8fc28ca667e67062158af714266d15cdf29c3d9fcb9db804ecf367f450c5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
d59741152e003b90fc2f9b2c236a2929

SHA1
14bf26188325a5e83897ecaac76c53b2ecd5f1e2

SHA256
2dff6d209443d44e0d48c62047b0918a71816da7e1bda92004b4b543929fced9

SHA512
3e79236be0a80be63c968d334a9a594204fd0fbe9085084d8e191290c930f8113ebde8410f57bf582f52fd70ce49b3657aada4f08f44cf53334349f0737fdcda

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
c60d1df91f515e855654c819818f5b50

SHA1
d39a970da67d5f106e6f99e55181e7aa763c5ce5

SHA256
f222b85cdcf5e379da688deb0980991ac74856f7706ad2220c3fb6bfc51c0405

SHA512
424a5677fe3c08d06a78a9161b34c897c6cd7ded275db6236c615a546e3251f3b200a705f3b54857a9546512c8d7e1af11b07775c83fd77d27de2b33c2f2ed20

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
9ad5e701d2f2b5bb67870fc72567a75d

SHA1
17c0b1d1c5ea20fee8040e1a4a6d139e7380f51a

SHA256
7f91ecdafd1fa6084c29f884c50308fc001a6d7e114eac30b426b51578adbc97

SHA512
b4096bbde60a4130ed0b9df80ebb0c01ff377f1e64d63c94ac5ff6b7158b6e0f3d9739075315049f8c68cbcbed9d2d9c22b782277ac2716aa9f4acbcfeec3de5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
15bd9175c9531997d3a457eb679781a7

SHA1
acd29cdf3d49e111c19f0b745291fcd59325d89a

SHA256
a20b09796589cff834a6563684af3818fa3237d89a53598339a8f415af4d82ff

SHA512
73764750388e37e0d151a9984eba5edb0e9640dd5c67c08daba70419acac92c4b17f14e041813be036bdea5bec8267f7ec9035725b47012415cfb129a9045c57

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js

Filesize
823B

MD5
cda437b97cca61e564731524dfd0d7b7

SHA1
a67ad298664d57248c9d7c98054a748a808b3d8f

SHA256
e944dc8d980ae07e73d2ac754e3c9bf8ab5cbdd711065a951218b75292b5a2d9

SHA512
4cf202cde18a4eea8c9fce21ce2653efc285c59b13fc679f98dbc49ef8e9e4cadf757a9287bdbdef8d532af2811df8db74f7e6a6a991801c555f4ded4c872be7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js

Filesize
850B

MD5
9d1d4ebe0ea754f6652e6423522ceca0

SHA1
b519a53b10c8efd929dbe20af03f4e0550a8219b

SHA256
724221f93236617392b402507abf9c635b8a4bbfaed89241d7eec773fb3e2a28

SHA512
58138a4d0628d7758324b770655b8d519eb9ebf1a90b92d1775f24d665d56e8ab53402e93c1afdfbeb18bc6983825b83a83fa893a62182447a0cf16f373d1d75

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js

Filesize
1KB

MD5
3bdfb5e53de820148b7272f2fb86f3fa

SHA1
6f99da0ee8d4c0767c48a652e2c51539ba60c20a

SHA256
3d4a109d7dc8ea76b3f62101f03199086978e84cfce6efd13ec4196a3bbb7f18

SHA512
59f86a41aff2975ba8cd08ed386da9fcdae8c3425cc6c919ba1dc5e11f59e79291fcf04e8670a2395c2105e510d5d9900cf2bdc3e6514ef79df87740c8c0819b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
15b775f507ad8b285ed7152ac8fa0ac0

SHA1
03d24bcf6da0b9ba43bb46972856d7ac0f3ba8fc

SHA256
885fab806dbd2ceb6da0b91f98a169bdf3501dc66b29c291c5d603b0289b29bd

SHA512
1b69b4e0a174926b898e78a7210adf890c597379b88314d611fbcc519e39119c7faa1efe00700e12642bdbdbc56b1a139cad68f1b739d1798860f7f14fc9cc68

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
1925c4636b743bba62fa93827360ce7b

SHA1
4dfd12dd2f88fdc3e46125acdbafc605e22de617

SHA256
b7001c325d30710078e4fe102aacf682aeb12a400671275f0fae6180e61f63d3

SHA512
d6f136207fdc003d11794942ad33d35740febac1740eb678bc5342b0ac0fec119d8353eca73bf7421b997ff36cf4a3a2c3b155c6e2999ee83dddcd6f254aab63

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
ffe1eb9bb87762f409f479b596f7442b

SHA1
1014c3008270d7b13ce4472975c5ab7e1cf54350

SHA256
4d6fd49d8c49488781bbe8403780b1ef5e7e4a8e6643ac5f44c4641de0e1b104

SHA512
322d5f2428ff0612b953519b35dc7661ee1d928db43cf0150f2ca6727456310ef73b729dc2eb0a25dc7634aa463bac9c838f75565e4d2d159fdd622828f924f8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
cd66ba5d43c7f21f57d2d898dbea4073

SHA1
95b9240c14d13dcac3ddcd70ace247e36a42c530

SHA256
6f5268079250916afc4f87df029df9bf708fc7dda16f9ab58f4a23d489696caf

SHA512
83b2b59f6c9cd2195474bfbe40f27e01c09ba6091821b38442df955234063eab1441d8b87bd9b57f9b5bc3a2064d7f4733767ac297b2a5e4c29e2a13cae49258

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js

Filesize
1KB

MD5
1c0acfac29abf957672464d74933f6a4

SHA1
fbc284ef977da3ba8f8d9a3c7130fa260648edeb

SHA256
9aed3587883a1e177ea5708374380ca879f203532dcc1ab2967a1dc8958a511a

SHA512
1f6d4bea048df34d96e3c80d4c46a46540b8df64fbed15345b76a26a1ca2826cd8f9c0a77f1a127051df1212812a607dae6b77117d0052475d5e866993573768

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js

Filesize
1KB

MD5
c727ed1a0ce5929606880f6873952809

SHA1
ea02db2954260f2b33492bd7ac47aad823cec992

SHA256
19e1e4f16e39461bcfc768830053e374c1e9d8cfb25ddaa2ec04a41010a6e52b

SHA512
9abbcf9f4365480d42018fd7502131016dd443d46159f0a27ace4afe904dd2fe32ab3283965fa1b0dfa3ca8ef83f22a932686762b63ceab7b33b0dbc817101f4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css

Filesize
802B

MD5
699c402025598ea6b3f45eb8b30f3960

SHA1
246980b456bea9d8dfafeb142535dac9fc6d4117

SHA256
d9a8c78b81503e4ec4d205a824adf4b92be8f750e564357fff6007090cf8af67

SHA512
7c7b84577efe0d28aae4340daa60d4fb1c6a2b1f3bb3bc2745639981fe05931e2e2a2ec59d546157f6d590640ccb34cfc8d00f6112e3eca9a604dda7124e4255

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js

Filesize
1KB

MD5
5c0c1f8493c075130a7f9449dfec0eaf

SHA1
c611cc0a29a54ad1908471e9f4d50981d992c146

SHA256
a03fa61e53705a68a06426fce9e7eefe5981461829afc8f1956b37e0d9433dcb

SHA512
35f6c14e447074db460e1d003426ca201baf4904a58cc962655f126147d61895908ff423dcb621cbf5efd862f3858f755466dad4f328d5499f8444966b9cc5d9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js

Filesize
1KB

MD5
600c2f5e4cc17a0985080476df228456

SHA1
0f121174017898ff93041ee66e66f13f5a0014c0

SHA256
a164fe4c17fb3108853e04267d7686ca353091079578ae6d17d4f0beca63d70c

SHA512
8aaf21af425f71e5b0e78dc1861ad2602ce2e21ff983f2c666fe5ed6f394e1ba9b431d2c6f39bbb37bc127be38c3e74d1fd61abf5466f84021c5d0fb46a2c1d8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js

Filesize
1007B

MD5
1b81cc3c52de6118ff7adb7f9bf7c766

SHA1
ba8cd65fd0a56bb4b625e4defd705dcd5f033517

SHA256
7c385212df0dfca000f95d612e2c192f38f978d21f31db0184fe1a03daf22669

SHA512
1c76d666fc3f75a93724ab33e5eb870f087715db159909052ed6ab0837c05366a364c3850d5a19eebc0947426df726ce6e8fe16cf963fd3ed7f311addb6d499a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js

Filesize
4KB

MD5
508e901bbdaea51b7684ed0845dc9597

SHA1
69045a19284f77f7346ccbe2d5ddf9393bd31831

SHA256
8164238a1cb4fee1e366cda8c694154453b92cbb6c6e63bb447e0f17a3599e05

SHA512
ef3155e7acf86bf70afc3c52287692a4668783f7f43c4629900f063efdac636407c63dab932aaf4a0c915272c37702037a52a3c5aedb1f19631843ef67e09bbc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js

Filesize
12KB

MD5
2edf08fcf7c4c1704f66d04c7b1da26d

SHA1
9c7e08423898f410974d00374e48ef91cf69aa89

SHA256
5014b22e61ecb499e849d519b1191428e0cf6a4272e4470c1e3645e9945a4a90

SHA512
542550919c988a7c6b87baa8912e86a00a03ff3a97f5b72c964516e97f409ad0cb99e8b082cf4263f7d7ae36a9c3055b635187e7f253503076c193aadf5d08eb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js

Filesize
14KB

MD5
f358a381850a4d1c0818e18dc638b66f

SHA1
04db748e193aa31b049b8a4874f69ba907658cce

SHA256
f9ca2a2c7995f91a724d7517e67a38c0bff6f40d91e0265ab7fd95679a4ceff4

SHA512
30061e3817adf26e4c0fb301539a5f8b029b9a39f7a7b774656c161a9e2857f511739262355e3867ba8257a661e4ce57f191d03fbb5b0ebe96d217f8bfa8f011

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js

Filesize
924B

MD5
c95d38bf37f52226e1654d4761cfc089

SHA1
cc68e47d890b1998fe082155e37a97ee916d18ac

SHA256
0b93b0e07ca38a7f6d1cee06a2b15f781f973bc18e78674c41587fca420d24a3

SHA512
9f64a08af7bcf73ee97fe9800aa08a3e139934f51b2e46dfa96cfcb9b5933a318d5a2fdad39f2c01a411586ef0c7c2ef79836688ab5aac7978f2381b22b398ae

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css

Filesize
802B

MD5
941a0a8a25dd92e3c84db97aec87b804

SHA1
75e605fd11e7309bf2d9e8a3e802f73af0b349d9

SHA256
63a8c16664c49263ad17b8f17e13b7cf41faaf1f67e912a3ad38470d48334a3e

SHA512
da5ff65a68262faedfa4d728a5324bdc74d1f2e4584bd2691db305d9a3b767599c94f143eecfa51969440af66db4af4cf3fd25453dfb5790dbc0123d26ae37cb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js

Filesize
1KB

MD5
b37a163de853969f670dfd2cc095b8a8

SHA1
1d9cfccf0cc5c9d1bdf3b113f2f88ab20cd6837d

SHA256
4b5f96af4cdfcfed6a27f1ca49da99fabe7b4a68a4133137e18ce1a9c6913e6a

SHA512
64686c66022273b57ab66d70ceeed37fde08d8b19bca3baf2801461b4b6f0da3632a6a3713f18d3af75128ce9322dde443bcd4ea1cc1e96716cd54088f97c036

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js

Filesize
1KB

MD5
9817f17c7fec3a45f609fdcbaabadbc0

SHA1
0ed08de01bb5a30b774c1c163771acf2283849ab

SHA256
16ca5112606659df8399646e5515fd8b4d2dedc6d985bb6e8c2611ed85c0cf33

SHA512
4b715fdd16ffead03ec30a3c571bef73708e3a456aa38b99446d0b3cc2b95ab492a27c99405ee734760c85bc4c5fbcaea2d3822ca285b505a7cf9ce6b5ac40dd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css

Filesize
802B

MD5
3558b9ee9309e92235b212a38f90b5f0

SHA1
dee7fafc4b9a386ab777524a5bfae013c28d582d

SHA256
83ee19d67a5466aa36b3f7936d4c02b448f6b3e0b905d11ac24b804a48ce3eb3

SHA512
4d9477f018e6506a963f3704547850cf389e25fbdd0f4eabf3d36ca867917f9747aba2c65883941753857d1294bb7b6efc46c2f8e3732fe8fb0dd728842b70f4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js

Filesize
855B

MD5
b15583c3377cd4478fdfa910d571c187

SHA1
f33b94ec4b0fa94780bd4ecd12a41a89b127991a

SHA256
8419dfa62984ca6927de4f80964052bf6e235ef1df419cac4fe6ba369ad372c9

SHA512
e523a60065b18e1e9aab1438feff230e90f7ef5d108ee4912005cf9b2c3c1ad5762cdcf1b623f5d6df9e1b433c9025e7aeb499a584246755014e19b42e59564b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js

Filesize
850B

MD5
c844a4f79e318d1a835fc12999ecc8a7

SHA1
8f311fe515e9268516156b6ddf2ffdc28b0e8dea

SHA256
a25d9a64921545389378512cddd4fa29cf146179dfbaeccbb35df6fbd26e4f9b

SHA512
eb42ac8f2d463fb42d303b8d11504eb7b352d3561ad726b80a3c6ae535cb36eaef05823093099564b0209cdb442e74285b1940efc823cef838fd2ec764774063

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js

Filesize
849B

MD5
a9aaaa0ab8ab8d729bfeba7bd3009cee

SHA1
892ce366931794960e62fcc524c8eeca7a136ea0

SHA256
9e804dff7a0240951057fa18b75820fa8baae54d934f7cda596ff712d0027370

SHA512
827d96941d1a21d136fcd598fb18a4278c90ed94e335d2041e633b04962c5b4c2f34fed3cde3f47019cd105fae43cc2ee3764927bc5324d34aa2c12454f5115f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css

Filesize
802B

MD5
04a49c93cb2af46c3924240da940d4fe

SHA1
5efd1c8c2c5e07622af276c610980a16bd4c8585

SHA256
fd72153e2a68dbe70880a7c436bcd704e90f393c9d27d2576dc43246b4135a5c

SHA512
5906235eabbb74bf6b26e19873d8a28f041f8cb74d493919730e4609fafa5e2e25065522f64e47e6091abab5c07e61b3e10012608ed9d5517cb4a90982b966e7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
e86992968e3f805d7fe0c73222462a52

SHA1
be2a7cd4228446f4621279284abdca8b8a50a4e9

SHA256
d31a4f396eb9ac22bcea59cc236ee1eb46706c805a992f0f7c33896de8cbcf64

SHA512
120dbc96c5baaec3a46a6d526d9f4ade9104a0a7ac06fc1268234e27f198e7e9673e9f98fd534b98bf639ce4d55bc0e1128a9f969c57e082c05497670ce0c3c0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js

Filesize
7KB

MD5
baa2f8ee7bfda5317df012c2ce129350

SHA1
7219f0fd89e14a7aa53458ad26d39f3f8c201af6

SHA256
1ea3d188d7d01833e2c3ff426328be5b2bd13270d6e167db156742d727471f74

SHA512
c8323c851cd2bc0addca7edc24f5575aa00f590cc4d54884ada9fc3eb315ee612948689f5b701da704cfa874716ce4663e10025df4590625c01f1a8c636b3462

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js

Filesize
3KB

MD5
dae4003661de75fb492ffe547e770904

SHA1
c4e75abebf668b1d3fefe872196f0e1cd13b8389

SHA256
1414f635db414d62b8437259ec64a84615fc32018771cbe13644c541868aaf5c

SHA512
24fa792d69eca58cbb175d94e7029aa517f0f7b5fe5b95cdf2b560b9ebc7290fde2454ae483d42051d56d20b7a8c8dcb4eb9a9b79f3e704718d24087726bb9ef

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js

Filesize
1KB

MD5
7eb644a6dd13464553e3ed043570a315

SHA1
df142be75dc6e9f4da1ed9e175e964dfc32debc4

SHA256
4d89ec11f1969d25015ff54958bafec1451f79294c110e429306931c8d08e01f

SHA512
fd92ea81f42f5a898a1228ffd17d6cd754ad958d36660f59be2bc9740907162a88b6c7ed73e175361fa9c2fa2538e55e1fa9143b61c9f59f85aa36250d9ced33

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
4c030f8209dd3087ff1f4103a2a857d3

SHA1
e46fbea9905d81537bf55662277ff51bc47e3367

SHA256
c6beeb896d266cf2ce07b1334874a9492efe8239b5d423c895bd640f682a2b12

SHA512
829fd29bcaefecae47c7b3ef6ffebb5c36a424d9ac86ec456dbe912f2eac8efcee68bd5f6d86e95eddf01da923b4028cc6bc1add7d0faedf8077c47e7bc3175b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
d5ceed60d949e63f3eb432d5b5782fcc

SHA1
659c7fc59322a5abb9ea6ba868e07d7cbcdaee1a

SHA256
f2c4fe9e9932cc28e0d767e5635614e9ea1cdeb26fd1cd66c37e668d8241a191

SHA512
c68dbac8c51e10e96028cea6fdbe5f45146eb8f1ada4bba03af95e39dc9590b3007a11bd4304b8617b4f4bf7a125563080a2f92b92bb03a61b80707e8ea92ad6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
e2d390265a104c3d0ec96705b9124dc0

SHA1
3ec6296d85abdcd95720f0eb107ddecf9c12b2af

SHA256
b3de892db264c8de486cba2a97c1b333deadf4f77d83bbe5f7395cb4ebfac5a7

SHA512
0c755339556c4469bea6019c4ad70c5fe5071bdb836fae45d18d662780a5f88d912d0e955bdec5bb0856e2eb373c6cd9674c780aa4c1d8f70e632df7fb1249c3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
64eb297daa64fccd4f9acb2e83b955d9

SHA1
cf29e8c34e0439054887779246b0d8b6e5a6b25f

SHA256
a227f694e3fb6302e4f87f8f5be93f1ef6eaf2b137a26c3381338afead5f0183

SHA512
d7b75bd743b928c3a16a93600d661b47b6a553f043bab74dd0ff2b5924bd061ab2bd779a39e1f3231435e0271e5b46e0bbac731d3b179353e3c683e0127939be

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
7bf54b41b78208159d5ab1a07859167c

SHA1
905b594210bbb1006459ae2749fc14a829abf509

SHA256
c369260cbd91cd335c4019bdcc43f849d7a4bd9149884579749903e09feec8b1

SHA512
86e35ad845de64f3396ae125a9637bb2d5abe738b5d505f5919d5ada06234fff2cf369b4293a1c3eed5e088622b5a3448cb128b7a6d581fc64a7fbd8bc4f9e77

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
97c39a1ff51eab72ed7024626c6bbed3

SHA1
7946fed4576ff38e3aef9e1573fe84608d2904d6

SHA256
d191970d9a1cdd5512af1340314ec29e7875239036594185abccaa4c6dabb505

SHA512
e087a563983bae9752f3af27582bc7482373e47f89250fd5245ba39f7db933404d3fe520982c30c0806ad94ae2b19a5767db1b948ef3d256c579e151e6ad729a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
ab84d8858d2fe00e5b47136bf07ee71d

SHA1
cea4ed29d4ea127a4147c57a3eacc5ef898c836f

SHA256
9a2e184bf9891345d8384cdb4a8adc3ad0356c298048e4c4f8e880e3d30559c9

SHA512
367a823ca9fb5e953ab56baacd4b3b34c2a896ba795e6f00b78b2c99b67663d478cf60e086b882a8d1815f10aea107d88c2d65b52aa051004e8d8a62177a6fde

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg

Filesize
804B

MD5
830318cf9a050bd0ade25d808c59dc4c

SHA1
ff712c42b42b030bc04734d08a1f10d6404bd6b7

SHA256
8f485074605959e767c117a79f616f90a61a7d77708e529fee7a6248bb3f2869

SHA512
578fc0d2d49a511a1a89faa5536bbd46c551328ab771a4ac3590b6d4d3dc4c0172a3ba0d24a0628592577af25063fd141b0e0a4ef3d42a23dc572e292be964d3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg

Filesize
1KB

MD5
d8a94a4daacbe95e91786225f9335583

SHA1
cc22d47b9d031e8834375871ffcc7d1b1f415a43

SHA256
5ddf33e23c87f6da5e56209d61d738d8e6f2a9adcd409c572628e9e0e89b0ba1

SHA512
871dd60685a08ddffab677067a69ad3c7ccab70937a23c295ff4d3cd9526c8debbe5ec0f924d3b18b2263b6ab1c7f1ac7994cb8e74beae50f70e3561d87a313e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg

Filesize
850B

MD5
2f17eed3a94ff7d544c0184fcfe07390

SHA1
d3566f7ac05ec53911c8d69980bc084cff42c204

SHA256
a4ad34837d502d3e7eb87cc060cc4e97919d483c18d64629f9b17ff885750b83

SHA512
83ead427ae1cea79d76abd7752a8b211009c7ee1c752d0880c7cf226d3ae23b514fdcf5c0dbd8296fdaae23e2879d03eb100685a54007b3fb7fb221bee4a42b4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg

Filesize
1KB

MD5
68463d89fce7c6b12658f6767033cba4

SHA1
cc8b3bbcfb244d935339b0ccdfb2408417bdf94e

SHA256
5bbd34b0a2170f02a17a64c26c62c933022e7fe9b49522a6434f05071d334500

SHA512
6727bcf4bc8494684c6f968bd9ec03855cfa98785882fe020c97b44564ea4d74d571b9831264fd4b4b85a8e7c4ab8f385ee4f56193cd58cd51283c4f12453a59

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
b6d8f30db46338fd5733ba05ae57e575

SHA1
cb8fa3e8a0c2eeb279277422c7859fe72745a9a6

SHA256
cf664927b3bf588e05273eeb333d016d97d396a82714044994c317b8bc332cf6

SHA512
bbb2ab45563531fa1e2f7609f367c1f93fcdc5d2f490a7506622dc433d568196a0a389116505f74006dca531c95082d56cf913b0f55cb7f1390acae96a0e283b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
2c48d7d76892b6a8226cb9e5d443ddb4

SHA1
e2f37d2cf9ad40a3b4fa1d811c8c0190a976c4c4

SHA256
7472a553de82c149ff91182dc8020bfd02407d6e230fa1e057c67ad5b1b4d2da

SHA512
8cc245d02ec8e86faca646c96098f2c3002ccacd6cc8351b81871fffebbf584a495aa1a63df5c05028cecc9d1bb4e550844a0f804e6f7657c95a852afafe4985

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js

Filesize
13KB

MD5
58f299da840f39065b48698ba66e76d1

SHA1
4a1b0c90d55f78b9b97f3c4f369bafca9b40e010

SHA256
2bbd2cece0e1c28e895d17e53368109c4281afc30f16edbe617dabf986f98400

SHA512
e3dc724c9a3bae9684a2a94e9f1e6f66cab0ec5fa97fd0ee22dd44b82ec797b75d3f5c64bd007d6cfaed8e32e0b4cf89622387f083e30057a8f6623d140c854a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
b564be481c39884c50c5c7fed05d5856

SHA1
d39c200f1077aefa0af52a02992011cc0575c884

SHA256
4b35c18fcf264d5278878f1acc14802b70fe8f2e6286d2ccf0a69643f93de1f0

SHA512
d31cda4de2e5bc0135bb6061abf53012f5f3ce1fba3ffba16654b24531d1b4ba7c449d66ddb27225c3876649f64053162d1054a416a0f79fc9a29fce294ab6ba

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
af9ba710e9e0a40b120a6d312f24bbf0

SHA1
88b9d3bce87b88a1721221cd5952f90669d83114

SHA256
a7eae65a0cdb151d2c58f62923b87643e009225d45386bb0b4c48fb79d07184a

SHA512
10beceb66aa044cc832a0ac9cf7315d4b947732f36989e03f46bb6a242198867c1fb630cd11087041cc5ee0ca9052cff6686dc39b5933b6e9ff796a6cfc39afb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
2ca4729bff741a4e82a2eb07594bf028

SHA1
a92e587274818f0f2cf0021a81fc84002c935e36

SHA256
9f882e60e8c43646de73d58dcd0b91fd4b2df5630e492a6ec271932e12b65bcb

SHA512
cf36b9a62594fd6633413d7e1fae8aefb56e9a94c56469b109f9ec2f79f8a0b638d21ddd783097af23add97a5cd103354dedf3ee96f17e3b498855e1f7d93cf2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
c057f3955f927688520730a2d72dd21a

SHA1
b22547569963beeaae5eca8a34501dee9a99713e

SHA256
f399f285ffc2f6937daad7d58a6d4a4b6aecf4f2abf62879a83db5745bf65380

SHA512
0b9ff3320ae184c5f011bc14fcf46381891421784e81efe9533a9b543ed68a33025ce772f68951a2f396bca506979c36a5a30ad686d074524830a22844886e3c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
e3993557e905e5848d627090549081d5

SHA1
aad15ec72979e281af3b5ccb8128f9719f03fe97

SHA256
098a2380966867162d4a410600e25e0dd6188068498ebf2a1951b27120c3bbb5

SHA512
ff616aa3010801f94da9042abcefd4c881ef2ddd3979556e791ec2472fc3c3b4dae012bf571b4c7aa2ecc45c44f5fbe9e4074c1df1637bdee17ec1d451619d87

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js

Filesize
10KB

MD5
7f0b41536a6c62bafaf484817900860f

SHA1
844f276d64addd3966229af1e0a64d834260cbdc

SHA256
2abfd9fb7a3ec726fef891cf86f6de25b534f3f27065ee304982a9fcb5683995

SHA512
25ce06f7f3b748dbd8cac896ec3f6443dd6abc17796fc2cb0db105f46257f6c34a80b8421119f8903baede8d0d2ddca606d5884d51297e93fd2bf756948f90f7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js

Filesize
13KB

MD5
0e77d606690b9270530ad8c4905235f0

SHA1
d88ee64e245ba1b39e3aea0b3ec5cd2e6cbeae12

SHA256
d45aab0a48d8f2f90e53133f6c2a7b42f9c13ae46fb22fb970b288cc63dfbedf

SHA512
2df9481d5baa40dda4374dc56d546c0e1027b4987813a2064b80fec80bc87d9d8f9a0dedbbaf9b5201401af5562491f3b7422a00832f202d115a346be3763cca

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js

Filesize
840B

MD5
23fe4e986fa0b173aeef24ca358ee963

SHA1
58a63de94a9b0e16da14493a865f2032630a711e

SHA256
24b8e781d2b74a2a09fa0933f8cddab4ac02f65d1bb847e1365aa439c22593e7

SHA512
6c4e6f5f11f10add01b5c8d2a4ff566759ffd2069b5b3394433a7c52598f7bce3dde5e200853835500c26d3d92df3de406126cdbe3d87d9498702d3ce901e42a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js

Filesize
17KB

MD5
ad5749b04c53f5a7d8421c871c53823c

SHA1
a569d7d94fc99da2ef1b09417eed8571a3a922ee

SHA256
3e507778f501a450f56ed3990ce6978ac85d022d584134700486decb6d47aa50

SHA512
baeb4cbcc78506a09fc9d570c3fe2a198d1bebd5ba9c0ac9cb34f080333151a6b0506bc17efc27939cead1fee1367b5ff5b21ea653517bd8e002c35661830065

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js

Filesize
1KB

MD5
aafebe66e9c87fcb4e27b2c030d0e841

SHA1
693d17eb96704dd0550233113a8fbc75bd02d1a3

SHA256
5717a344e2908fb3e48f02ad30c4a9bb7bf0916f23111200055be137d9b70180

SHA512
c6628bef4453a1076a58f5699e6a79d921cb766bf8139ca4945ef47f271a1827c3a15c15225ac83a4e115013a43b3c78c28f8d566640a35dd86714371a46f7f0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js

Filesize
1KB

MD5
10760723452e01937aa53e7f2cb5747d

SHA1
e7fa422a225c0e0a4b2f1805fb3e6984dfa560f3

SHA256
9b79111017a430f31fa1094a461226821ddb0c8afc134e3bc52f7fdfc58319b1

SHA512
5f232972ad0da90312569a4e89bd1b28da90ec813574aa52f25a72c3643468663e66a6e657d73e26934b096ad354621e440d6519fbdc8f1f790d5d2c8db434ed

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js

Filesize
2KB

MD5
dd1a48d7602d378ce4e2e8f5572450c4

SHA1
3d6202806971547400e7775a7ada6e16f98f7b74

SHA256
a06f7bec8301098d6552a0b3654306961e62de792e49969c11f5f2d975f4ada4

SHA512
7f766984e53c805d2fbe7af82c6e12d93a6b0241be7b96a268575fd60e27ef98b4fd0ee8f6cdbc7bf57e7ea8b043e35d5539b4b077eea854c3a98053421de0af

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
d3f9c1df469333302b272ed90a819657

SHA1
6c4a6a7cd482fabb293e6af30bb28891ddb9364c

SHA256
c167291419e3bdd342dc1d92031b335ab417ff6900bbbb7d86951999f0024b35

SHA512
b4e1538dcadc36e53f68e95b495a1a9c6da8c5bc34f20ef041384c5ae3ac7c2011136593b8f3a90b0789c9a13006512065cd53c01fbea22ef917aeaf877ca83f

Download Submit
C:\Program Files\7-Zip\Lang\HOW TO DECRYPT FILES.txt

Filesize
797B

MD5
dcc1a5df9f51faf3903c2cb73698d15b

SHA1
8421da4e01ecdadff5ab43376552edcd83d3356c

SHA256
6350ab674c2c2fdf85cac3aa77c9a8b653e89a7572248d6cf3365f8ade2b3c9a

SHA512
a67bc0ed51b6def2df7133b30b205bb879a3774d9fa8f115dc86ba39e5d27f8b711b432cb2a57d3982f78165ff00f9f4bf9741b19d238f8847f8433dd4044512

Download Submit
C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
4770685faa57a4dd9ae496229bfb9b06

SHA1
2e1493dc6c71b6ad955865c582d5960e2caa0383

SHA256
0d78762068f8a0c55ab524cfe68c1106309fd09b96623b2edd3c12a2f6416fd9

SHA512
c411e96fe97c2433d4b8cf03ac4b373a7cb5867a8c9b42720c4f1b9ce1b82e6bb70e4260731043e7e3d027b87272d700370d91f2901df2070ed78661e6b332df

Download Submit
C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
2a452c9553fe8b3773a82ecb9a975f4c

SHA1
1c3c348b84e5ec81aaa7e22e7cba959d5fc33b4e

SHA256
3baf58117ddde8ed86c84f602026890c834343c1172e3bde61b18cca65916a39

SHA512
a2ae5a9ec624886be0b188cb6027102d65e27a9cc4f2494b9d96521b8d6fa87d0b87b96f69dc9d253258ce7a48ae21cb29a642e0c3d5ba4ac7b3a1e6deec0191

Download Submit
C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

Filesize
8KB

MD5
eb21c273238abd3adc500b0f9a3f4fbd

SHA1
8c6b52a5d04439a09af7f18742f18aed9a15e942

SHA256
446f1068f193164f58dbbc4641036bcb5232295f2c92fe8b4f9fba1498442d23

SHA512
a62dea3d5f033402218a7f4b16bb817df1f4737ff3bcdb3f9a0bd6000f590c9344ff6dea945a115bb886ce509e46dc6627ef2d12962828c4d1eb0e6146a373e6

Download Submit
C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

Filesize
11KB

MD5
ecfb1cd6bbc8216b6adad9faa7205839

SHA1
4c424ae031ec094cf5a0e0249218dd7079baf715

SHA256
a7fe0afb9b572e614b1e9e4db15a83c787676bf49a3410dacbdad09c01d692e8

SHA512
9005f3fc5eb62e4ec5aedcea1d205b833ca65f44d158695c80f82b8156dd8ca75f772e0d194b36af6d5843826ee14bb29dc401fac6452a6673e801039bd81db6

Download Submit
C:\Program Files\Java\jre1.8.0_66\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
107KB

MD5
ca1b3113053fd83be4bdd62829e06bdc

SHA1
d157258953ef031f7014b3fcd4191cb4ee4f8101

SHA256
b2837d2c49811ef0793d18e7968e9d0a58be73a30de5464d1a18174a6dd57578

SHA512
1bab554c5b2d5ba341e97cb07df48850681a02e88f7f799605bd85373a1c7ba2de8eee26be0da4cc0481059553f8b785234a4e10f0a1455ec6f29d0d9672048b

Download Submit
C:\Program Files\Java\jre1.8.0_66\THIRDPARTYLICENSEREADME.txt

Filesize
172KB

MD5
647bb65282e3104f26249c53c50d6af0

SHA1
63a9722e8d8f7e1577a82436b642bb18a51d2263

SHA256
f07b7385ce01f18c55319d6cb1d13ee49f640cfdeec0be86d2d6f9d2627b824c

SHA512
a7194a776cb8c15d925962ef891d1f673f8614818ffa2a4c25e6ab83e501c34668b4bba5c58bef741876f8db87cc789125e4ba41003d4b841cd2f2b7c845ee25

Download Submit
C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_HK.properties

Filesize
3KB

MD5
9f4605130f0e80939a607af6b63a2d50

SHA1
5f3eee4a530c7cbf7fc1b03ffa9e3406e13b61c3

SHA256
a4f54d9a65c960774fd2a7c7f330f1c6916d350d5e3ff9910e7c778cf606b0ad

SHA512
1b9cb982db69b6bb948d22a46407869851761864a8e1f831f3942a511fb3e4527def184b94c8725adbf287d8f8b17fd0e2c57eb6bea337a4f9d59741f97b95bb

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmia32.msi

Filesize
3.0MB

MD5
5e3078b34f7a945a67c66e2a8c5548b6

SHA1
80bff42cd1c979ed5f9c74ab12abe4c3f1e3242d

SHA256
aa3b7b56f76c5934ca9eeee790b011dee31aca03986f526ced705306f127d4d3

SHA512
649ebc79e1340f896e1e4f355daedda5d92cf39fe9be004e277ad3cbc854a4e8680a68e133c3ea2e9c46dfe6c07cd840dcb6d461d85121230cec94e5f120e3e9

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msjet.xsl

Filesize
29KB

MD5
97c0f5a86de343e38b089219760a0a20

SHA1
074ec72d2616657ab3cfa7ba78572a7b89657c8e

SHA256
0aca581cbf1f50f2c37a5da563026495773fa421fd319da0160c1dcbb19f2fea

SHA512
498d9586971c9faac89b2ad710f5439bd1a4272a4ec9141a4f7f4b517f62b10a48685f1f07182bf93288b563068788858aa96cb6a223401f7836ff74f5719e98

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl

Filesize
34KB

MD5
1a01d74c549e909e87e7c5ad4c6d8b0a

SHA1
7337f5f35d46c400af1239fcdfd130aefa6be1d7

SHA256
bce59c56760e2de71aa7e0cf5d40f357da8410c7908ef0972af7c0d34fcd8b1d

SHA512
c445e8a8e107b32e066bc2c46db529e816061829032a7a9d7ce2c5496145d1d01285fb19cfffde4144d779fa5716b1340e3e3de677b0e0ae01bfd212e27a8abc

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql70.xsl

Filesize
32KB

MD5
7a99e1304bce75a74a9b5769a46ee5cf

SHA1
d6889142ab534b4ba896da30fab0f2fb4ede8e5f

SHA256
a67a9ab339435658625724eac3c0b069d7ff5bb4cb2d89a329e0fa89f1905c81

SHA512
9510c454a23aee88c4c364d5442f23ce6a57513b8d8a09f07711b2bccd2dcc0f1320c0b5d6e6374767cd9ecc5df8934745c0a81ba88b2252fa0f30c1f14c5672

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Informix.xsl

Filesize
31KB

MD5
0bfab41ba8e10b3d193e81b16259c084

SHA1
f3ea193b7d64443ac0534a7c4dc52f52c763ceea

SHA256
6f7b1225925e0c2494961df684c6dda4e7355b9d463a78b8393eec9504941671

SHA512
4207749630a82f3f537f9e8f76f408d6ce713a32fefec99d2f1ab099abaafd5c9281e420e14a263e1241ee230c1edbf139b555f4fedb467c1fa50dc103bb28e1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Sybase.xsl

Filesize
30KB

MD5
776c0fe0fe940c61eed0a31acd42a7b0

SHA1
38afb4da1a316e7ed099024931f2d82a1c6e800d

SHA256
247d1b9b7bf1393d1808320c15041313c521ef89936cf13af1cd85788d43ecf3

SHA512
062e5f32c005a15cd9b81f18038a8c437fc1ddac262bd1b5e0ad0677470f25cea9454d505467c0f4173a9652a24deb64d08142a0096b490a89410c1a8ea5ed32

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl

Filesize
79KB

MD5
6aeed17f9413a45e4ca293d948466f28

SHA1
3c0849555dd1beb91a66a146161bd44a0c5c1329

SHA256
7a4b84a2e1ea1224b63e35ba0d49177a50e5184c27f650a6355f62419f109831

SHA512
29515a1b822d7932fd5416a09df5533564982616a0efe17dec08ddc205ac14de666c09cc3b7bc5a823b7e4c29b9e86f0e5058de6025fb6dd9e2683b3038ce5ba

Download Submit
C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log

Filesize
1.2MB

MD5
3c2f6a162967d35f0b4193e139eb5800

SHA1
c97d0cd2ee5053f702d72c071bb17cb1555e4162

SHA256
bcc5593fd0827170556415b23b16c108ac62886f726895659cbd98189ceaa7df

SHA512
57a9255d2f688d264c0364f7154bac1f2170e8fb1c950559ebe04513832b93ca2007f7456ae68bbaf58bf28dbde3a6781574d12fd116c5ac8802b825e517dd4f

Download Submit
C:\ProgramData\Microsoft\Windows\Caches\{325A8F11-349C-46F9-B933-3E5071005BA0}.2.ver0x0000000000000001.db.LoMiAt

Filesize
1KB

MD5
d93e923e3534842b880188705e400868

SHA1
96d6bf3c43bde9cac950c75215d80a2df7341a63

SHA256
5e2b9aa682e7e874a7ace297bd4fbcb93d34ace6e35cce7c477e7472c22478dc

SHA512
566fe9244c17b88b67ec4322c2d495a8090a37e3335c4cc25bf74c77550fa5078209b192fc859b986755aa6b7387e29c1ae61347590fc66a6fa8ff8d31064a56

Download Submit
C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.LoMiAt

Filesize
622KB

MD5
0c5880d50dc98e7ec081b6e5e89226aa

SHA1
a53b9d0bc8420eb4ef0988fce22d593b63f0c320

SHA256
8347d228741b9c28027bf8e104eea2dec6aa32772c632385195e16a9e66be13a

SHA512
449c395d7faa6ad3b0ef9d00e67df228d9b5a9b10b3979bd76d12e19c447121ab65a2898280b0deb6f02437b6243d92a902333c8113830c5e59beb7d68a873c7

Download Submit
C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi

Filesize
180KB

MD5
22c6c3590467b54ff3b207a79c6131f3

SHA1
3a8e27e4c946a81afc52c53f5c139d4529a7a3e3

SHA256
2f1241c4e7bf365518b646b671661672c0a6611c73a0f60a4cd1bf283217acfd

SHA512
55233e602d6b9bc4a3fec6a4b57f36d1b3938b9a91c55128b468c36e0fdf5989bfe4347770c70bba3e10149278ad3091aa81adcaa43ba4d54ea13fa309204ee4

Download Submit
C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USStmp.jtx

Filesize
3.0MB

MD5
e004a74fa1c6e0ea50de1bc2005d7870

SHA1
bf9e1581481a973c1520d9c39b83d3f947f1c727

SHA256
e1a40f05d4862eca6528be4bbd400b8649ff4dececa20bdc6157499e81468ae1

SHA512
1636f94b117152771f68cf314d6c3e557399ae144684c3001bc62789247630a0c3d304ddde57ca0ea778f4ff58882904f0730e322860b5c2c2b75ac50bc24587

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini

Filesize
174B

MD5
10c04d866d721463b0a0755be59402b8

SHA1
e0080619be7aecf1ca6e0a62ecf2e7c586b62e84

SHA256
d5517e61932741ed5342829ce758a293cc46cd4f3214cd2c4faabe8d94c5cb67

SHA512
922af6bc7ff2c83eaff7df14438c2984d5ece07b721a279e9e7ae543f0344be60949117ffed528c1de08e1cb8439bfbe4584275ccc570beb12c477e18e9f6a08

Download Submit
C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat

Filesize
8KB

MD5
4d43cc1cd8622d4382821be4b1dfe160

SHA1
ae50803186171366e4ec6523bcb262e3db5cfc00

SHA256
c7abcf547f671b27c55394d48ab5f82cd3d51fbd9b9f914ad5b889b86fa48ea5

SHA512
48780afddbe1ae045bb52bb04235feb4d54018a89cabc2e05dc2da300ba9dd61c2664ba674c26898d57247b9f3d2a566c86090bb907b5256acd88ac320a05889

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133213997112581324.txt

Filesize
52KB

MD5
3f17b08db4454c1de5f505d2ab427499

SHA1
a36b64419f1d0ff7bfeb2786a9d10e27482990ce

SHA256
58172082c31dd8d9a5cad46ff7dc2baaf9170c92fbf90607cff1f38acd7b975c

SHA512
d1c2a6d84ebe27723769b5004ffbf55e4b4ae06dca3ace35207586c107e4429639e4d4e6c05533f2a112f3ab65b14255423ce6d94502809fd308b0cce61b4502

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133214005941640687.txt

Filesize
64KB

MD5
e4fdb580cf08ca6f33764aea9af1d37e

SHA1
a5e64f262000ccd29706942dcca709ca38fdb7cf

SHA256
180c20b5cf6f59a2e5c4d99f08c9e289370d11d3ff3ebd525bd927a72a58207b

SHA512
8fdc71b50c135c7e8470d01b4ab7c9dfb9a5ab69972d83eb405186591271948f50812d122322c23a7ae1b1ffac19e118f34093cc4c6aa270fc259e12cd1ebdcc

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133214009801135014.txt

Filesize
75KB

MD5
795abd74f42bea996cbcd3f87f5be9eb

SHA1
ad54cfb111f3173ee45d4d6b43ca6438076d61b5

SHA256
ab0ceebe90df958cfb03959f3962dd798ec5d90eb67c0d32d850dc080021169e

SHA512
278fa4797b0116a07e124fb4c96937c5912eafdf1c763f096dce7bf1eecb311bd2db2616e493cfb6f07707fe7dc4459e2b631df6384e9e7e39c761132bbbe737

Download Submit
C:\Users\Admin\AppData\Local\Temp\3582-490\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Filesize
198KB

MD5
10dd448b09d2430f8b5ab39b704873f3

SHA1
1ee9373941ea8eab869100445d59f9ed5deecf0f

SHA256
c23ad4b5921f60bdd973b95d49c12fe6883ff67ea275d401d483bc57d6da50d5

SHA512
bdc6b898291616123ba26e4ed39cf50812ace5c21b2b156339be221afb6620a5231743dea8ebaa2e05f056b15852c66d328c28c71f21b6b7b75c8871ff0c0a1d

Download Submit
C:\Users\Admin\AppData\Local\Temp\3582-490\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Filesize
198KB

MD5
10dd448b09d2430f8b5ab39b704873f3

SHA1
1ee9373941ea8eab869100445d59f9ed5deecf0f

SHA256
c23ad4b5921f60bdd973b95d49c12fe6883ff67ea275d401d483bc57d6da50d5

SHA512
bdc6b898291616123ba26e4ed39cf50812ace5c21b2b156339be221afb6620a5231743dea8ebaa2e05f056b15852c66d328c28c71f21b6b7b75c8871ff0c0a1d

Download Submit
C:\Users\Admin\AppData\Local\Temp\3582-490\1c7853d1b2fe491c0176a205cde3530d35fc933a3e55ae8e68a595dfc127b7b6.exe

Filesize
198KB

MD5
10dd448b09d2430f8b5ab39b704873f3

SHA1
1ee9373941ea8eab869100445d59f9ed5deecf0f

SHA256
c23ad4b5921f60bdd973b95d49c12fe6883ff67ea275d401d483bc57d6da50d5

SHA512
bdc6b898291616123ba26e4ed39cf50812ace5c21b2b156339be221afb6620a5231743dea8ebaa2e05f056b15852c66d328c28c71f21b6b7b75c8871ff0c0a1d

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini

Filesize
170B

MD5
966bbbb78534d37662899aa783c742ad

SHA1
ba18753efcf00db753b5c94a3d6d00db28acc06f

SHA256
5fe896024a350b5a00e4d2570772b321d7632bda5b4b5223eac06d62d69ce3cc

SHA512
423071cf78783d3f3f900e87f46ce2cbd5db955cc1605fc5e40d15d226f24faa1172e90fa418d4f5dedb89acc1d18f08bf23fbd9bb662897460446dac2edd3dd

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
1e2fe9b32746a0d094b3a34876d77916

SHA1
73053010d880fdcb667ac2b9a0be94cfab91c0ff

SHA256
a76e77e028e49f1d235f16b149e19497e134ad61a500da0cf36fbc43068da569

SHA512
eab6d0185e4be35f34c19757bcd24818782a9f717e4a11b5064636694648494e434a921087e24f4ad4543fc85313abc3cac27308dcd96964a8f6e7c04bd28685

Download Submit
C:\Windows\INF\PERFLIB\0409\perfc.dat

Filesize
32KB

MD5
bc71182ea56f65a1a84c439d160e5dac

SHA1
08ec86edeb1adefa2dc31f13c8d22f7481f64a9a

SHA256
778bc01b914d47dafa6620279706cad53677db8f8c012520d4daef3bf3207656

SHA512
23dd06d3cbb271feae1c42a61c99e8616cc09713f5f771c8777bb201a8551358e2c1f9dfd00a856082abf326f33107b5ab9b1840581cb681095074e12ab540cc

Download Submit
C:\Windows\INF\PERFLIB\0409\perfh.dat

Filesize
290KB

MD5
a95a60bbf529831694b581af208f737c

SHA1
53377a0fa59938e92e8de18b08cd61eeb550a85b

SHA256
32e0e51aa2cf6af7d664cdf38d3d61b5eff42d316c084633eea37d92f90421f5

SHA512
5657edb681cc3ae2dfe8b6f050b42f6e48e2600290346d42cdd0b9fdd96cb41c9e6de522129ba4597676681b860b89cfae602c5c1f279d3497b9d78c15ce0584

Download Submit
C:\Windows\Installer\1751e.msi

Filesize
148KB

MD5
c429d9d6be6f3312fa20d7a16c1bee84

SHA1
9089323096dc7a21d08602171b54979c0e5d6216

SHA256
e62e428d9189de9760694e8b192925c84749d373e77b535e8de28b9ebd306aaa

SHA512
0eb6adb4a8cdb15fcb11bcf68bfa2f1cb00b29758f4a48322ff9cf3713191e012a898cbc54c632ac876ba4a56110b427e1fabe29d38f2fd063158a3e8d74fb62

Download Submit
C:\Windows\Installer\8cab.msi

Filesize
180KB

MD5
6ef5eecea603a902075dbfd6b6e57f92

SHA1
a68866946a1db4fb83e044196b4851cbd1121e00

SHA256
a43f4f2672fc16ee2996d26d118193338a51e8d971d32a10c4aee4089a4a3ad3

SHA512
73a4bcb785e9d6e65d7b4624801831e2f197a55be8fe9b03588597390833c05b9ae31da3b0740b700c3170bcea6b40edad0c8ded2ff5c2cbda6ddb6a0a2a1cc1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppConfigHome.aspx.resx

Filesize
3KB

MD5
dee73e344e45bcb17bc25732f9411b97

SHA1
31486c55e3366bbb4742c7d1ba1f7ca45177305a

SHA256
76ee7bf00c9e9d715f49cdd3f69aa6bfeb1953832aaa1768f6f5cd4d73378a81

SHA512
7133595476e3f731d18d5651290c3a115499bef43db5aaf5fb0a9c15d84e1d7f87ed347009479ca8ea52929661aa91187bf0e229263fde2afaaf27d144d399ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppSetting.ascx.resx

Filesize
1KB

MD5
6014f8275f3a87b3b5fb531a29284c5c

SHA1
8fde96d8049e79bd852c15cfd4603bbbbeea94f3

SHA256
901d421b4361d217abcf01287ec3d125f30568c6779ef72863f727eeee39ec15

SHA512
7dbde6f804e49dccc71447a46b381e413697c9005b28ddd0c9dfd856b7301edac1433776294758fd41cee111e1d188bcb1c3cbcac03553d0298550aa68bb9f85

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CreateAppSetting.aspx.resx

Filesize
1KB

MD5
3fed4b2ae4c5b2b11dd2e0bda1771fe7

SHA1
0fc4e94d2e2218c21eeeb07180d5d31be0fb1640

SHA256
b614ab6b4ee10074318e6dc723a8a51fc84da386d298d540b21ba3082cc68900

SHA512
d4a9881a860e3754bce145409a2ea3802294a660b610c1570aaaadb5ba582ca3625786989af20d239d1cf99f9a2bec853b874779a0c03d9687042c9c8cb803d6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DebugAndTrace.aspx.resx

Filesize
2KB

MD5
3749cb1bf0b0c20c18bd075bd5309d60

SHA1
0302f5ced86d861b05b2b67266c07f2645f19b73

SHA256
8837fc0e1890905fc72abe0a37672858a6a40f8aea8c848ad30d041e88b220e1

SHA512
df06cd7885be699ceba69a4fec61e14c3b5edd5ceb881dd0d821fbba92d5ad888862308dc86a33329e39e24be72c4358019b865adddc3d00c0f71f9313912397

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DefineErrorPage.aspx.resx

Filesize
2KB

MD5
40dfd07368a3b795aa8fac4375a047b0

SHA1
50ffd2f1ec5d7574cc811914fed0f84fe75784dd

SHA256
2f427f13d2c69b000f0355e190838427a6bae414e9b89265b0ffa0cd3493f9e6

SHA512
74c2a444a77d4bc44287221322b7511159efae8f6e8bb40268248888348749a6642e30e2f5647c85a5caa6d60ac8f9b172245d18ab85c30a88c278ef788c297c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\EditAppSetting.aspx.resx

Filesize
1KB

MD5
d49681ef304a9abfc111cc8f6ad410c9

SHA1
60d38d369aa4a0698ee011e46b4e3bf440565e0e

SHA256
64b6761153bb873c2f6dc85803d224147b6e3401f7bcb58663c0e2488468115e

SHA512
dc4071bac2b950a3b4ae1666f12c32076cfb60fa07ce383822b92b4939900ff909dc0e16a17c7f1a62360246d9cc2740c902c1d677aaafd1707b84b30e2777ca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\ManageAppSettings.aspx.resx

Filesize
3KB

MD5
b94682c71a1399004e3a2209bff42c9b

SHA1
972fdef0258ea84feb7c3e76a341bb813eea7d41

SHA256
3a0a2b0aef76b857c5e4027459040ea7004d98476a92d556d3b30231c51c580b

SHA512
757b140cfb71727fa6d77b35a476f4ad2be52355a9e0444cadecacf263bcbd449e359aac440e5c3f62f029c7b181f24f85f248e2aeafd609b5f54ef5d87c3ef9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\SmtpSettings.aspx.resx

Filesize
3KB

MD5
4778bc3ab99792d29b2f7f1cbd5ed537

SHA1
b96e7a4493646193bb2a5fdc0533b1c45c7c9894

SHA256
98f8cc291b26d69c18d6741a81eeb741b6bd6e5b41759695c430465beee4df30

SHA512
32048aad4bd0a2a597af7b17a522973ffc2c74257d820e3faf3d24a12595d0311af944763157a567f589ca4d2697558246c25fdd0a8e9deb53e4d99d58826f5d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

Filesize
3KB

MD5
9f12378d6249aa8bdd749878cd994b6d

SHA1
462d90207e3031a7087a2fc790f27b75e8bdf50e

SHA256
9657bf10846b994af9e4843632ffdbcc8b4d1ab46146e98985686663468211d6

SHA512
1945e3204aaeb1d9dc5bf9c443353bc4c675c16feaa95e35266febc20eb9f4593c5f49ce9a9ea4c50957bd6701274e1567706aa293e8bac3893d5301868e2301

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

Filesize
2KB

MD5
8da34e1fc8017f86629773496c432eb2

SHA1
fa819a039ec75c5e30e7b626a7a8f75456d8ad41

SHA256
ab269023739ae0a750c31ac5070d974da896992063fd0c0e46d561677d558be6

SHA512
b14d8f3d5a261e6b654bff34a82cfb24ebb5f338882e545117eb61ab3174e3a60d269efcb020057d7d267a85a9beb0d5537fbd899f28f01dd95ced8c38c8a758

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

Filesize
14KB

MD5
a4bb3d59f8af5ce54da477960afdcc36

SHA1
e7f36525cdae231e11430ea147023d52cb6727c3

SHA256
f20cb79d80c5e375c1636b2c7d3472693588e442efd1d3f83f6bbed565fe7739

SHA512
84edaec0053624720dc49285e1ef266f8b21d81fb3d7e94582ea152452fa4114e0f18367549ec4156daff6d4a17cd2ef856c9ba3494fc1c7b316651e20d4e78a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

Filesize
317B

MD5
a1f537b0e22007610109e9f9ecbc73ac

SHA1
4b36860da679812f076fc7b2a4168a2c6b54db07

SHA256
8db05d041e4f41006b3791d65b084e02c542673a871b88ad5b152e2ef09847da

SHA512
70e04813def6cad63a018b82c1d7e53ffb61d5838c682e0d36d84877f38867af159b8c89ddd5aeba2a4527bf408330f9d77a60c229614e87b104a485d483e7e0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\AppConfigCommon.resx

Filesize
777B

MD5
9918499d856fd817566170dc28c8a311

SHA1
5f0301443029364d88c4f45dbd0b4e00762d99e0

SHA256
be77b2ff31ed4e99a943caae1c5aefc931374c2d0623ce03d2ef32d61a6d6642

SHA512
1058535df0820c26eb873e172e2c2183b2420cc95d18ae15326704fb6aeefb33ce3cdf4e3f1ccc6e0991753a1ceae134902ee23f677eeb8ad7c26b2a5138b27e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp.aspx.resx

Filesize
11KB

MD5
0abbeb9bd13d2bcb03f240670922eda7

SHA1
b6ccd6cd3370d08949107a82cc5391c403043d0b

SHA256
f1d27f2df45644a38c664b77f94c7837ae45bd2df65015ab6fdb607a1ecd69d5

SHA512
684dd8cbd7cfa28975af8c06abe5ae0d56c8782071102dcb20f5d081c892cfc4ab2c86cc36668bca1da09b48d9b4c37ba03ca6b6263ceaf3f4f9533b6cb197c7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Application.aspx.resx

Filesize
21KB

MD5
32f4c8680bd8d93ac5010aebf03c1ee3

SHA1
0099de754dfb191a36cf5741b6cfddcf7a112ea1

SHA256
06532f62fb1e6194237a7d0b8b0c34cbaf7b84a948337be4a9c894ebc95ad0b2

SHA512
898745090a781bb446d7e981384fc892434e2a1d0ee476657537bfe653974ff11ca77b36e80c24bf9ae511ac393dc6ff5c33a0c4b8a179021492a3c948315cae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Internals.aspx.resx

Filesize
6KB

MD5
fce99e14d888a39af76e9224f6ff7c1b

SHA1
f7b1c2fe14ac616a91ef31bd42caf3057f329e39

SHA256
2fab77468b76d4094bfabfc815491a4d6c100efb711fb441965bcb06e433192c

SHA512
b9ce645609fb57d7d4d2282520e059c47745e310bdc78dcd29bbe7b4d65c9ffbc75ca5ce4623d062080f83f2623094cdb7b0123e14a6867b93f5f50328588cb1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Provider.aspx.resx

Filesize
10KB

MD5
ae5823d259b6eae273dd0948489ddbc2

SHA1
c79a9a91879986c8b55e05010d4feb17322cd2af

SHA256
5ed520f12ab4b5001e8e87f078ed98e20356590112453e97fac6e49cd40f70f1

SHA512
f98b635959175f54c2ae45d3af3970d09b92e6b9c76d1cdb0e7b004609cdd649552e7b4e6d58208955ba76308a55a260e7478e47e99947cc76e075cabdc7f499

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Security.aspx.resx

Filesize
17KB

MD5
b92736a09d90007115cc4eabc24c7631

SHA1
12c9e1e1fe0d6499d2251666ddcbce0b949e09be

SHA256
9cb91dacdfae9ea46c1fb4a190528b82b78fdaddf81e542f6c6cbff3b89f6553

SHA512
6183553ff644b8c93e924de1e6c5ee2db0b6196e7cc8e8e21881b6bf7d08532f9a28ef913fe37ab6c76ae11ce0233db7d4a2e8e074a6c02fb69eebed697d74c2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\default.aspx.resx

Filesize
2KB

MD5
a3f1e4680b7d55bff0dc7b86d19957e2

SHA1
a2f3eafda7206ebb2a0c56beefdb2e6d36e8abcc

SHA256
c26be3477f7024988504b7be8e896a6d7a1346055b671f4959aa322c6ccb4b2a

SHA512
ad2263002b85c2469482a97366a0d5092042d3ee8b0a92f58d8a05cc30c77a0cbf1664338737be936ba8c64a0c51e1ca07d64b55960d3f4bc2331e0e5e536559

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\error.aspx.resx

Filesize
1KB

MD5
55afd81a4937c3dfe3b2b1630798ede5

SHA1
489c1cf1679b94018237dd8415618bad51a803f3

SHA256
7c76535111275e183997381a41ba4712e0ab5891488e644735c2e1b9816279c6

SHA512
762783302e40ff4f7738437c0dac2dfa0f8aaca1113c3a2bb0a6e552b04a1173ad4115e3d81b355674c04faba36d46c47d4f307b71deff0a53ad6c22a08bff07

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home0.aspx.resx

Filesize
1KB

MD5
3b31509b1b47b5a9956babee88ceb914

SHA1
1d01789066229fb10dd617cffe674c1419972cd3

SHA256
c31fb3028c25c3a7b3ac14a024a7050e579273366eee7718b78660d24f60c95e

SHA512
0566c20d9180784caa947eba96136b0e47ec4407e31aa461b64c1104a5d485e7bcc27cab7d6f0155ce26e4e94d49d7bfad0d72bfa5e82bd9c172e0143bc35462

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home1.aspx.resx

Filesize
859B

MD5
6bdda7197c1d6eada3f83205bb6a141f

SHA1
2cb03204c2e0e580cd1779ecba13c97a65836313

SHA256
52c1a9aa92388df2a7a7d977fb8212529e12ca02b4aaf610b79915459e2b48fa

SHA512
339003705d93c106e1711f323341f3670f555397054aab7ba40a886dd0b6b726f1644ae26e6a3cecd2c1daea271e9caa684362d391751344d8eab9e700104509

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home2.aspx.resx

Filesize
1KB

MD5
cec9c7271a3bcf292cd8e5a89ae8e218

SHA1
4ed61de077d7dd0fefdfd302dc7185bb37cb3827

SHA256
aaef702113fd1fa175319c5936d239fd7733a62a6a5e164ed08ff6770174aac6

SHA512
348b3cd343519a3a1a2e39018a5d3447609648a5fbe9dbcd564dfd59fb37a4bb150e217ac16206037c217ab39ec4ee4486c0970ac2b3c1c406dfe019d99a5ea0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\navigationBar.ascx.resx

Filesize
827B

MD5
57d731f573dfeaffaccbe49f8b5e9af9

SHA1
ea51d9ebc8af6907afa944bdb4e062de69cfa6f2

SHA256
9506205fd7452e4a13adc1d28e878e876b2c27c63dcb827632817054d0cc5fe6

SHA512
00892c6a2f9636b13f374ae6f6b5a0423d1d25bc83120659c9be27c0d155ccdc5ea89086688827ef4eae4dd258b7d1ef7292e93af22b6937104b073a3f74b3dd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
07aae6fa5faa5a45d176c50820c1dbd1

SHA1
45eb490f39fa90a1b308ad61e5a7519026065ae9

SHA256
0143fd6f9d72399d0cb0dfc9b24e159e8a18e70ebe4bc856d1b17e03a6195567

SHA512
d4144518997f858c0d321a124e9f646182e50fe4bb23609f2f55de52956b78555082f5a27e96dc59701b2300fd7858b54d09c21ef54c8c99b7963f11b1397fb0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
7ec928b99a39458d135a6732660167ca

SHA1
902b27b2bf05469454d8244d50e00629f589dc5b

SHA256
d60b7802f558f066dd79ec370d7d956715b5232db9229fb9cc8ec90953e6997b

SHA512
2e48811637d9d8431852ee8370208ed3218ecf0c48665f413bd12d00b986c4618d3e9285da3644e8b500a3d84c2c2a86c82021966d4de7e314936165cdb080d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
a205c489dfe4773f442bbcfef03496d5

SHA1
32ed43e36bb895247a53a860d7bd9beb48e40109

SHA256
1f46324b841ae5c6b33fca72370c8aa9505b0b0d43cbbc7aa69336186cf82a85

SHA512
a9860c95ed041e5683e57b5f7f025f7e0f4a75a681da3307849d34b7051e34d98560f561deda1cfd3008f25dd185546b3b35babb14ce9ec7ce6bb69b4bb1c67a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
bcd24a3e4f6b1cad5e0ac87350a6bb71

SHA1
ac314e210d4036040985dd17607810651c233da0

SHA256
61bb254f45a5de4c05dd1fcea4c4042754b3940592015cc1219b1ed1fe7fff46

SHA512
1839b2209917c345a70c56b9aff92b219dacde33d9cfedd707297dbad5ba5c03a88ba7fa24e2104e2689ae89b98b7c256a1d213e6bb1d1d5c349abb1bba35d92

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
634d1422709eaa1576427612e249e586

SHA1
ee5800edb813fa10327f5aed00f5a0c4f0e42ff2

SHA256
7945ec2ceea7fd4f3fe6da87d27a07c04ecf301984f38d6aa1ce5f0a010e9f2e

SHA512
ae4ed02eb533e76c25bac624913da6be2474aa21d944e326ca2a7019eabfa2ecec42a8ce16bf8e2160833276d7e866bb63df5d954581f61c7789ef4dcdb2ab8c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
f7ee46fca9445ee17a9f22b493f88f1b

SHA1
99419a96c3856f87daa4495953e7dafe09714a9f

SHA256
9fe4f075ce58408d3dbd6f24740bcd934bf8879f35bc48295ec2e39c5c8c4d1d

SHA512
06afcd33832880cfbf635c3154dcef0253356005bef106f49a8f058bde18a55da2f8c31d9cc45d4ab90109bcff0425506be4020aec02f841dd053c876cbff70d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
01634bd299a0eab437615557bacd9f02

SHA1
c7e1fa26204614de6ddee57ce5564fada914b084

SHA256
35d0d379542cd4b4b380aac127f171003429e8545644dc48372ece4c7b7e82ca

SHA512
b70932b7568093dd23dced104e61e03bc9716f5670e02c65f27beb70d968a77bde08c03dcf85ffe5996a0f7b2346cef7f742e32a65711363e760fccc1e257cc4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
80de1e1895d4107d0315f9dd04accecb

SHA1
5fe9046b7755d39a40cc26da4c64341a6f836f83

SHA256
3042813454ce939e096edd5c15de6dbb105d47ef46158d1a3f0816952623f371

SHA512
1ee45686fc1b78cfb132526dba441cb1dec8722d81e3fdb116ffa867fe075b8da97f51a7f0b72b0d9283e65f162aa14799897bbe652e5756aa12719a5152f53f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
b69f2973f32e3055ca1d79c50e3ca67e

SHA1
e3249a8a82f9bed755ae7f73fb6201d12b377965

SHA256
364f2abbf801d2db38952c8aa47308d95778697875e23edec9d104aedff68d4e

SHA512
ba38423a380dc86e94e2640f36665df51e27d9b311d600d64a4da961ac09392fbc633a542e94e939236b374dc9f4928a3e59d90ef99f5e1006ffb3fc256bde63

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
bafd025156aca5301da52d0faf89050d

SHA1
9d8822e17e31ca51b6d42421222ae5d4e023740e

SHA256
b0a7e0cbf776b2ce3c3b025a271bc5fd1d0408768c063257c062c1eb7f298410

SHA512
06a3fb3fa0ef3774b080c21c8094d4b371d799c0c519d0748277430f430177c96885856894f49bd78e74b43c6e5a381ca6a37852b28f5331fc83b1dab7fc96a9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
0170661faf664b4d23dc3b64581d559e

SHA1
cb2383794940512de9015e7b14ecd9b68d1f27de

SHA256
6b57528d93bdeaf08ec9977507a3796b668cffd6d529aea8435e1dfad1ef5e20

SHA512
41f8f1fd586ff46d49856dd85a01be4d338d8561a54e4731c3485821160e170c08caf56b8628f05244e7537a54cc24dbcece96a74b7b190b9b2feebc62724f54

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
0be410e53ac00582e5e7e81dbe17be32

SHA1
70bdc66753eb38943547c5aac4ece65f7a69d0b0

SHA256
980330b60c7093917122c46b724b4032461ced920f611255065400d8f01a7108

SHA512
6e74d1c3d5f34dbd6da0c7e3ba531afa4b4eb672fa71e781c736d38fc8872e273b0fee06edd2e3df899d54799857becab78a6a1b77f128c229e83a89c5bf620f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
836542ff507daa50b399b3746e326724

SHA1
1e867731b4343e616ae6bbaa79cf0061d58147e8

SHA256
b79b8551cab738f8c21ab93d4dc0b38aa33cec9a36446928cac8e1571668b8cb

SHA512
6f3f34940e712f32c8d8528ebf4266165a727277c3897fd9321f35c695e116c8bf032cf657b051590d4e8f0073decbd9b148d3c1263ce2966ab795d90731c936

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
d8ca4ec52946d465ff996c9b0adab52e

SHA1
54de718b1a7bd4d7d0d8d560cf34d9510460ab1c

SHA256
0aeaa6a54463699207e3fc311234c424830afa8569202a1bf12bfe3a896cac0d

SHA512
5d7b43ed68f4917a5a51b3f8462283a093d1f9efa447814eba09e29bcbcd2b2a85aa3d020f57f2830f32b01d86402d64af6d4693c43ab26b09ba961286945a97

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
8131856087f8aa12bccbd9bf499c423d

SHA1
2103fa47273b4c4f63ddf6747b4a617abb52ecc7

SHA256
4c4cb7862ca9d6692d953ef1fbf44434a6af2fc6fddf8e29ab1cdf946e992fbd

SHA512
c4d8229d63ef60486ff92b26358d34991fb0784418c244d5bf28793ff7be5d777540413ba36fcc0a4a001e116ff41af9702921b889af5e14c29742ac38ee5e4b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
357649a0a339868d8a7e6c70f1abee73

SHA1
3e3418ad9af996b969f2ec39fd3bc6ed9e3d6570

SHA256
cf6d939447f008f39cb6c1e7fd42e42dc8f0f3278ca5832a1fa5163fc4067c02

SHA512
510b2ff5afde61cbdc7ff17da0f26471fa0dbef83cd3ae48c7b75e561e62a9030bf3e4b29c39d77bc95b6c55ff33859a57d845a2ad0a16a6581690563584cc4d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\chooseProviderManagement.aspx.resx

Filesize
1KB

MD5
6976928002daf791f74e5e36687f0057

SHA1
6caed8f8880d671cb3ac995795b0400dca14f3d7

SHA256
c9c24d8a6f836959084d803dc95de3645e9ba307035f6cd685db35bac8ab335b

SHA512
332f31af5148669d881fd8e157143d26c2ceb107a8ee8b28bee1141a8c6b7d9cf7b3e8712c7a8760a8a37ff5b7bcff26d210ae705f53c5fbc31e3eadd5afaef3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageProviders.aspx.resx

Filesize
2KB

MD5
669281700988b38f400856667b55a3ac

SHA1
ed6b6df29ba110ae6b29d09642cc26b3725c90b5

SHA256
89e55315e29427c168e86834ab88673044e2e4b89b981e9d2bfdfeef752f1614

SHA512
f31b9c33d302bd2982620f9f83875921807619da46910d134472b16c4972b4f3cead9673915a1cc3cf99c7a44186ab600e6424fa99e1bfd7a78f7c3dc7eea8f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageconsolidatedProviders.aspx.resx

Filesize
1KB

MD5
814d91c6cb6cd4cf0d03907c1cda97d7

SHA1
56621d62b8fdb2901424ae083e61ba06b8353b21

SHA256
c31e7f44139bbc1ff43fc4abfd2d5a69ed539e39bd1c78ab3b3c7e0d960dede7

SHA512
2db1282e59b9eb1cec4eb7a3a1f80ac492c52a1284a444247e934a578188c6ad9d7cf178bba25901fee088b6f7ba6db1a246f484bef549aa1e364caced2a485c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\providerList.ascx.resx

Filesize
1011B

MD5
4f4f2ab67e6405d2aa8b9ef6b8561e8b

SHA1
b98189e96cf130c574adf881ee86df1a53c5e9c5

SHA256
e7c0eadd1918e2c1db8a1ce841596824126655d68e3ee60261049c4f5cdf42ee

SHA512
88c1399a66ced15396e391f96a4c4c7a2be05a237dfec5bd9b75ec86241f908f79d4546bf252dbfa4c64f536aeed549d059c4137941fa1f29950af2329f7acbf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

Filesize
12KB

MD5
4620f3c77784cbd48cf4bf715f2d7e8f

SHA1
3b09b8a83111a20b879c5c0e0ff38992d5c9ef14

SHA256
57f221414c27f6fcaddecbc1f22aa9e44c171d95df5b68ad090b90916bfefd6f

SHA512
91d155646d7ccf7837e561702c7ca67a2694b24c4be036b712e6aeccefdd5fdd2766536ea80941a9cf53a63b91e473e8a25b596b4ebe5c74b4454d8301886f88

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

Filesize
9KB

MD5
efbc642a68b26166a244aaed22b20506

SHA1
030910c0473a50b3319326c053e559134c4cdb99

SHA256
49531ba2d9ef8df048e56a40915e6236c8cf8b2038d803a71bf2afb8908cce5e

SHA512
f998f4ef5d37b1c0ffab0cd5286b28516b38ba127d1bae0c2e9d54941fb110f35fa26a561599882d2d7ab679cdc9e0b4594633ec66670cab11c3cd3a402f33d4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

Filesize
8KB

MD5
65cab1fcf3ea422f0c917d11ccd0551e

SHA1
a9cb25e50095ffaa470fb914394da6e24e56a5a1

SHA256
871085016837e8ab417cd1d0b0b4da764a0e1781bd20652507a5a30da07cc0ac

SHA512
afb8a0d3a71a52b7497c37fbfafd02894dca9e9274a9dffec1e5f02a9718076a7681b81d0408cf5b20ea2c960c09fb61d0e9d18d96a5dfdfad46f3493b391c3a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

Filesize
2KB

MD5
8d5c403e316aad7a9de7fcdbb65af34d

SHA1
6c35fd42ccadbb7dc693e74177c6410ddc3ea6d7

SHA256
db3fa976793d2e434d0ae1491c204c0375f932fdcf9d184e626a08d2241fd637

SHA512
3f9d9a50547e110899d7c7b641af7e8e93d625a03ee59696688af7385fb2f699eb54d4f4db1c3c29ca497dc022aaecbaf4a4ba64903c09d729619a9d5b58d8f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security.aspx.resx

Filesize
3KB

MD5
f8fb30cc9ff9e06ef48e99c753825de6

SHA1
ccd1dd4236bde988b54e531b238d8411a1ae8c92

SHA256
7bff0e8ce84ea313bee035a12d8214949242c2b5b3278b39ac9ef56c65f637e7

SHA512
2f4634a77f38e5da0a90f4275bf1359153e7c4de6bc234df66146abd178a706f04ed15e5586aec94c212161b0aca36a7e4704757679d5b1c221b7a776f4409a9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security0.aspx.resx

Filesize
1KB

MD5
bacdb2c763b1cff82d420d934d460a13

SHA1
ee3e469ee52651762c1717c3f5363dc1df44ac35

SHA256
f8503b1deb50f8c4c777ff3f4de7f98ea806ee7d1a27ec6242531557cfe536dc

SHA512
05c748a232d461d864a8a69a27138d2f7382207e6d24c1f26f18009f875f43d8eb3fd04b5792727c254f670be0bdfee565f89b2381800ae99e6e7511622909cb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\setUpAuthentication.aspx.resx

Filesize
1KB

MD5
7bc09f71271d4502f8032041f62c0b9b

SHA1
55cbf556e7912d64e819d34063964e11725096cc

SHA256
fe58d1dfd5cdb3d244641d14e55d581021780abe8afada09e2363ba4a1a9aca7

SHA512
789c20780a3ba967d7d7758ddea8523c0c15d53c6c0ea8030d2f46d33d4042f53163f01522977d513bc905adf48ef65643e3d59fd68f16a6c72437c4cd1d21b6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\createPermission.aspx.resx

Filesize
2KB

MD5
417456b78ca2a811463832a5a2c21527

SHA1
afdabedd89f163b4b4a2d73bbe9c984cd37ca26c

SHA256
d8293618c5063296270d6a2e8c2f9675fb3f9f900cbc480e69289fa91826ae10

SHA512
d32f6f6a96e183adf36b967c312b16d2a84b1131c817cc4be0ce7cc6f8abadde272087709b2dc3e8ed6f93b5bec6274463c75c25f4479ec5c8c1ac3c4be95060

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\managePermissions.aspx.resx

Filesize
2KB

MD5
4c170fc3f332622a41d536076a59fcf9

SHA1
8cc43b79875bf09bab0a9287108abb1cb3258a21

SHA256
caa615183244aa1e5864ec7225b4bf3cae86762a4bc97498690c14cf8f1592b1

SHA512
4f1f96561ad6916ea87adbaf4e2f81f5f69fc599153eba29b50f1689c1d06ee24334adbc82784cafc22e030f1e6e5a3d1e37eebc5532df31c1ec7607088e1a49

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

Filesize
10KB

MD5
f5df936f464f9801c4c4bab92870fcb3

SHA1
0f9c9362409bfe3b17ecf4f3d670b1f528957119

SHA256
09f34d05376d4b499eda0bfdbd9f97f6a676e11e86b3528abb977265a78d1aac

SHA512
85f9e1bf5ab8a39e7b0de5cfcc593a30f100363599560f3a7a6364d9ad0c135f0f64d0744c701b21e5626b7be7415dd1901a154fc64186f9c8f52f67620a2514

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

Filesize
21KB

MD5
30361b46892ddecb62fb9d9745b6d971

SHA1
3934955afc51f086a08585895ee4b801763881d1

SHA256
a333529d9157fc8fc00fe57571604685353826d62b5e04fda36de524934ceb7f

SHA512
2701da945c15ba36883013119c6b2e1c69fe52bf04f30e0ae607b689e595962aec73eb505563c9237347cf5a1a890f53b8e7a5aaa62a9b07a9deac1afd49e04f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageAllRoles.aspx.resx

Filesize
2KB

MD5
3823de84f6154364281b4ce80d4a370b

SHA1
e0e840fb98ef861e29de318491f6abf6722ba217

SHA256
5bca0a15dd898afebd23a8007bfca61b56cd222e9c40712c92f5a87841d89b22

SHA512
80e480ef0e1abff167bf010a77db2c4bbe7e881b62383b6a38a8df10d5b0323b103f69dab9e6d429da188ac0bf676d4649ae8adfa76111f0dd6d47bcc7949554

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageSingleRole.aspx.resx

Filesize
1KB

MD5
28e3b97df7079188862a659af2025fcd

SHA1
f156f8e1676f570f5cacaa5eff334dd94df922d9

SHA256
9b2f5fa96d86b8e2f930400d0bfe8214f60d3cc7555651100d4393e1c2edb207

SHA512
f28d2116f787b2423881f3f0262000643a25e2348a4cb980f5d1360f5f41c17f128ecb99b279b14a67769c2419b30eba5b7efbe6589e3e519e4ba48c6c2037e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\addUser.aspx.resx

Filesize
1KB

MD5
1d325bbc407c6eb01ccfd1ecaf8591d5

SHA1
2316c9fa1279435eae604693617036ea4e43c22d

SHA256
9eaf0eba41adbc76daf39dbd82e424ba633e6acd95f65ac5e39c8fe938c8f1a8

SHA512
16ade7edd06556ea8d7f255eb94f6c465d5bf8f8d6343a6d0679ebe584ac8154faa77e8235ddb0eaacd8f621deaa5bce31e9b9495e9c5e809e2a9728456a6375

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\editUser.aspx.resx

Filesize
3KB

MD5
ea245a74ae2010e19f4c23c3e86df1ba

SHA1
75e947bff4fabf07c79142cc171b759ba15e5267

SHA256
ff0424a8661278f8fbf13740817ac1cda50859fd677703a0e05b9eede29f73b9

SHA512
46c4ee26624e6bdb9059772f17ce18836659b3709a7ed80d339f6f509834bfda5d110e2c6382a8f0f5fc33a681187e78af0da03395f55ffb99f2e3f4ecd429f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\findUsers.aspx.resx

Filesize
1KB

MD5
7a54c17400e643daba4b84e18b7b00d4

SHA1
1613904df252889aeb542a8019a3585620a6aa7a

SHA256
cd2f3e04bd5d9836ddafed6a8e74bb058450adc23c40ec334467bf13509cd915

SHA512
4d96079d4d6d6c8c376f9ac57921fe134fac45f5af84f82c9a0786a3414ef29c57eaa22bf18ab171d48e9b0239c54b69177f8d3043aeaf94fea50678954a30f4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\manageUsers.aspx.resx

Filesize
3KB

MD5
85ab162c5c67506e36b91f55ef8b27b6

SHA1
bb712f6089d331c40bcec87d84bf0b92b8c9031a

SHA256
3c8a982a402d856c59bb43c5c23a46125afd3b2a7f62f9e85995a180474dd3a8

SHA512
d25daae844fa3de9e52fcd7289586a8e966a14f67f30eeaaed4372c58fbfc894c342ec2328802347040778d6f7eb239b6a021c781eebf21e23e8f15d98c05179

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

Filesize
11KB

MD5
6a0583008f6ba2175383e7dc3aae25cf

SHA1
ad2108866475c0e251ab6ef671a4c693c01d4ef3

SHA256
9d85cf8a7aa148192e2aee3d17fe1294e881911f5c911bd81dc2d2ed76bb63b7

SHA512
51a0fae348aa84d1b5dd6be72c70a12d6419adcca8befb9a7634ce844d19c5a0c0323443e2094159d8ae3b5f4feffd42c2d2b5f9ab45a53f00c78a3e4698a4ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\confirmation.ascx.resx

Filesize
775B

MD5
474e406b2c7ce6432c70f83bfbfde893

SHA1
95895b5e4d5947b6e6adb7a6d9a840f84161a713

SHA256
9669099036bef07d21f8d58fce55fbe529341a62bfff8f175a8a85f33af9ab5b

SHA512
3eed974ab8b17ba6e5609bf3409292f66942a7d546a56c7aed69a85590a9697489ac253a1424fc3711ec9f672bf77bff83fab9b64bf0b7851ab1f24b70ca6b3b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.resx

Filesize
2KB

MD5
25962d65f191d5a0b50a5127002488de

SHA1
163211abaf4a25eb5f6ac0c7e60fc245422a9a40

SHA256
e37bfa24b0510eff95df84cc250e78c3432319710bd502c8c99a044456a51020

SHA512
d442f7555844ab6a6ea057fe4a1bc1210a44f87c3143b9459d649e08dc8cfca5df16747574bae4e2d09e23a1567fdc7015178d67f2e85b9651540c2e1caa8d30

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAddUser.ascx.resx

Filesize
1KB

MD5
aa11a793665bceba2835220f7666f3c9

SHA1
7cfd2bc215d5d634d27295e146f867de9ec71925

SHA256
a92f19a75b3dc2d3a194050b994e703ceb246febf27d109287a39b7f1181bf66

SHA512
afa920c2d41bbe898b1438c1598ab61d51c11476f8bc274aa750e355288d00c388fcdaa504797c01a814894890a7d5a73848842322b7912c0ef9bccbb658a2f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAuthentication.ascx.resx

Filesize
1KB

MD5
cc9e86b5aca448f2faaf9bf48ac66ee9

SHA1
d4dff451f8eb7bb933b94670ac964a8fa27fbe73

SHA256
6c66b15e395987f3967b709bf031856f4cac32f6197e2fc7064fe22692cd0adb

SHA512
6c47c985591a0df6f7386c9df2c034590b7aa23fe79aa6af1506e2dc86c29655b0452a2143f4f7b82f481ffe92e9f1617bba9d0eb63848250f6282a2db0ec713

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardCreateRoles.ascx.resx

Filesize
2KB

MD5
77d9e216302610432afe4612863a6b33

SHA1
10101938808410b083eebbb545d35bdd905257e4

SHA256
17ebbcf01a9e5f2c53779bd1e5139fd9f33aa040b55354e73920f55dfd199863

SHA512
59b665b688120051fc62497fa643ae3c47d800c9811efe2804b2ee12a4a881e401cbbb5b41027c4b60f596722078d3f06f411ba026c96e7bf518bf40ff3709b6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardFinish.ascx.resx

Filesize
917B

MD5
2deb496c8f162b60d13c800f46e92963

SHA1
1757c56f5912c5969e962f6a93dc4caf3437f3df

SHA256
54003825c0aa140ae70bd16e979a267a270680186a518f0b6c80421cd39455c0

SHA512
5ddcc9a0d76b146b8f92c723acbc773cddec8bae6045f1a8b973c0dfe09e801bd1d8d122ffcc9d77e9e9a1ff959fc93d6aa497a1d73e478f774e459e270390ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardInit.ascx.resx

Filesize
1KB

MD5
6b58b419dc6be8a13fb2d37cff92f3b6

SHA1
ceffabc5aaa2f226168faa0ad949e01db014e6c5

SHA256
4bce3cc4102bc7c93e67ae7748c4fa1859a09be97f42b8b8207d2966353d01b9

SHA512
6e4701b133a164af49c0e7c021d4c231792f5c8bdcd2648082e1b70ab65a66e4d8d84ec11e7a5f681b7703e272586a83fa712b0bdac11740db9ee37b29b7e5a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardPermission.ascx.resx

Filesize
3KB

MD5
52989b7429a3543e015682c0b9222274

SHA1
78ad70e58da4684859fecc1929226e536fad9fce

SHA256
491bb596b1e6322d9224d437fa13a5d435bbbf0acc1941df1045084aed8d5f5e

SHA512
b65134e90c9f4cf3aefde9c395f9264891da0ed91f4dd452550c51df8909033b7a23670421aea8001c16584c54e49d02840821b733b913e785d81c009a4648fe

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardProviderInfo.ascx.resx

Filesize
1KB

MD5
b20acea0eb9ffbbd659e6881f7c3e11a

SHA1
0c1ab9643d5886050d83c18f8a2c9631aa731356

SHA256
bf054f0e1d55801b442b02610d047ccd78015d1ffcf289e822ba1304b46fe120

SHA512
0425984ecb8de04e4ee79599b7fdc4f289af53711af705a5efddc22f374013d5205fea55fc8fae2a3c713e2a3e84b6bca640800115cce51baad6c6ed50f782a1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

Filesize
10KB

MD5
bceea04352de27ae89afae44ee2da7a4

SHA1
58f72baf04dc4b57b6738649840e9038afbbe9c0

SHA256
8e9f05e84dd48cc5f945266f9ebabd8e19b85f49b6a54a34db51fe93074217d1

SHA512
f15c133defb51b6f42148b7c2d4c48d0b259052d5722c56eb616e69128fecc9c05d1bb9587a6c924517c693f642187d1e3b89c8f7f7d1ca37fd650e856f06a9f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

Filesize
2KB

MD5
d868952ef83537fc006d4a3370abf8eb

SHA1
bd3e96602d6dbe7c5659a5b4fc8f7f29e76c493a

SHA256
fbf6c303f41a732ad206cc6b4deb500c99fb9457c075d0219d7dea17bb32372c

SHA512
6ee67b39f8da9fbee2e05436ee59dc5f1c22bea2a15b6e37de99c0eaf2a20271cdda66471d60cf912f94b31eec82ab265e18302c87d328ddfd599c9ce0aa5b48

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

Filesize
7KB

MD5
7db302ec3811fee6ed5c0de0effbcba0

SHA1
154e56b736b3cf1705f52525473116cde570a468

SHA256
1b551007bf4956876584138e3ee382fecd301593a805acb7048f891c8cbfb4a1

SHA512
95a37677e4e0f48887b33251d36d04e384c58c671059e5a7628c8d979dfdfb6300a876630c20bc6aaf94d1e0b4506e6a64c3b8017e30f4cb4b9894e5735a00da

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

Filesize
271B

MD5
8f47f1221924d531540db056144931a4

SHA1
c32f94f10e3feedb174b8a07757e491973975de2

SHA256
bbaa1ec3b88e0e6231da50197c04d3768bdd528b99eb475f30ded30ae90216f2

SHA512
3c5c88af4009d0f7fedf3ee2548862c97c7293daf68cc4b74c10be31f30d7662e0a964908e1931142ae77d7cfb62909190e5dfa772e571bac1ee540656dd0a06

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

Filesize
491B

MD5
bcbf2ec4d221395474b46dfa36e0e289

SHA1
51d550e7886cf77762b2f96359eb06f7f70c50db

SHA256
7b417de3d4453aceeb470e67971176321538b7c6db798d0d815dc70606ac223e

SHA512
af919b79e782e457596cec955231958e342a4ff7478775c88e941b405abc79b1c0ec46c60250173dddf5bea07cf7799a2e780eb660f2322ce1fdc638de1ee6af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

Filesize
24KB

MD5
5d91013fe264fc525ea5be4fae0d56c1

SHA1
53b83635fe91338aec72c4df9a2b044bd35571c9

SHA256
b50e6bf931a92fb88f709063d860d35e5ec46c9422ea6f200dc48c15d99a5b98

SHA512
d86187955b4891f7ad84aef2b82225f5d83a18aacb064df2a7bc6381d494c98a8d431628ec65f592b81afc8714a2c9def6684088d7ac7a9457a67b4aa3ab0d11

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

Filesize
1KB

MD5
f62d094202787f5330eb501e0acc43e8

SHA1
1a6f539c68c223b6342cc80722a1e83876376643

SHA256
ad60001ae68da873e93926fad59ab5211561f47d2a38abbb18453ed18d4a8715

SHA512
00feda7d9b93fdb11a0b9522b50cda3ca67c7c42abf0d3ee7374eabdf14ee136eff3ee8762c5f5c75e1f7b70d2166730c774bc8550f6d2927749e2620e1b7a2a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security.aspx

Filesize
9KB

MD5
2ca948838d0ea2dbe5deb7d09d1b6edf

SHA1
ee32e8393770aca821aa4bfa7dc6e5c909d2bb6f

SHA256
fa96b62f944f1dd12fa578513df87e4a3536c18dfa2151f125d4e12d530d65a3

SHA512
17a958cdcc01688a6cb6fe72004cf5a826b64556b72fe57bd4dbac58a5be3ebe255d645b8b617d4f9d24a9dbf81a4eb230489084aea9461b5fb5af474e3554f3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security0.aspx

Filesize
1KB

MD5
cf04dd749d892142ea2ee35c23a553e5

SHA1
813413cc0ababf7141e323f508751a64e1b53755

SHA256
9047659b97ca3db319fdda6a2e26a42265195952b76ef9a188c87facfeb37b83

SHA512
62ae62d05081c99d3139141cc00d69fefd19614bf28b7b51c4c914992d00ec9b020615d5c535a976103f252639a34754bc00e0171834d979b9580aa2dab00df1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

Filesize
2KB

MD5
d8dcc70295cfbedb91e421d9ddb9de02

SHA1
84d87cae4500450741ddffe902c8f3261ea88343

SHA256
f414a6f9c810a4df96e4c9ebedd5e55537c1fbaf3a784bc3dde775245ed774bb

SHA512
f0d118283dad82531ee9d25e80f27e6bf5dc9314bcac41bdc85e137d93cdaf83c625be0eb4123eb6836636bae3200d2f0ece5da0bf4840ac56f8da9dbccbb1ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

Filesize
6KB

MD5
896a387a0ecc2e3864e71532c50d3883

SHA1
6edd27d0891964fa36bcd10088f4bc6a044539a8

SHA256
a970cff756d19047d7c7a4cbc6f1c19af0478319fe5ab546c2e67e98863318c9

SHA512
04a54509b3001fd0f4e747a852ebd5215d609c9b783be46488ad645bf2a0066340562a2992cffeb0367a4e2b2a116c374774b9e3bfa73e3cdb0eaf67d88808f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

Filesize
13KB

MD5
1c0c976437cbad30ac6de51aab0dadd1

SHA1
919c6e5ce3ff66bb0967b5388ed5fd339f4bd91c

SHA256
32e69c85798414b16a51e40938ad85d6e7e05008efc3dc08a1abf6bade79ed76

SHA512
efa240e3ddd2102c215a7c9badda55ec51f69398e3e21165542d4fc0809dce07b389c8a41090db4db43761224614266f3739e8000a505c3bdc304f3d963014c0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

Filesize
3KB

MD5
81e4adfd7bf32e3b95d5fe2119a7e0cc

SHA1
2c4891fd61f14267545b9a2f9e97abfac05c72dc

SHA256
425f2c0d9e78e8237028205d4ee29d6155ee246bc8d35a996f6a24abe11825cc

SHA512
3615ce275d3989b89cd1165b8145968d0c4b80e4dc4475539e01c80e0b87cee4b5830210b4b1458b7fe5647a7a2e146eff24ce8d39098de53d288a587ed33bb8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

Filesize
6KB

MD5
49d3155c167a6893dfac6f639d039f26

SHA1
ebe1ae4f7609a1798ff20a88add26889a3df788b

SHA256
30ab36ccde26d4a4e7adb79c95efd3c2debb2a85d75ef01bce8b36b9db74e2a0

SHA512
634db5af6e9a7c7722efa7b81958f293197e5297d2362d914eef2b05ec97c091e1dfbaff1cb5fb702fdf727ab3afb8055a18b18acf790edf32ae36f8115cb0b5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

Filesize
10KB

MD5
98f6f4bd625ce64b5e764fbd84a6b370

SHA1
561c61dc4982ccaf4ebdb51a4a1f311e42b307e8

SHA256
fbb9d32701a39d03bce210ce16e169d24457f5f6d23de7b54f7eeff903acb0ea

SHA512
f47c77e533b8d0cb3f817a052c73d2d51fe47a494423a08a8b92fced101a805ed0788b61560dfc7dd7661d674aef344d3f1b577528ff9dfc9fc37d5d4e7873f3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\default.aspx

Filesize
4KB

MD5
632623baa6bd8e7250632beab616f24e

SHA1
658bed0911afc40762629021c3bb1f8064dd032b

SHA256
d80a6c2f307c7b1618d10d4a5fba4374bf9ca3feeecd9e3c6dd0682976d64a9a

SHA512
5edc295bbb72c69b8ec3a9e62e126e9a15e6d877e653241021c7ca2785c7497172e9a024fbbe837ca9f5a4a6a967747f9a856149479b6e9e0133c6423b2fd45d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\error.aspx

Filesize
6KB

MD5
e6e89e3eaeb25e5dc8ffd9ac4c66fff3

SHA1
41f9c1c918a82fa82e36d83acc37511eb6c1208f

SHA256
e73a7aaeafbdd636a19ff349896eca3e395833606648767a9e71ac2c9e30c93f

SHA512
bcbd22158d8f3759416eeb3ab07c26abeee0239ccac5279f5edc55e937d66dc55a416fcaeee041b5c98cabd30bbe362ddc3dd3da8e3769cc0174d3f4a4bdeb1a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home0.aspx

Filesize
1KB

MD5
d164c279e05ca7b54ee4676b46072838

SHA1
82bce96fa9b8125f358cdb78c1b44123bb5a356a

SHA256
ecc1a89a43db3fd7511fbe18f2814f3d2e8c3511b900733ef6b0e9e2116c0aac

SHA512
a755727a85ba99474f7af5f3f24e9c9deda57bfcc839aa4bbf85ad2fdea15aa442e9c198997738d38b0e8d4709225b07854563adf703e717cbf32ff61789a24a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home1.aspx

Filesize
740B

MD5
39addc54e69895d2e412a9e32982f3aa

SHA1
0981fb51b18b1fea1b3cfd27b3d05146b5117454

SHA256
bf40aa10711b2bf26944c2e68c730c4dcab1c7f423bf39ca8c0b5eedb105c856

SHA512
5b595c2b6b5ccd9326308a21e7004bd07d01489581b5b5e7decf6475ab0d2cbdf8ccf2ebfdce22502f0f1d8ff166cce8e237131524144c6fd1bdde595596db55

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home2.aspx

Filesize
1KB

MD5
3ab7c39768c5fa3fd1f9baebd16f47e7

SHA1
288ea3d25ffdbd34e106263a823ce8f9efdf5452

SHA256
7d274ba573ad2b3d1a03a0ddff4b02b882b524ee72ff6b7e71d2f4b64cc04ca2

SHA512
aef4f6efd479ac377dc3e2262cc1c0b9bcc08b87535b160328fff8cc625b28a7f1364ebf0aa4962f18a1bfafb350faa2cce13b4359ad9660325cf09f2b621bf5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\navigationBar.ascx

Filesize
8KB

MD5
b29ad6bd085f495278f2a8d8f396423a

SHA1
f541fc4691c18cb5b6ed51b8aa6a3866d4ebaaa1

SHA256
663ba1bbd4cae8503a5f6446a655b4ef0326d19f31f1a948b3e3fb77cf496666

SHA512
c42cfb163654038f808b63373b0b68efde3a503a8a3a80000877c362d489cd30a6a5b3dd6801a155099cb7352c77c5d7357b8fe9539f895db43964f01b7c37fc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\webAdminButtonRow.master

Filesize
2KB

MD5
d8e74025134912b2fc450f4badc02609

SHA1
d46e21ddd3c4005fdd6f5bc2ec7ddc80018085b3

SHA256
830b0bbe78eb1c30cc1339b6c9a41f1747cec7fbc9ed42c3731dbcfbd0851d55

SHA512
f6d3ef6c823718949ec7a5cf093997941a32acbd39a4676e5b3c000a22f32f41341011204148f8932c8f5086e02ef5e1273080ca144f48bc839a1e39ae4cbb08

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\webAdminNoButtonRow.master

Filesize
761B

MD5
cef5481a8c93dca694f0efc3fefd7dc6

SHA1
ca16d5dbd5f399ea05b6890491c934f1791ff1eb

SHA256
0cffbed74f44aab89e971c63af3f6c11b68502f7abf7c3c0abc0ea93d86b6043

SHA512
25d6403021716ed458428d45090e40b8ca582236d57bd00960f5ed77aa4a511a80ce50b32d2a91a59f2489c36344b85a35fd9802955601342f0d8bed85a91f66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

Filesize
68KB

MD5
129b811223ab6e737ca9534fe7411d74

SHA1
20a375f105be613f24566812d73810c96341e582

SHA256
3562f8e986f52f283b066c74600e7d81f93001c6a1a2181e5cdb39e5180213e1

SHA512
b85d211f268644bb359b445be5d62df40b0ac3eacbe7eb08796c95fb2c2038d735b10409e896d62527c4923116ca7de895335b912eea212d0a019dcbbc915bdb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
f4198ecc73654545633f296a49fde757

SHA1
23b8f94f7e2cd9b5a51f6ac164be7793fc52de9e

SHA256
5083cca878f7c9743a015db7fa98d1f8cb22a2001dd27bdf4d98afb6d2620f98

SHA512
fc8ca19eadcc345b94684c9e8434a5dbf4d81e1f7f2d48cc9df39d499403009ea3e86d2c566abe05cf6238c925109e8bec33dc8fd12fecba60c95874a7f3771f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
766a2f7f887ac1449935fe9898a17430

SHA1
fb325220fde0f0f3c5da0b0dd5adf590606b8df9

SHA256
2085cd81276d22b95aa434a990a1dbe614527c2d27e4de7acc2d28b08047ed26

SHA512
b166f2393ca6ce0b0f5d08bdbf9ee7e709f7cb23208998137ac2ddca3a5a5b1b359c887d5b6fe9f8bc6add4dfcf06c9f3d930c3ac4d98e2bd535960e945d9a61

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
1ff15696ddc3663e7996857ae8337142

SHA1
ab0c84ce8c87f828b6a92a1da3d5218c1fb958e6

SHA256
d7c49219d24de5d3d02eacd8ffab5060f0bd15966853e204e85c22b3d65d41f4

SHA512
6c9062ae09d08812f27f889733f76f87b3e99e325df2b176674e86afd0cdc66f6f5e182395ad9f8e50a3fbba9ba8d75ca74946780076c18a7116108f2bbd1ef9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
778065e50a464844f610f56591be1641

SHA1
8eb3e8dc81cb1cd250b52b2c97fbad5d9ab74d86

SHA256
d3124eaae3c4c0f2872e09834db8b6a4e35bfebc86c374038bca13809ee921b5

SHA512
9845291a35134495c1a4493fdfaba47fb3211c8e31416e2f5369d199353d53ccc2551febf4217ab85c75459df52b0fd74094a5d52f334e3b793dad9144a3cd50

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallProfile.SQL

Filesize
20KB

MD5
9cfdfbfb50f2f35f518c73780eb3cba8

SHA1
386087ec51bc3c324f68d3db8095a5667c3183a0

SHA256
45bc94b93195d15f82307b4189cef970380de77df8a7b4cbd9d52a252a0bc81f

SHA512
7d9f5aaa6aaadc2ae0eb3c2219871b431c0eea168125d0c3c703cd2ffad977fcc8e2585da0c053ed93c64965200cd3a2b7b3d280a96933e9df3c8f2b6cdba1bd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
fa1eef4249c171803ba1cea5276113ba

SHA1
f450b0fb1419d4ccb3fef8ecbb71866b7b2a56a5

SHA256
427d6f2b871072fde116850be2dd9b9e9797dc67e95c8ffd8de39b5c7c062d06

SHA512
3a55d726d7c7aae09d8255f5d92db511ee59763a23b672eb7b8f82ba9933aff7b976692c180cea6f1041707cde1247a961a3065ee806556eba15fba25a8e834e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
e2421052786e473516b22a4f4421b400

SHA1
f9690529b61b437f0019963e57fb433e29edf6c5

SHA256
a0bd08b0c733430bf80c887e2ee1a11d5c3711cf3e52cbf2168b341f58fc2ef3

SHA512
826fba6ffeb1952d86950f42ea774cc9965ea5526e2844f135e40a50ad6a7669aba0d861189b3feb00b29a347e3f70f7ca2b5e110ea1b029c5d7c3283cb23529

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
cd4f87e7664a274283f9f0450482a423

SHA1
7bba50e610304f934261e085e6ec6c0f263765b0

SHA256
5a88fc750faa3aebd5ede78d6109cc4bf461c351d23b1c362900bf8b51394b50

SHA512
e695152ead3309b1c6704edd8e3b5bd8633b7d9c901ac52100bc6c8a26bf778977e10dc116ef612da5de0fc49789873a631e1513f1076205a0cd7c720e606ab8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
70c596f36f8bcff59b89e4fbc6a0c513

SHA1
bbbd2abb90a57a16b36a5c857ed28c684e73e0e4

SHA256
421b56bb5db2e935e2007347cb6105e13d9d7202556cff1fff814ba9f08ac816

SHA512
0e9259ad259a47d7e8645c81cba654366eab9c9e25329e3ed0b2d7e97e4fe30d52a335f8cc7b0070902da000544acca05dd51d5cf58c95b9a824b3e5d173a6c4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UnInstallProfile.SQL

Filesize
4KB

MD5
b5180f08028b499ec4dfa38fe89d0c3c

SHA1
52aad20b34f36524eabcc1c92f154c840cc62536

SHA256
276d817d96bfcbd4095069df9ef078fde4639cec8630ea2921548c64e7fb37de

SHA512
19eeac9786f4da104ef3de3af897896ecb886c17a94cc8d43a7e313a85ac30e29459b6e15798dcdda0c75fd27f9e1bfb1cdefc3002b91540cb5027965e315ae6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
94d3e5e42cf24e5319aede61cda0ff8d

SHA1
1d1ba794e7530ed489cce7dd3183022d4b9697c5

SHA256
2180ed98981c64340250504bea573984193f8c279fe849ce50b0531c1a2a64ad

SHA512
90a76a4cd99962b43c8575cf603dc434508a4e8bd34d8ec8ee272b2bfa5c269500138e39b493d4663b269b8f699a924385b1384e561c1c738aead4fd46bbd1c5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
59388d336f9ef672cae38eab950e6988

SHA1
618dba229e71f923078131cf02e9441656eeeb59

SHA256
3e5e21030ec3d1b8777200c8b3177ab7f9fb2758fb2afbddfde3de6871512404

SHA512
d2755c46a0149dcbefa1df0b039bcc8f8b2bd694737dee1103f8fd722815f60f89e8fc3ca849297608e76630f1f3cefd1d19bee821740dd830cc533646c35a7c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
5f52b8c11b267dd12ae3ea02c6cd05ba

SHA1
f07fdc253f955db8a0aa70d3dd4d57266d762fd5

SHA256
97c628cc3d87c5262c4b079c93f39a85639c59986b61fbaab91117d0d94d0cf4

SHA512
13e5385af2fb83ab64282f5d7dd4bc2ede0e758799da52b0c0ba2c7978b99c075864941b814e40e1455ba3c5befbe84239a788b5284da6b010d5cba9dfa9140c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
81b6373f7f431a68f6d11c65ec867420

SHA1
75d9174419f737c1164437b9c3ed69ea147231cf

SHA256
103fdec45a5615cf5916957fc6ebcfbe7f2fc3ebb5ee3d6314ffb027f30d2973

SHA512
f2fac7978afdfafd58ca33593be78a28abb0f9dcbb6d37a1c3bfa041a337fae8ed2ed72c2f43a6b348e8eaa2da1acb03f44201c5e823e1124774cb3715e05c35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
491573990c761c315617496ad1f6dba3

SHA1
00726f425976c1a2867074c8f0f88c35b9921229

SHA256
2e40fac8ff59dbe3fd8dd20f46d14abdf593d01c391b52d4e8e38d78e2497c8d

SHA512
b444aebb1ece7e4ddc7b9955b15d1b98b301a018dea1ae848aac84a54bc44b0dfd23f041d2ca59b820b4ba2e55ea5915efbf9287bf9aa5a6d6debb9190ba1455

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
6d9c98201f156cdeca754379f34dd04a

SHA1
035f8b1c5f773a99b01068c3c4e58c4df1bef4f2

SHA256
c51d735134c5493a88dff5b3e5bffab4a95c5f5ef56d1fcbb0f39eac2f048fa7

SHA512
7190fa5650c7d29cfbaa625f5e6a6128593bd9ab0866580c6c5970395901015611e3609f16acd01b98ebc44ef4e6047af4927327479d40be5ea4cea95d9e824b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
63c69a21f7e0868d31b65bbe478f45e8

SHA1
9cb5e281890ab8206c9168c01e5ce04ea4cdaecb

SHA256
c000d8fcdcd290ef6d8f2db9f354e881224a3025f2393541b9c89433b5c48b70

SHA512
ed108ab9406590a287015935f40f30d6f7b6930f1913234d08bcddb126f8d33dbc8ca84c68ba38ec544462a354ec6a329170991787250f68133f5b500b75e4e1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
8924b853fd7bf51db9ebaaf5cac70234

SHA1
a3797df21a1b9007c589833685c89c4ee78d7fe5

SHA256
d7c925a369e24d88a95cb36965bd284d4903cd6a49c3097b814a4f043f122f46

SHA512
7a637859512bca07b632c8158871163c63ae6713256c2868aa2fba89523f66e4c60ba9b1f84c0533b6fb30228a90b36c004d5c29ded5d611c60298957a46d42b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ieexec.exe.config

Filesize
181B

MD5
d7af8ceb705ebd20d6b9731126ef74ad

SHA1
9c2c9907300087fc5c1a1485d470ec398855e10c

SHA256
9cb370404fc81edd7bb293d03a2b34410b13828d0faf385c487923fec15b9cc9

SHA512
a23d8a1e96e77422237c0c025d5d2ff7c18fe5685f6ce31fc8e8cfb9672254897ca9fdbc1c591f4f367595b01b1201eefd6c959b8e24dedb4bbd645a5caa5e35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\regasm.exe.config

Filesize
181B

MD5
7b3d466402a280ebf886f33356563bc5

SHA1
c2cff128ffc9e361a1771f0168ee089ffe12365f

SHA256
cc6e48a1c3d3eba6c085b3cc7639e3fbf79b3a489fae68ee1632b0f6cdebe28f

SHA512
6f3604331a90dc0fc76ea7721075e34337864999709c09d4eadacc647f06c826ebad8902230fe9c1e99bd26e21e0f3d5d1133e12ba64dba8dcc9d369f170f8b1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config

Filesize
35KB

MD5
fdc6cc5598f1026fc81ec107dedfe417

SHA1
135327135851db487998e58b0821dc953ea5cfa1

SHA256
96ae6f081ce0b4d63681de9b6a9092bee2c5366373103eacc62b1cf081ccec27

SHA512
d771aa0e95e609c34cca831a97cf5f458d37379ac1267a4c7414cfa74906a38d80f5dcfaedc72a3d99685f931774ec701d5673433920861616b44a4fac18009d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
29fcc8fa239341b6115431da57094aa8

SHA1
4f2a0e18fb9a6afef8c759d1e68436a0be4f4d65

SHA256
32598dd15b6cf1747983db49cba8ec635ab4d968a4d8e93b51e5dcff63fc75ae

SHA512
f75aca590d91a2da20a1971a0c96b125312d44045f6f053a17d7a4e29ff98aa7f051a2507136c0c5b0b843f34c0a3993ae484d51df9ba11766f55c60841bee4d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
58c2b0d83f4bfce5a187fa8d39f96914

SHA1
00022acfdf354641868e0df0cfa6d8ef1c8113a2

SHA256
c6b63cb770142333a2834757bb89615e98351c18da12a0ca5e8c023662c8ad85

SHA512
8cbc7cbf2ca773498d4c9eb5175f4bd0ad3c7c60f404448213988d77fc31858d46ab89549445816b447aaf1d9074e7695c62152b3e0b9dcf9efedc49a34c257e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
2a07df9135c2e65471cc3a8ac1c2ce57

SHA1
4c9ac9f902a030293cecae1172721a3233fe0d30

SHA256
1f3b7c1d3b45be7d37627e8e152a81490e049b96f42bdfbd7359b72e3c5400e2

SHA512
cea9069c860d307bde13c040d6d112b0ca8381162fb7e3d1808b5d72e8d964b771a449a4fb4d2f82cbc505b408a9ca954e5b7e8de904d2b19d562336d964e1e3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
3d396ab1c458bdf571a6e0b507f0baa8

SHA1
1a78a7cdb197bb8e92d32b2be53876d87e86f41f

SHA256
0991e6eef3bf11a48504d1ada239c64eae9dfa1e5bd78bb9f21ed95801114ea1

SHA512
0e3f2320c37244d61bf51fe00bcb7a690ee60df4ca1e3c60a8752cf1bf9fc2cc114cac4c889c0e829bd5d3a0785df9b5598e4bfcf81db64e5c2a5cbb4f350504

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe.config

Filesize
893B

MD5
1f2efa8bcaaca247649780fe5be38561

SHA1
1b6d8e8c94e013b7f92d2d80034ba502b6e445d9

SHA256
33a77af4c4d079d02ca749af8e66bb6ea19a4245839cd58c66ed2bb46be3c511

SHA512
bb1aa3a90418adfda4c665f1aafae21f83a892ab81c33591408906ab401a2c7edae439e8cb72da72988955b59be0f7d3d6140fe6804dfbfea32e4490268536de

Download Submit
C:\Windows\Microsoft.NET\Framework\1040\admin.chm

Filesize
48KB

MD5
c10d61c166ba136e366c272f1ee3140f

SHA1
e3051ec98adc4872f41e87def14e463e1a7f881f

SHA256
266025f22592e6dacce60572e01e7334ba50a421fb3ce072de7829c1ed04eeba

SHA512
1a987370d3f9dd556eb7a186ecc6279f063238cf164a3ebd284d780cf4336d5d62d535e9851ac8a479e2e1a8640f4288fe50c2d64d917b1fcb331eaf2d67159a

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
c6d9fbf374e837cd6f02722e0a91dfc1

SHA1
2130a8523d87ce6a343bb93f83a5ec19d5baea6e

SHA256
f9bfe758fe5ecc1283e024e01bb7333a0263e242ace7df6001b0ef510cc9b29e

SHA512
1c7a71d67320c64e5e45ce5715e6f5f5c5fde19bd5f9a60ba37c097d3429aa5a31ec71c4ba8dba86b44666a55a683eb78725b916ac0a0b4a0ff17f75299254e5

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
f121eed278739f41bfafe07783318558

SHA1
3e78c9cd76e0c90fcb3d38005649d5255872e7c0

SHA256
0cfa77f9fd6d47cc37e57743eb53771c24b1d9b4a3f0b9b42a5fe0f133878397

SHA512
50ea0857c426d9de529624a6cf2df2c3047f418c60a2dace41038811add71d795987a871d3fcacb4c476a1a6d75925932140316ec2108c08eb46284331fefecb

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
cd43f10f293437ed98b69feed71d30ef

SHA1
16c84001f49586daab1eb7042bf2c74755c77183

SHA256
9c41c70255e2eb65dd4f0f1d7452da3b621b856bd49aa56f6fe0b0a4ea80fe91

SHA512
fef0c266717c493c5132e97976d276b3b101000cc0e1a241045e833c5db1ae99fe4b03c3336873d28e18d378efe3c047c27b0d8ddbb9b536bf9725be4343d1e7

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
0bb6bc70fefb5d6ef27e28664b39b1dd

SHA1
511f31e41e564f6220b8a332654010bc96c4d5eb

SHA256
d244035662ba0c12d001fbf619bdf30ec4569c264b99e9804e02339942a13ebf

SHA512
25362f4a6a0fd36aaaa4e779c8fee68b2c114c96e593f2cf2657531de39362d63730c43678582be05cf3d41b0e6901fe6bb23fce52735f66655f0b1c84ce02df

Download Submit
memory/2956-5863-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-12764-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-3467-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-1133-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-6305-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-4582-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-6307-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-8096-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2956-12633-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/4832-13237-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-18348-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-5327-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-6306-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-9846-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-21110-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-12743-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-19400-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-6308-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-17038-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-200-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-15484-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-5957-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-1477-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download
memory/4832-3656-0x0000000000400000-0x0000000000846000-memory.dmp

Filesize
4.3MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads