trigona | aa08618b8ae0911c647852bc52b98910d3b73f37a62706b31709352d11f36430

Resubmissions

21-01-2024 14:53

240121-r9h5xaead4 10

21-01-2024 14:52

240121-r8582seac9 10

14-07-2023 02:02

230714-cf9cnsbh35 10

14-07-2023 01:58

230714-cd9wesbh32 10

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
21-01-2024 14:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
Size

1.8MB
MD5

d6a67c892e1092004a82a0c9c4bfdac4
SHA1

132a0696cca15a09aae1c8830b012d520a2647cb
SHA256

fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d
SHA512

725f8b19300d8e34c518d35a979b562bed8a2f947093877b6aaa9332e37352a81a59ea9d8a2c2576043677ca0467c0af67670d79f18f0d7e391bf40ff059ea0c
SSDEEP

24576:Klt7hGgTTqGKw81ymxkamLsc7WXgIecdvi4T+u9t12:KhdTQxXwIecdvi4i0tE

Score

10^/10

trigona persistence ransomware spyware stealer

Malware Config

Signatures

Detects Trigona ransomware 14 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2868-0-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-1-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-3-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-5-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-12-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-16-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-4370-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-10280-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-20621-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-24053-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-29389-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-35168-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-47857-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona
behavioral1/memory/2868-50235-0x0000000000400000-0x00000000005D9000-memory.dmp	family_trigona

Trigona
A ransomware first seen at the beginning of the 2022.
ransomware trigona
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Windows\CurrentVersion\Run\2051DBDC28F1A1AC039CD385A1A7A23C = "C:\\Users\\Admin\\AppData\\Local\\Temp\\fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe"	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe

Drops desktop.ini file(s) 34 IoCs

Processes:

fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe

description	ioc	process
File opened for modification	\??\c:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\HM43VO8I\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Contacts\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Documents\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Downloads\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Searches\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\Mahjong\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\Chess\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\Purble Place\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\Solitaire\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\M3JKPX3I\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Music\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-928733405-3780110381-2966456290-1000\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\FreeCell\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Favorites\Links for United States\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Favorites\Links\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Links\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\2XAN2K6J\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Favorites\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Desktop\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Saved Games\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-928733405-3780110381-2966456290-1000\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Microsoft Games\Hearts\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\X4TTBKAT\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Users\Admin\Pictures\desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe

Drops file in Program Files directory 64 IoCs

Processes:

fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe

description	ioc	process
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files\Microsoft Games\Purble Place\ja-JP\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\g9wk247q1up56v97902j35v.bz2r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\99fj0sbg71031t0m70047v8bwmjqs6d79z7vv9u13716dc00j.3v5x6dzz4r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\available_for_trial.5g7ly5.4oh1c4r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\uz-cyrl.txt	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\available_for_trial.ljh2wt.r55rr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Windows Journal\es-ES\jnwmon.dll.mui	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\30.png	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jre7\lib\zi\America\Argentina\8m4s2kiqko25426645el87.8n9xao84r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297551.WMF	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\30.png	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\available_for_trial.q09cxfmx3k4r5fxh9xn2d1rgqsd854brbbvy3a161pd800na.muqr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_ja_4.4.0.v20140623020002.jar	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jre7\lib\zi\America\Port_of_Spain	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Common Files\System\msadc\ja-JP\msadcor.dll.mui	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jre7\lib\zi\Indian\4v9sntp8vy9j80l7f3n0f6ahq4736ce2kr4627jy5c37s.z363wr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\9za4lq52k723r55qh79ym3108q.7nr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\available_for_trial.chf75mv.9460fcer._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\p2m7.7r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\de-DE\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\LAYERS.ELM	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\8sc29u947s2b40t73e873jjg70e9v5525ye4.hdzrp6r5ar._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jre7\lib\zi\Pacific\4z9udwd2adqpoei2abn697p4o3urjcz6qi6ne3540ff9c2.2r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\available_for_trial.9m4c6q42o2668b0.3516a7r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignright.gif	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\available_for_trial.vat174i2y3ti242a74l50242cb361n429ey8.f6699n1sh9r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\sqlxmlx.rll.mui	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\it-IT\rtscom.dll.mui	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files\VideoLAN\VLC\lua\meta\reader\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files\VideoLAN\VLC\plugins\audio_mixer\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_hail.png	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\s37y5wv4zzs6be923mxaox4k5jt164w4tjwig8o58.0p9871jgn4r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\available_for_trial.snv376513n8b8.dkq56er._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\db\bin\available_for_trial.c291jb01ig81c287q60as8me3068cm3vf0cmk7emay768l.irfh9uf0r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\11c44099ad4v6esl0m1lgm3a8426yj9y9h6e0q481.ymr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\available_for_trial.64mgg845x5ho8v3kfvhe.bgor._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\available_for_trial.069on5v05yb1r13upai324tzi7h4l495q5y69p589ju3j.39lsbsxdr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\css\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00792_.WMF	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\available_for_trial.t0g7pj7ls1229exytxi0yt4de2256226z5gs9u.wjjm04v16r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03041I.JPG	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\available_for_trial.6vx041v021y50095857g4pc4a51.52u4r._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File created	\??\c:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\it-IT\js\how_to_decrypt.hta	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\VSTO\available_for_trial.k4r3uw297sq8ifez60pw217dkjs977p4koa3sx7303k.40h87u8dhr._locked	fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe

C:\Users\Admin\AppData\Local\Temp\fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe
"C:\Users\Admin\AppData\Local\Temp\fef96e503bb02c85e176305a0a42116eb9595c8c37151d3a740ed4a266694b5d.exe"
1⤵
- Adds Run key to start application
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2868

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-928733405-3780110381-2966456290-1000\8gsi8p2e8m2c625675vb00k0464ed1c54q328p03cha4n6c4u0.1r8rmzo36r._locked
Filesize
3KB

MD5
097461a0b48c6c983cc49d4f80f5a9dc

SHA1
2245eabf4e9d7dceea21b04823f176021cbddd89

SHA256
0f5b1ea935a17ad1490b37dd249a8c8cf577bdc181da4f36f8159c074542df79

SHA512
9641f7934775902d026e62eb60af2e7c12cde067f8df9c7dc214f66e3585c6d59e4f3de4d7307f589d5b8baf3ad1ea21bd9761cd18213d7406d3da760432d47c

Download Submit
C:\$Recycle.Bin\S-1-5-21-928733405-3780110381-2966456290-1000\desktop.ini
Filesize
907B

MD5
084fc2d9b8c8f0d95ecac6a6b4484f8a

SHA1
ce28f5ad0fab7d23ca752904e5ba542a8783389f

SHA256
c989dbc7a1075a3d083cb2c7a1dc70f8b8ba7014bf894c97ab0da21ae54fe5a1

SHA512
636320406733be339a21490fa177f642f4126189a6131beaf9d8cb7d66596d693cdf286946e9ef69b23003fe75676254a260bc2557a67f22d9de2ff7f5476328

Download Submit
C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\jtor281c6d4d1.h3u77tak57r._locked
Filesize
583KB

MD5
d7ed15704699493546e5c9c4c5eb9f9a

SHA1
a88e77a086161e899380779a0e08aef237da0f09

SHA256
27ddc68d4c6248c5b2e55886b6c5f1b8497c05ac03342028a2bb6a2c27a8d28f

SHA512
39577c7e359e0485a911c53b7d94fef811420ccf2adf2a5e71c083f719029c1e149e6aee8167f892c33c30780d94193952419d1d16e4254043d59692bb8ce5fe

Download Submit
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.lng
Filesize
23KB

MD5
0f4e02d6256aba7a6c3bc15a2f1396d7

SHA1
3d02fcb8ff36ab37614683e443c49fa65673d046

SHA256
9265eeacd44250d577ca3d96767552d5d3215140b0f131693d375284dcdb719e

SHA512
ddb5f3e4438f61aef33d1ce38ee58c23ea0d9a36fa6369df74a166807e3eb68dee6614fa8dd702310f755880b526b39b3267b5cba22889c85f31cfa7035e4d9a

Download Submit
C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt
Filesize
28KB

MD5
56cfc3785a474639f5a97eb029f05c7e

SHA1
59a080a88ec88cb14b4f7813575f885201f2fb6b

SHA256
0636dba3c6e2b2fef63aef5595fa1a7a115e4a61392ff2bd13dbddd1176cd579

SHA512
9bc70cd406a8a3e3f9152322000db73d98795ca695cb3f7e26830199dcd350469eb02a49cbef55e797a123f092f1038e9858d3070a91811939fed7009866f99a

Download Submit
C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca
Filesize
5KB

MD5
e1a055fb0fe4a4d968ed05d3f511e3ed

SHA1
ecf2c77f5910dce0bde4c00f7049e95a1cc1bfab

SHA256
8f3fae7cbe49dd1bc15513f4bbbf7c69df59325a863337b077d363ccfc94596b

SHA512
63e54c3afc19a483bef5739dfb2c6361297d3f0e375a315a0b3238a90b5897c81c65eb002850c5b8187df38488950c72ab203fcaec41a6e2509a2797b4da939d

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML
Filesize
6KB

MD5
2a95bf5bf07747b29089e9050c972eab

SHA1
8b0fa132f66f0988586cf3e7e981fd32bdb4b32d

SHA256
8d55c7490f299db3c83a4e86f8c1e0a2605dc72052561ca41242d77435a3f1b7

SHA512
89b86d4ea21e6e9da20be9d175cb383930bc0b3d42d72799f4dd9ba44be97b40ce55c5364ec3eb3301fecdb510fbc6d985ed4de505d3d7f07af6c0ca5d8649d1

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM
Filesize
27KB

MD5
d4dccd513d72fdfda2ed3530160799eb

SHA1
390c9ca3a16be48ec6b90ae0c1aedce04433a5e4

SHA256
a2861dff77732785545a3390a9a73ba48063efe95bd2703e63b206b0eff763df

SHA512
a8200d0462b5410efbea59259593d81cae293ea8f7c138880bb36bbeda42690862b9ba436372c08686db0e3610d668e7b3912e68e80458f1faf240679f1fd5de

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM
Filesize
66KB

MD5
221e9f99f9edf5c981890ac8ad62f6df

SHA1
fe4b7c9e2651e86788a1b5514b46989b8f4906c8

SHA256
fdb6d3bd7fbbcacd5def3bf2f11a2e36e531fe645bdf79466053e1a1cd88819c

SHA512
16dc7c33086bcaa51fc40a113a63dd419580b763f6a30aa4ec4b5fedc8859365dfa66ca9975340fe7a94c57076c8f04ac4f29687c64a574bba86a994a8186dd2

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML
Filesize
10KB

MD5
347119b3e15c2f87b0063c2107b40e42

SHA1
56ab4e9262415de85babc32953d52972440d429d

SHA256
ecd5bc5a30f4e1207b660763861fe56a39d147dddb315aa7cefc22eb54081872

SHA512
4f54fbfd1c3b6b74ce06a3ee5ac631c5d6056605269aa3307fe0a54fd225ebfc82eb3259260d8ab4fcaadd97af792a8e9fd54befeb5d1a8860d8e821487ca733

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\4i51w378cihs0a6297d7q013onb62dl3z95374i29.v8c3dsr._locked
Filesize
5KB

MD5
012aa9310597fd27f2f72ca5f57de438

SHA1
925ee3be2fe9642d9f3c06121aba25af523a030c

SHA256
495c0866d3435c8f9add98816cbc44bde57df3409d3a0545bfcc69385edd8d53

SHA512
fe0c55dc15fbb2fd3ba6039d6dbeb5cca6423665f15f69b8e2a7ae049ff325cba787d1db084f5e3bd35d31bf3bec63d28b6166f76031d4eb50278c30f17e9e03

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\0fe80uxyj25v6tg.27gufvr._locked
Filesize
4KB

MD5
81bcf4823cdc9009c740cff1b6634d8d

SHA1
306edbd35190efe97a49e5ff01feaaf991fff8f8

SHA256
06453b4d5d86ae353184dac0659baa89adbf329094e211b8f0e189b600ac88e8

SHA512
b0666b1e1147542278478377b0addc0a3a88b2cc3fbe0030e325a6119925e2806281cd68832b3ce58c64bf8c0960200b39261676a1cd6370932760530c42d8ba

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\6o7at6q4hvgf7i2l29g42.0y7g52iyr._locked
Filesize
17KB

MD5
0cca28f304912b5e75e03e106dc7cfe1

SHA1
a5e442ceb807e312ad3dcb280acbdf61a8db665d

SHA256
b38161993a4cad3eb4b8cfcf566222e64c89af6b976d2a3c928de24ee26a9bda

SHA512
016a1af2991a2fd6ef005e936492c5a91c109395538f76bf05458698f31caab4b29591761b92c05bffdd72fdc1499d513d5d3cc6bffc9520b431e79c2073a4e0

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\th08jfo7tx39n8v81t2j7k60ee51p1e607og.6uyj02r._locked
Filesize
31KB

MD5
2c791522675050bd7ff8ebc4ce7d77a2

SHA1
fdbac0844b7c4f74c281759de5176a9e0d940a58

SHA256
825cff0be19dc84c62d64157d74ff85fcff929457ab00944fd81e922b5712940

SHA512
1f01321fcf71ddcb797760a582e282dd0c68aaf9d09194202e5fcc6954673201f5476ea61128efdf93af2388dbf2b2e5ca8d97cbf5fbd6a5c9c7f75a1ec06e0e

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\m17824r6g81593c58.1p569ikvr._locked
Filesize
6KB

MD5
0d4da485730cbfcf473e7567561e307d

SHA1
9acdbc723cb044c54c7318fb664403cf781dcac7

SHA256
41a28f89ddcc3411565524b970a1476454c621e5fbf2dbbc2dbdcbf283c0eb8c

SHA512
5c5c7a9019199fdbf7019852b70907e0a0502946e3c9f8e8f90c01a140f587d7244f5f5e421a78bb58e456f7deb789cfebd847a29c36573f27ac9a262d8253bf

Download Submit
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\available_for_trial.2rajova7m0xwt72823vh0tz4q3.c01r._locked
Filesize
699KB

MD5
909e3f34ca3f060d67e4a48be7c8d049

SHA1
287831914a659c3d53d87266bde608ed94db538f

SHA256
9cd7521490643d4ccdd711e13c282052bcb28eee8aa12179377d84853bd9c78f

SHA512
5d262420d3294e16fe7df576c4d9979756a9e23a86c147a4e12475fe577ddb355e553d3608533d65008ac51132ea3468bf7acaddfd725ba5a93b69596b62930f

Download Submit
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
Filesize
5KB

MD5
dc0d0c4c69451a610f230081eecd9e67

SHA1
de367ac0541140fc4ee7b554e0c7aada421fae0b

SHA256
593895d62ba297639994d54092d715843c4d6e9bf8e6fb0a346361905ad8def6

SHA512
570118a4db115e3410dba68d5305372cd11f91ba5be68b28aebf08d70c909bc2a9f3ae2c4603c9d72fc33c28c0c0e79d80b65d1d52f72b2258d51598542f7d5f

Download Submit
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
Filesize
5KB

MD5
2ef7ba384fe0b6b281fe7f0e3e630ba0

SHA1
dab4ab1a7ec07f49e46c9726df20760d91b05415

SHA256
5b9067c7905b93897eb4206619891bdefa3ff6fd19dcd94f37b1f6c2218121b0

SHA512
39844eb0d642ebd8d631d5192ac00af643247ce4ab6162d1b4304f5a2a4c9a08d3385b7794e11159efe7372d8b5cb63acf70533da99ec0beb4f853c5ef2e805f

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME11.CSS
Filesize
128KB

MD5
efc0f22864f043c25d29d4d25aa0ceb2

SHA1
4081c2f4fc713cc3fda3566fe879c7130f937f36

SHA256
f9e3138d70a399dcd1422b24a61ae75ebfc7cacc2ed3b55e0d8fded0296af856

SHA512
32d6203bf30bc97a26a87fc145e4dc81cb58ec744a84126acc770734f7193ba2d8568b92dbc5e3df59bd0d454be5637b789f9b0ac4bc128aec284be2818ef1e9

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME39.CSS
Filesize
121KB

MD5
7d25dfb8ec971582b3d18227429930fc

SHA1
8a040ccbeeb6a2601d341c7443dca3944ec9c6a4

SHA256
dade9822713cae8c0e4940a38187e28085bb41c6c9b97c2dca2c11a350b45cfe

SHA512
189912dcdb11176cadf29eb66eba8905e1a5a6705921d2242907a853a7572974b59959d405a88af36d563662907cc4ab969b7975b5b14a8398b5f041301a1184

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME54.CSS
Filesize
124KB

MD5
4b89d924c85da51a226b8b34a2d4911d

SHA1
f426caf2e2f080f1fd6f3d873beefb8aded4df02

SHA256
2ae8acafcca8809c81cd751aa0a85089ecfe06ed1ba9ad8470e6106e0fe01f72

SHA512
a4d2c64192294cd1951f2fbe34eaa7877262118dc2d2f172b7329cc7cac33edaace1002f03ba497a1cec9d119cb612028951ab57c782740183edfaf4beb5718a

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\110hzw.m8cvar._locked
Filesize
331KB

MD5
d10f981314df1c18e2fcf89680c9b37f

SHA1
cbc4637b6ac6bdec22db3ccdaa48d84a398c3bb8

SHA256
92ba74875678f137c591d3799311c6c9c8726767fc04a587e24ee03554f7a0b6

SHA512
b8336712b331c77286eb69f123c725c0937c283d51e10f0423560ffffc36611afb31ca15f541a3b0d08786c0c4a3edad08a32f2b3b77167408e816d1b7a1600c

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690.XSL
Filesize
257KB

MD5
a15f475148efe7c3b7778cb50f1db9d2

SHA1
6dd618b5c9ffec71d0bc1fd62581c96d0c9ee2d1

SHA256
bf67c10065d014f2fe8a0b4834ece7d6b1ee14e9bf901832b37b118a1ca955ac

SHA512
684763d19abeb98b7bd1c0ce0c4aeacd6fa81334072fad79531f6db69bf8df5914e2ea887f561fd2bcd84778c04d1113261f049defe047d8929492a7faf8d101

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\EXLIRMV.XML
Filesize
78KB

MD5
07b55b9058626c1adb40ddc370cddc9c

SHA1
c395d0fff91f1ccd539c18de5b9cc8584361deb2

SHA256
0656f12541262f04cfa7ca2aab42bc1493b74e95c1cf208859dafd7638315b3e

SHA512
d9e8e5c94270f380645c9f84fb71bb5fbe4230217c90fb0057df50603baf8dae7a706545ba2b645ae0cb33ab69cb155165f14b2f5dd1a2bb8fd3d77056f79e32

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\available_for_trial.8uc47r0ui8k634486schtkkcuf21i1.09c054r._locked
Filesize
6KB

MD5
d025565b7581301e0ecbe77a46bed03a

SHA1
44e4cfde4e1495f2339d87679cc03ab9167bbf5e

SHA256
ddb498166e0bf9ec2a48a38461197cd8c4ee15963414665918556b013fde441e

SHA512
a45991665d226eee049d46e26ae361c56a2ddcb6848e4ca81e9391138bf579e44a582f67c3ecf8fca93b8dc0e2b8bbaa254f1863968909f807c0552bc4a7c0a1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp
Filesize
7KB

MD5
119a2c3275f3efab47715a8a66cc96b8

SHA1
3f7344bd308e3e592dde1243abff369586d3799d

SHA256
092069037bf7557b013eb662cd85f7f3296a2aea5bbdab2cab881ead236bd7de

SHA512
eb4750f22bfe3aebc87cd7a6dc84e46f95505c53a8a694b8c537523f9793bbd8074e77275fabf3ea9a52452a5a7d5b0c63da16a2a1e99ffc411303297f20347d

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg
Filesize
7KB

MD5
c0365ea306a73bcf55edc163b136afc8

SHA1
9e4dc971b5dcc2ae19492926cd066567c5ad7e91

SHA256
c68892ccf34806ab7a6f5732a2515c1b4a7326c7e68b9b7a0c8cce3c7980d4dd

SHA512
c2b17beae87dea28544c38fac9cc71845185805fc928963cb9c9f9d10fcad7378df1a5029dd559a940e70f67579eb9ef7dd4515bc086051a1df862ff152c0d6e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\background.gif
Filesize
7KB

MD5
e21bdca9e69c712f79e7e2708da49d43

SHA1
0519f33c21a2b2f2755a5434b8121171bb05c2f3

SHA256
7bc2b53f2cfe38448b3f74f48a51ba7f5172b8317280013d4c6204fc09ac38ab

SHA512
56b3aa2ae9b85e3b1f3b3487b88483a71b6220da9801ad53d0ef40b78e9953b350a8047774778d5e34aa8384a54e9fbfa07b4bb51ee72c427db441ff0f6e0559

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif
Filesize
27KB

MD5
4f84433016782b83518c3309f57f4b31

SHA1
d055a9a950594e29131eb42706b960143d9ae48e

SHA256
8c9afce1eb8b5251e5b4e8c8df381b24c2885857017059b5918f2fbafa708188

SHA512
ab906a6fb3a50d6f79572f550dcb67dacd7f7b7bf4a7b21a5bec08ca571117d1ea776327e7877fd09b91a065a9ca7f027ab83d37ac5f202d1116f7e4e41285cc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg
Filesize
4KB

MD5
b28e457f1fbc7b38fc69deb9f34d099d

SHA1
911fc94c9f0861d949578cb962bb766f66c558ee

SHA256
adc99140b91b048dcb942117f77fa4cf63c7688b74e777256d012e5daa2ca6b1

SHA512
b4d56c5148774c9794294b0c7ed21512f2315886d8f404394ab031725e0e179e44363961ba25ebdfebf858c4290f585a374afa1c626120289ad2df22e77c5976

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif
Filesize
20KB

MD5
18310e8748367d196310f9a2ae3ca584

SHA1
a1e656df6e5f4f1a2f3843af7a580bd6ddafe311

SHA256
104a8646b599a798e84d88c95c90220a276e736ba89cd0a71f2c9e860f482845

SHA512
32a944d7f345161d878ed83775ce0f8348e69b665fa6d43b5f8c379a1d65dd3d2110a2bc0a699c568805ff1616f944d70a1238f5dffe305a8b433902cd7f2a41

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg
Filesize
5KB

MD5
f2356d0e718cc65ff3865427f65fb779

SHA1
b5779e2edd27eb319eda97717f4d4a1e2918535c

SHA256
f752cdec0333a54c21fa8092ca1fa54e6bebc31ed8a8e9cd347ae33cf4fb24cb

SHA512
352fa05a5a8336d48beb28b46a512934639f88d0a3344be54523f07cbe9c96848b8c72a2710871cd14a4611eec2054eaf5c103585b1d20486093b430097072c5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif
Filesize
90KB

MD5
a84b27e1c7c322c044c783671913a7b9

SHA1
340f4c7cf4d0aec5676709da67b8762b8ed69e1c

SHA256
3385486ca8f1afa9a0ce6be7e8967d2e8ff199b34b628cc816bb8723592a5736

SHA512
761bee7c514744d8ad474acd753dab94e050a5d07ed75578dd906f55cefa921aa70963db178ed213aa76ca4f5aa1e70a7a200122796051a7803c81ac16c68b69

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\form_edit.js
Filesize
10KB

MD5
bd4503e5c49f2441a9a327a80da827ad

SHA1
ee2a25ac25a2146b0233894a0ed9568f2f59a2d8

SHA256
57ce902a93db7881fca62d67e8d906a96d7fe807e03e46244127112f7b1ef014

SHA512
8051865328a5be7f9d3662dcd4e281197d04c6d87778dd356139077c37fe404575c424e7eaa0d5468ef1a291e3a43b9e221ba2cc6a87d35aa5941ec7b7e63077

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FORM.JS
Filesize
81KB

MD5
9524715783c397a43f38cc6d497f2f89

SHA1
7705ab2ecc48f2c3246ed56dd7c152e9ae3d752e

SHA256
3ba81e9bca8cd1f66c139264bed45f020fefaf42911f4464f8f59b4e97b19d92

SHA512
a2635cf60239df9811abaaa9a49626b2c09685fccb6dbefce66b29bc89c05b6f361c5a4068b7c88e4ff8d229962e016c5fae73ba7c2b1909c5d75ab5c5edddb6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\PublicFunctions.js
Filesize
10KB

MD5
ee99d3aaffcf80a88479166e96912b76

SHA1
4e4af2bcccae91ddb997e192cdfa6aafe4d0319f

SHA256
f479c76f5fe1bc921e77fab623ef3fc3db5ef00818ff123bacce375e07030ed5

SHA512
516cfd363fbf2f78f620b8557cfee910139d31e545532cb90f72e9a1ad620d6b17984c06b354f48cf38a03b8f0e940f28df4dfb4f927cbda94b556d8a36ccdbf

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif
Filesize
192KB

MD5
fc541a6a0f6559d81b97df926b3ce5d7

SHA1
7d7ffd9e517df78dbe6126a4399a857ac46cc3a9

SHA256
d99f98a4c39219cb26fe4416e42dab546b21e4ec477ea449f20c71d99afecf16

SHA512
fa368969a6c3ffad73325f9e7a3aa977debfdcb9aaa01eba03fdedd03cd0175871438e4f629287bc4850eca92dd758069d7af528aaa00a6e7a0b785ecb9626d5

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js
Filesize
60KB

MD5
6655128d86f67d15b76685bcc647dd52

SHA1
c2a247d783bd5adcbb6b56e4205152e90f0d374d

SHA256
0fb97cbacf98c81cb8de2a770f408d37f4b554a452e9965ed95e7fa8976a17c6

SHA512
581058562436a67c91a9102bfb10fa9ca7ad806c9481114bbca9dd32e8762027014ad88279dbffb7638da19ecceae647549104c4c2ec6b4f21ba54a579e24fc6

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF
Filesize
25KB

MD5
82f969c43038723edc9c758819f7963a

SHA1
c71f67c636a0e72820cb4072d2ead260d470dd71

SHA256
0a4164751b3181ccebc12912bd12a95e40b29b42ca3978229b33b81ed0c1ba03

SHA512
8f9a94eba13ff3fad0ddd91dfbbc478c69ad10f04b9a758912ecda7d4336d148fa9fe3f32b1aebc21f4cce84ab45991909e686214501658e92f48f12195f8c51

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.13jj1vc4oi07x2j6.7ks90omps1r._locked
Filesize
6KB

MD5
a389f2cc9b48069ecbf2b7a5f26abbac

SHA1
349cfe284d3b22a0ab461a49b7015a54829706cd

SHA256
63aa24eae4877c6da25c13ed9915b871807e869b57f7b2b9e45212cdb5c9c013

SHA512
e46db65bd53d1efaf5e29e58cd48cfb4a256396402b62318c52cae29aadfc465ca98f99378364fe811c52486cf843d04bb7d07ae2d7beb33be96aa3069ab5d13

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.o07e3u6xf05l4610v4s9oy.rlm7r._locked
Filesize
32KB

MD5
d615ec18c9d1c4eef30ba5beba13232b

SHA1
6a7074b3d5e70e4bdff99b63c906b2ab87575c65

SHA256
bb45fbcaa094fd0c5c391ec1aed7bfd34a2f3bad6156f6fb00f905379d504f81

SHA512
f9c4ebc2b34e723cffb2aa2d84487f1cd1f0d8916de4c26765ac1e4b67aa7ecf40ff5c02647675f8995dec4076543e6d59785eff8b545b3392f6be98955ec552

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif
Filesize
5KB

MD5
fcc7deac4490040da1e1d3e46824741d

SHA1
f4e258bd7a79c91ab7c9e5451556fef7f0e19edd

SHA256
33080db92bf95405f54358d56f16551c824b303826916b40978354ce0eb3c08e

SHA512
dfb9f1712dc8cb1cce61fca9f3ee1da41be40ed92e471d49732aa253738cde39b6bc8c84ed120886aa6da294fe80bae09dcb7b48f7975c17badbe54a715525e4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif
Filesize
22KB

MD5
65dec722b5c0ff63e15c3f24c1a1be77

SHA1
b5208f9801c2f55d3c3ae90eb78d9a6ac0c6c15a

SHA256
bc228a0c27de5cb5ea609bb955f26217937c92ad301d4c4a26975b9577a48601

SHA512
2033857caf6c44bcc897f032b119f37ba095e7cdb904711ca4e3658011a1b17db49ca70f7ec31fda990cb764fd107f21ead73c06a28758ca95da86084d3f704e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif
Filesize
9KB

MD5
6c36e28a7af1dd3defbbbce92acbed3e

SHA1
188195b602f73f9d9edd3feb8c782649fa4d0b75

SHA256
94395532852826942e4fe266fd98ae65f9f0694bc6c4b20dcfd919b24bb2b09d

SHA512
7991145d7733d8b78c828f724efdf5f294995f42d42a0fe4d42b5ef09d2c1b421f42605252f98508fd5dcc6892a6aebeaf87ee18a9d395e60676524883f9f289

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif
Filesize
16KB

MD5
d6678c0e693dc3a646e504cdc6f6d882

SHA1
e078f902e2866dbdc1baf1633b104feb8cd79ea1

SHA256
ea8f2439701700f3a907e2ee8b5cb8df9a38639eb36620670db643edc80b1166

SHA512
1c52056616f29dbb12932b1ac7b3e24e05b264ba2d71aeb26cfb80092f108b01710a88119ffaf425ea1e2b29130ded63499be3775959307652560588b6fceac1

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif
Filesize
6KB

MD5
65d09cef279ae87ef46e99ee69690b81

SHA1
7af0cea08ebad5dd4917ea2becf23874e251e613

SHA256
9a9539fea2f176af83ebf84dfd677bb3dc28d05d9b362f7834b916017236fa53

SHA512
7b44e42e8c12be8dda19c59c9ecef492cf6776298e925e0a6ea4cdf96832dd6dacc292eaba992905442035d8f88ec8f708345d19a8d9f5128e840324151044a4

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif
Filesize
21KB

MD5
8e7c826398ebf416cd2edd86fdd63410

SHA1
7c6190a3fa616321f3504e4548e9871dd5e9cb22

SHA256
1c905f6e2203921b8de7222300a927dea57d96d2673adc0db19e71d408ed58f7

SHA512
009632a3028e4e15937fd8be5e364a5a4dbe57bbfa1f7d92315f81447dec632767afc2570f7e734ffa386087c6963f09761707405d356811970df34d5d412b45

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif
Filesize
7KB

MD5
e9073f22bca4879e423bf55816764998

SHA1
473c1a53f26394f64ccd666f96318099b3a07eae

SHA256
2cd77e02b32459c3cc58a9126752a19457d664d631a092754373a1355fcdc239

SHA512
9a4555121ebd1523b95632e1820629b9b3487dcaf6fc71ac72947b19f6aa08c8a3d3c1b2710e57ccb07da7adf1bf90312fb06812501b77518b50e45d0183c086

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif
Filesize
15KB

MD5
9ea35a407bf840313a74ab635473474a

SHA1
2259dbde80c2e3abb8763dad75aab94cfb61fb0b

SHA256
761273a05df4417d35537e2fea6c13db5b69cac59fde8fc701823cdac39223ee

SHA512
e6e00d606749161243b63f778b1c7f2542d5ce0f253a20939f192c8208bf629d587d2904cf1f3ffd50d216b03621ca8f6d7094ac0e5fc68478f77565efff6dda

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\IPIRMV.XML
Filesize
78KB

MD5
ba63b02271fb6fb43d04427a5655efc8

SHA1
76b5717053811d6e2c524baad3d8fa0be8c9b938

SHA256
f9bb03d6bd6f0a1b0e128e9af68fb503f1fed56680b5c41f780ff716fe92e4e4

SHA512
1a0d901a44850c0729303a23706becd3ef6a9643df1ced3c2d37bc6c66e8671fc67de7cc11c8d0a73b4d09c08f3205bee5de68e037de08326d67f6874a7aab82

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml
Filesize
248KB

MD5
a14df8ee2406a4cd2b26ef85da664c99

SHA1
3f468d08473175b676d781adfe8c08921b71d0c2

SHA256
156be10cfe504b9aa0829e37b07932f6a7c03070fc776e50c6c4ac9bc07dd646

SHA512
c27fd4f0f8487652ab4f89482688ebd5431f7328e63f7be8ae35afe3b9ee36f63b1198d31943926a3d6392e8a46c3553a4c5f9421abc32b9633172ba10b9af21

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\OLKIRMV.XML
Filesize
78KB

MD5
51272b87633746065ce51cc580953658

SHA1
ba4e2bdc396d54c47f82de3ca0be26a208814aaa

SHA256
f7d6adbc8e4c39c9f901ad7ce4d14f15ce0c506976e49b6e976dac526a829f53

SHA512
65f8db99e15cfdd422085b88940678497a2640bf13cdd554423b82ced04b251cc42a3aee6259d54618b3111f78109f04dd5cb73865530311a172528dbeae8aac

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\PPTIRMV.XML
Filesize
78KB

MD5
4633911a6cfcc8c4db9f1fe5e032bda0

SHA1
b990faf69007bc51cd83a12984d24e47545e0822

SHA256
7349e34d8790ee7855725d704c9b831b668d88f39d4d251f8fe7eb006e81d24d

SHA512
dffa1ec7aefe61e53612c851a4a70d13c6fac0018dc9b75ccff3886de44ba87200c354bae6fe90ce38dbaefa499337df50e49a4ec876ff19f74e6a3ce71b93bc

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\WORDIRMV.XML
Filesize
78KB

MD5
f81a95c044abbd827796525473a608d4

SHA1
d15cd637a33282b2bc7de559dd22bf5f89ddcde4

SHA256
65c0d632e0136b9072a032958b1900a8aedf2e01e2ca42d753679c578d1e56af

SHA512
9ffd7134085ca097d2de65d44d88b5b8683f2bc877f48efafa7954b3461d27518d0b9e4e80b2fdc79c6c3b31f43c3b4004f45081c766c0752acb0bc9e610d1aa

Download Submit
C:\Program Files\Java\jdk1.7.0_80\db\bin\ij
Filesize
6KB

MD5
57e76ac9e899f4fe2bfaf9ac2898d972

SHA1
1484d43239b06cba809d6ea219e0f7faaed9c7ac

SHA256
ab9711f9bde3ddce8ed795bd48d423d94653bcf6659d79e8fe86bc049cc040aa

SHA512
3a7b227c54aa7ab06328baff8ddc71e663ae38967fc19cc8ad5aa53152dba9d28ccb449e43f83a1acf0cacd034f47fcbaf905c0df4e44bdeafcf61fba28e7303

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT
Filesize
4KB

MD5
665ec3693dbdda35de7bf8eeeeb64dfe

SHA1
de169a39745264cb9361752af2465d86ecfba422

SHA256
5e3efa652b25db6c69c28920956afae7b7dd065157e9b10a189b171426d6f2e0

SHA512
518921375fc4093319b5259c8d0384964a24788f098d3e56babc2e6687ceb2a09cf182deb4a690a4c8d6c8273cc3939f1d09de02b1b94999600d75fe4baa41ba

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt
Filesize
109KB

MD5
08a28212c7a490b5ff3ea7d1221abb4d

SHA1
173381076213bc10c5d422f79536f3d6d04db7f1

SHA256
5c9f8570dc57ec7211ce4ec0633fa5ff32f1b780f3373d3acfa7c4a66cfffaa8

SHA512
a204ca168e3b463f190888f5f92be257d0d4cec350a00409415a87275ca177c92fba475507b07db5b11e07c34c43687aeb01316aefed59346e147a87c3c90568

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt
Filesize
173KB

MD5
4fd90e91e4b283664fca3c0efb23b2c9

SHA1
a5cd6cfaadf598d36cacc381d3cf50012d6870e5

SHA256
bc4301f67a34732468dc6b5a51eb369a3fc6062f4d10cac912570855dc4fa919

SHA512
13c4ddc3e315b3bd07fb1feb41a70dbb1fddb056886543789ac55c866955962ab6b057dfc78b8e16a4b34b7eaf270b20d11952ace03b6115b16cb306880e20d2

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties
Filesize
4KB

MD5
cb0d4af035da11e08da08f8b7d257e9c

SHA1
e69a1c4d6a5a2d5aa327cc40c5375c5166317a2f

SHA256
77e9357be77ce5e9ee46bcc6ac07f9566a0dde65f62f042be3f867c736aad20e

SHA512
ff1f4a0f7357a2d6a98cab71906d9cb3b5ffa416ee0b24a40a7629160d3c0be4c4889f53ebe149f9b8f36d4fab004238c7678f67e344116510b68d85bc8c0a00

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.1u960.18m0p2r._locked
Filesize
16KB

MD5
801b4670ebb98725bd185c00ca20f5ff

SHA1
c11f86c7df7d0327a0b0df323bcc978cb56aab3d

SHA256
7d012b1c1e1abf7a7b0121d27305042126b704dc9d4a556b75e71fc95307047d

SHA512
503b200ca76bdf833e6b8918df8f6222878607a32fccbe88eff2ab08c76f80625d38d73f478eb2b4a3a77a9e6c06b1671a091f30b27c4b42c20067b850ca7337

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.86hh88247hk6ol0u0ac5.5frr._locked
Filesize
6KB

MD5
872b17724c07c2b8c2ede3e50504340c

SHA1
2ed9421380102607d2939e69ba3e99bb0df12fdf

SHA256
8aef33f2a9c3711778ea54a2ef9317edcdff1f018dd534826c297e51d09f12c2

SHA512
6f39fe2ad2ca423d1d42ec7911259a8eb13c040765fb21574c92c55cc7dc29f4cfaca5adfdc5e0f0ea589e30597d1a3177ca7e84d07c351548761b17512fabd9

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.f4t8715o3ya8hijl97y8gnm396j9z471ij8302d7lc1n1u51.v4c9wr._locked
Filesize
21KB

MD5
b198284a96a201bf90d49aa40c39a85b

SHA1
de8b610ce1a245b88deb87ed2a37ef1fcf1aa30b

SHA256
2dc0010c1800022421ea0b26a36d2d5dd7c1bcc905dd1b6f22ab3be8ab622ba7

SHA512
1deb9ddd2905d4fba8c8a4ac199a32fe2bdfb4a3edfcedd3e076fe2186e3605ea0ff49193db0d94d40d41d5ba13dfe387cce058b4b950b499cf8aea019a236b4

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.n0t71ma5918r3q3j949eqbp1159r73y813gdjz.23ff388ef1r._locked
Filesize
7KB

MD5
35b21b450f517ca45c5308a45c8a1b3d

SHA1
f50a49fc26bf0f1170a8f490ad53f86834d52f54

SHA256
ed81e1d4107a14f9ee056cc2d55d1137e183fc3039810a6b8a713aed2af77d57

SHA512
ec92ac7661cb4e7e6e061153e9694c1e484fc8167ce67724160307028f4750f85fd446c6c2e1ccb295af25fd4695b4d2824866dd9f8c3907b42bf8f0b4261ce1

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\available_for_trial.1034208rbspk13j2yr5v82723v250a6ne.cr._locked
Filesize
9KB

MD5
a6230d3f9855cd66e719db23cc745812

SHA1
78057178f68d2ecea7d4f2c726f7d9b90281d1ac

SHA256
401d74d4cff9dc97dd355dc87b35eaa1f1096bcc9a6359b0b4fc3f053ea204f6

SHA512
c98de04afe45586ba5c97cb795b09906e0f86ad88ad6eef3d9c37839742c2ee7ffaa8a44414e510e3e1e76f34e9d55c458150d6b851a617329d2a280768a28bb

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\available_for_trial.y4066p5pu22ii858j41ybfsmte9449q69j9h5.w4627rws37r._locked
Filesize
13KB

MD5
f3030eee9f7db682d92e1d9e62bba353

SHA1
61ff10593da21353788db9a0a3ca51c7d18eab87

SHA256
3affad00a293f27ecbef5de9039060dfbda4b33bc4e1af80bba5c2fd7a9ea27c

SHA512
bc06015ad2312f40bdb00028a69a68977a839479b138eb13db5be69a5a8772c798d15da40c5c46033c3fb7460b0bc7cca30f1e00c120d9d4c7faa981847c2f12

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\6l5vibl2dqnt6sh255x8.897g27446r._locked
Filesize
8KB

MD5
2197d3c9b45f7c8addadb11bf6994f07

SHA1
b7c3c4da38a86b608df340056a4868bf179013d6

SHA256
8454eb641688e4152da209dc8572b21995ed238ce881e799b81e7fa835c1dd58

SHA512
a7d4f915869cbe46a209085e4ce0283bac7d4af2af8978ae5582c96c734f6107db88cc74a74838809ff4408d6430d97d1cbacd1eabe4eb0146f47bec887bf715

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt
Filesize
11KB

MD5
3ae2a73719e044a380650d303c703534

SHA1
1adf5d6a63206ffbc5b01dcfb9cca527bd3c21d4

SHA256
bd0b74299df127f823475d349e11967eae106ba94c613528f3c15aa21096d7d1

SHA512
bbb9e943860c56af7389433a5c72504a39e58aa1b32d0c6599039eeb4931521052af14845a7c9a4faa9c5a2d6995193898f4a4feb1144f07da2ba291b43be72b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA
Filesize
8KB

MD5
cb7dee61a61dcae155633c0c62cbe8dd

SHA1
5f780eeb66ae8ee37fb52d2dfb98fdf306c14499

SHA256
923679391eaa468a07843e5647c36000a67d6ab72967721ec73782fe9c15ed1d

SHA512
ab26227c994dc17706dd8499fb946ffb7eaf252f730c3d17cfaa338de8a14dcc068362e0cd473341812f40ab1e6d105cfbbb8d045a27ce238c53ab176176e944

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html
Filesize
14KB

MD5
2d9e6e4a7e6282ec4b4399203dff4a05

SHA1
dce472a7f3116a261134f47b7260593e6acb8b17

SHA256
134a7e6248eb1e81396367b0a0be93c5a716376f3b77bf3e8560408af095166b

SHA512
54092cb8eff89b336364951f2de2cce2467c01ffe71f946fb6a456e6f600065eb10a5b24b46ac07c74157a481edc7218c0667dc72fee0017a2c4bbd05fb594b3

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html
Filesize
16KB

MD5
d2ea03fcdff8e2aacbc80eaaa49c7084

SHA1
05ea1c0a2a76de538b29fbc53a49f66913c99d7a

SHA256
4d00b5ab9f0ba6a3578fd448f39c501b16ccf1cf4b8b2c1b2b244df097958591

SHA512
84a6c74392f7ec72c116270233763e2458c1a1a4a01802c420f35edf302956bfdd16cbe4bd5d92ab1cfdd5fd1e73db90205349f82edcddada72ad34a74129a32

Download Submit
C:\Program Files\Java\jre7\lib\alt-rt.jar
Filesize
169KB

MD5
1470a3a143e7313379cda830eacf2521

SHA1
28399f186b500540b417177e291ec7288728444d

SHA256
c3265db2f8d69ba6c3e770a7493d30d089ff5954407c0161ccd07d02d840f44b

SHA512
5d8c6a10e5802aa95c3cb62b38092db6f843b27569e27dd44bdd29941660fa6746f6689c9860aaea2daabc8361206a7ecad16e016a9dc106d9e21d4ece93a14d

Download Submit
C:\Program Files\Java\jre7\lib\available_for_trial.h5l4j3tot36b7r009o.5d4i6ggr._locked
Filesize
10KB

MD5
97946d73ca3a139ea2a187d7c6e5a5b8

SHA1
b45f039ac013da2b063d7ca09cbc353e45441883

SHA256
30696d81f260acf0329dbe9bd5eb7505b9634783e6396a47eb7cb4be50951833

SHA512
d4e7677a7affe81a1111d623c99a3ef1eaa4748d01fe9ae688fdafa3e15969c55372284b0718b6874866c74e09c03024daf331d4a4eb03bd3b85147e56cfd5d1

Download Submit
C:\Program Files\Java\jre7\lib\available_for_trial.m2a6hj9f40mmtrzo83.j3426j89qir._locked
Filesize
6KB

MD5
40d5271fc3ad8f80ccd2db4ce97cdd6d

SHA1
ac28ba6b31e32153c6954729e0fe23c0af33c617

SHA256
8bf2dd92155a574f00fbe7ea44abaf1706a8b3203dd692759cbc80c06d77feb7

SHA512
603e48f9b03b50877bbc9a748ff1a4d79e77d3c6cef3d400d78a43d8950d45e23ff143bea7cf62e7b4c7b703c96c41edfbf988072dece9fd9fe6cba5326ba550

Download Submit
C:\Program Files\Java\jre7\lib\available_for_trial.qjeel5k6n08c08e647.dmd76yr._locked
Filesize
11KB

MD5
3a029284b198557627eeaca525abcfef

SHA1
cb3290be8c015efc29ee31686f7194b68f59370e

SHA256
10276dd3afd22982e31239fa7060f06b42b6d3d43dccc0d749ba6814024010da

SHA512
e505c0edccc0ee4c8827a3ac9138f22f6bffd2104bebda35a1e79d63583f6414ebac86fad8614117047f9e4248638b239d0903d302647f167586b9571e35416e

Download Submit
C:\Program Files\Java\jre7\lib\classlist
Filesize
74KB

MD5
aa922f893acc49b21ef3f8f5e615a21b

SHA1
5cc4e9cbcfaa413d7a048ce4bf7a3eea670e41c4

SHA256
b43bf3a46c77b7c9054e36615ce9738b4673cd26ec694ddd786b4148a6e8e0b5

SHA512
4cfa1e615af1d34a1452c44e57d2c1a8ca29b9dfb91052b13ad29e461b6e6d829fad32b7655ec26cdc571b9fd43c1b1e480568264af5460ebee894186dd3032a

Download Submit
C:\Program Files\Java\jre7\lib\cmm\CIEXYZ.pf
Filesize
50KB

MD5
2900e923ff5f92db7da0da868f8b2ccd

SHA1
f62135ba0c0f6db729feab6e464bc02e1515dbc5

SHA256
c57022bc5e634bcad5321043dff8cb917c0a6f9472651f7d60262b44d08f998e

SHA512
95a0223060cd297e9045cf31685da4da5dd7976f48cf15df509d8734e8d9ea737f6bb1f7f8e4592f5c8ae685db4a1c0ed650afd0a8828559fccb4086cc79b1cb

Download Submit
C:\Program Files\Java\jre7\lib\cmm\x79716fw85f4858x6ju0w5hf6821x6yw22glm7tj1zsl70kc.1r._locked
Filesize
268KB

MD5
63d7dd79fe4ce37a5117e159ba79f208

SHA1
422caa1966a60deb83aa3de3764bda4e99d414f6

SHA256
f0083b1940ee7460905a4dd08c699508c126ea63396e9188c1df8077c0f49224

SHA512
7afef672868ffbc7ad31e2276df46404050dee8aaaf3396318c5c647cc28a9738d822d9c41f38574e3ad8b87784beb58fe86f714f8b395594d59de32321fc787

Download Submit
C:\Program Files\Java\jre7\lib\currency.data
Filesize
4KB

MD5
0b0d1ec28e54350cf45137c35b46cd08

SHA1
44c2f0f30d9a78d33a3d5dc44f853cb22097334d

SHA256
6f4428a6fa8d5081e3e691f3913cdd053f2d76a6e117396fc311f8ca1c11b7ad

SHA512
c4e0003d43dee5e9cb202a30dc65f41a678bdb3ab90607a07667cf2e1ab127246c3525ad816ec3ff47ef7c80b0bbdfd7a1bdc0e57a9397f6a7aae508a76904f6

Download Submit
C:\Program Files\Java\jre7\lib\deploy.jar
Filesize
3.7MB

MD5
50b67e353254c816ede91eb7c6b43880

SHA1
eb2eca4ca2da24843a87b94bb2c4a50adb7d536d

SHA256
5e135d06d3d06f2bc1e57486d18c17342afc18922abf7454897717884354944a

SHA512
4e5ade83ce58c13f55e253a3816b9ec4dd61abe65df7e4f652c4c3e94ab1bb1084013e6a437658474ff355d564a7ba8cffb664ddec41c3b7a21a3581162f0e97

Download Submit
C:\Program Files\Java\jre7\lib\deploy\messages_es.properties
Filesize
4KB

MD5
683717a84f4c482a81897c851ee57f10

SHA1
cdb26328cf3531330fcc63dbe575b8ba09bcedfc

SHA256
9cdd8e02ed8b01e7ff706b9b542af8dda02dd3cf6cc6729cea1ed66313f7c596

SHA512
e96bbe3302a1de4f70733e6c42f36ae1edb8dba67b781b5de6841d5be5d4f53b9f7176648ae7a2658b052956148d2346541d87ed1e6eb69d6a59e9b280057a97

Download Submit
C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties
Filesize
4KB

MD5
70a5da72049586c6fea6a2f54a292939

SHA1
3cfabef259058aee172d87d38b6c336b270efb94

SHA256
21febe0f0376beddd794b1412e0eef26d1aaec258c7a22c2c37625eb7fa6909b

SHA512
814649bbd67319ae0524b9bd454c7d92c80ffc19a1e54f4a814db84bc6c287a506e0580d7d3a1a883bb8f118ffe023eafd9981c5cb4deaab51b0ac807bdd0d85

Download Submit
C:\Program Files\Java\jre7\lib\deploy\messages_ja.properties
Filesize
6KB

MD5
2dedb69b11de3aa263e3c0c1a8a20dbf

SHA1
7a5a293bb8f11b4e102b0d1d8dbbdd290d4f3e4a

SHA256
b3e96520f4d83973873d9154d65769bf8e574c9463ddd6282bf7c2c22a2ec492

SHA512
8f5cd03a0622b2ff66c3a354b469dd55a3a42c26dbc32cb57a3eb977c4aa36c61fbddb24b668f3fc9acc12e767d03e91553c74ff47493353fb5a0444209b4f98

Download Submit
C:\Program Files\Java\jre7\lib\deploy\messages_ko.properties
Filesize
6KB

MD5
9a9d7512749734fef8464a679eae3b47

SHA1
bc6eabd3c723c9ea1b76d79bc2fd741d2d3da5f1

SHA256
e40f9ac18b304e509a957daefbd13e633487c0ef8c53c3bd4d905c1520d13d0f

SHA512
6c9104d567a245c312e0d3d6aa06360ce5f1b505057b5a3710d38f47b2ce051885bf53ea0f3d205818535cdc814783e8a6b54e58b7a8f76e07dfd2e161661cde

Download Submit
C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties
Filesize
4KB

MD5
4ca16a28e5bab6df3c2a9f08edd43d44

SHA1
acb649e07767e6b0aeafba87d95f006f5698e3be

SHA256
48e756fb9f4ec99efe262b54d69fc387d626a6b3a825ee8b119746eaf2304dde

SHA512
dd558eb2f6ebe5f3ad74a893ee832dadcff4eaee3a6b9167f678d7e5c84d2a8757c418dc128d2d39340b07a9a2fa75ebd9d5d1ccea27ef9e5236d194bb8494d6

Download Submit
C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties
Filesize
4KB

MD5
62bbba548efb1504974d9116ac7bd400

SHA1
3ac5c7b4268f59ee0a36808ef764c4e9c8f0fc48

SHA256
7d1c059f5acbf27efcd798e859b4427fcb0242408e2cc76109366d18ee07c80f

SHA512
2775456f5d07ac5cca19ba4bf85ae045257a253e69502bcd1ad3f8bfa87aba344f7742098963e8a3c8eb80c1a9020496a81627ae3b736263872a171d15beeb14

Download Submit
C:\Program Files\Java\jre7\lib\deploy\q481omkt7121e3788q7xni25h6pxt139p2.x5n681emnpr._locked
Filesize
18KB

MD5
0271747af7c86d3c912bd6791fad45cf

SHA1
9e05adbe4a06e1ec57fb8aea62842aff2fb5fd8f

SHA256
bd127eb313194c292d09fd2dc144bd3bed5afc7d746af5dea928df3bc7a78f6f

SHA512
38314519b329abca012e7c4fb616297ea53ab2b403c12dc353d78fd354f9febc52bb88e3428a041ac8f7902d7d070981afee2e5cbe766a8813db9d4c89f10aea

Download Submit
C:\Program Files\Java\jre7\lib\deploy\splash.gif
Filesize
14KB

MD5
c3a8b5aaa7221f4618a239bc67d6b58c

SHA1
394e2efa76b5fea047cdeb7e4cfa57473151d07a

SHA256
38aa59aed2a668e8ae0c2de0976666ec2ea4326aa30f870e76f54b82ecfed049

SHA512
8e62644c6061dd3d23293be3b0f33491c0e6571fecdabb6797cb22eafc4ca8a21ebfc05fdd75f7e2a28d32a33d76ea6c6d0b1bc971e6e2809266cdd7a6ad5f7c

Download Submit
C:\Program Files\Java\jre7\lib\ext\dnsns.jar
Filesize
9KB

MD5
79f0f53d8a19d473104016bc8f24c504

SHA1
b830a5b8c6cc90f5c62e74cf3b000ae304cccd10

SHA256
cca74ed631eff9cf73371bdc20fb9ed88f2d32f1f7a2ea97de473b27b2a80c77

SHA512
f4b1b5db24388726e587028529ef536f951e88022c16a66a9c70369f93d1bac4a7b3de4cf856af47937108c23dfae3c79fe457339bc55bfd687ea9ab106e12d2

Download Submit
C:\Program Files\Java\jre7\lib\ext\g5do2p5elf22q70nb.437drr._locked
Filesize
43KB

MD5
c20628601c8d504a6c0758af2ea90ab0

SHA1
6a372098c9e72c08c18ab921803e6c7a82f23e2d

SHA256
644316275ebe85da68fe55e284b4421a553a52d4dd3cd4f8d56c9e28218bca97

SHA512
c518777a96b494efae461393773b4b017991fbfd6b03f2fd24b0116d2825b9f52c1f5755a826913e1ba9bd3025dc4238664579361db56fbd087d7307210e75d1

Download Submit
C:\Program Files\Java\jre7\lib\ext\kdi4jxahkue18qah9p6rsdf87m8q8o8c0s7f68wa0ge5.5r._locked
Filesize
222KB

MD5
dbdb99d21badfe8aa4db2fe6979ecad4

SHA1
46f9b4f533026e15bd009b51e7585dcdd1d0cd05

SHA256
04af22da3b73298266462b4064c363609df984352372d35af6a177badce0d21e

SHA512
8404151d311d4f1d9fb558e21eda687112f358569504383aad4dbebeb572683675bb021d2c4eb861db30800c7f5d88b9e3387be8b6c0410bc6b3ae8606385e35

Download Submit
C:\Program Files\Java\jre7\lib\ext\sunec.jar
Filesize
16KB

MD5
6ad8aae0defbe417445f94a7defda37e

SHA1
03d77a43a6bb587052db9642b0851e36e069ccb5

SHA256
03593a012b2b7a97284c95a88b22df7e48895b555cbf21d4d7fdefb70686a6bc

SHA512
3d84a2a2f040c7cff107689dd7e56935fb00263de67a480a71638476fa8023a83200caed87aee9eb0825d256a133981cc40c25facfb821b1972a568c20bb6f72

Download Submit
C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar
Filesize
194KB

MD5
62164a0f129f0dfe0b21f3c84bd02b5d

SHA1
fff8437b7da13016a79cc391b6f1a5d82886c4f8

SHA256
5ac3996fba7136bc9646dc780a22fe6bdc2126d836244344ac9256bd0a0b06f0

SHA512
5675fbbd9d88020d12594d4831c32f3e5c5bc85907d8a332e438d8e70ee3510d28006ff641fcf305bdd140a1225fe9f427f653733da850c7cad4af68146e246b

Download Submit
C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar
Filesize
31KB

MD5
dbb2e5ff2200fa0375edce6b7d4f0478

SHA1
b54e5af08dab022237d374537c69db7db895aa83

SHA256
d29e016cf109c409acdd4ca6d082d51f4b1f44eb2c5ee3a9c0b6b2377da89e05

SHA512
15072d6b792c1c50cb2e923bbe699d53f6501cbf1e289326437014fdeb5e3a1734e40cd35fd05f7cba919ca2e0a7d5d03282d83c37c62a6b8a9a30692fe9d7c2

Download Submit
C:\Program Files\Java\jre7\lib\ext\zipfs.jar
Filesize
67KB

MD5
c79cc1dd091bc8d45c5597aeb11accf5

SHA1
45d8204fbc4fa2e3ca55188d0ca568782ea4c180

SHA256
626a7a5b8f1598576095595c89c2d91a60193258ade9ace93c5ef3c9ce38697f

SHA512
a22c02991249912724ff546291f50ad1dea2af2763c181745b815a88ec73cd3ac0b120918d6f95a8f81b8772108efab6658a1b36659e3bc22bd848792df63446

Download Submit
C:\Program Files\Java\jre7\lib\flavormap.properties
Filesize
4KB

MD5
870b58a876ffd0c39ad66f2684d4867e

SHA1
5a02660fe810c2f7a1b8816dabfd7ea36bfe5015

SHA256
41a32e0e01873af95659fe86a8ec9818c25a0a1987f1ffef80115a49bfb5ca7c

SHA512
93dc809f028c0fa6b9a7131a7ac1ba8cfa6c37d8f5eb57e4b38156c99a0e81f22a17a297feabc77cc805e2aad0be1998a8ca22d407aaafec94b9fe0e6d93dd4a

Download Submit
C:\Program Files\Java\jre7\lib\fontconfig.bfc
Filesize
4KB

MD5
13d5d4554ba550b7365898a97f893929

SHA1
8e04001594f284d130e7a0932295d44ac1d86f1d

SHA256
ba1fea4b6c39a9d99036bc55acdcad82d33a6dd7ba411c49e3f18edbc0a618bc

SHA512
b437515ca5c24cf0bc6bd9de7ada174a6d36784cbe14d68ae08184f721915071f984bbd89d274a9b43247caec89604952c4fc1225d6c08fd11be8f36a04ba3b4

Download Submit
C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf
Filesize
74KB

MD5
47039215169f52a937e114c2f87aa64e

SHA1
87c511c481497273e45a065bac1bb7ec22800cb3

SHA256
80ec6a718019bca1aacfb0967a24911cb1e5c9115dca943252c2b0d95b540231

SHA512
ae6f7ca124b414ab356323a3b0638447b010d48b0780f7f5b5c7adb97b616b9a7ef9978355ff3fe989dd16d86d28ca70328a7e9a3c08cb965e5217dfc69ef782

Download Submit
C:\Program Files\Java\jre7\lib\fonts\LucidaBrightItalic.ttf
Filesize
79KB

MD5
19b91490cfa23d946f55e97e70a2850f

SHA1
70f04cfdab19f3ed098c82cbaeb55111263cfca0

SHA256
09f9878e082e4b7d371405935b600c3a633f7eaf6d38ad6f16d2159ee069c0fc

SHA512
094d175b0fd97ff39a39e361dd8614a71a583013157a9ad14370c82e94988edffc8ea01bde6a9d8ef4706cd18b6bfad11a4e4d9b9fd1076ce3673e2a78e44303

Download Submit
C:\Program Files\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf
Filesize
311KB

MD5
df987f6893be22b8b4314507daecef04

SHA1
dd2a17414b43d60c4b21ffec3f27a949a98ce8a9

SHA256
e1aee34a024edb5f6dfa6685dfa586ed08b1b575ba6dec4d52b3df8b2a3142b0

SHA512
32aeabb97e8dc099e053a959c6f1cdc29088ff1488dc37a292bf64e76e6f453ce11daf5c6d8b099b00ddf335e8bbd1668ef744d79ae8d1506113d1fab84ac6b4

Download Submit
C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf
Filesize
682KB

MD5
dd83eb8b723c6f9befc1c0950e9838d4

SHA1
9b3891b5ad306811f907c9115fb19a3bc8d71fc4

SHA256
0c12157d353aaa6c05d0fd3f17f03e3d4eb873152e28a4f9d920d2e283aea014

SHA512
b936fd3c55b51eb52c3042725b91965d3a0b8f3a1ba28b5814684d4ddc6db06b89276fdfcee6bf950c42592e7955361adc44363bc04daa5046cc818b84a6761e

Download Submit
C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf
Filesize
229KB

MD5
c9d43e23840407565f19c34da71ec3a4

SHA1
35901fa5fee19e50a036bc4776eefa1559b72716

SHA256
2333290b113782f6b3f36bc24d94fb8d679ce5c01e648abf7ae6326f57deba37

SHA512
32e3ddb2a94ea51c859d19ebe381b0995470c071ac542a21a4af6e97ff888683ea558a970aa2e916bc70f36fa785c5831f5f583b458fba50bb3f16f92c76ceea

Download Submit
C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf
Filesize
237KB

MD5
d0e733027b754fd472e216558014d462

SHA1
7c925f22f57d2316d0319656072d2ca25aca1e85

SHA256
58b6a5698acee2cba93b5f1afe09b99ecf06ddff9a0fcbf182243a1a91eda26c

SHA512
45a05750e21b40fe50762ab5fd245c3766b76f38b14163cc1d1adc1307d1a4fbc4f6592fc63cdb2b94f23a6f656bdaace955e7ab1b9a94021a14a6bac2b80a17

Download Submit
C:\Program Files\Java\jre7\lib\fonts\available_for_trial.1eof.6pqr._locked
Filesize
74KB

MD5
9d2c78459170f938b15713865342db8c

SHA1
0d55fc7416c09db920e90b7ffab3eac4ec2bce3b

SHA256
c69ed7912a5ec7bcfb26888ebf73ba00463c36935c14a8c4941dd15c188bc8c0

SHA512
3211b75c393ca9c349f6f3958deb1e3014f1646bea61c50f1d2ce28bb70eccb1c0213c7f257f1c9ec9b336f6db916a460fec3dae1851fe31fde0ad8f5f7554f4

Download Submit
C:\Program Files\Java\jre7\lib\fonts\available_for_trial.8t76581te4n9g16851.ikr._locked
Filesize
337KB

MD5
fe15b297c146e575c14bf6fd202345dc

SHA1
ac49423aebb11f53628be0035d9bf6d077ae6b07

SHA256
83a3fa84b20c5d2b37d486b7ea4afa8c5331a37e138c844f775a8937eed7bfd3

SHA512
566185dde4970974bb7bcd564cabad50a5d92cc98a66d8881c77dfc7af6c0cb03018d1012d0f9e99ea207f01355463f82899970d5902d8d7f2c7008dd67262a6

Download Submit
C:\Program Files\Java\jre7\lib\jfr.jar
Filesize
521KB

MD5
144205eb61798aa1b2fe811b88fd6d52

SHA1
318cc3e4ba3cf92ad385eaa8a7332da8e219759b

SHA256
158342e05076cf0b3e7d317f9e1b1a039c0590cacaedfd1700aff33f1b47e451

SHA512
85ee9169e5bbcffe5d8a1afa1823c6905d221a0f41df81a25db5f32f7b258b9095bbc82b9400b96dfa2dd6099e11df170f3c561ed0d46e44041f076d2eb27497

Download Submit
C:\Program Files\Java\jre7\lib\jfr\default.jfc
Filesize
18KB

MD5
b88df9ad89852594d76e399185fb725f

SHA1
0b1041c5c5d4abe504cfe14618acfdf1106d0e0e

SHA256
572bf15009a4b0751caae42c8e0036bae6340c21f972832ac7e2636e876eb57f

SHA512
a3f5df585e65716921d50a30847227a732ac89e8fb2902793c70fa36009b8cb8c319cedeeb8908a1010067b7ea84464fc062781e35e3d7f162c99dd1dbfb1230

Download Submit
C:\Program Files\Java\jre7\lib\jfr\profile.jfc
Filesize
18KB

MD5
90affb5f07d73083b8d86582f78d72bb

SHA1
e4de4414568b950473c3c02a3eb0113250de98c6

SHA256
3a1e4344821ab68299b5043ef630437733651beb0dd57e6400ed6111fcf0a6b0

SHA512
c7ae3a240e4ef500875444c5f953b04cd393bfbc5924999a1c9b582e6141cae4fcef722a0646c1310d1a4d68182be9a2627062495398c68188877722c8879c6e

Download Submit
C:\Program Files\Java\jre7\lib\jfxrt.jar
Filesize
9.5MB

MD5
29fa797dd1a856d6f4a2de7b91b043eb

SHA1
cd1451c5dbce003e47d7d21d48b1c2640ac9dc8c

SHA256
cb546e9c5bcb3f7f9e53ac67be4f4935d7f6f62e50a8249c0cc4349f54860b53

SHA512
01b04c9b51018e2bd352c43473c8d2f20f5cdbd29864cbfda3e3e1a2645cc8a5b9f503c3d9ba894dfb61f279cf2833b5ecf52199f980e4160c2ad0f84c937707

Download Submit
C:\Program Files\Java\jre7\lib\jvm.hprof.txt
Filesize
4KB

MD5
980ed000cde089b1098df5ed057271a1

SHA1
22c5fd2a226960c49fb558d6f59217464a172adc

SHA256
3aadb0105c5575fc263585ebde932b2a525a6b902ff28181ea7b6a9823dcc607

SHA512
cf8893ffba5143d886ab662f587b60718670c70664ef2af4fcfc9f46e7939b9188395721a29db24790c3f80c3f9bcd90c985649eb95ecfce4c91b99e673a926d

Download Submit
C:\Program Files\Java\jre7\lib\management\jmxremote.access
Filesize
4KB

MD5
51b2a6ac7670df7f12052f22b41b5faa

SHA1
7a642a2dda21f5905c3045902b41d79fbdd4fd6a

SHA256
cf596c19db3c138b14a763bd31efc2ca69599adcb6fd25539e6b875a3a90ccc1

SHA512
2526a9f6d189dd29c5b0e3590d4d48b4974f3248e7c54d9cd095a5b0c15f31dbca8b12e257eff6772e1a967204f135cff21249c55a6395ac2fca1ab37baca09e

Download Submit
C:\Program Files\Java\jre7\lib\management\management.properties
Filesize
14KB

MD5
c98fd52186da6a02095632a3ba475ba8

SHA1
220a3ac919d48feb51aea3c70bbb447efc76e3f2

SHA256
7afc8f3e222a81645a0f62689214aa777d13aaf7a1cf84b6392c91e7c671dee7

SHA512
d0c5906c61f184b29d985718469cc4ee638678416de44df9d3fcc21909427b0f788e38ffc04cf9b873670eeb638d3c0ee6f74278b4941c47bb910c9251383c90

Download Submit
C:\Program Files\Java\jre7\lib\o2ly9aym0z.316r._locked
Filesize
2.3MB

MD5
1480a0ad4c752a507e5778633e7d8b34

SHA1
e62500c9f27ab96205bac24887d1191664433757

SHA256
261329f84b870fecc7c782007f7b46d80943d0aca381ab6aca8098e2d1db9ff9

SHA512
a808b06cae244c8fff6b5d1fca1828c39674c330db9234e250e741efbf88064499df68b65fefc8cf7814bbfdcf00db1ffb7db4bf6d6a8c3caea5133141aca7e2

Download Submit
C:\Program Files\Java\jre7\lib\oruf1.3f65l02iztr._locked
Filesize
882KB

MD5
fe0fe1e936494ba1bbca1d542ca94537

SHA1
b0fd1c3381579b58eca6b4f0e3c5f507e98414d3

SHA256
e80d9b9e59dd1d5baa06c5aa1a872d57e76ba63046a4e177cd2cc4063e10aee9

SHA512
77af60b1a647f223685214365755395ecda5dd708b4b5c265042c7bd7bf3b905bcbb7c403b4fc0b0b5c1a2ae463ebce8d50f3f2918c7e04d563c185dc60421b1

Download Submit
C:\Program Files\Java\jre7\lib\plugin.jar
Filesize
1.8MB

MD5
b2a0879dda0023fb3269b27ac1582760

SHA1
52664d8454bf2f410c422d9e11808f526169c422

SHA256
d5734cba7f21a0fdb2e75c26c734fe7678fda8e00bea142a4b398b84c3786b21

SHA512
8b2bfc9cd79317149fe6df9b790cdb15de210468cc929a58ecee8cca71cea0f7f7048a05399e5d433611c5906e36f3c6cb0157cf1bd5ccd5889a7e04ae112811

Download Submit
C:\Program Files\Java\jre7\lib\rajq1ljowe52nsoen08.24dr._locked
Filesize
109KB

MD5
a0617bdb1e51b88cc766986d520b286d

SHA1
71c2363378e02136a30ec8106af1bc65dfa688d1

SHA256
01722cf50695079532893e51d455402afff572c33b3361c34a497dd1c3c0db27

SHA512
1810019c6024acb28d28f36f1efdec68894208cf4a097df772eb9e4573be31fa376c84da7f9992d3ac168c2b46215604b1658256dda8cb1785263672001dc014

Download Submit
C:\Program Files\Java\jre7\lib\security\blacklist
Filesize
4KB

MD5
5eeab0ddfce09ea4734a1b31b0dd1c9c

SHA1
ce67a517ff7787a884c04ffdd847f9cf08c5ce72

SHA256
beb027c4a91242ec30ff627617e32db2e20cd2387ad9dc3542063af9296a5ab3

SHA512
213424d3078970e9507259d58ade34c2047f149c33f8dda213e43e8b72b4e7b7f33ad0bce6514fc7d3653809ab49bc046cdeda23a62453643594eba7b9328fe7

Download Submit
C:\Program Files\Java\jre7\lib\security\cacerts
Filesize
97KB

MD5
f00489c3b6d9719689b6a216098dc683

SHA1
ccf63dc553f68d157e71dd7fa26e0696fc35b718

SHA256
539d471c2345da7508d03f3553419c7002c64a0e10e997399cfdb9e777ded97a

SHA512
31bda515f21a93e4aa364cdd6b273506bd4f6e43f3b3ebb4c0ac6e392cad6e529522ad47f26a56a1eb35650e3e76bc8d8a18601fdc757394bbbbc68ed58390ba

Download Submit
C:\Program Files\Java\jre7\lib\security\java.security
Filesize
18KB

MD5
3a1052f0431332021748165a3bb8e633

SHA1
194aee9df70857010f6e036a75319d6e333e88fb

SHA256
73a75c909087ca79184c5cf6d47920fba631abfc0e5fc3546cc5f2a69c120881

SHA512
34e47995c152e4e2885ffef01ba1dfbeb9999d92176e98c424d393e9905164cf65de8b66a19d13607dc7938000db07f5b8e813784cb9f1abbf207b41a1bab087

Download Submit
C:\Program Files\Java\jre7\lib\yloy63tj9r60f2n4o861i0f7d5.6v979r._locked
Filesize
8KB

MD5
a6e7b4fbeaa2922373cc734ce77b661e

SHA1
392f146bc818dfb663d911272ab63f3d71f8f408

SHA256
4d3291dba037ca663357f0c21aca9044805f239eceaa4aaa911602f0296d77fc

SHA512
e03334bde4c9e7d93918ca6a88d3f8eb50ad699e8ba6f6045cfb935f055a31882245b56fa707d543058a851c00420de14d214d0d5f4a9b287322adf05051a0b7

Download Submit
C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh87
Filesize
5KB

MD5
ebeb34708914d67364c1f5da4176f8e6

SHA1
7d3eab816fedb65df61b3b8765446bc8cc153a76

SHA256
75302e3961bb6147d27c3965e61e4d38abf3b0550d8accd1b445d10cf97a13d5

SHA512
2498e49cce436860f9f055b0af448b5288176056952361910234e348fab784029ef73c1c1cd81f99800e568d7b0e4bf6d2e26d40b4989f37289ac4218f4baf72

Download Submit
C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh88
Filesize
5KB

MD5
352d4dec1f5f15d84b81a51dfc9a654b

SHA1
66283354b78d50d410e2ef3e4c3b8b64c3249891

SHA256
669421417f51e689b258ad352aab61fb4dd550d193623c53d928270b8b929741

SHA512
3326c8e0ecf797faf6bc2e2ae4358b0abfa39f65e0c9d973ed909724f50e8c055df3165394f3b575c82cc62ddf220490fc65cd79edc867b0d53ba193f7cfe6e2

Download Submit
C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh89
Filesize
5KB

MD5
b503c10c7eba98957537843ff3a09a9a

SHA1
7626254e495f2779c3e794b4664f8bc873834a3c

SHA256
c5d94802b8041a5807da78cf413a768de93f59825d9cef63504d4bc7746a428b

SHA512
7cf97e7141507fe10fa44b16898d2c1066a268d10757bdfe60d89b43c95a8add1bcb456cdf73b675da80423f2b5e99fed9d3e565d9f1273fc91a997879afeffd

Download Submit
C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings
Filesize
17KB

MD5
0f0027305c31b12160257e130adb25a9

SHA1
8d0f6f51f135565d2826fe2d08a8db9dd597aa6d

SHA256
d43b55bef201dc68726b30bc8ac6e41c53cead11d9bbfe3e68942a87d8ab68e2

SHA512
845243190246005a42b0e72e45bf2db7c86d83f7474e6ac210ca37e94eff669d591520cab09befdfda98d19603178f16beac5409041512a25b5b296b0f495ab4

Download Submit
C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo
Filesize
603KB

MD5
3b01a1ab8b546ee5e12c2e484a1b446a

SHA1
f38f5b20ab272abecb4e036a403753aed10ebd39

SHA256
3613332e602671f8d8974ef7a6758ade1a3af2767e934705ea1075c6459c3632

SHA512
74ef5c36c773521213e6c3b1434c2066ee468c75b2c92f175240136ac5f697e0ba4915d5217bafaed201c997abe3d5ec768f8303c1994662b1cef13d32a95aa2

Download Submit
C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo
Filesize
845KB

MD5
0365e060bf4155efdf639fd06b63bc5e

SHA1
444a25c01bd9591112e1a5709987ac72a841415c

SHA256
c8fcbd6fe3822b17211e19f5f52f3e45edd32991846b2cba4215f9cc4da51c7b

SHA512
6913d61b3d061a8354a0e01602b3c4fb814cf42836604e69203331b3aa5ea981f14554f776826c707f5bbb3602692619fbd2f282fb27a2bddfe244925fe2036a

Download Submit
C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo
Filesize
664KB

MD5
810125c22eb130831dc29a4da57521e7

SHA1
0a677c63d4994b41d613e4260ee25c1f529abce7

SHA256
55ff56257d0f4a398128d3d78c98960eb4ae97d477ad6f72dcc4d416bd610920

SHA512
2220613ae7d5448ac8161f8881fa5294d1648f70bddacc2b25989339ffdbba5e9b2909854b67b58cfc14aa5120f1316923577b11a2d448195332b56ecb699288

Download Submit
C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo
Filesize
527KB

MD5
0e3624fac6012723f8e7b12a3967b13d

SHA1
266aa3ade020413854bb19d9c56ebd0e6c3e8f4d

SHA256
853e777305c9b98a9e009544cf46def1384b27486c751691b558850af8517106

SHA512
6ebd05c9c02e3bf993c7f8395ac9dbbcc69919d28cf0bf3ef3d178aed32534ae1d5520954376a6d24eebe5df376a9f01a20a0177a6760baf16aa928322a6e243

Download Submit
C:\ProgramData\Microsoft\MF\available_for_trial.0d05949f1lnbe6y50fcun9.320n1bq8r._locked
Filesize
15KB

MD5
4cd9977f689812a9c621858bf6720470

SHA1
1d81b9fcff904723bfc9d3fea5b5197b1b1e5c69

SHA256
d26fffe263bdb129a3143ecd12c69709037eac1b1e2d24ace15900ec2a798b0c

SHA512
561937aa07eaaa6bb865723de1f2965da4a6e82cc11c336cbd526755c47915c80fdc0ef9e546916cf43a22506405606fdd77a50e22d7f87817f0baa0a5296c0b

Download Submit
C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi
Filesize
140KB

MD5
345c9f8b46bb5db57e17fbcea4ae01ba

SHA1
44ea4461fb0fc42d8951c8b0fcb04ddddb5ea442

SHA256
5b50b2133ab344c776b805bafb235e4588ff6dcb305f67e035acb72afd799012

SHA512
b114ed16040ffb067f5e9931e098df9b8d569c0654460f975e55cdc4d36f4b06484dcd991a047c085916761140379566bab2738776c038292545d68242e204f0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
Filesize
8KB

MD5
c429ef3491d2f7c1bbf02ef030fc25f6

SHA1
ec54b03b6d94642b65e90614a336536fcbc8d21d

SHA256
877f79840ebb3b22177bc40b712972d4a1f92048706f745cccbfbd55cefa4b56

SHA512
c741ce7191197068255a2537f31423645be6634d0194d8fbdd73cef6b6a0aa5543bacaf6199d645024fa0bde9326c7d8273246e4cfe5db040d54c6dc1889d6b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Filesize
264KB

MD5
74e3ad53ebb7ef61bfb45116f11a5fee

SHA1
70f38cd956eabc237a1431345f72c8d3e299eafd

SHA256
b7d16b0e398e073ed5da988709b4be4debf9af55366d64e6ccd7ee1fc0218bef

SHA512
039973d63a61cbdae748ca8e82a425da29356f2417692f857676f3239011df5394c6afa7a477f8f87508b520181de86e7913e13d26695177a8aedd57dd484f18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2
Filesize
8KB

MD5
38dc9acd9ebe896d3e99c3c31c414d38

SHA1
c53efb32db90d1842f1ad30d699eb95c08b2f818

SHA256
c926f401a1b312765f041f343af62b9142960e7be935917ed470224597bd248a

SHA512
05cc79bc38588594b6b637df8ee686c9b54e8cdc21b840f5526d57ca8a6d1e77e81dd27daa4859f371c0440a7a22b505f135c8d825487ea61b505cff589905c5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3
Filesize
8KB

MD5
7dee44965305997321a59da941a58aab

SHA1
427669b735354bec6d493eec2f78999cd2b74ff6

SHA256
086de9612aca0017ca032b8309ef17a6620d24060f68c6f62cb80af5759729d0

SHA512
9c9fec827b29f198e3a47651274c587dc3f22fbb28de5c2ca307378a84c701563e5b760d6583a0e4321da1c2600d84d8dcd7ed509d70ad4fb7abfe570dcf27e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Filesize
46KB

MD5
dd452cc696bbbc226a7b40f8925f9531

SHA1
b5551fdc35a183bf866ecf7182b23db980bff3fd

SHA256
cd3bd4f379e957be68a2cb4d195a45292bac022fd4138c41d4e51b2f19848794

SHA512
2cb7645df04fea358c578194be5e3091e41561301207a2a2da4d40340685986b4da4aafddfa4ecbf2d7fd59b601da5f56528dc2e119a4db40781dde4e7b52dbe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Safe Browsing Network\Safe Browsing Cookies
Filesize
20KB

MD5
7b272d4a597fca571fb1282f92403bac

SHA1
6b5b1fb70bf1b3b12c3569a16c6aacfe30a43561

SHA256
f09f0ff8d01ddee9cd9fe7f09a7e250f259bf4a9a4ad355b9d0e7c4df687398a

SHA512
fb4dc9aad1d183266cfa7b3ed82bad003caee84596c344afbd0ae5ffcbe509795739737c584343412f6bc2746153fa142148845fa16232fa221533b5f72b8f3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\p.h262a542r._locked
Filesize
28KB

MD5
e3b67f30fdb85b6eae4d74cefbefbb37

SHA1
ffba6c071e976c13892293f9bbf5eb9d83367e57

SHA256
0a0f263570fb2d07b28128f13a65874066c37c0a28060daf5dc4cecbee5f10c8

SHA512
06d3275939b18bbf3ba274cc21a7b4532f354221571a7495b770e1cfd3aee2aa353fa5a3c6fa8f3e16b4878e366c48b07a433129fcbf6fc8fc85bac9bec93a00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\479i3x55s60ugo97lu5.hqpr._locked
Filesize
16KB

MD5
07651a71cf69a8a32700e43fc2680f33

SHA1
2877bca765e958acb1cacae9fb0d127adcb3a5bb

SHA256
451151799c44108c253ce12624ec940dd2642fbed641251af523e264b1652ef9

SHA512
042c8c27b40d24ed6b67c746fbd350531298e2f3112d7185a44389b7a75df44c996474fe7e87040ed06c52570ab0badd625b1d227a05c380d552d139e8292382

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\faxij41x0fx8y83qv5jk7a20e8nfl19l672jye8nvtz39.l7r._locked
Filesize
2.0MB

MD5
ac10653415b5165d8b9ecd676bf50f2e

SHA1
fc581391a1b8016726e7d62aa08e531e99bdf3f6

SHA256
a6554928adc6ba445b7e0751ed41c2c2306bf872af79d1ab3666e25bf5a5e12e

SHA512
06183b4870ecd4376904d5d9b4a6270db484227d3f15ad7540190fc642df8721b4bf32954962f3f4e3c615ddbdc99508f4321078a926051479638530bbd1bd27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Pretty_Peacock.jpg
Filesize
5KB

MD5
38525f43a6fc941e5427e98e88db5008

SHA1
aa10b6bc0fccf9528073e5a93a6e9a34839ff45c

SHA256
a8453151595840c306c5746c3682a7985dd1fecf4518ddbe172032a4f36e151f

SHA512
beea4f449f26b0a742a805c3fd0877415c1575026f21975ecd55417c63e8b14cc34b2c9f434421bb8ed76c46b1659af0b80f6220c5fce9967cac8fa6a4c21fa0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs
Filesize
2.0MB

MD5
f9421acb1f06f82fa004779ce2e0d7d7

SHA1
31d384f526d65d22ac5479d8147bc7f7651abf17

SHA256
a72a2d8f5f01846167c8f9505a72b51af23b06f277556259633d3f60c00ed320

SHA512
32eb013737dd9713d95ee4d1f258705a15887dd28451ec5f6bb5a5929ecf1cd80e66aec87761bbec3a628a861a6b08c931caebc15314f296d5091c97df879360

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xm25i6ct.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
Filesize
8KB

MD5
333b17952a2b95b776ad71678c827fd8

SHA1
8e691816b8f58e76450cc51e602b97b90437cd56

SHA256
70cdeee6e297c8fd1b01e1ee24a5b2cef36bfa5a8b4a2fb1ecbcc62cb5608754

SHA512
63ad54a285b7a299e44384d894e484e7cf3bd011864bce229db54dbbefa316c2e4f3bf4e9e8e4f57b034b6fcecf37369a835583c311e93ec12eaafeb502f26f2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xm25i6ct.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
Filesize
48KB

MD5
cb9e2298edc38c89aa729f514cd98d5d

SHA1
429742efce715db60b3350e78640b9ea9c7993a4

SHA256
d164b0040c4c18633c5db9144c098c6f5764a09a4aa01396fb48e418d5f54d36

SHA512
60e7d4781587527fc14c0dfab6602cb0e770c706cbb2b6295201f1d7f725c06634adb9a9d171c83ba368a647258c73b6bc230b06d4b86d9f31dd21123a134c9d

Download Submit
C:\how_to_decrypt.hta
Filesize
12KB

MD5
e20d1d720591a9d94a8ef9b73623507e

SHA1
d98b3bdcbc6752896f1056f553ba6959047b5160

SHA256
d24829fcfbce1628a95ea3698c6856821f46ecd535c6a4c1441627eba008ce3c

SHA512
9369062e335f25b14f9790a3a570841cced31b527aff66f168528bd1c72a7367fb4c23bf486e402af1370e04656d0136e958b9280cfdebc7b33cc4b997887321

Download Submit
C:\vcredist2010_x86.log.html
Filesize
82KB

MD5
0a7f015aa87e10ab071f1273763e8d5e

SHA1
8c51f538d1add295bed69dc8f26bae5e640c1e09

SHA256
f1e079bfad4643b74ea6827d56322ac036efe2e996c7db2ad0e153d36dc7276f

SHA512
f7ae9cf057539f1c042f4ee3d51240b2b9f7997ed7f62fdb603d6d756305a73fc1216b8655b5cc3cb623618e961205a53d77b18f22521e8ade460c1ee2a982f9

Download Submit
memory/2868-35168-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-4370-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-29389-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-10280-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-20621-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-24053-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-47857-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-0-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-1-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-3-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-5-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-12-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-16-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download
memory/2868-50235-0x0000000000400000-0x00000000005D9000-memory.dmp

Filesize
1.8MB

Download