badrabbit | hxxp://Google[.]com

Analysis

max time kernel
1039s
max time network
1052s
platform
windows10-1703_x64
resource
win10-20240319-en
resource tags

arch:x64arch:x86image:win10-20240319-enlocale:en-usos:windows10-1703-x64system
submitted
18-04-2024 19:41

Sharing

Reason

Machine shutdown: "{\"level\":\"info\",\"time\":\"2024-04-18T19:59:06Z\",\"message\":\"Dirty snapshot: /var/lib/sandbox/hatchvm/win10-20240319-en/instance_8-dirty.qcow2\"}"

Report Analysis Logs

General

Target

http://Google.com

Score

10^/10

badrabbit fantom mimikatz evasion ransomware

Malware Config

Extracted

Path

C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox fantomd12@yandex.ru or fantom12@techemail.com </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>X6TJcS0/I1+HlQv1j9jpKUzfLP+1VBhh8h/vZVDmwUaoTlZ7ugKS571rMgm8Kw1Zpeh1zseXbDXaa8c1KewCECE7fUDwOnwtRN5uHkgMdnaeOR4LFrQip37JJ+YMpAqG2PEhHm9QhcITy0xBGH8s7wD5Yuv+T0jx64zFBU8Q5R8ZY2RfUtxUgxJq0elxbHI7k7/hHzDhMFPaZYDeVFsdlal4/LP42l7jPzQ7mkbZobXaYHJRbuhEBW6/yi25idpdOivx2fplwX39O2WmS4iJfe8/PEDUyEch8q6X6zfQJqLXCoRh1XutOdvW8+2FHqZciBOryj+W1g6Aefjs0PCX5w==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

fantomd12@yandex.ru

fantom12@techemail.com

Extracted

Path

F:\Readme.txt

Ransom Note

Oops! Your files have been encrypted. If you see this text, your files are no longer accessible. You might have been looking for a way to recover your files. Don't waste your time. No one will be able to recover them without our decryption service. We guarantee that you can recover all your files safely. All you need to do is submit the payment and get the decryption password. Visit our web service at caforssztxqzf2nm.onion Your personal installation key#2: ZgCbRQCfPuLpzodVk9y0IxKI3zlNZXr+27hNiIdnkDtBPL3FDAbktJHXkmWBZOaV PHgP1GxideIpdOm8I5R6alHLNP8kzJdT0hSn4p2+rRtMs5GvPCCKT1dQcF6D72Qb /c0l6Wu6MmPHWQqtrteiy/aiAlTCvArEOSsBGFKuwah8leyw2w2lv32piF8hMw03 5Ws/v43jGC75yJBMNISOEyMu1XaZTPO8LIOa7ep3NCkNqXjLXBdn2Qc0jVkv49wR MqWj7jOjW6yRMoA3Vj5UlNGFoB79vInIjc5Q53ia8YkfAHSJbk+6ZOUwIKR7rFQD 3yq2aSSnA5fObNp/BEn94ParZUabKM5k1Q==

URLs

http://caforssztxqzf2nm.onion

Signatures

BadRabbit
Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.
ransomware badrabbit
Deletes NTFS Change Journal 2 TTPs 1 IoCs
The USN change journal is a persistent log of all changes made to local files used by Windows Server systems.
ransomware

Inhibit System Recovery
T1490

Data Destruction
T1485

Processes:

fsutil.exe

pid process

1872 fsutil.exe
Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Mimikatz
mimikatz is an open source tool to dump credentials on Windows.
mimikatz
Clears Windows event logs 1 TTPs 4 IoCs
evasion ransomware

Indicator Removal
T1070

Processes:

wevtutil.exewevtutil.exewevtutil.exewevtutil.exe

pid process

2456 wevtutil.exe
4384 wevtutil.exe
1640 wevtutil.exe
864 wevtutil.exe
Deletes shadow copies 2 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490
Renames multiple (4624) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

pid	process
1872	fsutil.exe

pid	process
2456	wevtutil.exe
4384	wevtutil.exe
1640	wevtutil.exe
864	wevtutil.exe

mimikatz is an open source tool to dump credentials on Windows 1 IoCs

Processes:

resource	yara_rule
C:\Windows\AC05.tmp	mimikatz

Blocklisted process makes network request 24 IoCs

Processes:

rundll32.exe

flow	pid	process
474	4424	rundll32.exe
527	4424	rundll32.exe
569	4424	rundll32.exe
612	4424	rundll32.exe
643	4424	rundll32.exe
669	4424	rundll32.exe
707	4424	rundll32.exe
750	4424	rundll32.exe
791	4424	rundll32.exe
822	4424	rundll32.exe
847	4424	rundll32.exe
886	4424	rundll32.exe
926	4424	rundll32.exe
965	4424	rundll32.exe
987	4424	rundll32.exe
1023	4424	rundll32.exe
1064	4424	rundll32.exe
1105	4424	rundll32.exe
1138	4424	rundll32.exe
1163	4424	rundll32.exe
1202	4424	rundll32.exe
1244	4424	rundll32.exe
1286	4424	rundll32.exe
1318	4424	rundll32.exe

Disables Task Manager via registry modification
evasion

Drops file in Drivers directory 21 IoCs

Processes:

Fantom.exe

description	ioc	process
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\uk-UA\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Drops startup file 2 IoCs

Processes:

Fantom.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Executes dropped EXE 2 IoCs

Processes:

AC05.tmpWindowsUpdate.exe

pid process

4064 AC05.tmp
4948 WindowsUpdate.exe
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs

Web Service
T1102

Processes:

flow ioc

76 camo.githubusercontent.com
77 camo.githubusercontent.com
105 raw.githubusercontent.com
106 raw.githubusercontent.com

pid	process
4064	AC05.tmp
4948	WindowsUpdate.exe

flow	ioc
76	camo.githubusercontent.com
77	camo.githubusercontent.com
105	raw.githubusercontent.com
106	raw.githubusercontent.com

Drops file in System32 directory 64 IoCs

Processes:

Fantom.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\mlx4_bus.inf_amd64_bfb4ade6fe41e3be\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\pci.inf_amd64_4cf9a878972c8fa1\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prndlclf.inf_amd64_efe1d550b7437499\dlclfhb1-pipelineconfig.xml	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms007.inf_amd64_445baef28ad35ddf\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fdc.inf_amd64_f74caef313011915\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\perceptionsimulationsixdof.inf_amd64_fc67a67e8930635c\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms004.inf_amd64_dba78ebc7424d3f1\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wiadl003.inf_amd64_270cdcdfc5490e06\amd64\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Schemas\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ScriptResource\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\de-DE\lpeula.rtf	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdcm6.inf_amd64_94e8046a28a1d7ea\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms007.inf_amd64_445baef28ad35ddf\Amd64\MSPWGR.xml	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsun2.inf_amd64_9723ffe3863a921b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsuprv.inf_amd64_c2e1b9e4124ec014\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\storufs.inf_amd64_f25a0ad42f53c0f2\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Speech_OneCore\Common\tokens.xml	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnhpcl3.inf_amd64_0e666fb8f1b0545e\amd64\hppcl6usbext.js	Fantom.exe
File created	C:\Windows\SysWOW64\it-IT\Licenses\OEM\Professional\license.rtf	Fantom.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0006\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\InstallShield\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAny\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\wbem\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetSecurity\it\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmaiwat.inf_amd64_e4992c1693234ea0\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\SessionConfig\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\migration\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\Printing_Admin_Scripts\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpn1.inf_amd64_671c7ec1ddd015a3\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\wbem\en\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_de4c68ea4fb1be53\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_mcx.inf_amd64_d55fbf7f66f0bdca\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\iai2c.inf_amd64_013689585024c72b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnkycl1.inf_amd64_d830c6577c8a2c44\kyw8-kpsl-mono-pipelineconfig.xml	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\ScheduledTasks\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fssecurityenhancer.inf_amd64_b7b08788ee5d8e0a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_media.inf_amd64_60835d5419f6be93\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prngeclv.inf_amd64_5626f47f96e3c55b\GE-XPS-pipelineconfig.xml	Fantom.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\001d\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\uk-UA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\InstallShield\setupdir\000e\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ehstorpwddrv.inf_amd64_2b49863122e4e6a7\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netimm.inf_amd64_8b2087393aaef952\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\rtwlanu_oldic.inf_amd64_64dc8ea3097dbbbf\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\CimCmdlets\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsencryption.inf_amd64_a35fdec8f5f7482c\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fscompression.inf_amd64_f9067563d26edc64\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\Professional\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl002.inf_amd64_99e8f93d71530da4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl006.inf_amd64_dcae7410e66d3b79\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmetri.inf_amd64_998d032450dfea33\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ndisvirtualbus.inf_amd64_311b5482b2fc4ccc\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\uk-UA\Licenses\Volume\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd6.inf_amd64_f1f31a7425e73d57\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms011.inf_amd64_3aa7e4fc9c545305\Amd64\MSAppMon-pipelineconfig.xml	Fantom.exe
File created	C:\Windows\SysWOW64\RasToast\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vdrvroot.inf_amd64_bf07d1948babd2cd\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

Fantom.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3971934951-2222591486-1444465656-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\2d5s8g4ed.jpg"	Fantom.exe

Drops file in Program Files directory 64 IoCs

Processes:

Fantom.exe

description	ioc	process
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\movie.png	Fantom.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailWideTile.scale-100.png	Fantom.exe
File opened for modification	C:\Program Files\7-Zip\Lang\zh-cn.txt	Fantom.exe
File created	C:\Program Files\Common Files\System\ado\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Templates\1033\WidescreenPresentation.potx	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\DailyChallenges\SmallTripeaksTile.jpg	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-60.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\SmallTile.scale-200_contrast-white.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-256_altform-unplated.png	Fantom.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\ClientVolumeLicense_eula.txt	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\sl-si\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\sk-sk\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\6449_72x72x32.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\skype.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\RTL\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\SmallTile.scale-100.png	Fantom.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\deploy\splash@2x.gif	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\31.jpg	Fantom.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailMediumTile.scale-150.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\sl-si\ui-strings.js	Fantom.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxMailBadge.scale-400.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\plugin.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\pl-pl\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\es-es\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_close_h.png	Fantom.exe
File created	C:\Program Files (x86)\Common Files\Adobe\ARM\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedLargeTile.scale-100.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\tf_60x42.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-48.png	Fantom.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Examples\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000042\assets\assets\images\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\Assets\starttile.dualsim1.surprise.scale-200.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreAppList.targetsize-80.png	Fantom.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\DESIGNER\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-48_altform-unplated.png	Fantom.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxSmallTile.scale-150.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-fr\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\da-dk\ui-strings.js	Fantom.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraLargeTile.contrast-white_scale-200.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\microsoft.system.package.metadata\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\back-arrow-disabled.svg	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\jscripts\winrthost.js	Fantom.exe
File opened for modification	C:\Program Files\InitializeDeny.ppsx	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\Workflow\Icon_Finish.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\W2.png	Fantom.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\7205_20x20x32.png	Fantom.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bn.pak	Fantom.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange Red.xml	Fantom.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6767_32x32x32.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\196.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\A12_Spinner_2x.gif	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\premium_background_icon.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\TimerWideTile.scale-200.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-black\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\SmallTile.scale-200.png	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files-select\js\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-256_altform-unplated_contrast-white.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\fo_16x11.png	Fantom.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Car\RTL\contrast-black\WideTile.scale-125.png	Fantom.exe
File created	C:\Program Files\Java\jdk-1.8\bin\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ro-ro\ui-strings.js	Fantom.exe

Drops file in Windows directory 64 IoCs

Processes:

Fantom.exe

description	ioc	process
File created	C:\Windows\WinSxS\amd64_netfx4-installroles_sql_b03f5f7f11d50a3a_4.0.15552.17062_none_92a301666dd13113\InstallRoles.sql	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-w..d-line-utility-base_31bf3856ad364e35_10.0.15063.0_none_1edfa85afc2fe003\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\msil_mmcex.resources_31bf3856ad364e35_10.0.15063.0_es-es_361d53017fe41b22\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-i..tbranding.resources_31bf3856ad364e35_11.0.15063.0_it-it_6bd03b1fbcb6231e\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\6.png	Fantom.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.I0cd65b90#\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.5\de\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SystemApps\ParentalControls_cw5n1h2txyewy\microsoft.system.package.metadata\Autogen\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.15063.0_fr-fr_a0c98c5fc8429f69\http_500.htm	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-x..nrollment.resources_31bf3856ad364e35_10.0.15063.0_de-de_b5a9a5930b9c86d9\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_ja_b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-30_altform-unplated_contrast-black.png	Fantom.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallCommon.sql	Fantom.exe
File created	C:\Windows\WinSxS\amd64_dual_c_sslaccel.inf_31bf3856ad364e35_10.0.15063.0_none_0ab326b5b666bbf8\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_netfx35linq-system.addin.contract_31bf3856ad364e35_10.0.15063.0_none_dcf05af4bdb4a358\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\diagnostics\system\Bluetooth\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..snapindll.resources_31bf3856ad364e35_10.0.15063.0_it-it_99ec1061a76c5341\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\msil_system.text.encoding.extensions_b03f5f7f11d50a3a_4.0.14917.0_none_c77d5f1fb204e5c8\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-t..-mscandui.resources_31bf3856ad364e35_10.0.15063.0_es-es_d0661d976b1379d4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\GAC_MSIL\microsoft.transactions.bridge.dtc.resources\3.0.0.0_fr_b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-96_contrast-black.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-findstr.resources_31bf3856ad364e35_10.0.15063.0_ja-jp_5ff8f7acf51bb797\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraSplashScreen.contrast-black_scale-100.png	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PeopleSmallTile.scale-100.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-msdt.resources_31bf3856ad364e35_10.0.15063.0_ja-jp_7a429ce6fbaf5ba9\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_prnfxcl2.inf_31bf3856ad364e35_10.0.15063.0_none_e92a895ebb3ab394\fxpclbw-pipelineconfig.xml	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\toast.dualsim1.scale-150.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..ruetype-comicsansms_31bf3856ad364e35_10.0.15063.0_none_ed68fcfc73314d2d\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..repairbde.resources_31bf3856ad364e35_10.0.15063.0_fr-fr_2ca69c004d98bcfd\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Classic\classic_13h.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_netfx4-_dataoraclec.._shared12_neutral_h_b03f5f7f11d50a3a_4.0.14917.0_none_544360eea6679c6a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-notepad.resources_31bf3856ad364e35_10.0.15063.0_ja-jp_01ab5dfe0cb16722\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-wlangpclient.resources_31bf3856ad364e35_10.0.15063.0_es-es_8c039942e0039ca0\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tiles\shadow.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..speech.0804.cortana_31bf3856ad364e35_10.0.15063.0_none_1a500a9bd410552c\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-snmp-mgmt-api_31bf3856ad364e35_10.0.15063.0_none_fca038aaec55eb4b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_netfx4clientcorecomp.resources_31bf3856ad364e35_10.0.14917.0_es-es_995c2a1769c989dd\SqlPersistenceProviderSchema.sql	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-iologgingdll.resources_31bf3856ad364e35_10.0.15063.0_de-de_5d2e31a32382d0c3\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Arkadium.Win10.Xaml.Toolkit\Assets\Buttons\Menu\Menu_black-up.png	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\snooze.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_netfx-mscorld_dll_b03f5f7f11d50a3a_10.0.15063.0_none_34826f53d197e391\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\msil_microsoft.build.resources_b03f5f7f11d50a3a_4.0.14917.0_it-it_840a3fcc3c312183\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Office.Interop.SmartTag\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\Assets\AppTile.xml	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..ification.resources_31bf3856ad364e35_10.0.15063.0_it-it_3c2d14c0eeec69b3\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe\Assets\Office\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-w..ctionflow.resources_31bf3856ad364e35_10.0.15063.0_ja-jp_f6f3bef5f3bb52e5\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-oleaccrc.resources_31bf3856ad364e35_10.0.15063.0_en-us_116c9a532f58fd53\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SystemApps\Microsoft.PPIProjection_cw5n1h2txyewy\microsoft.system.package.metadata\Autogen\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-client-li..m-service.resources_31bf3856ad364e35_10.0.15063.0_fr-fr_f5e67079153cbce7\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\msil_system.web.extensions.design.resources_31bf3856ad364e35_4.0.14917.0_fr-fr_512cf3177344698e\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\INF\ServiceModelEndpoint 3.0.0.0\0407\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5664_40x40x32.png	Fantom.exe
File created	C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Assets\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..rammar.0410.cortana_31bf3856ad364e35_10.0.15063.0_none_797806379eafe12a\ReactiveAgentsCommonRes.0410.bin.gz	Fantom.exe
File created	C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Jumbo\mask\1c.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-icm-ui.resources_31bf3856ad364e35_10.0.15063.0_ja-jp_7c76809697c540ff\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-iis-aspbinaries_31bf3856ad364e35_10.0.15063.0_none_9d982780a0438195\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..nlevelmanifests-net_31bf3856ad364e35_10.0.15063.0_none_931f9badf150bff3\PeerToPeerPNRP-DL.man	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.15063.0_it-it_b3446171d6b6f90b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-f..utilitylibrariesext_31bf3856ad364e35_10.0.15063.0_none_25f920db27c01551\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_netfx4-aspnet_webadmin_images_b03f5f7f11d50a3a_4.0.14917.0_none_93672888b2310fc6\HelpIcon_solid.gif	Fantom.exe
File created	C:\Windows\WinSxS\x86_wcf-m_svc_mod_op_perf_c_vrg_31bf3856ad364e35_10.0.15063.0_none_7dee54e4ac37c939\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Creates scheduled task(s) 1 TTPs 2 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
persistence

Scheduled Task/Job
T1053

Processes:

schtasks.exeschtasks.exe

pid process

4708 schtasks.exe
444 schtasks.exe

pid	process
4708	schtasks.exe
444	schtasks.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Interacts with shadow copies 2 TTPs 1 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Processes:

vssadmin.exe

pid process

2200 vssadmin.exe

pid	process
2200	vssadmin.exe

Modifies data under HKEY_USERS 17 IoCs

Processes:

LogonUI.exechrome.exe

description	ioc	process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133579429079969779"	chrome.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe

Modifies registry class 2 IoCs

Processes:

Fantom.exechrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3971934951-2222591486-1444465656-1000_Classes\Local Settings	Fantom.exe
Key created	\REGISTRY\USER\S-1-5-21-3971934951-2222591486-1444465656-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

Processes:

chrome.exechrome.exerundll32.exeAC05.tmpFantom.exe

pid	process
2420	chrome.exe
2420	chrome.exe
4476	chrome.exe
4476	chrome.exe
4424	rundll32.exe
4424	rundll32.exe
4424	rundll32.exe
4424	rundll32.exe
4064	AC05.tmp
4064	AC05.tmp
4064	AC05.tmp
4064	AC05.tmp
4064	AC05.tmp
4064	AC05.tmp
1376	Fantom.exe
1376	Fantom.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

Processes:

chrome.exe

pid process

2420 chrome.exe
2420 chrome.exe
2420 chrome.exe
2420 chrome.exe
2420 chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe
Token: SeShutdownPrivilege	2420	chrome.exe
Token: SeCreatePagefilePrivilege	2420	chrome.exe

Suspicious use of FindShellTrayWindow 63 IoCs

Processes:

chrome.exe

pid	process
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

Processes:

chrome.exe

pid	process
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe
2420	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

LogonUI.exe

pid process

2348 LogonUI.exe

pid	process
2348	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 2420 wrote to memory of 1656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 1768	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4692	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4692	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe
PID 2420 wrote to memory of 4656	2420	chrome.exe	chrome.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Google.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2420

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb3c449758,0x7ffb3c449768,0x7ffb3c449778
2⤵
PID:1656

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1524 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:2
2⤵
PID:1768

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1788 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:4692

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2096 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:4656

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2584 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:1
2⤵
PID:3376

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2592 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:1
2⤵
PID:5036

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4340 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:1
2⤵
PID:4064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4524 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:928

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4524 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:3452

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5116 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:1
2⤵
PID:4464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4936 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:1
2⤵
PID:1000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4268 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:5048

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4452 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:3776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3064 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:2728

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5252 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4476

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5132 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:2312

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4392 --field-trial-handle=1820,i,3738426487778156663,3582330573306835226,131072 /prefetch:8
2⤵
PID:4312

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3188

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:716

C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\Endermanch@BadRabbit.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\Endermanch@BadRabbit.exe"
1⤵
PID:4728

C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\rundll32.exe C:\Windows\infpub.dat,#1 15
2⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
PID:4424

C:\Windows\SysWOW64\cmd.exe
/c schtasks /Delete /F /TN rhaegal
3⤵
PID:2432

C:\Windows\SysWOW64\schtasks.exe
schtasks /Delete /F /TN rhaegal
4⤵
PID:164

C:\Windows\SysWOW64\cmd.exe
/c schtasks /Create /RU SYSTEM /SC ONSTART /TN rhaegal /TR "C:\Windows\system32\cmd.exe /C Start \"\" \"C:\Windows\dispci.exe\" -id 4561664 && exit"
3⤵
PID:3936

C:\Windows\SysWOW64\schtasks.exe
schtasks /Create /RU SYSTEM /SC ONSTART /TN rhaegal /TR "C:\Windows\system32\cmd.exe /C Start \"\" \"C:\Windows\dispci.exe\" -id 4561664 && exit"
4⤵
- Creates scheduled task(s)
PID:4708

C:\Windows\SysWOW64\cmd.exe
/c schtasks /Create /SC once /TN drogon /RU SYSTEM /TR "C:\Windows\system32\shutdown.exe /r /t 0 /f" /ST 20:01:00
3⤵
PID:2012

C:\Windows\SysWOW64\schtasks.exe
schtasks /Create /SC once /TN drogon /RU SYSTEM /TR "C:\Windows\system32\shutdown.exe /r /t 0 /f" /ST 20:01:00
4⤵
- Creates scheduled task(s)
PID:444

C:\Windows\AC05.tmp
"C:\Windows\AC05.tmp" \\.\pipe\{17844017-FF24-4175-A838-7EE406C4A9C9}
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:4064

C:\Windows\SysWOW64\cmd.exe
/c wevtutil cl Setup & wevtutil cl System & wevtutil cl Security & wevtutil cl Application & fsutil usn deletejournal /D C:
3⤵
PID:2484

C:\Windows\SysWOW64\wevtutil.exe
wevtutil cl Setup
4⤵
- Clears Windows event logs
PID:1640

C:\Windows\SysWOW64\wevtutil.exe
wevtutil cl System
4⤵
- Clears Windows event logs
PID:864

C:\Windows\SysWOW64\wevtutil.exe
wevtutil cl Security
4⤵
- Clears Windows event logs
PID:2456

C:\Windows\SysWOW64\wevtutil.exe
wevtutil cl Application
4⤵
- Clears Windows event logs
PID:4384

C:\Windows\SysWOW64\fsutil.exe
fsutil usn deletejournal /D C:
4⤵
- Deletes NTFS Change Journal
PID:1872

C:\Windows\SysWOW64\cmd.exe
/c schtasks /Delete /F /TN drogon
3⤵
PID:2164

C:\Windows\SysWOW64\schtasks.exe
schtasks /Delete /F /TN drogon
4⤵
PID:4148

C:\Users\Admin\AppData\Local\Temp\Temp1_Fantom.zip\Fantom.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_Fantom.zip\Fantom.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Drops file in System32 directory
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:1376

C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
"C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
2⤵
- Executes dropped EXE
PID:4948

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Roaming\delback.bat"
2⤵
PID:3776

C:\Windows\SysWOW64\vssadmin.exe
vssadmin delete shadows /all /quiet
3⤵
- Interacts with shadow copies
PID:2200

C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Windows\System32\update0.bat" "
2⤵
PID:4964

C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Windows\System32\update.bat" "
2⤵
PID:2100

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
PID:2312

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0 /state0:0xa3ae5055 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:2348

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
1⤵
PID:3596

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

T1053

Persistence

Scheduled Task/Job

T1053

Privilege Escalation

Scheduled Task/Job

T1053

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

T1102

Impact

Inhibit System Recovery

T1490

Data Destruction

T1485

Defacement

T1491

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_200_percent.pak
Filesize
16B

MD5
2abd92b24dafedf78c378cf2c0300ea6

SHA1
63326c426199ac2b0f2ec6d93f24b3bbe43e18aa

SHA256
f4ee69e4737df1c82ca5cee5991ae712e2b69e64a0fe8203bc5299b84f110d58

SHA512
335d1da3d0bdea24f5d30955e99953cfb6c469219ed5a8533da9127a0e203379564d8f065744329d2d7ac9a96a9b4b48fec2b431a0eb967a12ecccc594a984ca

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Filesize
50KB

MD5
0b6ae6220264baade8bcf675ba11d9cb

SHA1
f53dbbd8e8e90912029f0974afd82bb32a455fc1

SHA256
7629ba03badd947096d9dde17af5ff92602c821fe938ad98b2626cd64ffc1814

SHA512
45e0bc7de1ee21b3c3cf49c99d33324b5c4763bccd0d4724f19585752277f4be897ec2a997195657158e62b8cee6876d684c10d9cab4b0571471c98c8ba35e2c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
Filesize
1KB

MD5
1732a9a0314a300ee123559d5b79e07a

SHA1
5b884aac9428ce60af130f8323ab329266c203c0

SHA256
0d3d7fe9e8357ed412416d9ff5bd97566439ba4b8e5a116d00f8a090b64e290a

SHA512
ba07271160816ec034381d69cb2c60a17e04808a5f90a62201b04d00df6bfa3b71286208047bdb4696bbcaf949f8f11d660c9f7a8ec837225310a18a5855d191

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
Filesize
3KB

MD5
d90e5a294a238c218bb112a8ebc78ac9

SHA1
7af3c3ed88ada2fff70eb7205ef10c3004afb060

SHA256
777d5cba376c845f2ef87b418d350bd1a578d1d2d91a517eca991a30428f6e34

SHA512
7c66c52e1d7b3ab36e39f8a982b072594a59f2b530d54aba48783148ec2c06bacec75cb1aacaacc113d7811566800c33a9e2e2812b433f70de6d06147718ab4a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
Filesize
720B

MD5
97c28e87bfb0885639f103d261771662

SHA1
e527d902a50f8775746c0fb32de5a3eb082c0064

SHA256
2d0e6a845b465f4e1e850d90ba4dadd3a04e8ed2e208573a6a06822e2f3d9689

SHA512
d0521f16b716d4d6ef7d2615c2bb3fa04c68497a4e7ad7364376be8b302cfb7510660d734b609690962c85180023dd23806082dd88ef1d472ddf89f139fcfe1e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
Filesize
1KB

MD5
321d4026ca10ff2601dba577847d89c6

SHA1
c8c6b490687ef0466cd884a3b3ad4b95f052eaf4

SHA256
756c7337b0693efb9b29d7e1f9a1a82dda1d0184c7862b4f7a9c980ac8983d1b

SHA512
b014bc30c648a2556ee9f8c0f67ae0dfb94f17a64fe1b2392c7969aba99fdcf43dd4b37844a8e3db15f5ed7b1000d1a984331a1c5621a0f501237c3b2b2976bd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
Filesize
1KB

MD5
e188ccacc3a73243507ad9b1ff593480

SHA1
58d9b8b58e80edbb69f5681f729db2e748e04460

SHA256
6c84b0985aa30d8d35221b6e42735c0506f4698486e70b5e6ea420a9684c0d07

SHA512
5a4cb5ba94fe577cd6fe1ae3f04eda78d7148c6f6ade33b4c7db86a201dfbc8fdfaaa28ecb5169e72c63f8143d3674d749f2076af2dddc570ec0d6dc8f64c16c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg
Filesize
896B

MD5
e0d0d3c892162efec88ddf679dffed03

SHA1
7dcb8757909476808d75c53917e9934f067bd5e8

SHA256
492b9e4ba44f82465bc702fe124d54c989bfe606cb46e3e06707044844390a97

SHA512
953d1c100e6563e31e0e43d294dae99a7fc7c1c52bae1083053991571016d219ad654dea55ac3ef384dcf0babaface11baf1ac9c36331480b090b90821574c91

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
Filesize
1KB

MD5
6d0f26d240a02626c1fd020c1c3a6cf5

SHA1
b17931f21d5af47be0c87775abdddb099d2cbeaf

SHA256
1bc693353c61cc9ee245ff204dae1cced394d26dc17ad33e1db177aed788463c

SHA512
ee63179a0df82ccf7628e352f9175054cb7f62dfc51d51cfc426198d33c4c86ebf1cb03f3eb51f2b4bab0414c467b4911d5319bac24e2bab554f93354da07605

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg
Filesize
1KB

MD5
fbcf2918c93985e4fc25dc3433d96509

SHA1
3d3090d9fc76dd223e471970f2b3b43c845573d7

SHA256
069a92208b9316fddaf303676693c617dcf6b3cd08834d15bd0819741719c100

SHA512
4da1dcb296c9fb9a84c61b907c049a06173e80ab67759b7842ebaac07b060f5d7ea1f90e494f0145c630cc152be307ba138c68d091359f99b1128043a7982704

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg
Filesize
7KB

MD5
07ff596afecc9b6ba28ace08007674cc

SHA1
45e7ed83452eb3fa2a9ef6ee80a493d7e9d7336b

SHA256
ac05e31eaff1bf987625dc1261cc02b0b9890e92cbb01b046ef8d55295ddbcfe

SHA512
5276faf08353bdc732ebd4e132c092e00535b279bfea875ed9ff937f45c16d2adf712038768c7391cc2dbc98e3138c0e59ec39a3224267dc6013ce2ab2f7048f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg
Filesize
2KB

MD5
add1910d7bdf1e492e636ec3b15d6988

SHA1
8497b089e90cc3e96119dea29abb0aa669c4b3f6

SHA256
f3a64ca71472810226c6a79593fc0054a3910fdc83af276fa56ebac7cfdade08

SHA512
bb78f4c3ea28b0dd7a91898e86a156d6d6650f66eb947a74652ec209431ee1401a47c389114de816687e6663b5e8e929bb3d9b4e393a2ffccd16cd7d6b4abe93

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
Filesize
560B

MD5
b9bc81b0a73270682133f9b6b3e28f31

SHA1
71c6a7b2d4ad88830289a5b37f7bef3e82695a86

SHA256
f11ead035f249358b731658cb3bd2601400440596fde10f48e6ecc87d53b2a8f

SHA512
8e7e71f283d95cea0cfe79449aec0810a8bc2380a852db4d70c06528ebefba516fc7115c8499f9c8708f61309b7afc738eb9fa1f23cc2250e8ab507a560fa7ad

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg
Filesize
1KB

MD5
88d5c8e54348f2bdaa2cd69217cbdf60

SHA1
8b30558dac9afce81bf9e5dc7948c68baa3cf908

SHA256
a018a963011eb1c170300074d7a6d575c9edc9a4c160834a421c6cb2da9e2628

SHA512
6dce2c311179b625fbcb3065aa31989ba1d9aa5926bec9ccab6de14d0744b8030df090cc6cebf2c0482de0d5af7923075121aaaf78074da94a2c67532d8d0f47

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg
Filesize
880B

MD5
4eb9973b19cf4a0814ca18c272040cff

SHA1
b7b60993447abfedd7aafc38488ededd9a123fc6

SHA256
67856329bf0ccd6f337169913848b74246e03f336ec9605c6491a10d01d38da3

SHA512
78cd109b5206930591377864f2495df718b4a89c5167c2528efaff56342473df05bc00310c66d5b873c2f7e6f82b50371e36547d2fde6d02ff381c1d6172f12b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg
Filesize
1KB

MD5
d9d177425e62542fe616b549adddd5d0

SHA1
b801adc7da19f237f921a9c48408abd973e22636

SHA256
19081847be00432ae08853562e254e3a37dee44e2f8fc389fde707cc25936c52

SHA512
facf2c34fbe8ce2c8c516f1462a8de609c3fe30f641e7685a594920d0d934b8d61a31ad3ccc8930eeb7585f97c97a5e238d4788ed03e20959ff04197fb001a76

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg
Filesize
1KB

MD5
a7188e9ced31d637955cfc2ce65fd122

SHA1
c34d6591c7eae0dbe44963bc2aa35d9ae59b429e

SHA256
744f07a00650667dafe4795f186769187fcd641e51f45893e844baa7c6e7a308

SHA512
ab9ee2168e97ed4d25ae1d82c9a6c663d51b99460455ce302d4ee3f474e24ac7686c8135ad81f4446e92578d20f10a18467ce7da573f01b3723e47f2c499aaf2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
Filesize
2KB

MD5
83bd7adcd8582be85c2fe45f26202589

SHA1
2aa4620e95940a3030ade09b805b218fd33cff49

SHA256
9afac7ee915ab2e9baa62e01e9026a919a397737d8ead064d807011db21a0093

SHA512
6c39fae4b3c163e338b653f9060773ae70ccfc6e6afd2b103de55d192df588afd368cf6fd57586948e8d45f6700caa29c42bd20dd012cbfc77eded4726c7515b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
Filesize
1KB

MD5
965f0bc55641582665ed291dfee6730a

SHA1
1af3ff3db553bb8b334f909949d802e56c653616

SHA256
44b7cc14d83b63bb680096854cd3be55b473ed4b7e2f3f16325834be996dbd87

SHA512
c2ba87b1d0724fb90fd66cb071ed7d1407d75161b7f1b72a891d98966b2d58cb49156e8ac20e4c7f6ce224d0922387fcc96b6812e0a0a4a2167059b816271197

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
Filesize
3KB

MD5
d13de1dc7ab038df090df14aa686b8c9

SHA1
a64d79d2d91fc91e6b04d0fb2ed76d148f6cd0a3

SHA256
7ea0fd3d4cd6dd24f95e80b45a19bfe051d4edd31b8b6b7d36e158ce6788275f

SHA512
09148d63daf9b9d4f686fa2ce11c56356c6de1e94d80d5da9d50540f2c2c4994662e4ee149be42991e655f5626793578d63739666ccd0494212395762f551a00

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
Filesize
28KB

MD5
b8965973179899ada1a7b79ba60302c2

SHA1
a774864c78a2521f1be6e09d828b188e99fd8a5a

SHA256
0fb7215dbd6f2b74c39265257a9a0dd204144b9a1e40c7ddd6b5a376df0e5082

SHA512
43f9651e9bee4111b9da55b24c001e807483ea871b12432ea90e1ca7a0d7f986e6d1adb56e51a882d1047d37bd146e703ca02b60313e8f371cfbca03188e7b8e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
Filesize
7KB

MD5
4d9d3ab6588b52bee8d853e62eee75a4

SHA1
243a8be3b5e063730ccb8bb57ba5a32497640ce7

SHA256
d548b0abb9314f24655d89acbddfbda3d07dbae2d5f9e46e5081715e9bd687df

SHA512
d6324b36a7c5d6bf292f433550b1267bbcff64d747525b4bddd2d36b3459367ab8a422531eff1c8fea2606f1aebf4737395f7ab86e34fb12a3cbfb367c0fb200

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
Filesize
896B

MD5
86222d2800c1036609330f8a459ab090

SHA1
1c111c734bb461a33098c0e0a1b595b08d580d06

SHA256
7db76c1dde67b01b6bf641a357bf771a7f5010c3680ae5d3edcea86ad51698e6

SHA512
04d8a72f004e16736117d2fe73f1d55fad0ce1d1d1940932cac419a315d495b28f83552e8f9658a17cdf298b48d8c29933a7d471d6d666e541c3a0bd1dfa7f69

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
Filesize
4KB

MD5
384b462300f57343cf43841f83a5793f

SHA1
baaa6ebe615494cf8fa79fbc613cc065e92cef11

SHA256
48454a598418fb03315d7a27b91ac69aaf6d171d25fd37f9c094c6181dcd5286

SHA512
e32a2cea3da320d4beb4b3026f54017e9c8a1092b65a1874d2ad7989f6e2af4dae5a7f389927282831c52190d0d614ea1534075fa3674db4059412b8d677cb54

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
Filesize
1KB

MD5
8fbeaef62dec59658f6c1045288ec613

SHA1
09d69500621c1c4654f6c77153d147e248dcd8fa

SHA256
6668830e67a95155ce38f436c9d7d10a6f25fee2bb7c4d8a7e46a2644f21cb01

SHA512
90ac5bd6cf72663dfec2f169dd89d595e2213d61d199d0e9164264ab76336a1e8684c133238bcbe47ddc4dac71212bf492d090d8e5ccc888b02b036ac6045b33

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
Filesize
175KB

MD5
028a8405a01e2294ed8b8a8606cceeaf

SHA1
b6ba60d7672bd2f98e14b944165abf2a33d081f5

SHA256
1c0342bc2e7b74432211f3ecfe98dc682ff3e1b3bc1b711c5d0c2e5c5f1a7fea

SHA512
e3d8fb03fca2c5f1927086d0f1dddda489e46326ec0eee856b6d95819489ecc19cf7fee97900df2228c81d656812088d0fc15da09d969ad61bd66e2985bb6b38

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
Filesize
376KB

MD5
a66b0b17d5631e89fd896630d5eeb812

SHA1
d36c955fca5f2d398db127be71dc98ba885a9dea

SHA256
c1e881210a592378d97dfc20e49743d7391c21cf4303f28f4fa04cb09242f23f

SHA512
54b2c43326a94147e1be7369f5d584ec3ecac99fdb89527943498f00b34fb02069b24e85627378673aed81e2116cea75ffe26571efa904b1f2bd142b3c0478de

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
Filesize
2KB

MD5
1cff3eefc3e8a190d67ed6f8fed389b5

SHA1
0a7b28cc138bc1270c7e8b75c35d6c7511c73f01

SHA256
4b4865d2b35977c09bd3da8671df8424d516fb34d76a3ddfa5bf2e45724ce371

SHA512
d164035d44ba09b7dbbc2901da5c7ade88517094790a9122fabf97684c237fa5bf03de2c73c2a0d19fea04e8adbb5beaff865f34f60195095316e39613491384

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Filesize
1KB

MD5
96a4d05d3116e07b910360e536d3f641

SHA1
eccd2ff7f28b68f93ceab51efba0bc6f08691871

SHA256
c70d959b6572ff9634c429fc1924d6e24b6e16419ed646597805af4cae29d516

SHA512
41ae7ccfd4b9d0bbcaf9ffb4b245e563f6ae2fb17a8992043277c9714392ecc83d16640818d4fc63456a82fbd26e3e8f5fa9a85b41ee6af18346dc5dd7583537

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Filesize
688B

MD5
9e9a247e5dcd3622e915dcf58c19052a

SHA1
96c5d8fd52ad84052a65083cf4164c24a0a87689

SHA256
abefa144d6bc84cae20e8debe1c95db290449661805d4bad42ba0ce1e268bd90

SHA512
165083ef5dac669cad37a00058235f560a140935729ae1a4036989a63819469c5c84a6154d678a4ea87ce34767354469240a78a5ed1a1bae5146e7e4d8ef89d4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Filesize
1KB

MD5
23542147daae6998e8820322f364c5ce

SHA1
064952d9c3c4a51872077ba86a756d5411ee9b23

SHA256
112ffdfe299e5eec2dc4345890320d6b9f786e6daaa3f6c614d3c99cb4a60974

SHA512
9d43bbc4032f3fe18f58e24be9caf2bca5f089ef0b81c91f28b0c3bda52918bbfd3603ee78203ec0397ea8a38406ca8afb207289b24b6f0d17415ba11a7b92b7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Filesize
448B

MD5
c02f893acfa3c27dc9f1685c83097edb

SHA1
97642a7a89015b057f2793636a37c750f34f5179

SHA256
6d57a66d50302fdb8574154d84e8c6f97365a0542400cde4d82cf2724632c348

SHA512
0185bbd24b097bd5ac14687e861486e33347cfa8db700e1c4ff583d9092895961e7d414cb681c6fc41e87c7d36c9e68a9ac3417e291f64b85bbe78f4685d49cd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Filesize
624B

MD5
178ab75fea7d7615f9027a8ac4b80ae7

SHA1
da2c947c589d1a83f0fb090f22c22d18b9c58b79

SHA256
446de8f77411360c53a47ec1e777a3ed3a42beaef0ab4d9172df0cb63d4cef5a

SHA512
635391fc2d488102f49b136341686d52eabd32eda48ee6aacd30893f7c67144a30f7d936a61dab6cd40707bcf3b3caa4acd71bbbd7cc88f77c240b946d4d4fe3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Filesize
400B

MD5
24f820b9fc92ef0930be91fc0e2daecd

SHA1
134a892a8fe62825bca41f161042a167ab413d40

SHA256
7c291f5955beb22a1d9bf1576a6d5661caa6e0ce0bc271847498055443f70371

SHA512
d0bddd4b754c9855506e049dc36bf25d582bb5538df4d4cd5066333e290b9cb40e7466c639aaa1f1fd450ab9d6d0e798a9ea1543dd0abfec14ca00671f686ef2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Filesize
560B

MD5
7af43ee9d9857d86d6de8074af789b5e

SHA1
58886c3f26f4ce2784e5e2643966c6d38819f2e6

SHA256
40d98db40707e65a95c6952278063e504066237aa7473965342cc6a038369c30

SHA512
582e28e8b3c1ed7986fcc3233aaeb8a17952747983475d3ea08fc50ca8f8ed8c7d3ba3401ccc84751f630df0b180031773718a6b6ed645e10b2ff6a3938ea328

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Filesize
400B

MD5
1040a5f2fbce6f86e97a093b7711ad8b

SHA1
6ddded0b03773d1c7455f5bcbef1944958fe74bb

SHA256
7b589814cb52c1bc3d92ab9eafa9b43bcdf9a8db982c86cf604ca57d7de90d8d

SHA512
c572a3e9238cc3e7c35ea83749c00384127669a735c62aca036f4d4e70aa946743078c9ecb4161bc4a9349e7c2b9a5c5afff68eeb584c3b3b2c5218c7c1884cf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Filesize
560B

MD5
821d3c1e87ce45458cd65bfe64d774b6

SHA1
34ba1c5e9ba216ee4bddbf8cf81bd74fff4fe1a3

SHA256
5bdafd08de5c2db4341f293fa3321ce25fcf4d458da047b38329f54737da95c0

SHA512
90a9416f67c597e200c12581d387705ed9343862ddb3f2a31c083564e5968be11e2de59806e3a50c970b3bd6e64b363fccc5271ccfb1272bef7eb689d46a69fb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Filesize
400B

MD5
3c676e290c0f548b7a898a0382ee2193

SHA1
e7b1962d25b541cdcc05a3f1f05e5356ba32fe20

SHA256
d54c068d090a63cd85b192d3718e02278d91522e241f44b680a1deaa6c0fc1a3

SHA512
a2cb35fd324e2d792245e86d155a9b3997d9e5754ed87419c5a7b12fe127d31b34709a2805f7593843d7f99eee90674809909e28ba91d8d88ace7106adb72153

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Filesize
560B

MD5
4b85f54718814a3a7597800d2f369760

SHA1
f19cab2d996cb22afa9ca5bc1a5d4ece7701f502

SHA256
12b26c86724a4582be61c481bdc11bc9a2b0a13020367fdc4f0e55d0cb6c9d38

SHA512
fa6347ef388319d6d44e418a648af58454f019c9c3675831180c5c91dd958f84a9bfb341422c60be12e698b42348f9b1c640f5ffdfe8a52ec2fbd74000835978

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
Filesize
1KB

MD5
68183e9c2d6c03b74fe03cb6a4ddf405

SHA1
943029d20997b948517a470a92e231dca6f72158

SHA256
1550c5806749793f1b012aa9000c376e7e75f8f25cd75ecb068d6d5699d19fb8

SHA512
43bad33bf1d034f57e70bc0230abb18cd27f86ca0dde217adcbb4b7fba4835ce11b2ab4150cc281960c45385ca5fb70342330910799392aa7163de6d369d444d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Filesize
1KB

MD5
38fc4c2a24e0f86e3fa2b504f4385a20

SHA1
7e422e0f4f2551bb344e4047a9a4c89d23fdcc05

SHA256
05301054152f3bb1ada796a2acd37d13c23bfce715fca5ceffb0d67f42a68dfb

SHA512
39aba0d8abc155cbdcf5f0af747b6c72f236c897964f61516ad5df83c60e70a10860ee6e39c1994263f448801c578e1540c8ec3c762dda93a7e886fa57320529

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
Filesize
912B

MD5
ed25af5888d8f9a11667bf00af6d7770

SHA1
918dbf0647100483539327e221b12cd45b5577e1

SHA256
494ae4b5fa87d4feed5c9b96a46ae254b43a9946b29c002955089fb32fadede6

SHA512
70e37f55017757abc8cc0ede6741569f00a514dc297b29de10ccbf152fde3c5656de0bac1383d7bb70380be73eef453572ec61c0007ae2a4665c358b1d917a06

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
Filesize
1KB

MD5
9721eb513c7c5ff2da37974e085cc2a4

SHA1
4c490290c77817e4bb278aaeabf08135c9e1e768

SHA256
29630e757eb0a9bbf5f617901dcee2250a0c53d6ac5e568914de53812e894aae

SHA512
fe0abfef9d4955a240fe944288659317be7228012c28340cd15dd117cc5300e77305c4938fbcc05be34b134b1bb7c59f425830666e3dbfa96c837c318d74fd06

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
Filesize
8KB

MD5
139886c977192914062a43403286d532

SHA1
eb742ecbedecf44f3faeb05c9cb58c3db2378f32

SHA256
649ebf239e1c0a6c4906ca5690bd57fafbbe4ef8bee6c87e9fb0dd3aba6b3778

SHA512
6bacf5176350990cb762d30d295551ee2e514037ea622ac11cda3a36424d17000cb25fda6192ffc066cae5fb93588e1004d81228449aaedad58b1c226a5d4e0e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
Filesize
1KB

MD5
c43ad853be636c541cf60a9c131f56dd

SHA1
1da8c898b142b87facfe897ea2d8c9d52a85b172

SHA256
45f4c20bf81675c52e538f487154ca42cf80ecb36a9b711a75369d0d25ad1eb1

SHA512
30ab27a9753f25ae2ae5c89e76a97a94a8a6c403a3523e528d183ea70f4b730d3ca0528dc6ba58ec7d56372b2755dd6c16823f3af011cb843e5a36b6a219b24d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
Filesize
1KB

MD5
d6f4e74fbe2eb1bf7e32acf31e4d26b0

SHA1
31a4b6be05b0698b9ab879b9109d417f37d842c4

SHA256
7c059370f00cc22708b8946812697c8b9343e42da9fbed2df5807f1cda7d00bc

SHA512
a54c047fdffb936e33a246bbf5eb5c30ee07869b51906ed0585cce6e6d27f971996ecd1014a2d977d3b8691f1f5d62cde6f12ebdbcabf555df7f3e814a47b19e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Filesize
7KB

MD5
7ad37bc22bc0f9a711f432a117d5add0

SHA1
6e20df574943cc80b58476e35f98db382d806076

SHA256
208f2d1ddd21cec661490d925d07ff59d22f70e113ed57a830f74f185cef09a7

SHA512
0ce0daabd66d6d01a96fec866a979ee1406a0b92a0cca4e4449b83ebb68088619869611fb5ab8299d509f6f601d720deaeafb144ae87c37a75ec796e210e956d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Filesize
7KB

MD5
73d24e6529f11061cd53e7a2543e0e54

SHA1
33415fd2300e8875c58cae897de3582e8bc9323f

SHA256
434a6fdbc4fd33ab2d5f2b5bacd2c697b011fe0feb59a22aa08eb5ce1a6f041f

SHA512
237032c9af878a1e23b326a6b15374a02b308234cddda617c93412e98d14c33202a4be62347e783da28b9ea63c6cdb9944af114f94a8d782ef403252af16095e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Filesize
15KB

MD5
589eb5d22e8a24488192a64a8f2c7c8a

SHA1
7c61d84d972036e9f22cbaa6c82dd2bd389a9283

SHA256
cb9834c5af2fb09a688437b4fcfe68f9244e0424d47d1eb1730839acd1659cc0

SHA512
8ece90d4ebe1979df2834e0173ddd0ad197143889852b1f64a5f39fa838463bde1cb23b372b48edea32551cc9828007b13ba9454a309a13093092bb00ade9518

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Filesize
8KB

MD5
296e9c042fee20fbf7bb2c829a5a89d6

SHA1
717e68a939746867ad6530cf3b43979f7d6c8f5b

SHA256
0e66f688e15e41f69a1ec3aa044f0c4910ee78a9821e6292eeafdbac5179f3a6

SHA512
8c51f6d4bbcfd26d3884c59e22b2acc51f538aa308526d9a3668800067b37b38863d133a4c4a5601e96731c412f3deef6eff0d3274f78641bf356c10b0be3059

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Filesize
17KB

MD5
1d9f07f4adda70c481c03c7dda534bd5

SHA1
865751cab21c7f91455941bb27a2aa6bfc5dc8fb

SHA256
e7277febbbb0523695dc19a0703fecd2808230a261923d13e94d1e53feb49e2a

SHA512
09b7005d57ca60c93d1df45a2efa8c4370131537727420fd569bf677f618d18acfc4088c12b3a06ee5aaa28fe29e229f3952b97096f296bbe381c309773cc939

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
Filesize
832B

MD5
9b1b375817463bf734edc930c8058ff2

SHA1
cc7cc6b812d56c07bfb38933e55f64fb4a0f857a

SHA256
d0ee11171cd321203319839343d6c88a9944c0d0371b6a1dd4500aca88561854

SHA512
abff26e04c92580bd8b8acbcb4703dcadf26aec9b0a643463a1bc3fc34c01a6fb701a34b2a977ad52c0746711e885cf7dfb30107c613e7cfa7bd4a8d13e3c556

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
Filesize
864B

MD5
5df34338aadf479d3a854e2c79340efd

SHA1
7d0a96117bbe462de9b72d019977295a88472f4d

SHA256
80bf6707959fe851e9f63561fc72182c4787363a009f66bd51348820d7864cf1

SHA512
7a1d88e230974db7a57324aa3d585f93031e619ff0d1370b8172cfdf6c38ce01eb6b8be7a5a30c8863a670414c8cb8a6058448b9e310ed4d65ec2814015f9669

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
Filesize
1KB

MD5
745460f26311049c5e7c7d0649ace32f

SHA1
2c7c145c5028e922fd67bd2ce57c5ace374e9780

SHA256
260d8e8e2c0b17d0377d4e2374341a84abc1415287fdae09a76910b1b22c1dd4

SHA512
285ca429d7a492ab4b6689c80d216919beb6a2383cf73989f338d6a522e870d3ef596f9c41900b64b28aa4d9f995a0b083921a7a42143bb5e94eabceea2f3c66

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Filesize
192B

MD5
a18289b7886f9093b5803f1633685ba1

SHA1
e18b2cced88ccbf5b278ce7cf50ea7a47355c314

SHA256
6c0e40b2edd19677578c4d26433a84be4606a72e34de9c5cb450891a96c079f3

SHA512
b38e11460ee18677268cb334a53ae0e9d889416fbc916a697fee40e5f27b6a885e4c3d5036b26e109a17f8053005e1492272d739471a3cbe90c5130f9efdea43

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Filesize
704B

MD5
0d254b6a827383e0d4e318ca89ab5a89

SHA1
c3be3bd372bfd38f003a031ebcf3613f0560d3d7

SHA256
fa53c057969cae296e7e0cab5f78e12d4cc4d0f5ac8f4bf02155a385ffcd8750

SHA512
bbc04f5543255d4acb45517ff169dc9ec57c57a156e1305f729c7dcd867d7fb630808524441038c1052c2a8192568c54e722e7f8c59225f04f4ff82248b93b1b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Filesize
8KB

MD5
5620a00ebf5377f0e47def32f139ba6f

SHA1
084fdbf6b384ba870d12db96e5326612d2f8e35e

SHA256
ad33093867a0fdbd19786181eb330b56a5cb7412b28781a3aad89a10978682ec

SHA512
aa29fec60ddd513f50d30a4a48b34451b0bd946bba17bd48302cb75f9cf0a50521c80a447427ec5eef1dbfc8b457ac76d65304efec6da56dff5bde6eb9ef62a3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Filesize
19KB

MD5
74f644deca4d4c66ed6dbeeda3e166ba

SHA1
17ec6b99298ddb9ef9ed0035a0af16126ca537df

SHA256
71e7b3215fad2abcfda07c53772d60700fa72e7409dd5440413170ee0ab6fd5f

SHA512
e65642a50956401fbf8acdb7c836af5177aab88e20d77c9b9a4c12cf45cc4f7d1a0089d80ad62fed7d2442f5f398a1ba1e49c4f9f522779007f21a7656977e10

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Filesize
1KB

MD5
320505755551317f6b37af2a65e8902a

SHA1
c77c0136965a8a155338c0ae52038d9bb455b7ad

SHA256
303866445224a53da4bda1a68102d4859d6e7c01ccb966be39184081f3943b27

SHA512
4b0ecbf3fff124cda94ca1141f7df407aa5714fc933fb36ae444ef408fc8279213ba37210f6134bea3bf4a19ff6eef35ce5e88bf2b0803930f276d29753b1652

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
Filesize
1KB

MD5
36473e2281b509a087157eacb82b075e

SHA1
064b05e8da7e598f2da29c1743b6708585eb5437

SHA256
28f963e1a6866ee939cdb67a1dee1aca9c831e5a7de7a3a29bde929f543b6805

SHA512
d06ca34ace8afac5e01c3ddcbbb9a93c0eda68e30c28241bcf0fa99d530550ceb682c9505e9dbd2d555a0f29b4d9f6a17336b97f139d81135bfe1a3687dba6dd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Filesize
816B

MD5
675de863921918e4ca2f7dbcd7aa86dd

SHA1
7102a0dd9b0c384d899fc660edd07abf03277a2d

SHA256
18dd0310d91977be7f948acdbc165eddc7019b47edd9280871b410c429cf2c49

SHA512
de6030d143e03813b2bee8026efa1aa05c7fedd810b177a3240aa1c7d7ccc685afaf32749f00f516ca24fdf23441687beff390a12c6e1a7054660b5a887cfb41

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
Filesize
1KB

MD5
38893a1c819c1aacc184fb286016da9a

SHA1
8cb5e8289949a191365bd30fc3a0766e1219de73

SHA256
f214406b74f44068e4561e7218322501e75f222ea4510efa31414b23f022a1d6

SHA512
9432fd15420a9b2fb9bbc5498ee80cd1f9fd244582465776b4c24e2bb1029a4543784eda74122281a902255dd91ea54c7473fb176b17e5869491a5a4b54774f3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
Filesize
1KB

MD5
c1f89dff1ebce22139370033e40dce39

SHA1
287d5cc26e3fee389b6d6f556ebaf0184a785b9e

SHA256
8a1954a220377f19b03fdc14c9b979896890e684a738d536f4dbbf078ee3853f

SHA512
b69e20f22ee000d93669e8e3b8207d3ddcb668b8b1b1153e9680cfa949d73d7003e8e87b40207b1a604190dfddd2d9d4ecc8bcc4468a8e50fce0b25dc218bbf5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
Filesize
1008B

MD5
2eb0ad301ad79f56c4939cd0bf6348ab

SHA1
648fd3df48ba36f919d5c4d15cb3576d2f20fbe4

SHA256
a85dd790cdb8c67881b7dfdc942b3cc3b15e0a36a4d8dfcf838ce306a9eeb0e5

SHA512
4697aead033f837802887910aecfb01ba0097b223bcd2a177c06bf2bb106e3299ed559b7c4cee5c4261d64ca6618aad18835e6c17a8690ca6c7ec45be162f705

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
Filesize
4KB

MD5
be71ed61ea0d15a01db962235b2d7947

SHA1
16befa69c0008f74ce87930842837d0085fa6637

SHA256
ac070bda8c163a89e5d7996caf6b82e84175b8dd703cdc710ae024ec5a58d71e

SHA512
310e5c26093c64892e52ce32f61e42ee4162b5451a07f513144be8fd193a3754d7c8a584c17a46ba98c7b247c329d20a92d25d4a4c8b13cc5b12659cfd80e21e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\en-us\PlayStore_icon.svg
Filesize
5KB

MD5
a28d9fba38f0ef49c07597670cc3ec1b

SHA1
e7706c356a5915357ed5e7f72efe19e7cdb0a75e

SHA256
a2a912a6fc4fc5efcc304e036a9f010b89b1a50f6fd4da6f7e7a4b5ae0ba9cf1

SHA512
4f412f56e0755edad236c3d865e3ee7dc0205ed6b55add475255884d9fd2cd10d533fce7895f9028781bfcff88bf09e0ce80a088a8b183bc2f75383475ac2186

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
Filesize
12KB

MD5
f0c75e86b2e3c4ea2e70d941f3ed5a80

SHA1
98cc406931d81b8c2e33d7dd4f97ee3fffe3db69

SHA256
7fc3d787955a0ddb2ba41f53a9c328af3bf5cac00ff0fdbada20ce701e4c5468

SHA512
30e924ca4a83e25a76861263052284c2ad2ffbdbd0f7af237c691accf200b54f131a161d6a7f3c8dcc85886cfe70cd181ad343730eb4ff6f1d421828e975ea75

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
Filesize
14KB

MD5
c4d4a1283cebf277826ee15e9d3afa52

SHA1
7fa30ad59616611696fa52e1cc6689d28473b713

SHA256
1428353236fbb0587183ba15617f9d4208053f2c32470dec6292dadbfc511c7f

SHA512
70212efc9f3175838a04c695cf40ac26340b6d5900a1842f415fa8a84cc071bfcd0f14218f470b77774131112452ea4da981f20d5b0ca9568b347cecc4946bc0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
Filesize
928B

MD5
d1ea41a37b212edd09509162d89774ec

SHA1
b6a85e355e4288af545e4d3ec9d9e189865b31a3

SHA256
4252795befdbd32c2c4ef2ea251280e6806e408326c587db36d51ec19a0a5c99

SHA512
dfcc0fc4d7849cc99aab5fccd67b6bf8a0eb806fea5977aae34d51885601d8da42b84fc6d702363b94c7385ac980f7638d54dd5a10e5601d51e6fef31ae9a8df

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
Filesize
816B

MD5
b56498fc665409298677c1820f9ba3d5

SHA1
a401862308b5eb72bfff7f3363f56ebc01c67092

SHA256
162f452926c8faec7cc09b5144d4243d74d790d9eb28bd3018b4c6ae7d4c88e7

SHA512
db1ce519d76d246e51a7213a8878fc432ce5a16f2968960ec4bf6671b930cd311abdb4c4650cb2162663749549549beca41583b5cbcfab7f599663142da94fd3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_cs_135x40.svg
Filesize
18KB

MD5
4719fbea6f9800e40584340d15c511c1

SHA1
fc3f83095d6dcbf52ac68a9b3059d994da12ff6b

SHA256
b29a50346491026d01c40838b9c66e0a6cc56d7100532f1801b00279784b6c97

SHA512
a629f90923278540f058dbd8bd53973db6d9920c8babf119a6d317aa0ff306637a0ae7a4682977c2bf30a18b2fc5b041dc1bceb25f219a1e886dce3847548b42

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg
Filesize
14KB

MD5
584b8cd4474a213b9ac38e52afbd8f5e

SHA1
38ed56c1f366c1b2ada038b860e9558514d36b6d

SHA256
89637dadca130f3e092b6f350a229c38233e3133f69e1e576d4b376d809608a7

SHA512
3545b3555d7d0d9a3787fc3f45152c2c7bf99b2adc50389ba9caf9d5bc0cb80f5633f740d23e9d0055a99b1636836692f074c41beace03e577610e21071902fd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_de_135x40.svg
Filesize
17KB

MD5
8a8f327bcb7783b0e76955135c6faf8c

SHA1
7e538e16a7dd9a509f80ee26065791ebe24de6f9

SHA256
c2b0bf818a3d1d773c583b1f191f9095df5a632ac5a3cd2e1a3512d65f717830

SHA512
fc729d25298c4faf4fd47ee9c990a9fdb80e1c250be3c196822875b8f22fb0f919bccca718226ac2a1d9c19cd5228cd09e2caf8e94f9a8ba384417dda3ebe4bb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg
Filesize
23KB

MD5
27ef89d78c271627fe9ec24b47993711

SHA1
1b69d7396f4b6646d0636502cd99b55f4becf1e2

SHA256
150695ac8260e9dc73deaa3077f71b9f19ffb3df2ee3bd4b6490c957ba644ec5

SHA512
4ecbe6a2ac3102f456cdead685571c9347e8027211d822d10a020e3257944a6a87343f4b267504054a246d2e82eb60fddf598a9516742cddda48e72eca951ad4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fi_135x40.svg
Filesize
18KB

MD5
0f0d627cec5a380b49d97a95297da754

SHA1
5ae5aa0a86de5590acc78ea646e4ce68bb7b7a52

SHA256
d8afdac90c668e98a39037b488b651c849464fd6b409c3fe3281e634472a0a9f

SHA512
d2e94b68a0d980eae6b96a43ec5ee32eeb2d337a0f46b8737e1053209a145d138dbf3ded209e7b5f13537b201c4016e1d31a2388ad26fdcf8ed9cc616721af1d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fr_135x40.svg
Filesize
26KB

MD5
894965ced66f47b852b8e043c851b6be

SHA1
99a19e184ed5e583cf683390362fe387be5563fa

SHA256
c05dd562cd7165b051e63736014650634db0e4c38458d0df7e022d67c9c9cd28

SHA512
b759d3ce3e1df446c89967f5a1feaf5f29699a78622eb3a53e1734f92ec3d0d7160a23fc944bd745329ce24281f49ef27fc6d2573604d21c5c8f297d99a7c6d6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_it_135x40.svg
Filesize
19KB

MD5
7dc20d7fbe952da10007ea29c881f4e0

SHA1
637370b9517241030175dab5260c546424d170ea

SHA256
6d7ab13ad91f37615d3c149c4c07d157de1341f6fec36906b93a67a24d1f16dd

SHA512
7dd9e8c80ad60bcc8faa5e200bb87c40bc74d203e8e824320ef63f4e1c61ca4a704f3cf2af0c1f8e9f63cfe88ded85002b52f62e5a99407de9cb372478bc83a0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ja_135x40.svg
Filesize
17KB

MD5
0cf6c3e10b46cb5746459bbd73bf676f

SHA1
f82e157ac8c23460c98ee258f68a6264b167d867

SHA256
70cef2e3df5dbe2e9e2d3b7fd1180976dbf118b798670d050fed9c315d5be797

SHA512
0a448453dcc79f4d1696008695dcb81735239372c521960a1168a690f904b2a944f2ba25a18c3f1319345a7199190fba001bf00cb23eef8a2e1a6d855170e031

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ko_135x40.svg
Filesize
17KB

MD5
1bdbf3ea555ac7c6160ff388387f6d37

SHA1
6d54de0a88a4b956a11b540c2b6c54d960b193f0

SHA256
9e51eeef40d4e06c2bd8398f714330c239bbd2ee98ec9b5a002b97ff3c42565f

SHA512
29a7292ba5a5051571ccfcb6ab6b846d518a5e9bae3cdcc2b41474e91902ba70e631c5de8f722e40097a62eeded27c1d9d21552115a0b840048ca2af664cd923

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_nb_135x40.svg
Filesize
20KB

MD5
06948afe708280c52e10b5c0bfa9dde1

SHA1
152b4050c777ddfc732fe1c6d7d4a68a2a68bd56

SHA256
38dda7f27dd638ea5d8d50857b4dec1ff10937857b803b3ebf8f45cca6854c85

SHA512
8a308211c20dbbb2ac8fea7c40ec0a584d454070a77a71581540da7844750acc90422cd1cf7f64b1a4ba86411a17329e3301d41a32ddde01f3bb0dde5db236b9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg
Filesize
18KB

MD5
d9f24b8530dce579930bde5e42c80dba

SHA1
518c8606f286196a8e0da710319e957715719178

SHA256
0188b3206167bb5235b5d2d8136c74ae1baeb8838e9aac35eb25a157b8fc9373

SHA512
2b6a6c133649bbc057fad555b0836a49599b3ea3cc1c475f94d997c56fe780a8c372ce80300dc84f2292babd258fbec76d3897eaf7665f09911bd43b8c692a8c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg
Filesize
18KB

MD5
733680319a5a22e48cd0dc75cea1faed

SHA1
34e35bdb47cd89b68a6a7994e7afc04212e0875b

SHA256
0fa93a124ac6d7f405716214b41ef16a027f84e4254c6b25c40d04b88ebf0084

SHA512
62dfaefb50ebe70d2ff0920c3a559075ac05a3a9f7d95e714eeace3e756234d774800e02c5a7d25b8a4ccf18a585241b2efad42e1ae7209aeaea9fe1f4b912d7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg
Filesize
23KB

MD5
e6907e4841de696901e3d260d926b6fa

SHA1
263265c7deb4d52636432c58370896d2634e0f0b

SHA256
ab612c34fc2dc9f2a66507a080ffc43681af10e80de40a5a62e77742bb93bc3a

SHA512
1eed91c6386f7fd0184c06fcbdfc038b24464700d097a121cf84e08ccefe0e165de0c15be74f9fca6589702d630cf33eca04b245c001ce339ec3e4857f74ef9c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_sv_135x40.svg
Filesize
17KB

MD5
49569c1bd491f12f1d6af692788a7cee

SHA1
7889154c5502dcee95a9243457e85e6783b995cc

SHA256
a20d28c065fd7283eafe89a998439b0bed794f6f89b2bfdcb98f0a7c63e6bd1b

SHA512
6fc2fbca3504f2b2563ea9a49dca6a55b620abd788f85a58d12c97157a010246724d00c754b9b212bc09f37c830d4391b0e794535339d8c897d2642597e3dd23

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_tr_135x40.svg
Filesize
20KB

MD5
5c54d42e819a67a8f6076862a3efd259

SHA1
970f638265ef02f3d7744ed7b39f335b7bf05fbb

SHA256
f8dd39b534d06e2624fe9b1a996082f690a0956218f5bcfc50f99f0f8201bb80

SHA512
da608be607328dca86ee50fe536d3fa6cfc989dcb757d312164c2d5b40816298f2c61704256e559422f182fd4724c4f66ee6d9c38464d21187f9705580948718

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg
Filesize
13KB

MD5
623b8f1012abc01890779c2520721fa0

SHA1
704fdf16b10dedc118667f3d5a2e6bc7ad989826

SHA256
3bae9dabb0145027c913b406d51d2e89f560f07975f27d2a4dc5bcadcb963fe4

SHA512
2473d320300e2f30b07f4c71330feeca16809e53d461ba6b85110a248a8abe3d59dd1a125e9f4e6ca6a7e9fe1a72d6e421cd45deee9e8d606aa979d9c45db7af

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_tw_135x40.svg
Filesize
15KB

MD5
32bbd179301f44379ee2fb1d7a4b30c4

SHA1
6bf658fe38beb0628c90e681d3fe0f764105ff8b

SHA256
e4f114dd67a123a7a479849c020a8cbae637b9f5d8623938b9cd022dc9a01494

SHA512
c0c5f398d636a5a4ed89b55b72ba272619e15c3ee4d55f8254284e2836929605b80942833c6a231d12a43d5739627a4160fd9227bf3dcecb9581d015f02463b5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg
Filesize
5KB

MD5
a73e90af113c4c12318ba77f772f8c10

SHA1
30823cf2cd2ef4fbbe55db6bcda02148310f331c

SHA256
f786ef79a02f8b0a21fad105e69d5f5a1324ab65510972e4575449e5bf301897

SHA512
a3989677192d95b5f7230e242eeb140400b8e29cc6cb797669e517f1d7a6aa99118b395549b1e7b4034be56357611d000cc0ed8ecd25b697ed63ea2885008b04

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg
Filesize
5KB

MD5
d2d938044c0546c915cec22a0938beff

SHA1
e92aea4820e0a5214dbf65466cb0c5ca32c086dd

SHA256
5f3e5f77b88c003ea81486c34fd8cf8f8c5609712b36484e3efbe020c868aa8f

SHA512
9c3f15e48fc90df51c3a31950e4a3e7d511a69ff712de7dfd833dbe3d4dd8acec16e11dee195127aa4f52024a4d8d8480aec050ee5248a174e0929ac972e56da

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\de_get.svg
Filesize
5KB

MD5
a5a21d090ca7d4c18d54f29d7b483260

SHA1
a4882e4a1dcd21e8420e2f677821fce7c3268db4

SHA256
d8fbf13a806f1802e5fa384436958afdf7d3f4658953f5b6eaa0d654887c36c1

SHA512
943ac06f267bb1a533b381dc06c85de41dd1910c995c1b1a71a1399e8e388b6c9ae8d7b6fdd8b0b5df38540fc3b38f386510199749c1fdbfacd605d4fe38ec4f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg
Filesize
6KB

MD5
0070d541e7752d69d4a5378fd757e42b

SHA1
20287ce47ef25408670b38b378f653b431cc8ef9

SHA256
a64f9d78009b65bcd6db697b8ad908332f1a0199807321161b4362596ac717af

SHA512
914e4f4727ed5ecb89ed45a55cee8ac9b1f7ab7d8d33e292770103288055582a9caffae8c70585e2533c4a09303040e329750ec666a70f4becfff0018b96dd17

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fi_get.svg
Filesize
5KB

MD5
a64c778bfc64192ad8322607b6ccd247

SHA1
8721a55f4f213e93f98061c8a7e60ac3c8b45ba6

SHA256
8993cded5ccbf0c44c1e8a1607266b78b4a86c061ee835e92ce8a0ce9e8fe1a6

SHA512
39960c905fc4c853618e3035dbe8a60dd6d716792b0b77959ed139739984b45c14b77ca9d0bf396069a18d939a2bb74ea2022e8a5320fd44249482fb315ae77e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fr_get.svg
Filesize
7KB

MD5
d9a10faa1f281de8a1c76b7c961ae79b

SHA1
0ffa607e9e6c5df5b5f2b4289e52182173126d44

SHA256
9f76da2df991deaed2042841be85f4328e9497efb4c0148cb14ece5a706f7a11

SHA512
ffb89dd7bd0e45fb1dd8a11da660415b10372ea9f3989d6e0c5a5597d77d97298ab19df9085e982c08bb0e466d34ec77e1232d4f150fe59648c084816dbf82e5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg
Filesize
7KB

MD5
27245eb239e18da98c11a246db385d29

SHA1
9de7129345ae1eaf7ba3329f69e18d1aeef2c135

SHA256
7374fb5ec515e219c758c9f1d822c19b6d30ed4b8dc97f82d72a306d783dc6b4

SHA512
48a0a996344ac350fbfb3d478df61f3a2b7e73ec976a553052458475f343bc0ea8f8ee3942696041ee295c76aca1de51677b2e5ff510cf5100ed979f4fe4610f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ko_get.svg
Filesize
5KB

MD5
156f6a064e5c5d7edce9f9a735376897

SHA1
cc590de9b72da7ca1c94f7ec553190cce6cce9c7

SHA256
e6b5a3fb780cc20623e8a6eb9ac2da675d7c91fac3e25be76b564f5c270828df

SHA512
09d7facfd9209d957b3c8aea8882ab30ace68f94f19edb621b19c4e6df33afa79a2b5eaafdf5267e6ffba91b5a96f830b7d8203779365a9817bb189982f627b4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\no_get.svg
Filesize
6KB

MD5
9844be7dd1c94f868ae9cebbc09d848f

SHA1
ff41df68f98e4303d73fd5ae3718121bde3293e3

SHA256
be1f33363ed655d6c5abe701372663752665ce291184b37d46d3ab3f9d37e6f4

SHA512
93b4a4c221a37bfa28c20bfeaea56c6b1269086ce45c7c793eef7b9658207570108a246fd9d5d1c7a7d2304a750386fd6457ded153082b69520a632cbdd935b7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg
Filesize
5KB

MD5
8b9c17ab83e54a4a138b6c08a40017cb

SHA1
dbd0aa9a96c05cf29fab6474d93f24b5a3b35f23

SHA256
fb036efff446e86d6d147fab9a46b624eafe1f2de32f12dade34476b72a4fe4a

SHA512
47de13377b598c9f4ad08c15ce2218d884e5ba57e676774c1b03425fef6c7946f75e7a3622ac2eb38e36ad299d2a0f65fff4868a2b1a92e0d0fe56a6d17545d8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt-br_get.svg
Filesize
6KB

MD5
dc0051b5f7b0c73f6a42ebfbb58165cd

SHA1
7272d5f9f81b8541133a4e1b2ede546f4cbdc9b5

SHA256
2cd884124b71381bb3cdf254fb06e49e9992cb30f08577df4cc76b8a994980ad

SHA512
407c2e827dc86c0d879a277be7dbae63c8dd3049d57f01af187bdc83f3bb9eeb870dbffcd7a1228cffc781c31bde5e6086d6d6d3b4cabea69f18f3b690be9b10

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ru_get.svg
Filesize
6KB

MD5
4bb5865ebc42a313cf665998b811e3f9

SHA1
2b6dfd61d2435bf9bba65eec0163f3f4f390604b

SHA256
9fc1fd8d85b843132ec08957951c9ae6b3607f1f114c9584e126046f3c20da2c

SHA512
fce16f3fdf8b1425d5e796ac1aedc1ac61002a2787eb0b73df79323cb0bba0722b6458167ed2ba08bbe943db47044180b60c2f78e5e65520a897b6c104fd2cf5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\sv_get.svg
Filesize
6KB

MD5
397a18421d4a20b15927368d62f2ade4

SHA1
a687c1a9da850e9e58ef195a4554a498bd81e1ad

SHA256
21d99714f5f6cafc56b4a1315edfc03d3d39708824ef7ddc4658fbd371a5e377

SHA512
58cafdc0d230443cfaac9fea819383da6d32a62767724775239a59082e89011ed9b83e4b95955b4ae650ed957dcdb32dc6436601060b98dd0f1e2f0783c0fd1c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\tr_get.svg
Filesize
5KB

MD5
caff96af3eee6e632f7ec52aa5d61edb

SHA1
66b1583d64a894edadc373d57a3af2bfc00b40fb

SHA256
d2182d03bcb051703afa4066c6ec1a5ede5b1841f32a3252bff12603a1e2283b

SHA512
5f7eefe55a35b2d61e37bd66d39da272b89bb6d6d1a26b90912696219e094678e438d792b122c9065bfdbc875aa086413322ff2db5d1da789ab2aa4ec0dd8f27

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg
Filesize
7KB

MD5
01c7dbc7390abaf917f997847a8ad086

SHA1
858cb45b1cc09d86b76e98338d3235d64e34a200

SHA256
82e659a2e78df3a6cd1fc1c4ee150d2da8ae835000865aa1f9e629208c4861fa

SHA512
6f792115c842b9526b61cdc3480fcb955ebc0f6a27dc11f2c82248a40979ddb6e3af539c6217bcd298a882d2fdef167a3676858f2b65d212ccd507815c5ccdba

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg
Filesize
6KB

MD5
f3fa128c956aabf229d9f90fa54fb9b3

SHA1
5a3b1d995bdbe8994ff37b3940eef19619361759

SHA256
3ffd2a0a620089669d2164debf730b04b3cbffdb24a8922afbee7634d0b2797c

SHA512
b94c53f9a5633d15c366caac2148707de58ace33b54422dcb386757c680549f017e25b9351a076060c0444d92446fe4a76ecd627d03a982ea679d37fab5fabb4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
Filesize
1KB

MD5
293e908c49126d2a3a73fdf9a5ee8d06

SHA1
33ae8cf681e96085f4f8e742a377219f1fcdf5d1

SHA256
6fdab85a4dea0950c7092a4a0f74d296a846bb2505c69485fa2231b2b40777a2

SHA512
11e9d01772914bc72ca6f255590dd73e26556edd86839f526c43137d4ce3f1529011850a3e862bb67a9c68a1511644c7fd5679507e74c80140c281d8d7421113

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
Filesize
1KB

MD5
be329de22cb65e38f986c17fbdab1c27

SHA1
f47fe6e378a6bfb60a1641cb4464e200834b4984

SHA256
41d902d2cddd3ea7b3015e2425a4bc899ab4c0f498530203edb4098a4a89da23

SHA512
01a7a2e4905aa255e3e92b001f5a91bdde2a049fbd4f1f2b6fd9642b95a8cf0adb51459f9a2b1fafb7f4584de895ee6a381adce1e5c6f9472f40e69b3aa6e243

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
Filesize
816B

MD5
e471cb9c3b33f4cb77bd515bcb961fa3

SHA1
68383c7707d53886a1d28dbdd9dd85370b78af74

SHA256
87b32d9e77c311be3b9579a9b7c2d3c022120d450705540cc543c80791dca97d

SHA512
81fd7895756b661fa96619ce5ceec2ee44ac9392560ae03b04d04a47b874d9686efcb443dee3977e695d1438a7f644db0dbb670dfc9aa2d6c0ac5736c3be151d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
Filesize
864B

MD5
b3d77e1266c0b366167ca12033448edc

SHA1
5a85369d2edd126732ef9d071774dbb38806c6fd

SHA256
758bf7e92c85ddbcafd0c7fd715c52cadbbe43b37d300ff1f58a9b61f2aac708

SHA512
8f661ff96f0c45bf8ec2c88c2d1a8c830baeb4c4e357047c8b9e7a62db8264bbdfbdb3c81d17860fb8e6ac0008046175f160f33d9476dda8ea830ba2adca5942

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
Filesize
864B

MD5
0bc764f70e4ffdc53b6ad7aad7693e8d

SHA1
b472ca76b2c554cc0a3b315d3214695366e27b89

SHA256
8b913025dc2f134082df3f7996af243c2b9ba5f02b45ae65c4bf6b297a98bc1a

SHA512
b16ffbfb01218b3c168b82dea54ec2c05b800bc980699879f4fa4090c3b90d7cd32ccf496b83a9be43fe90cb1544f0cfd0616b78493057674ec29462418eb246

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Filesize
864B

MD5
0ec940de7173404c00956e022965a3b8

SHA1
a31c2cf92b26e1db2782183e27af9ac0ad212c57

SHA256
f829dc2c7b1de4ff1c7958fd98e4dd2cfb4a66a1c18a26f4b095bddf2e23f1a9

SHA512
fd6ad0ab1f2ac1058634072b4cc608ce5211f1def859f85b35cb3f3d068af0c5606d2133c4c162f452a404f2b0d9477310f4d08be95544ef80bb5d2d3d289dd1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
Filesize
816B

MD5
97e2c64b237ae304f8942c3fceecee12

SHA1
e17d970291106700a00c148a480a9f4f0039d53d

SHA256
63ddc128d669e03954a1fa88a1cc70423b75c718b6d3df5c21a4cdf1ae32b7c0

SHA512
9d646740c1c3c6bf15f4fd53c06bff73ec6b843ecfa66e6c71a62df0146d74e9e1074cb0b544b6712fa774ae61ec8a6fa6a8862e0ac88d9b21cd6842ff921c2e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
Filesize
19KB

MD5
de674b9ac1ea6e9217e8b673db97e59e

SHA1
0f415c134e486908656eb96c8aa89a1a7f6b9218

SHA256
94eb15769a922d9972ab61c9ed03452792090fa01ef5c9a84ce0db14c59f2413

SHA512
2b4b957a28188e0b9c8294db95fe70be97f7cbb753d848e5afa6437405f95e8b8836b57e58528d129fd7179bc9599eeb20ead68aaaa6c324c093b79675011b37

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Filesize
6KB

MD5
734526a849e477843f2aa9f8cd65b2e3

SHA1
8f844c1a7d1ef6af48ebc468041adc5cbeb9362e

SHA256
5d06138628f06cfdd1ad008dff46399390fbec51a2eb1f33ccf9377c0367966f

SHA512
858f5db55df405291ce0b6462f42cda1a3c9d59a2f42860e993ddb401b124512affe09bd5ef2993c609ca950977d9a6ceb52b9d56b490911704f89d86edd02ec

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
Filesize
7KB

MD5
61ed1f1f935787854031b6bf85f52636

SHA1
d35fa2e24583094c0eae22ca2e928d18f2bb1cc5

SHA256
c5f814b77f7a16e1793b2b9b9529a0d13fd1e80c7e70ee5608b5ae4dc75628d6

SHA512
03aafd7c6916f3117df8b1884d7285c1342621743686381f232420794f3fe3bc83384ad1966fc211a417a21afc5afa6b5d030960cfe1a5039e20d2b2723c88f4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Filesize
3KB

MD5
ac4a457e0825962f0d1b4f66190750fd

SHA1
0c12c81235f74f605ee4adeb39752ac4dc8cb273

SHA256
b470ced890590d3ca6710075c21eb5440589ba05d18aaa17fb9f7d174a1015a5

SHA512
4c41623d53b5ad9f5df06bf6d57bfc59101cf45ff24724be54b62c008eb4c53599a8a9169819ccd03358daa81784fc4e809a660ac77c2680927b5ba3c13b0e63

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Filesize
1KB

MD5
c2b1bd94154584b6842dceb318b2584f

SHA1
54b2c7fd131b10fb50d675f4a16a2f4b01564f6b

SHA256
e40f3d4e973be58ad799cc0ee1132b94c52be5cbf7dbb45d38093d9cff298a15

SHA512
29d0d47ddb308a81333f1e6f79b45c6f631000f7d5d15ae785d26d33e240c23c7761dc423385e4ac365fda40074a5b1bda7645c2e384e1b30365e4f4dcb26e66

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Filesize
2KB

MD5
05066cd9021808c22928751dec65c9cb

SHA1
b5f19a732adfe6fd25fd00249a36499bb721ce3a

SHA256
e7eb67ce85ee5bdc240c68c320b228984b7cea71fd5f0f68349885ac7475d8dd

SHA512
22bf22f6e3c7eb32503b363f333da246f8a0c97df26408ab302fd5c78e6966e19530c5c7483e825d14b99a733bce6c2da3ec6a343b8c8b8b4767a6606420d4ff

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Filesize
2KB

MD5
830e8cbbb33142189108d00d2ecdf39f

SHA1
6fc2b604d2c027e8ed362e6fb42016702856a2a6

SHA256
9480a32f41ed547f5096d02420e8ee57af826380e9aeafa00e87f6df5d7dd6d3

SHA512
561aa44ff35b62912e01d347ec5669410a9217cba11c3bdb35af0975ea129bec7aa2457e2c07fde2180b10477a24fb3ab2aff2de286271e8b69cade6d74e505c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Filesize
4KB

MD5
ea41b1dd3b614670aab4ef48f23cc87e

SHA1
5c8cdd7e37f26bc6eca6dfc8ab8e877e4e3f5864

SHA256
aadee09ff88c7c52d83bf1a2786f9325b3564e00e1f4729f9010b9f68c7d126c

SHA512
cfe7ff8921db11441d97368eb8bf2d6d402ceee9692ffeb3dfbfb81232a2eff1cce5a622c0f931cad7a60f27cfb0a9a59ad4b019dcc5a674d5f75304447fdae5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Filesize
304B

MD5
2ecaed9af984c9952c22a6d36052cabd

SHA1
bfc13770defd66f9837a5099d782d59709d19e61

SHA256
40e0ebc57f600745cb3c2842fa65bb7574aa3289434cd7cc9f9e1bfd308ebd4b

SHA512
0f43db22fbcdb290133094912410904dcf9d0317c591d0aa4e1542d8230ce9ab1543999c9f56c96509045616b1f98c785fa19c7ff2d1a4e7cab3ab4eb2279b7a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Filesize
400B

MD5
fcc5e67c2b9af94e9bd7da49018cb2b7

SHA1
47de11daff1620f8abbb2f2e04bc028cbd60b381

SHA256
b852f2b61dac2242f6e2b629666c9fdc7753b6bf7ede8a955dd5e5cfb0a74382

SHA512
1e8d21d2e090784c81c13c7f1180601e179c49e199d54a97996a4389c8f673e8e1182d59003dab3d7ad69f53883c2cb12ba1dc9ef26126dba1c41d4f48375a6a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Filesize
4KB

MD5
8e5ad9b5334ead1aaa9c8c6ea88be4a6

SHA1
523412fa190a0902b994511fa22e46d88eb04fdb

SHA256
155cefb46322049af621ca2860e44667c9c39b525895416342f5049563db1e0c

SHA512
54f97259bdbbb8dffdb9c9d202447d41ac09e61a6d79dc7abf5c86e019d10afa1f5555977a38cb636205c30f1f2073a170b61dbaaa7ec314b99715c03be92b66

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Filesize
1008B

MD5
45e462ce9a3afa2d2521ac8d2c79ed28

SHA1
7a1c7b0020b444bdf49e0e3a7bba27f704004e49

SHA256
bd7febcd7b580bd9a6fc4858231cab42f56253cc8390603d25a5b6b861f81b7e

SHA512
aeaae151bed48c12569d782458bbceb0e8edae7670c9f5793b2d7ec75761fc21e7776d484570cc9a1384192eb2d86fcc45de2238eadc0f355c43a20f15f9d22d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg
Filesize
816B

MD5
81ab1903bfc400bfca702a7fc57c26e1

SHA1
8f9df77c1c64cfebe96356de0f71e6d1edec7e9b

SHA256
6ac8a29475e483e768a59fbdd772bc2b7cf18ffc3e2a3768a4a652fcbedf9cb8

SHA512
691c03aae2631e0f820149db086006c104c2acf348f813f3ffc983d74272c71c1812c4d0b4e7ce188abf38b19afd155bbdceb8d6f38acb06d22dac28c04c6287

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg
Filesize
1KB

MD5
280be325af540a1f3da53c882e95d4c9

SHA1
9396f11aea775518d276514dd48574d081b60cc0

SHA256
beb9ac8b6f236b78e326c7a412f83647287cf1ee6addb0b6025a16503d6d3fd2

SHA512
25a417e2f49d39de68c809efff204a5625978d25b554850af5170bdc64644c7a17ef46ffa216a75ad8f0012b52b911828ba590f00aaf764c7f0ef2a46dc8dcc1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg
Filesize
864B

MD5
bff7b098573d2dec24221d22e0187912

SHA1
5263b7b5dbb80f9a0451436b76d663211388fa91

SHA256
72a5dc58a02f13399d59328302c34418a52cac5ba560591ca69ad32e0d94fcc7

SHA512
f0d6a7fb43f676dcd0682f0e8e8313ca0af34afb2cd1b93dee8f96951c9adf33d9dd5261bbd51816bf4d0f3f02318d266bea21c914cf9cb86831cafdb88f286f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
Filesize
1KB

MD5
9279cfd714875f04dd4c90c8ca03bbc5

SHA1
b05386056dae0feebff504c100b2c325aada6602

SHA256
0e9da2cf7c428730bcc833fcff5a7f10230b6525252af40d150152d5356b934c

SHA512
ee3cccf6e27c62cd8fcec172acc7ce392f0059757148d5e060b0cd88a76bb5f5b3b79fab2b9eac4f0b0e0aa9fdc35bb2ae2c798a4d4afd8a1b87e592bda6d2d5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Filesize
1KB

MD5
2563211a7a4165097aeddd780ed36471

SHA1
6f960f24d039d594135dddb89a1d9e983d6c6cac

SHA256
684e2e5c89ffd1f236a5cc9063bda9c56b31728dea3a6f7f6e95fce9726df178

SHA512
2078497fd90e122284ae9c6203506d99199a40de4386ec18151aea54f26fac7ec2e216483f4332b3aabaa0ac26acde6f522544ccc607468fff4a1facded05569

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Filesize
2KB

MD5
19dfbeed74a5a7bc4d3b2872273be880

SHA1
bf894faa2ca48085c418d8ac53890119163ec504

SHA256
3f0bc1b0132d7347c08420512d010ffe5a812fa2d7312435e01928be2c3a9613

SHA512
3fb1c2273192c3828bca35a9083f6b51edc7cf191ee09adb2a8f9225ba794b8ad059587de887a14d541d3659a6f33ac719e867e5380fe332dd46c44f6f56fb24

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Filesize
13KB

MD5
8d71cc3da9ce24eab37f196f821515ee

SHA1
81ffcf5f4db2a6d181602ae9cf0ae4c130ba6ef1

SHA256
8c8b54108d7744790bf6a1728ab3c884df87b784cf8920a262e42466345e4b45

SHA512
d110aca79879f54b089bf06a513e2807e0d741c39f945f633ec68bd0f3b539bbd8cfed55c70f97b2ab7e5a680cd1f46e86fbd259f34401624b6a451175ca3e2f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Filesize
3KB

MD5
4452b5d3a3553dc3cd51fd881c07cb73

SHA1
4023454bd55342d07db6a26b94f3f4c104cf6724

SHA256
321733249de2231c5aee839a2c58913870d08ce467bc81f3d12553efbbac556a

SHA512
36ae5a7e814f2f4d85f6598333a1596da918f5ca20a9e732807e4e112ce3e1d0d83b5003f5c63ad138d453b37620ad4fc95d1d8ba15db4c089432baaffdab868

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Filesize
560B

MD5
90dd183582e5012939ab2043405cc40f

SHA1
0baef518ce73117a9aceca05aecfc33ae7b74c16

SHA256
dd3c11e6ac03b263c160382a85b5fc05dbcfbafb31d782b3cd4c1445a8e4ce79

SHA512
d7f1e7b1c316e6a31720a981be819ab16a572ee4c47528c7a173979c17d1b17f24911ec0a730c50a02e310435b33de63bcecb236b5e78db7eb9ab1fb27f98064

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Filesize
6KB

MD5
c71122869e2bd4b2e55f15b1ba5f6837

SHA1
80c00301218be5092e3e3ba8d6ff3c12ecb7f85f

SHA256
a70eec01a719aa747770e04e8d1a86c22c01b8616c755516b5d2277e56591ea2

SHA512
a05d85d6e230af613788bda4a39db67eb37bd5d336e44de1343458625a0aa30c097d81a93d487da8ef611bb63d5d7b37241badf91e0100101d46d5e25126c9b0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Filesize
832B

MD5
9ccdc249d0f547067ff4f922e497bf04

SHA1
9f67058313fd9f0dca31870afdca2fea0caaf875

SHA256
79cb1b1e306ae4a8150f16bb21f150b6faa399c99216a71de4d95ca1045baa7a

SHA512
c185c5da6fb1cc5df59e59e2ffa4e368c4d4413dce8ea5d1b768a6cff59e5481c1c8185d9384f246775476c7915d8e9647b999f093788def567c92ce603ebe5c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Filesize
1KB

MD5
0d2678967896e4827c3a39f4a1ca7a19

SHA1
bc111b6479751c7e00caefce156c384b7551a7a2

SHA256
aab7c5432713049737c26048052ccdc40102b655260627e5c7a0244ad4706048

SHA512
28fe98d1bb9ba327b4f4bcffe17fd96a1204f0011cc45f5df4f50f1bcb7ae361772a435b830a635d67ddfdb369b3db2e7656e628e7f13130fe690000264722c8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
Filesize
10KB

MD5
565a65d2a8202eb9fc546c42b59bd44d

SHA1
a9ef0a3eb600411facd634dccca56f97f3b41157

SHA256
1f2e036d5043379fd2c3226f4696add5685bb336fe950b55114ad88eec1c7311

SHA512
fb1fd6c427605c507d5dc71b8d7a1e83d9cc2d62b1728340d03cdff18eaa453bbdf982b61b5e703b84fa9b869bd44c2f4c53f3efdf9402ab38191dc469254f96

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
Filesize
13KB

MD5
2fa1385304d7c70f15e4635904baf2bf

SHA1
2df6b34edd4927e76eebb1641b68d1f28346cb9c

SHA256
921e07b4597957f654af382cfb2c3eb927d4eefa6245ab83c7052f1e4a6e35b6

SHA512
2361d757ba3c4c75ffafddd21c93fa281e3545d974f2f322b488d1d59ef0bbdc4393813f59c8a7cd0de4c22ca28e9be4e9d60de5e750f5fe75eade1a443d9566

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
Filesize
848B

MD5
09df277bcf3c578da1de3e0e8642d6c7

SHA1
a3df1c62d2edd1cf8c4ec30d3f04e2d1898a6368

SHA256
128e70c6d6047bc58c6a03a464861a2e2e0dff09567eeac0d0cdd5d800336b9e

SHA512
74b6f03c99e1ea6a1429a3951a55b5e21783b9b37f851c49e2ad3b76b17a3693cfa55db63b05db040cc752840c159618f818f683168703dd33e8da0b92994067

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Filesize
17KB

MD5
f3674b480e5e685716ad40b49db9b0e2

SHA1
8c3968fb5c2207a203fc001c18cc1ad0c910d2fb

SHA256
5d804fe73a3449c731a2ba29ab3b63fe8afd93f83a0d3f1455fa83319967284e

SHA512
8f9d8c0f779896769facec8e37050985a16926a10a398e194762b54bf7b29c4ffebefb14fdbe5b9056792f849506e5819bb3f455938289595fbee64b0953e4f1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
Filesize
1KB

MD5
851bd0ed24f048033293e89b67237f42

SHA1
938b898b108db8c2a46bfb62251d8f928e124e40

SHA256
c03bec1ba408424ba3a30200378bf6849dbfe277747eb8b44931ea34859e9a49

SHA512
f3486054273e3c6e5ee7668c6e4c9521fb38558e50e6ac3cdc35038cbf7caf2718fd60643ea34ac04abd499c01f0c07fc76fe0c1f4503b5fd4e301ea834e0f40

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
Filesize
1KB

MD5
347135e13f589374afa493b9a3caa7d3

SHA1
84e87ed0edd98f13e811f3a60815d286fbe09d92

SHA256
f4a7f26a6b70829beb6b3a94df602ca0f71dcaf4c9850cf5c6cd514049123afb

SHA512
414211c6ae561f3611174d27170d5186ec8a2b623bb9b1aca952b138b2f4eda45ebb70468b8a67ceff640ef59fe792d41486b4d117485ad103d49a34b7ae8258

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
Filesize
2KB

MD5
19ef456c5ad1eb6eade20a48fed860bb

SHA1
abe0c50702dc18d0a99f42fd5a34bf38a15b6f14

SHA256
a303a870762780057576233c5f6e5a7fa4ba941195102cef98123219557c0d86

SHA512
864e4ef30c1de648c4030f780f7ad607b9db47774321378c912ea3b124860181ff6d204aea33b9dd63ca60069f522787d5abf14ca5de2178dbce24f37029a3c8

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize
32KB

MD5
940e438d767ca1eedb6e57ded1c51e6e

SHA1
132b1c6eb54630e8b5bf4ab8f82dd78a21c624b7

SHA256
f1cb60f5f50fb655e403d4cc5fc1c2d1db2c1b721cefc09b07430ac1053bd532

SHA512
2971573b4bd3d7c7435029d586663f5374cb257f696876476a74f3fb4d298418d9fa41b8b4af249c8b839aceb1ecb396c87e5d1589738c8a5634409acafa0e1d

Download Submit
C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML
Filesize
1KB

MD5
a2019a7163c39aced474a05990a571e2

SHA1
7d1cdef5c5d499600fb4faee9fe89b4968fc8c1f

SHA256
53e9d1121d9f0b1345a7cc7ada660b434466d44382ad9fde5b8302ec145f9611

SHA512
9f07fd9a2181eac48ac3db959d41eca609b0c7359f2d929190c948d50a1d115ee520d011d6711694ac098bf949e71290f03e0cd569b13ed6a5ac2d2d2d9f91b8

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
Filesize
160B

MD5
fe1c134731930181e110747ef18eec0d

SHA1
db41e3191169d880b2587c5a0cea263ef86f4793

SHA256
c6a14b7759b1e4614748b8ea92fb368a6d51ef080dbbdb68ea649d9732d13466

SHA512
c31a08935b04b21b4057a48595cc5abf3188500f6db1e80e9501ad7c36d5201de452d45cb408bb039c45d6fdc266289de29b60c3a7992640f0cb0a189486d3bf

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
Filesize
192B

MD5
d6f63c6586e8f3f09563ed3a5a8e6015

SHA1
2c188e415b52129ff70777e323e1eb56d9286b7d

SHA256
fc1ae671f5ad8a8be96862f9811ab49a1df01927ea1afb25f9ca9fdcf1ac4a49

SHA512
fabbf669671c098ce79987c43e2d0f07d0e40af87a1251be53569a84b3913d2ea722cb707d04c1a609dd3301cab0f907e9b54310a3ca893822329d7ab35aa34d

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
Filesize
192B

MD5
998de7b87789662897d83ee7b33437c7

SHA1
fa6904e432f8657a447bb1b49bc6569fe5a1d68c

SHA256
a9c8ea3dcce5d0ec986c4cc55fca3acad097f50635f95653c983989f06f28279

SHA512
64586410858234031035126ad0b513a752e3f969f66471795d3e777b8a7b4704d83703dcc55daff011342cf6bdeb214d40f6f81f90274c1d24995019b16b3093

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
Filesize
1KB

MD5
1582ea0801cdeda85198f36a925eb67c

SHA1
c4c14143f388506d07577046583f0b1169f783ea

SHA256
760e91712d11f5e814bd00f83ee56388b97080bbdc969e5f47146044fc02edb4

SHA512
4668791f6fe7cb767c102b4709ac947e39adb10db880c47c0ea7a0aed89ff83b6d6379e4db4c86e245dfd4062b4a9c6db1b45885a3468b30165ff08579e2708f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
Filesize
31KB

MD5
19d2b9952ff44467d740dcf8b1765977

SHA1
2ed2130142c89055c895fb70792e2c37163ef85f

SHA256
3c56e6b574109c60aa767d32cb5adcb0686d7ff0bebf163b8e00961d1a86f448

SHA512
95222356c38845cb1474cf1acd4578b59e4c47af5bc73ea98aedc2a73ce9d065fc0a0d32deda7b5de4ef95292e203382ee049e9a429f308883ee91e9198a026a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
Filesize
34KB

MD5
f013d6769a6b6a7c403a8d04cb1299c7

SHA1
626a44d2f85c2bd12b5b94c94b399d302ae877b0

SHA256
94fa4e879ce32d771b96f23bbf1c0f7ee63013e5130ea7ec2350b1676245f1d9

SHA512
30b2c7e63a88f2cf04c1eb0292b0f2c4230912bc20d9442486bfdb2af3f882891f906fc9c3b9408a5b7efea513cdff4873704c747c4d30dbc0c7929aeee310f7

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
Filesize
23KB

MD5
e19ce8ad89cc9c060baf2f1b14e71b84

SHA1
e79d424138aaef4b60312f7cf5900ac21598e74b

SHA256
4b6fc15691e32a28e24c658fce9e71ef738c764b30d090e430a521709929b785

SHA512
e2cfb8ab1a0a4ba571df923f674c33061467858c21e13b1fc25838f409b9971d276fdcbe6e3dd99befdcb95ee5600436e2d4f51cbee1306849fa1e60a512c894

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
Filesize
2KB

MD5
8ac4f0c62b4519e29732222085782e8f

SHA1
489b0c1a7b5e7d00acc657327f83292e6dae104f

SHA256
c84116f573341c48464fb55e2cec6349b0936ff10d7b757b405ec3de2778dbf6

SHA512
f49c58d56336bbaed398e417c942357a56e31e17662f615a616c316aa778845ea5f0ba2dc8ab2b83fc399e42c564c8df62a7f8946ef01551681edeaa27f7d5e6

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
Filesize
1KB

MD5
62eeeb25e5986b0f0ad6ea908126c60a

SHA1
62137d09f5a5c354d571f204d7d9773d24126013

SHA256
2b398322415ba3c0ef104c78509eb0b55ed1cd0fac62895d65bfe17960fa6bf7

SHA512
719c2bf1a2df3162b33716f07d6b204c329b108748a404f06f3e0f89e6c68505cb9b97c3c45e38673389f6a4394d63f2af164addbc2bb7c78ae888d5439849b8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
Filesize
3KB

MD5
76836926e10f0c596cea1ae7cc7c806e

SHA1
303651a6dc4fb521a97968ecaceea8d368bb880c

SHA256
425dd9061cf70b435f8359fe52cb0fb768e306819f5cece449e52a4d4162ec31

SHA512
49907de885eea566e435583a7c28d937f74cef921f513a832817549f1105ae853c3192706f553241ffc9e33a85ad7c0847bfe3251dc687429e88f2d008b5c509

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
Filesize
2KB

MD5
ca0909659f71155303b73a89a64afb0a

SHA1
c72e048892a667019d3a5f4d073a039903817a46

SHA256
f1e0fcef520172935d3450121e3affe5a4efa0710072f44447a3d4dac7bb090d

SHA512
41af4445b9c21dd0b6c4ed9c41e01047d99b9e848da8e2bc793acdc9bc508b4a05a8d3cd03cbeb78e5f02e75afac06ccee8373fcefa575c8e8f53b159b517ccb

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
Filesize
5KB

MD5
9e6ff4558ec9623fa3f8ed996b73c87b

SHA1
d64621b5aced96265a113c4ba59f3d5e78d9bb17

SHA256
5565aec3b449b772d2395a930cc1374393e7935c695aa31353a59554db41b3d9

SHA512
61fe972bb7228bbeb6141f523a246a424c06116d2e481586a7a4b433c32cfaa6084961a37fead4564abd306901c45aa632200dab674d08bab1cf94e5fb46f36f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
Filesize
17KB

MD5
30ce8d723006db50106bdb4562062108

SHA1
50daf06f0a063c9511c0b36e5d16e88c39d4d2d6

SHA256
c9f38ccf056a97d66dc6b434edf712d1015183f91386c1fadcf5e922d55ea493

SHA512
5bc3716e3ef56eeeb0fc55d80667edc09347e770df8570fc3e46ba5660222c2e2e3e142715afa3e1353bc7aa0be08dfda9dd4fdb0d8eec39fb03025f22527859

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
Filesize
320KB

MD5
0dfb2c426b68223dbccebff803978f57

SHA1
ecfe0d9ec242a06cf60503504bbf9bc86dfaae5a

SHA256
6d5b9805e12e2fea6d3d2d6f8967e07ad2b958a90dba874d30442e44415816a4

SHA512
86beb23f42b2c89e0e98a8626ccea42e803747b5df8157b08cb3a8c1c0f8d4552c7e298fcc2c5cc6470289fe63edcbe0cb49ed4dba9e930f0f4b670e8870bb43

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
Filesize
1KB

MD5
2378abe2e8bb7707cf2c73dbe004fbe2

SHA1
e13b1b3429344b0fb6aa7a356a120eb8dc45273b

SHA256
13a11fd6b4553630a00beba550e61374d33cc7864cce3716267f7330ac9e6f27

SHA512
a08ec21000f501f9c61654e0eb3f8af5901c1b5e534f1a7a7b45d72db4a03ac60a0674dc73a130273d2569c4eb6046a32339fcd74eec7ce4d978fb9d7cd05fc8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
Filesize
10KB

MD5
4321cb512666131f433ab6e4db1a155e

SHA1
6d13608c6e0d9e711725b3f29afd6e6d959f0a8e

SHA256
ab4b62f1632b80227d98bd71913c3f2891d0cf383dd1e7c65e04f22032b83449

SHA512
5147f3a6d5d64e9fb0dbcbf30500b53a9056194fde8a039baacc376aa66938a80a3fc8ef7d13505b5d3d0a9bd801b2a42fb3fd2306d34b8deb45bbfd4b3a81cc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
Filesize
3KB

MD5
ee8168d6ed72ac59329a6517ba25eb23

SHA1
852480a80201096c214bd1a5f8c9cadde77151e6

SHA256
b741fd9e6898b3c850b06dafce8aa24009a7d8e72d257fa07a523fd7593b66d0

SHA512
64241e37dadccfa5a4e9a8491ef8a324f61d801b491181d6ec82dd5f944546e6c42f7ef7d53c389a81c7094e69d9d056cb514d6b2430404c7c06747d553cadfd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
Filesize
176B

MD5
ef1e0ff4b6db2d01f0bc44717be5aa8b

SHA1
cef72d3732a4eb6bf0c43afd0fcff935303d3b25

SHA256
c65ef2f9e11a487d8e5efb7442d84578bee8b491cbca2c86fc7911cb978c958e

SHA512
dbb59fb2791f0f3b90c8c5a2e12f7a6e1cb24b5ba3f5eb93e72977d6f262c3d2cc5e0aaca79d9795130f348c493707257c7f19cfa99dbdaa666c438f7a9b7967

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
Filesize
1KB

MD5
4458319ffe390a7fb835382303407d83

SHA1
04c2eef67b5e38816a1d9c86ccb0c451d720ef33

SHA256
48096435724389e3637a2cd8abc7ae1a445e7a79d631e48833f545485e5f1705

SHA512
1007526c4a87439a9ff315701da88c43e8a7d32d9b9717eb814492fdbb78baf1ef1c76916f062feb888f3ea88e9ca31f29412c311a67a1e3f80877d66b34cb16

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
Filesize
3KB

MD5
0cccc0460326ba8be5675b8feecdcc83

SHA1
92a7aff8697fac47bb617be6f7003da51d6509b7

SHA256
f0de04747696ef1dcc843b3f7680cf6dc7d3cf323a6167d3488b93466ff4dc3f

SHA512
093578fc0e5d76b44295679433609273c2d77ca7a08ac4ca2778c942dbe59f559dad797c6019dd76f0c67ca30805a77313a12d62984b4bdd48f3296937fefcfd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
Filesize
1KB

MD5
fa6a14c5e7bba7b603057e62cd89239c

SHA1
263f25b87a7e0dd6d2c18b307f74d82a099e35cc

SHA256
28e252d6834538035480dd9ef3edd342741659c538e18a94412114b0f6385072

SHA512
3e47edb727d35303c5e89bf08df1065b92519d826b9dc9c2573c0e1f7a0fbd702b784a858c45fa123ee4d7df0d5163b241875d6bd668100428961ad9542da66c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
Filesize
28KB

MD5
8f24382d0232e9a1402ce47efeb330bb

SHA1
4506e4b51640661cf634481142f7ef5f915fa69b

SHA256
9b804bc1f8cf4895c5070fc1f5847e3c535a0e820bcdbcad41ffc8dcb2290431

SHA512
2ac67359921625645fcd41f71ba25526b5322d9462f32b09c52f83e709aacd9fdd397d7ddebdd16f8cd9a0db074e8c5406ec14440066a788676f7cf5555e78c2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
Filesize
2KB

MD5
c3e439e71af739d571da85c8844a4564

SHA1
61871675d198fac44acf5daff320a95e3d8e50f3

SHA256
b873dcfd9f290ec3f39c41623eb7885b375c7c22149e9fca6d3e126bbd2aa06c

SHA512
6500ae6a0399d86ef1d6db62ec7d0ed372f08739a4375ab2a8ea655202687fb483695ba35f631dead5a7bbd4b5a767ea8a073420d27b5f3303e690f0be1a1498

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
Filesize
1KB

MD5
edf9cfeafa5451e5681c7665db804ba8

SHA1
f0a3a6968bd2e21489601352ebe0608058baaff5

SHA256
62691d0725e5118dd8239a9cdabc103ebd8dd6683a1c4b7341d9b72ffd3ba780

SHA512
f99b6bb17670ee320515115929e1900279350437e00d63ab10c552b2fc4e4918220d710aa0a57dc7c6413760dde68857cc44125a68f487673f1885ecfd540b34

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
Filesize
2KB

MD5
003192256292c4068e4cd8c686dd14f9

SHA1
8e023c4e1b491c15dcb2d621cbb91cdc33c99d10

SHA256
2648d4fba36706c90ae8d8ea4920562b49a16830c04af06d5d054e5733202f51

SHA512
c988851298e67d48993cddf8625a8431457b27e56d329d34e3261e1085e4ab65c47e6ec60b068d57cfeeb7a41087d8703d8fc5a3e33ea33b2f143df7da83c51c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
Filesize
1KB

MD5
30df00e5d278216889249913584fae75

SHA1
5ca11e3737d62a2874cb85092386233503bf120d

SHA256
35a73bd8a80d1f135da9490a8584fe5ff06026002e564b9b3f9b5693095924d9

SHA512
67ec31a28865303a009fbadef0d8b83f093a8b5d5867add76a9eed35a7d5c67653ad277de1a85658cea5aa68aa74ddb69665b1e9afa99042c61ddfdf94386a36

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
Filesize
1KB

MD5
a176099a54159a26b96111bf3daf7f36

SHA1
cc71a543219d49218615819c5c4a63c7b1019654

SHA256
40e374c6b055998054a02286bb7257d487d9551e43edf4e09cb703173cc176c4

SHA512
94468305bf5370dddf43d42017f809e06c2bdd44cc51c697d75d479f22623cfeb9d090f2ac738c435806995d4097114407515c8f433daa7154c00d63738e2dcd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
Filesize
1KB

MD5
34b1d76053bd4b44104326558f8e1a92

SHA1
2bba03dff189311cd03b87bd6e9f234199001e30

SHA256
0468b2e617064001a864b735ff00a086b8f5b8f2fa1d9f4a359149afea473372

SHA512
4e06e18f22f51a71c5b9387878542aa41c8a5b052850361ec65e0d54bce809ced7fdde48a6454d76cf327f3e9712179b80212ad1fe6b17aedf147e3aa82436da

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
Filesize
3KB

MD5
00e45d116ae364fcd342832d6f3e7cb7

SHA1
4b02629ada40d6fcfba28513aeaa4003ef9dc84d

SHA256
672d8801d5be77fe2ec1e1c2c860cee1e807c87898e51b5b6dfaa9afbf17fc9b

SHA512
36b5af22496d29334dc5fcd3287bf8c3e86827323965218760819f9f6b51c15e072ae95e1dc9b268ec6f94a5f53c14d143d579b78834e6836255105ab05f3311

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
Filesize
2KB

MD5
c0b70c98d6c7bba77dd397a91b7ff059

SHA1
7ea7b75fc03384a0f86720d3466f4456dc815d46

SHA256
6cc0736c4a1a46c7f3722bc290d494cb0430429fb65d28ebfd6027c3c2541366

SHA512
1597ef07a5b152a847e8d26676dcae441a526c5dd7ee8095b93aef691be60ecc4bde1f084c6fa7294d2be9b34b7b8d4169004fe7d67525f99458549ff4e0b990

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
Filesize
6KB

MD5
61517b7453baa2dbed6bd7b60a753642

SHA1
533a239234d4ea62b08f8f8fdd5776c46aa66846

SHA256
b46ec3c93755da6fb5c92b374b3008dea20a45fd9bad106b72adb44ec83bac20

SHA512
e63b0bde9d6864a2f2e9d384444d365118b5224b5465baad3c3e28a1f2b09d8c7f551eb7670d5b9fdf62f8a3cd468fc0a42a3a7cec755dac16875bd1786a0173

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
Filesize
5KB

MD5
2034ef02ef257a9a76b2d8261a5c6296

SHA1
f3d7f0db5502b61cfd2f2679ea25eb377c0141d4

SHA256
db90912b59b4a22b1502a6e6fa4720fdff0482d2a51dbe871eeefa913c049a0f

SHA512
239af0e85f9516cd0d3be7b2b913fa6d52231d9d4d737ea72e590cadcde1bbce805d4a2f3df18db06d882418870ce905ad464491c047b0a1465b0606ad1e2f3d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
Filesize
3KB

MD5
7a085b06234126c353d6c72df3b48d69

SHA1
5c7ee4fbc0e10c90b3eb3277d857c6a5f7675ca8

SHA256
a6370928817a4c1f85555b3b356ee7b6a837a8447c32628ebbb1dcc7ef73e711

SHA512
cb63cd2db00ab346eafe83446efee0fe156569a24424e4a2c56ae8ee6b8216d924b8fc0b2203719e3edb4aa5c8afdaf969bd301950e255f3435698ed6431ffee

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
Filesize
2KB

MD5
2ef80507e383af0b4dc86b22d941b3a7

SHA1
2c0d221dfb7592ef923d23742601b9c0ba9e0b96

SHA256
9eaa22665b338a872210f77156210a92912a19c086d970fa701058b67d2be644

SHA512
2ef8ca982addeb26e1845672667373a2badc4260a560f4720aa8c736acd602ca46503cdd49c89354858222b8f4ff9b99de51a63397ecc2a178b6dc1ef99163b7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
Filesize
2KB

MD5
9753950516cdac9776ff80e7ed5e520d

SHA1
2cfa973782674447f2a220555c3b4ed3e466d300

SHA256
5e506c68581b937e8dedfa96a05c2277849f8b1acc738bcfb28bea49c48ae2b7

SHA512
9d0e00e82cc720fa392fc56f7c37c5cddc1687f1fd8c193016a57b6f49e90da41b5fb8538ded2a9b4c6d174e65996aef784dafdf138da6e2e38da508a9de920f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md.fantom
Filesize
1KB

MD5
42358268b1a94b7af2faa8e68a405804

SHA1
274a6d282ab02d565cff88e9e022d11e632d7526

SHA256
8cf53470d20c5be5acbf721afb14bb8e01b17e0402997c34a7f1985c883ca76b

SHA512
024d0a3656fb51f854177e0b87f695cc0f79cc001172516f3769215126773430344963c2f791c179e7f78250008ee538c8ae7e55074aecd87546dd96d3eabdb8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
Filesize
1KB

MD5
4903bb6ae60d8b4439ef40ed6a1e3363

SHA1
ff1de9df8d3d9e5a8f6e2be879496e4a762c9981

SHA256
73e89a6b07ed0576187cdc13f8325dc975624e6a2a7b8a7040df210b209eb6d2

SHA512
4e0583bdca76a47538bb39c782b063c1e43b4741f7673d783a3b00e4285b0a4cc2fd71ca2a4dca7aa96e747323404e77463de579aa4019fb3e8d5da9c339d9de

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
Filesize
11KB

MD5
8f524b6abfbbba7aa44ec380cad1f668

SHA1
49f7518b62d0afd4745db9d7d273d7af984a45e1

SHA256
f4d7d7c39ab7594ad06312675715208c2f235fbe2330c02cf4727e195873e3ff

SHA512
f141676af079d7f231268d0ea248adffcbe6641f0b131fdcba6b61fb229155515198ce63b2a1b334a3e01ef7f45907a8ece69f895d3f610dd619846e64c0541d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
Filesize
1KB

MD5
11e0611624667b6356eed3d992939b9a

SHA1
e6728e65ccca5dfda32de02da0b922ab20c44acd

SHA256
54b972d941a1a980b1dab07999ffcb0567b0faaa80f7c298b893ebea87f360b2

SHA512
86f06096ffaca8c72f52c4658d8d07070749e7cb06c89023c20ad3169063d23a0c86d4bc3b0cf43cce1eb8c0226828d801975384e5d1b27775b9a70a4ed705bb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
Filesize
2KB

MD5
57bbd5b94e3b7f4d68f539ee9dab1e0f

SHA1
d9a5c012e05816c8bc52ae38e08d2154bdaec4c1

SHA256
fcc411d138c6bd65f6214956dd218f7b8bdcac1db0f5c7c018c7ee7964b36b41

SHA512
406181420abe85e7638589aa0a2b118c28be8dad66e90deb3002ee92592b43a93abd20dce0e4cabdb5acb90cc599ae32b85c7bce71aec909b0685ff96713228e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
Filesize
11KB

MD5
7d3277c092c47c41da6f3faa6d2a2208

SHA1
3ba3e04b19a4699f3d96ef8a36f262843fb46a63

SHA256
e6b17875c01d1b41074338b2b2f25d8ca34bafacbec21ab56c3f36ce515ca2e3

SHA512
648d1af726c0b1eb5e57170e35423cac354cb6a2a63aba29d0e5b504f12268f51891077bb7cea7bbb1eef3eeff595610f2ea8760efbf211f467644f7f5766e7a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
Filesize
11KB

MD5
aefa433f8fe168768e1a01c4eac240a2

SHA1
212b051360a6d46f1ebbb5ce79a0dcd929924ef3

SHA256
359d681dc23dd3f3ad6a393f366a855514c24b6161cc9736a9c622567af75b66

SHA512
265fc825d49fcc80d87c621ca082482463aabf0f51d8a337361e9c6554e1c3bc8fb3708f82145eeb7a79e6e5e25e5a2d2f0998ddeada370e13c3b9b4a8e8c3d5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
Filesize
11KB

MD5
bfe8f0f0385d87d4a36d84b0d40e8373

SHA1
8e3eeeaebc4a2d4314d72d9b2bebf977de9d8e6b

SHA256
858020acf059db305336685fe08fde3be86b656663053f2b8dcb808fe0d147bf

SHA512
07e2a6b5f4abf5c5f47580af8f26af13edfb1b8adab1017b4564defcd6117955b9c941861d5bbbe5451a641f18d205f0ca44276817c06fff181098a3d48263b5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
Filesize
1024B

MD5
16a5ebdfcf5ca0fad2612c5466253911

SHA1
e4296628f56625704c77629ac6ab74bb26c33e39

SHA256
6c3cacd0149e49602df35d1df09cc272052df05594ccbb7e55663db23b13b7da

SHA512
5d6af93b88264a553802d8c9c1b49dce4d9b1d8427bd4e58e2a862b51cabf44b36b58139dbee717b467bd7d6dd66d7091784c9d263cf03af054502502664fdec

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
Filesize
48B

MD5
cd2d9166c6f214490d4fc6457a66b8fb

SHA1
4b6a5da82a3f8b464d6cde05fede2e370fcb3d3c

SHA256
fdbafa57150b47a547cb006fbb52b5c4fc7c18a5191f2b2b0cb27661d8e28a65

SHA512
80d51f28182d7af13eac1bc5403105a9db023a04e6a940626000de2e68032a60ed2855331b3cdb18e4ac49b432afe15e7c1c45230cd1bf211482bafd697a1837

Download Submit
C:\ProgramData\Microsoft\Provisioning\{23cb517f-5073-4e96-a202-7fe6122a2271}\MasterDatastore.xml
Filesize
272B

MD5
d254573d7ad0b383d3cb34d8c258491c

SHA1
2a7827f98299595791430e7ac1ddef1cf262a9af

SHA256
437f17c88c020cc4d773e73538f7c2dca06c35cfb8713be19edc2371bc05bc75

SHA512
1e2c38aeb8b54c4bc3b348a6e35003868b7f134be6b5707bbeb5175cee9508bda9fb5a747763c0c753d2d72e040f80cfcdaaa7a070ce458c89af3bf75266b0f3

Download Submit
C:\ProgramData\Microsoft\Provisioning\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\Prov\RunTime.xml
Filesize
256B

MD5
c374c7cfcd191b1323b19a2e750e09d7

SHA1
08b7de4ea6cc20b9f0ce36badf0002061fc26267

SHA256
0b9afc58762ea41eac820edafad0069f2c115d03b4ca43e9a000d4d6ca802402

SHA512
0133bb813fde0b0afff235d84b46071d75cbb133347b5b04c7a48a35874c636251f3c69ea1b0092a00064bce3326d293a5a6e723b5a8a6c4aaa2a33cefeb4e09

Download Submit
C:\ProgramData\Microsoft\Provisioning\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\Prov\RunTime.xml
Filesize
464B

MD5
23b9ef8c19146321f32b21e089860609

SHA1
e34e47b8a60b5b76865746bee7a37ee94d2664b9

SHA256
efba1bf75365971b4a592ff671066099e65eafd892ea3d3f81fb900349b3ecaa

SHA512
1e57d88061f29d5c9ad63598daf14afe1e100fc6a331273c0fdb5fad297116cac5a8a46dd4200d4f53ef548eae9043ac1dc486992d0c20cbdaa5a93850c8f09f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
2KB

MD5
16d6a257021288e196dbef3bca94aabb

SHA1
630bb14c9c40e2cfa0fed54df70e21bc00f7198c

SHA256
a74d2f5746e5a6ac9299e7a1c8e64fb31f04eeda97e4c5b208f8cc82d103d68d

SHA512
19382fbd436a9fcf9aff273ccddeeb01a91a371b82a0a14964429145c52c1e622bd0407ed34b3d25caf89e2bb4e640ad65d64e38e6c09e8b8bef06e3b90b2cf4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
336B

MD5
092e559caef72de2c010cd4c469643bf

SHA1
68e748f71ee2e99f067731e969c9ceac43f74be8

SHA256
34344399a49d5ff30f6b2c750f9a7877278b1eab84f0ea3f9e10b086f95ea30e

SHA512
baa5503fe5350e76d193e4e21d9325aeedcf87cd32b8b8416ac5b31f7a45be118f4ae207b006394c075253218779cdf6cbc7fac8a4a3821c8554267322a7ed24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Filesize
16KB

MD5
6c2730cddb01848ab9e9ef298dfa8df6

SHA1
e20227c91ba355c3b5227a531308f116cdcbf51f

SHA256
013a82bb096b04c28d865cc605ac0316a9ede2406cf5f69debc947813e9dc2d5

SHA512
23b44c000386885b09de5efbe1bf388d4bf3281e64c8eb2d153bfddaab7883c2a63e9664b7cb6659b29b55684501ed827668b52327e024aa0bbe8b02fa980f26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
4KB

MD5
4c1f4e466066aa52df5627727e1e63a6

SHA1
f341a06bbbf27c6208f1809457eec488ec2c504b

SHA256
5e87389db95eb7667485d9af9a4184ea0c6e8d3f110a726512c3b13f358d242d

SHA512
f418ad3731a22b5a194d1ef084ab8994b78e7bf53bdecc1e7e0d1f1cfe3f4d44494318f29c5d58cd5ac46f3ba7d2ef281b76eb82678186786725fbed10bab5c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
3KB

MD5
c3e8dabcf1d2a6b338227d12985a424d

SHA1
bf61d5720e8217d0573dc6eb9d6487702fd9d9ec

SHA256
fd7c3f448a39f6d39325bc9f40c04306d60b5ea939f8012a588b554f8f2fb118

SHA512
3d39c37ec3f068fe5a2aa89b351d6be67e61d0e33b97b87799c3ea7de66bcec089289a5f636c6ca3f31038e0d2df62d509b6b57a6bb17272a36c9700f6ee0aca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
3KB

MD5
487bfc1d89d596d90616aa3cd0225d6e

SHA1
beb78d54960b293d5ee754683cc29d275921e5d8

SHA256
f18f4b0d2c7333e4818de5cb6e6866eb95499d6fe7596c31aaf1ebe306ab8156

SHA512
c98a630735097ab21c7686a38fce5790f1c48f85ecc36dc5749c1664204490e646123a947f8ac4dd4b638b80a709fa12b84bfade381b47086b12d03619b6fba2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
4KB

MD5
118cd0c4817a18b07ac5f0218f2dd4bf

SHA1
adf867bb3525c253edfa9e05d117a638c7f9bb05

SHA256
6c0e62e52c5e57a599c06509c1d24dbddaa43aa81252ab07db81919e756ffc65

SHA512
29825838c30fca3daaea73574ec52eeeb290176836881bdf297ae1b6b02dcc62364b8aa3f2d0f0d10f7730666efef0cce7388fd5489a9a6aaef0e88c35f94e94

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
a519b03a10821ef36ea097d15d8fb0dc

SHA1
2b03209d25dfd631474131f137d24475d4faf819

SHA256
66fa420e01f8a426c7951d6664ee789cabea96c0376ff542104739505f819d45

SHA512
af367ef9311f13aba2cb8af9873d8cef8a0f805728d438f81024fd862d98f999bd3d9927a8d2bc28217a09632741dd564f6733fcc338b3e99232a201657c24cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
bc417114d756ee49940bf4f59f7d1400

SHA1
9289f263597618c8f7f76f0508d119d1387c6794

SHA256
edd0696b9645eb72b5ac3d43cf8882bd6d25e7a0061dd5a2aa866a0857f3108d

SHA512
f1771c9082d85ef21f94253f65eccd57501652055bff27dc1062840b2274591687c0c7af778d47eede30dfd9f6780224aabe5859ff531d1ee5a775db26e10749

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
c4234bbc47cd446f0816fe72696cd9dc

SHA1
657f35b6bcbf4f2ba1efec631f6c6008b06e2833

SHA256
a68ba9421e23a2c33112847c22921a8f9ff1199a41966138b7eabebe6984b354

SHA512
acadbbc60b20332a3f5608e799f33965ceb7336ca6d00701795c37b70301ed655241181e024c872ba9d8c49add05555757db1c0d39d5385270276a41de99c760

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
707B

MD5
c7830b144e806d2433eeda3bb71a21ce

SHA1
bc3fb6e158537c47c9d97fad5c1de5a9da517324

SHA256
3eda4af0dd7aff014a087fed673a0ec557779f6766be040e8bef56d64f91515c

SHA512
0f7363c935ac2b2454a1c697119f1256356d1142093cef2d12dbb5f62c8ff09735c9d1af51c4c7ef820b9b2af2ba57c0dcab15a095b4598201db89e5f6e368e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
a02a7db1ec726c2b24fd13ba1c86e8a7

SHA1
23c76054de0f690f7bc21f079aa12f6f764310da

SHA256
5990d3dbd7c88dd4d16bb0238891be9cb9df9f9c6fac3993773ec375f8de2afe

SHA512
d9999cee210057049c42d52b1cc27ae18c3d5960fa810b59690540030df41a00f453f966a44522a239dacdd94c0ac28694e862ef02f623313c0e86fb798fa1ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
2338d039a8795c7e1382fb61967c9787

SHA1
6f0d4cd198f0397189a1ae10671f210e0233683d

SHA256
661dcc7a933f55c127127defb9119dae04e7f25fb63d9df4d18302cf23f214cd

SHA512
285577aefdbb4ddc04421ff231418229960eca921c9057c29ac44998cd789bd0c1583d3f5ab1cee9c86f38ebf516788f09daa35c462528adb13f21fecc970ff6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
f7eb3421559e736316a8f4e53c2c55a2

SHA1
d47ce6271cfa4ecf56704484992c69af03e60733

SHA256
f966678a66bed1bf3a232d9de75c4f8d76dbfc8fcc6d706c01d62f0522ab16ff

SHA512
f76397c87ae8f00284d7e067bd42551b2b5ad25c7a873368adba1ae070a3e1e6ec37a58588e8c4cf3bb0669faa538933ac0fb62a8bb01ab0c977fc81e917b7a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
539B

MD5
68763212292ddc43997dd19b78c38532

SHA1
8f0c3a869a2f02fa0e00f9d1b7092af9cfffaba8

SHA256
85ae6fc883e56440d08761c9d4b244dc78c608c16a1f706607c7e72190526a33

SHA512
54109b4f59c117cbcfdf180d55369d235a1e03b71aebe30ec759c2b257243c6758c50337fef4fa4bf300b8157fcafbb8de73f7f7d291c5bd5830ae3056a98fe6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
9c2a3c7932435feb29c2498144aae721

SHA1
8384defe640490cb213fa6a7e8733a385b5d10d3

SHA256
0740e366219c23460484b991c69a68d82255c8f4bcdb3c0f5653e1e370a03cd8

SHA512
e27c227f69fe379aaf7d241aaa7826d74c5fb47e64f04574aaa3a845086bf76bee2384692182a8b402ca5cc83f467ab39c1f720b204a26cd1bcb7ead4d073ed3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
f7f38ab8319d1dd341d6cc40d7451bc5

SHA1
bfd689308b1a3add0dc0bedcd03823b08f2cd383

SHA256
41c4f47cd683680e78f005c4643693934aaceeb75325026c37b85b69d9ce4fb2

SHA512
88b1c349c6e4e3908d268f63179c346bc3308a90d3c4cf1c90b13bd1bbbcdb27f07017d6a5406a351ca31f39adb7077ba3dcd97598a0a6dd707d64f712128830

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
ad3b4c6e2bb654235d407fe9f67b1e21

SHA1
0114ef88d761716b64079f315c0c6792269cb21e

SHA256
54495bbd08ac0b8ddfdd888ca266d879381f26ae90a24fdfd4683be1f4f680f9

SHA512
0d81d128e101f71d73bd8dcad3e458aec2ba6bc5bbc004c3a71ea2badd4d3a1495ebf3efc8f717171ad005b49ee980b12b86b9fdc173445381252b455bd260cc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
7cf3197fee8d41dfce1caa96875da4d6

SHA1
5188aa2a1834b4842c5c652536ef1515d56b4a03

SHA256
1e8e902dcf9b2a5ee00466e75df154096ea19625de7793fde748ff5eb15ed0eb

SHA512
83c86fc1cded8245afde860c7180936ca2f88cf5212427e47f6b9024b610d0133dc50a07d16cf00b0dae08f4b0cad199a7767f92652644f953c8cda33b6e54b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
965321ceb12457c0f1130d9be8e460e6

SHA1
31974c0aebeaf8db1fd1de99214b459c12c0ecca

SHA256
4538f128bec559045f91ffd0024e5519e43579f494a15a7eeea1623edf9b030b

SHA512
3a166209e0f48a0aa5545786608ab7dc790b94b29eb698805883705ee6368927b476e8e35c42a4d11fa258cbf9f773767c0fd06a4a9a32044d1e6084c20e59da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
696e45297783321ce0dcec14a09d1192

SHA1
a10a43cdef6fc49733d92817ec9474c90ef568f7

SHA256
c65a13a759647e44aa295646929c68bb11f8f0a6bdad81937c4df787ce34116d

SHA512
ef64c534a057b5e8ad4430ed838d2557b4813fe12f705428b1a3463e71c101a985463ddab8907eca428d3e5912052a88b4fb72139ffd0ec875db7f3f3f572642

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
408c03aa61b5c3f7ec1a64956e5c703e

SHA1
80643e7bd22dc2339baacd31cf98f217ac1eae88

SHA256
e35cf85d081ba3a6fa1eb0910f700c69e2a8322bff7a9c3a21ed8a921f40d43b

SHA512
fead6562aa73518a5404d1d7cfdf0e2021a899d9ac363176f6d59665e2edcc776bc428cfa6c316f5a2dff88af84f489ee970d7e688aebd65288494917e6d264d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
219a66c31c91adeb052757b677c23b93

SHA1
b6085fcb9ed40b90ea0ef3baec3a1df8f6494957

SHA256
6755e6ece5b39184177a8a29d6ee3fb3378a4923ee3944d033e2161090dcfc6a

SHA512
b8838440b0315ba0a0612a0fd499aa81122a6fffb98d24c4d1e5c07bf0d7f1f712ea637c16a91901def43359e39a31efe08e834340c3ba728f6caffb8891dd3c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
a1e5ab94d06bc63c08517c402d7b5d3d

SHA1
e79f25571e4e0e60e543aa6cb6100e5288cf2db6

SHA256
1044f790613a89e43535d437a629c350b7b7f24dde3694edb5f447ad7bf1a005

SHA512
8defb556562763ad028d906bc619dbc132bf748227820fd9d5de85f20798aff7b0519264ebfa3e5ed7d354c5b6da5d6f34481e966a41d78ecbe89127a6c2277b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
c3bafd3fc531a7328ab49da8ed5c8d5e

SHA1
7c3a67b0e1ed5336ff536abb2dafae8862dbe571

SHA256
f99fd527723b98d0ff5ae9fec6257cc51f9ec514f57bc44c7aed3e077b2d8b5a

SHA512
7a6d59b0b7e21a49634402d2a29c9c996571d5d24cc6298db0b9f8767aa88fbef674a37e6b8e3d93f01e9a622d6d47bd8d4e5ded690b1b647a95bfc2790a8266

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
6KB

MD5
03690f481983aa801977bf3a29a99fab

SHA1
5513e26d398077ec72d8cd8fb7c1230b3e6ac60c

SHA256
13eff9c58fc42bd9a862c7b97b85cfdf63a31fda91dee94f3cbe46378f6063ce

SHA512
5c09942f89eaca2f094e6d996a65b38f677d700adfb4867e726cf7d85c98e908f1e324e7f32727e335dfed092bcc0425981ad797064f626839777c4193ff7ef8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
56B

MD5
ae1bccd6831ebfe5ad03b482ee266e4f

SHA1
01f4179f48f1af383b275d7ee338dd160b6f558a

SHA256
1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649

SHA512
baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5862ad.TMP
Filesize
120B

MD5
b55b2d9076a532a641f7f954699671fb

SHA1
b28300f1a5bf0b6f953b8bbc34bbd2a1afced290

SHA256
0e01bcafb1476f347bca783c610f009c4437edb99ea891887e1c4692188e77b7

SHA512
474667f6933abae39502e3d923a6d01c320e56252dc6d0c06b27d8319a30b627e680e9a0646a3eb738aae123803176c0b7ccc7e08445c97f992afcdca11edaf5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
264KB

MD5
8ea175b4b1b6b2d54cdf3ee64ddde7e1

SHA1
46d7a69a36be68ca0340b4a4407a0d962b7b22ad

SHA256
09306b385774596b8906a91a11ccf466a4b4553d17d437ded8e3e06f0b640b65

SHA512
67c06761d332690401512af4a6ab89c5a1566dc43632c72b4a8da0b44291a5e4d823f913724f75bda92db259fd95c038409cdcc429ed71f4da2ca99de48ca729

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
264KB

MD5
a974a0ae73301abfc433851a95120c60

SHA1
955889c4d78da35d2e407153167d16e947387e3e

SHA256
17634d2289d8f151b238e7f5e48f8a677e94f1d69b0ddb60584a603a7d6402b9

SHA512
d0d6322ba6df10b8f26498a47da32d4fff2a42857a4e84c822c7922f61798d0c06999f057e589de4db96091f72315f9a6156d125311a31519f98558441fe148e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
109KB

MD5
2433045c4af7ae8dd16e73a492deb35b

SHA1
603406c321ff16b7ff770462dcd0588ce504470c

SHA256
27ef5a2915986a6fba5a00c543125c72c5694dba140a3fec3d548c94ed93a65f

SHA512
f1f4f0d283ab523784dc48533ab1831c9152da621631e34cad0c372df62243e299f005fc356822ebbf8183d90c3e5306119f52cff019018b7e6ab080982358e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
98KB

MD5
16606744baec56d01248e2018f1d48d7

SHA1
8d61db77e6d61b0602b9b840b957f189ecc44450

SHA256
a0798a884c9d922019da5a4806cfe348af845182c5f6d027b29d533e40e9981e

SHA512
7d6f06d847022c9aaba63c416ef85994237a131007e85fb64132b82f8d4d5052378a6ba9e41b838b7a087cda1737a16e8d95b332c951441c4187ca20bdeb7a1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58a61e.TMP
Filesize
93KB

MD5
a5169666fb646f0080ccc32ddbfa63a4

SHA1
d5b63fbab344b196699c6d1c0fd42797555f7a73

SHA256
043d98e7889a6a8ac7945bdc02de488c0cd26105c0d1cfcb7c013ee2141fe0ff

SHA512
cc8deb8143716a6fe2a675b33b9f7f5ac83d533941b8028f668f219748a09e179478d8fa1455df3c6e9097eea644a8d8bf49954fe934922f94a5ca5e8cee7ff2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\winword.exe_Rules.xml
Filesize
753KB

MD5
cea914b9a05a519d5e42a3b5dc94a48a

SHA1
bbbc1cffef746e9192820e5a0037a316710b4c25

SHA256
968e3e3b26f46a290df7d24cf4e590ddc4b61c53c4fd819b4330c2e87bda7a8c

SHA512
94b2c36a98a40fee1f0891cd35252351f1045ba87cef22ecaac12c6a20a47ee9c671bab2fd5c0c1c64e4bd07ebf6184abae14c2ec89a54e732a3f4158a7006dc

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\LogFiles\edbtmp.log
Filesize
512KB

MD5
7f2f7b6d41790c75add94bec52e6fffb

SHA1
83fbef448956153f9fa1ac362ec6e2454fe68771

SHA256
7e10d5de04e2e8aecad492d8e6e2dda83e7d9c67376feabaacf39e4c6467defa

SHA512
aad7ed64bbe25aa887142bdc7dc821764a544201aae54916132ec5d67bc84e9a7b22974d19b6a3c01fd566abaf5ba53f3f6e2de14476341ff3ad53517cc4e28a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{857b0eff-5ab6-4b6e-b860-831cf8c2555c}\0.1.filtertrie.intermediate.txt
Filesize
16B

MD5
d9227a8a27a0c908133f27b7668570e6

SHA1
c05834d0cb50047afeb7727862b141dc06775440

SHA256
d0d2161a027587e30e9ad0264701ed93c522ebbfc136adb36b97d5313e525440

SHA512
bb23c7aab28dc4d1909c8c01f84beb388e7c0822a8e413fc359f201b012055bbcdc7863715e72fb1e21de13ed703d588fe583a9734462f58285bb77d8d244ff4

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{857b0eff-5ab6-4b6e-b860-831cf8c2555c}\0.2.filtertrie.intermediate.txt
Filesize
16B

MD5
c7b771ee5bfc9662070fb4d4971ef6b2

SHA1
5a8fd941b8f0ae2b3d0bd7c9120eee348d188471

SHA256
fe8e78972ea284913f76713979b06eddb5ecb732089c8145893d4f015a22b800

SHA512
7f0f3e7aa1d87e756a01728e07b618c3dd662b0d4d3f984e4aa31e8a067cb6a4448162c975dd4c12d50629b6e875854c706bd40906058a9d014d351a5703a610

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ab579fd8-4c88-4489-947b-3593d0388d0f}\0.0.filtertrie.intermediate.txt
Filesize
17KB

MD5
ff9a6f032822f15f5d98d470148f8af0

SHA1
ae14d0dc87f4619d986f73462bc861c05287aa29

SHA256
dca04248c1ea8054a123cd9de133ede01e2b5a4f78174c1a3604f449b901db78

SHA512
7be4bbc591d44026ee219269a5fd069579194e8a12d0450a0a8d76500a1dda8bde569a5ee25922609c33f25505265f34342574a1322c27184c19d7a897a83f4d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{ba181f51-8338-4f76-92b7-6f1f5d4490af}\0.0.filtertrie.intermediate.txt
Filesize
14KB

MD5
d7bd21379336ef3099bce8599eb28adf

SHA1
2cc9798968d7a92792735ecacd91109bfdc14ec2

SHA256
e3a6dc5d683a3e197c7cb03aaec2fec718415ac46ae607b780fe84cde92398fe

SHA512
6f9111c53354271ca9572a5f685c026b1179cb42b0680ae7ad7c677dd8b4d9f201655a4a9dc500ab089b6e7433b1ff9add9c67f8444524cc8280017580aac178

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133553357302933689.txt
Filesize
85KB

MD5
e57fbf57805b3cf7ec1771ee28ee8bdd

SHA1
515e5231b08e95e7484b49d56f6ac7de523f2e6f

SHA256
68d855c19aee95bf3048ad387036b5f57be6d608fa90b1100009bde126a5a989

SHA512
d85a9e99c8093ce27e9a9c052af60638e0f9e143eda5ca46e247abea536be45771a36346a722e3483d3d4568c77e46d7f583c32b1333de407f6d8e0429e1945f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240319_153231673.html
Filesize
1015KB

MD5
5f44c70a2b44cef8b7ef8e1032f285bc

SHA1
8afce6a3ab0004b4b0875f464f06b1ec0523eb23

SHA256
8b19e587ec1dd3ae0591a4ddce983eaa324938cc316c197ead712b113a7703b7

SHA512
d88d406796b8d7374d84534b5ce37775904168252550c3cc2b329f4c902337d0659fee225db606614c6b131ed866d25692cf98e9168c947aa9304cb5b05ead6d

Download Submit
C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
C:\Users\Admin\AppData\Roaming\delback.bat
Filesize
35B

MD5
d41ac96c53b4fe0dfbe1b080649141c1

SHA1
b4d75213c61646b5bd48eadf723542fa9aef8b00

SHA256
325de85e48afabcc0d53d5f6d9371314d0ed6e46d91c271abceccca58cbbd238

SHA512
a65c10d4face73078643ebc99c022a19a5944cef222c27739bc94456bd7601b5f118d4f2738fbc8374b8ad86c927fa0dcca7177fc936409f3000b7b58a6c1563

Download Submit
C:\Users\Admin\Downloads\BadRabbit.zip
Filesize
393KB

MD5
61da9939db42e2c3007ece3f163e2d06

SHA1
4bd7e9098de61adecc1bdbd1a01490994d1905fb

SHA256
ea8ccb8b5ec36195af831001b3cc46caedfc61a6194e2568901e7685c57ceefa

SHA512
14d0bc14a10e5bd8022e7ab4a80f98600f84754c2c80e22a8e3d9f9555dde5bad056d925576b29fc1a37e73c6ebca693687b47317a469a7dfdc4ab0f3d97a63e

Download Submit
C:\Users\Admin\Downloads\BadRabbit.zip
Filesize
393KB

MD5
de40dfe620a8fefe15612b6b64c2b912

SHA1
3d58da8dc035d4f0482a4772517d1146430dd3ad

SHA256
4b2e17acb591100e6cee9611a74ba1d3ee224d031d4bffe4b9eb98f22201d536

SHA512
0455ad967c0c31fbcfea1abacd9662553abc5039b6cffb2df6255799200cce3700bc2f4f33efaea133f955e2472420eb6f50c912f6a771300370e535dd02d571

Download Submit
C:\Users\Admin\Downloads\Fantom.zip
Filesize
198KB

MD5
3500896b86e96031cf27527cb2bbce40

SHA1
77ad023a9ea211fa01413ecd3033773698168a9c

SHA256
7b8e6ac4d63a4d8515200807fbd3a2bd46ac77df64300e5f19508af0d54d2be6

SHA512
3aaeeb40471a639619a6022d8cfc308ee5898e7ce0646b36dd21c3946feb3476b51ed8dfdf92e836d77c8e8f7214129c3283ad05c3d868e1027cb8ce8aa01884

Download Submit
C:\Users\Admin\Downloads\Spark.zip
Filesize
1.6MB

MD5
860168a14356be3e65650b8a3cf6c3a0

SHA1
ea99e29e119d88caf9d38fb6aac04a97e9c5ac63

SHA256
1ae2a53c8adc94b1566ea6b3aa63ce7fe2a2b2fcbe4cec3112f9ebe76e2e9bf9

SHA512
0637e4838beded9c829612f0961d981ee6c049f4390c3115fed9c4e919561ad3d0aa7110e32c1d62468a7e4cdc85d2f2e39a741939efd1aafae551de705aab61

Download Submit
C:\Windows\AC05.tmp
Filesize
60KB

MD5
347ac3b6b791054de3e5720a7144a977

SHA1
413eba3973a15c1a6429d9f170f3e8287f98c21c

SHA256
301b905eb98d8d6bb559c04bbda26628a942b2c4107c07a02e8f753bdcfe347c

SHA512
9a399916bc681964af1e1061bc0a8e2926307642557539ad587ce6f9b5ef93bdf1820fe5d7b5ffe5f0bb38e5b4dc6add213ba04048c0c7c264646375fcd01787

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx
Filesize
3KB

MD5
571851a76c40e759e302bef307b405ac

SHA1
814719ac0fe057d42d6c72cc8b8216e6c84205e7

SHA256
7f37e9c0b287766fe228b51c01abde1c9bc39070c25cc3df6e04724c57de0b70

SHA512
715bfc8c92a20756e98bec4f0bba46ba5f6501f3b5f3632eb53dd643daab449c7ecf6d901e8895ca4e54343846d96f39acea2683486f7e8bf09f5f2b19589cda

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx
Filesize
2KB

MD5
7284313be023966718dc34342e649fad

SHA1
612c5d8efa09a978f7d9e1823191ce7cd67497d1

SHA256
bdd2a24f0e86237f59e01640a42186d421f1f795aff6ce96c5cc42e417ecc295

SHA512
76fe052e2e670d765d986f75ac819f0d2569e6e2ffbb17037893681f38c4e4b25b5ac7935c2803623add493ac74cc9d801931f25f01800839efe74faf65ad0f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx.fantom
Filesize
14KB

MD5
50ba51f8ae2a2cd60d4d369205cf16c6

SHA1
b3129aaf211453fbdc9a684328dd08bddad7c337

SHA256
e51290ae697e18c99ef8a0e7aad01e6c3378d9a00e08241d9462988cdb3d5b58

SHA512
3ae6943796aa9c1c81164ef43ce3f18c098788455ae6807f2bbcff8f16959efda575c9ac8cc084602a217542835fb097abec1a198e3d381afcc9197afb9f2812

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml
Filesize
320B

MD5
4dd338adf75a20d8bec749a700ce7048

SHA1
52d038f02cd1d1dd630b30ed8815f2f993865a9f

SHA256
8cdf69bf9d736ccbcca93ccc54cbd77e736a13c88e1904400077173ca200468b

SHA512
216098611cf49fc443a3c05216e1be2c16c99523a1b9572314175605caec72c78f692dd37a56c9179649e61f477010837c045a52fd4a884ff794e3a51c44dbf5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
Filesize
21KB

MD5
fc6dc06cadf16653b0ece15485af035b

SHA1
381f058ae7e3df44c54ff39404ba80c98d8d1967

SHA256
931d8491dc8fd93f5b65e5d51ca6f3ce633d6f30d9a66035c5a47cb0077ae36c

SHA512
fb193d3d6bbfd210801e09de03fe767ff54132ac557e14f446d8e11ceb9192e56057681b5ec430a2004516b5ff0c42d459f5ff61668789357d8b3adf552f072c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
Filesize
1KB

MD5
d41045d61e07934f344a7ecf7e31b82d

SHA1
43b7854eb0cc045ee953f71cdd460b502638942f

SHA256
9f675f8d55fa4276397775e7663d1c41345824cf768318dd6faa686774228413

SHA512
afd2da07849d4648a1b93391a328c226cc7b50ba3b558f854376d935573fb14adab7022644d81c4a6e88662df44f5d36c3d3f49bc7729437dacdaf619bbcdc46

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif
Filesize
960B

MD5
418735906584909a2a169906655ac34a

SHA1
b20d3e62371e543a9d1a5e53aef0a5d368c70237

SHA256
b7456e7ada520911dc8d63c972938d44fa34d196fa8518870aa7f124f05b52cf

SHA512
eda6d5376f52a1fa4929a738d8f8e321fdaf229c2eed1f31e791ce2eb2a50036ba4ef92a1e6e42f249ee3ca66e0e309d2f07ac2ffe3df906e7e4115f537d8773

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif
Filesize
128B

MD5
7c1cbd9d181ca4fa6f7b4ed1058242ec

SHA1
916cb522b781ed9d24dd0b38f4137ce38275f76a

SHA256
e01ddf3e12e1ad4482e48a8a0e1bbc0daada22b3856a95ad1f3666d24476590f

SHA512
25e99bc90948e619079af737d902429a8c1ebd6fb55441f13727aec2bf8be5e4b63b2548bcdb8e539d4ac3ff8c5a4a5c6d2b832853466d72ccdf1f4994690a4a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif
Filesize
1KB

MD5
16dd6fdafafb39afd17557163ccbd7cf

SHA1
6b96741bebb57c47c47a2bd5e4c95cd2e011f49a

SHA256
d30873144fb8cde9179cbc2b07c46a9cf1aba25b835c10dfb20db17a0d4c04a2

SHA512
b671fde1b6b1b2aca123fd08b462d5097a878d96a004f60accf3277074f0a9677655066893487ee1afcb31558c477abb15a38f02b10dd5e28a876680de1cee0d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
Filesize
8KB

MD5
ae057c13bccd1e709421bf5eb940c480

SHA1
6b7a0cee3f68737931b16621c2b38d5d546e8a6b

SHA256
974efc10b669747f4e784edf8ee1826c0b52c1c42dbcf37aaaa81a3ef989a893

SHA512
d3c5ce0d962ae9e0cd02d5b1689638173bf74b6732ab2bbb71aeb07a8b68558314679d628be128fb41506530792e39c4a52fded4657f0cd92f7f013fa6a9e937

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif
Filesize
64B

MD5
f172ff201a7c330aaa57f10bd6e7d16c

SHA1
437f5b9b0fa17029184a521591e7e89401a25c2e

SHA256
34d25a73b952e356b69e58acb21588e5fee40cb6d0e424463e676701c437d852

SHA512
96c00ed0fed1c883c02edc1e4a44fb69170b3ed206f5af1d0049eb80e489111506ae64d4eff61831f909a1645336cab0de12870b97d7918ba677d3a2cd3b59d2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif
Filesize
928B

MD5
191ee47230d7fefda1c155f480bb2c15

SHA1
7bd92df36e44464b884aa7c75e0523ec206fef85

SHA256
b2bdd50de2a4ba4484dbc9066539f6e5e74b0278d9b4111e62d932bd77dd036a

SHA512
ff4adbb990b4ea9999b3badc425660a551e9d085640408176191dbce23906d4dc6a5370c6223525c5b0bb456d489f4a90ad62da09e60f9e5f312b45dd56c9187

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif
Filesize
96B

MD5
940baadfc5a8684168e0774d2397a53d

SHA1
4487d6acd8dba1dcf24f5f120daac9b08f40e025

SHA256
3bf17e8850438946bfe0eaa39efbcf996ab8f9298c4a93190a303344e6db9636

SHA512
96a0954fbecf8c95b3014c5f10025a6609f2ea7ea2d6e39b3b1bd6e481450278cc46bc87c136f7b52f4acb47c6622be623c9a0132b215301db8aa5f0b2cce259

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif
Filesize
96B

MD5
c7d61aca4d1b60578bb1e257d5519ae7

SHA1
8c3ecf830aa2944e477e0c0a5d125dceaa0d22f6

SHA256
c179783934bd11461709f133ad4824f58f6e515200a21831d0698945104b5df3

SHA512
a73e2aaf0443b405c302d1382a6a2e33e4d750c19f06697346fb28eb52a3410055bd94705266a2fd955864776dc2f17a9e76273d9ff43a969bc5d73ded01a8de

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
Filesize
336B

MD5
40e24356f8ee479fcc365dcc5c131d17

SHA1
0e3b26264bcaf6685a1193be1024e38c53d40ee7

SHA256
1e0531af8334c455d77743ef0a899493f12a8bb8cdbc24c87dc9798ac9700402

SHA512
1b11a2676a435a305d757b3497825eabe95549c1a59a25da18a55ba8cab65c3bf1143aed6e445232415058d871983549e28bb67e6afa75c118bef5d630926507

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
Filesize
1KB

MD5
0b96bffbb3afee6dc4c3bd49a7c62456

SHA1
f9cc6863d865f255fa35dabe69fe9f5886dcd3a5

SHA256
01ce55491e6354ef0c359d5856fa5676e7da745be810330ada530643d7535529

SHA512
d38a311c9ddcdb077a44f1633b05a73c938f9f32b69dcb4893274e379b2381d63c3e1155fedeb3eae12d494b3ff220345ab676a2fff64c1c75a538112a75eb56

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif
Filesize
176B

MD5
5b98dcc56d2b95ae20ef09ad7e66ae37

SHA1
2ff8ead8200a40e58bbf3685f8018793448a2d2e

SHA256
e75c4d0739be561fd58a3ad883add33ffd9c22aa871367c4729676e6871bf73f

SHA512
8c3ce7161d8b0ede465cd4680b31f87ae9a4dc88a5878922542fb410f820f700b72fc56b4e654ae523f476191a795e2c56acfd2f30031099ef18549553207ae3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif
Filesize
592B

MD5
b8081ada4d4a2dc20ddc13420c3061d0

SHA1
6ff961fa05933b96ccbd7212e16ba87a2ff48980

SHA256
8cdf65f1d073336c813281ef38cedc206c89de9a71f0194a0a7f9319e2a7f4ac

SHA512
bf852a126f96b791688f6bd91b8882f76e9212333bef303568730ce168dbb57a7ca12e0960837e93b555c5b3f14994a2d8772dce1bd3f903b6bb189cf50ecb26

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif
Filesize
128B

MD5
a999becf915db13f22b926ba2cd81c2d

SHA1
73d9fa05dbbc9b2509a4d800c1ca523f38da238d

SHA256
ecbb47166e1ba8b4ba4ce256dd1ed4eafdc5ef1dcf1d776e61d165dd534dbd9e

SHA512
5e524430a966c338e43027473dd86b4c48a0304a4985db3b71d4bd1f128a7134a4abff3351796d7a6b064468d1827bc569295463afc96e0829b65c1ad44888f5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
Filesize
8KB

MD5
2d739e39bea6a88e87268a7e954a3ccb

SHA1
8ddde3f56083f5f5e1cd7de1b0e9b5df906583d7

SHA256
2f88a4dd4b68843a02d00cc9ba9b32ed6e226fec02880caf7519166963aa8ae9

SHA512
58ebfa3f21bde6d8dee2c6f90e91abca6c5068a55f94c253d9f77a51903d8eb7954f26f0bef198860a2dd87b347b80ace6c265be6e84a306051bfd256f0626a7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
Filesize
896B

MD5
2fd696980c6d703ff99a80f2371183f8

SHA1
ed7b4f63e7f46a6757578c87efd58441111f5258

SHA256
2522e33578bc5f0009d72499a72e17c6e4c3d350bae4eaf98d2a7cca50b95bd0

SHA512
b29708205fb4d3c2e7792766fa2306ea0ac7fe5866df2c39d550275653846e98069aa9be56ac3880b1584d9cfa650c77cb911f39523d9a2ce30713d0804b4b18

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx.fantom
Filesize
12KB

MD5
6db7b07ef20895d749cabf72644989e6

SHA1
02f58a0321f308747754e34c7da91c68c8e379d2

SHA256
2922d6a13342ed1f087eed22c17f56cea1f7ea3e1e9878dda5e4817ccb98291c

SHA512
4970ead6894a11237b39eff2d87c1de510590ac1e2291f19ba55e582cc9567e883b09b83d71c9d9759e28d78815d1ecd3431149f44bd4008489bb8a32d86ca35

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx
Filesize
9KB

MD5
8acc6083b74fecded2de93566a9fdc8d

SHA1
4443f721f69831809bc8ab3486421be0f86cf482

SHA256
686ffb574886b48938664446b2aa0c0b3657770fbd01d480a4e0c7031c50d9b2

SHA512
cdd8689e1bcc88115a427096ab9842dd79e6ab5bb635e2c7cfd5fde34a2cfa6851588a64fcc3f10a6cefe71dc45a1587486d4d2600fa797e75005e0b8eec48a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ProviderList.ascx
Filesize
8KB

MD5
ab47d61cd546870d6af54f0b89e8aa7e

SHA1
eab0016df7f41e27412eb0551f21667b2c66793b

SHA256
80ff4b81bf5809e974391a6cd6f45a64e1c966cfbe3f401e906d911a6cdc8a1a

SHA512
930a27a519b6bace8943911e2d29995ca11bc96307544421e36c78077cd17ea02160027bccec726273fec23eff6113c0784806c7efd494c819020442d3117d03

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx
Filesize
2KB

MD5
af5071b5f84c129b3c618cdf9f44f969

SHA1
9da04f520e89f6e7b0523860b37900873464ca68

SHA256
3d341ed6dfb1cb10c38c333a48aeaede30b00a242bf825b75b50a18878de69ca

SHA512
752b3e127ea359c3a48ffa73ae2ba6b7eec9b285c135ae389f8791ed7efeb152be836761ae12f156ca4eaa136930f8d912cbe8647aacb67a4a2697f68d765f9e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx
Filesize
10KB

MD5
69078c83894da615a26665e1c3703406

SHA1
85c66143f409fa0dc0bed08fefb2f76ae7bab216

SHA256
dbd4471547c3c29b72091fd43acbeb89fd39546e4ed078cf3b823fa81d0dd498

SHA512
d5b6b9c5890d2cc6753e506b086457d0e50fdec500f8df93f697027a4abe17fa9e1a6295bf21b3dd838d73462d0c56698c130ed6f4ae4f2f8ec826c2cc14f11a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx
Filesize
21KB

MD5
fa7c24e50d6242a99eb33eedd6453fa2

SHA1
ca961e3efe6d89d4a5003371368c743b62dbe35c

SHA256
c5844e8c13f639bae45ba0e60e00f33bec1f6ef5b060193ea730cd3b8a71f759

SHA512
b8aa16a8aa5d6b0e5286a60037bc646feb1d2f942f8c6d47ead3f0817c519230e6c924dd2576bb82bf3075d0572dae1137429d5ce9e9b4cc045891e2d5e176a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\editUser.aspx
Filesize
11KB

MD5
d2c268812e7553632b59c00ee300bc5f

SHA1
0a118c464a80982b3bfd16e94c5678d502c1b136

SHA256
a7d3d7a4b921b4e65dba96aabdd15c2f2900f6ffb9b820d31fcb7aa5ec03b954

SHA512
7ccdbb66b1f821581f579aff770f808e8d7a66f1daebe79e400d792a67bcb69e7d49c0be4a49fdef749da92ce666eb7dc483080e6e39464286e57bde06ae91e4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx
Filesize
10KB

MD5
e81956dadaf3c92287590cfca75f8d09

SHA1
c2723cb45b6ec6681e98c1df279e190924932dd5

SHA256
654f726e6b0c8be20fa1224ea7e13d1105c9414ee82d8620f970b9bfc7ca8d18

SHA512
f576a55cd152ac929db832d92ffb2aae0b0940f4024907ae0bb3705f5538bdc1e7da8be6580366124f67f260252c0626b555ee102ddf8498a7f3d4b0192f37b7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx
Filesize
2KB

MD5
def6d0a2cf49d058e9feca8dd38c7545

SHA1
4b39728c6d21a315b081408f827615c6d707b018

SHA256
567471d66a3311b881001d27bb4fa18d57995fb3c810788d8a769737ed0bc25e

SHA512
d47c4e5019ac3fc208dbcb3b4874fe31d1b9474ff6cb30d617e84561d534d47c62f122b134dcd95df24c339ee632aebac87f80f7301261ea870eeda47319ebcd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx
Filesize
7KB

MD5
6839ab754139fa45b61af4b43454f3ca

SHA1
d78f9179d147ef61c1479c5395fb875b412c2343

SHA256
ac6518f0da85d50ccf93f7ea0e9c561f0c8473c57f9890b58b2586f557935888

SHA512
752798c0aa39de3adccd6726254a98f82580a1e20cb7f066a60d18e3edea39c245f08ec8749a48d51c44b6766fd0cf0149eb254fedf856f57ff16a220223045f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx
Filesize
272B

MD5
fd702b44f79905cf0051649d58ad076d

SHA1
2d9abb683ec7361727e13cecb311693611c04d35

SHA256
c43ace1c65fa54c5eac3466fa610bfbc4343f55b3434a3585ded284b8fee8669

SHA512
90ad72360a87970107508c58dcb42e8f042b4ea6680bacf4470f4dd8286f350f986186132e3dabcb9ea0e5af48a15fcf252ccb7d751920b300e2ed7304c5d63b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx
Filesize
496B

MD5
ee222cfa66418f7a1ec4a1a9512cd74f

SHA1
4b39dff294b0f559ea50a061c43d9945f4e5c2c0

SHA256
7dcaf4358eaa0cec1207c28ffe8e9849034e3fd7524df3cadb7c4a135014c0ec

SHA512
a87003d3d7a11d77a7b9f87805d2456325ce4076b779b1a28db232ac368db0a326b69051f051e36bfb4a4665f82042747faa6cede0497a80ae9e02d7bb4cacf3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx
Filesize
24KB

MD5
d7ba91ed5e7263dc357aad080269be65

SHA1
e33b1d5f355d02d72bf4ef9362a762f7167cca20

SHA256
15e891e4d6b8c3d36c8ac3c4454e9e448b4baecc23811803af07bc13f3458937

SHA512
a54fa2c46d61b016cd9e5e4773163ff0f91e4878bec236361d08ae5202b0de4db71b8a962b1531cb833806b70d924c239878765636cd5f6d3c2ba3b70f649e9d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx
Filesize
1KB

MD5
2161a5b1aae68c5f01988046d0b386c3

SHA1
db79e64aafdbfec5b07198b196c98196399079e1

SHA256
220d0e51b5395cbb83e5cc36fd6f68d5880c68c6685ef503046f3390c23697f1

SHA512
d4b60b044745ab9496ee148f8baca159dba8f1a7c3608c491c902747a82aa77b32d2d52e3197ac2ed15c1bd88cef226135dfd57fdae2d3c22a7baf477a0b126b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security.aspx
Filesize
9KB

MD5
37e8d3bf65719529305ac76814272a84

SHA1
c908bc42a1dc8a1a6de0e681cad7391ed83778ac

SHA256
8e7b79f62c33b7caa5f4e766bccc1280fcad94b248768c89179550d5ef2e5937

SHA512
6449e43d71e37b4e4c5b36db4d78212e861ac675ddc1ecd5c28f4e58f38f798765c6169f116f652ffda90a134f232279124777ee273d9bd35be89d51e52b9438

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security0.aspx
Filesize
1KB

MD5
063f0f6c723f1563a0e8d3be469996bc

SHA1
e4809438b107ec9eb1a0edfb46727071afcd8c6d

SHA256
b3ae7ed5168dac731675d579c02afce152aa3b57107568c165f5c72a9996abee

SHA512
16cf4675283ebd3e29511bd5cee866f6da5038a2908b41a0e0c8891d4858b7f2c9e8ae9e60ae2578354cd6ee43f32a17dec2990e8bf1054bfbc76cb95a7a1a2e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx
Filesize
2KB

MD5
3c8ae19f102e6d25ef2d39e0bdc9ff3c

SHA1
18d8527f7abd57a561870bc484739e82273ca91a

SHA256
750aaf1bb4db89cf5294819660172f07be663d515b62c1c2ce426944da7effe9

SHA512
a6323bedb8c4b666bf5b2c91e10309c045d0e379a9408977410a0eae39a66a35712b190095cabbb658a8f1b7c8f0d94f430b16a07d1648a547841991cb690bf5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx
Filesize
6KB

MD5
90de6ebeea6a5bdfcc9ffc8e3eefe3d6

SHA1
de446151c7b0981889fe2a01d007469016037bf9

SHA256
d00fcb936c3fe9d6ed69e49957f8326f25c83be934c7a85adacdb2c25afea0d7

SHA512
4645952efe38199aa852352951ab088e060222745106fb20ad1204222534b0e87c4d6413f1a9c900bb64b6cb1ba5544c3e29b2de663540e7f124076d03631de5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx
Filesize
13KB

MD5
cbaccb19acc93c902202a228bca1c8ad

SHA1
4b7f30621d1466679c8eb605b5b70a8f6ed4de03

SHA256
31cd7345636130f0100aa65a2e45242e673ac12b4845c39739b7c7ffafa3a566

SHA512
8792e1db1b470c070b8f2d29e30e0809ccb8150d6a68715f75161d9d3e72c0c66475062e249ed4b8491b4b0df4ee4046108fec2ee69b5e9163ee091f17128b16

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx
Filesize
3KB

MD5
8953cef71aa253d693f3425b89f363d6

SHA1
c7813b1c40b6456e01b70a143b429c42c124e752

SHA256
4ed85b957f7ae3336e8f091f0fa7c4799d4d0fd4333fafb850b27d4161806289

SHA512
663db8ceafcd21dbc2ac04576099b40a9c18c1983dd7ecb880e0d4e5bb2926132fe88bb81138bb762d23c59aef313775da7f593a7845c1c6367597e109f0509d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx
Filesize
6KB

MD5
2c597c006a95e89b91798e86736da425

SHA1
7840cdd22fd7b3fc9ddf097e72153abe298a9572

SHA256
45d9665f8b36000ee59cde5c3b1e7fd4e28d8ff882d950ade78a479b07f3e596

SHA512
bdce86f7ed95f71865c2538c56264f4888ced0db88672a3347bcf366925d1be93b77159b580aa3ce2e87baa786c7fcbba35c29438a10d6ec26931b96fdfc707d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx
Filesize
10KB

MD5
928f85728a296d6e80dddaebd2ca02ba

SHA1
5f070d1258220a52bbaa7510e61c886c7e8e439c

SHA256
707210c0ee7b2310c8dad78f329e4f8a0e1da788b460055b9b0b5673037afe7e

SHA512
36ef57568c63bef70b0a338c1b77aea531b2b0b0d6fe9e247bbda8dfb0534d4a089f29d0fb5b0fa99257baa887b563a7c1168af91e7cda5ff112af275dcbcd15

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\default.aspx
Filesize
4KB

MD5
b6e59422cce9a671d6071d68df5261a7

SHA1
51f5b8b36f5dd56af5e51f5016e0ae21cac59a5f

SHA256
5993a3bd784fe7cef0e3aa275c4970b7e83ecd19264b241780ac1ac3091cd714

SHA512
51c30a9ad2e747ce2868ab2a1552f504afb5c2e64d5e2e0efbe0953927f7a2ee94f78d373608ec74272c7bd060c8587e99a401ac66293ab6e54dcd4696ac9b70

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\error.aspx
Filesize
6KB

MD5
1ec08badebe0b24c5287dbffefc60b4d

SHA1
2a811fb210669a90e63ad075d9aff282697f0499

SHA256
27e7efe10244867abb645fb6cc2ebf97cfb029ddaf78d4aa77151e41f7f6aba8

SHA512
b024597764d4205a458a3419bd47568436e19a3aafa282a5e7c11e6b12112a0ce20b362c7f8e00f92028887ef7d3f16ac7d1e0908d372162240971cb72375307

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home0.aspx
Filesize
1KB

MD5
e25cbb71ca341575e66357aa8875c19c

SHA1
5af3cef29ebf5788f08bbb3b0c8e962333095718

SHA256
611e2358e1287259992e14cbb8a21188a9bb3e05b99e874a8e9bdd0f9c88cc53

SHA512
ca495849296be058a662b4f44b99ea341882c6fb9e1b25643f840ff0f92f86fc4e0ed170debcc3b58157b96858a7983bce0d94e69858bd88432812e359c73c1f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home1.aspx
Filesize
752B

MD5
eaa6ada80177c6ee60974375508016e5

SHA1
21bae5f9c87d2104acadb6a65d362321444426e8

SHA256
dd825665ece76141a10e53bf3fd51e1687adb0f224477dbc9250f2b01bc57121

SHA512
3ae1b20659cd57c2bfa33649ee98783c36d0bb04ce80755957422b9af0a8bc1ddb7ff16b43ffec1b1de23ce551e70e410d6c5b920f27e2ce426ecd86f691578a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home2.aspx
Filesize
1KB

MD5
f881965b46645475b0111df5b821c22e

SHA1
a755b79917b16d1a6bd67099f7edfbc3847b7a81

SHA256
1cbfab9b428edae39292771e952d7e32e2fd4529e721ae2f0fca6737841d2429

SHA512
63d403b9c3bea4dc8886bd804f8c82bffa4dbd7385d35f53751b04685fbfa7a3d5301270ac23b8fa9fe2256955fe8cb99a001a9c2538ecc6d5f17d3e8c5a88a6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\navigationBar.ascx
Filesize
8KB

MD5
219343ed51df2048f6ea2f3628c8a237

SHA1
c8ded1f07d4531a3346143dfa7ed002bf8973b87

SHA256
9d86e238905ecefb9dff02a86fe508c1acd8b2751d116651ef836aeb2581fb38

SHA512
b660c382ad76580189b463bbf1c45e401e4dc61167b52b8e78a9e751fc1cd17605c5a3ae5765faef9e877b174b6e7410f78833df8e66d8bb7129307e37770821

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx
Filesize
68KB

MD5
84171238950d819f443ae7aea16f966c

SHA1
4b3569bf6edd9aa15f3f8062f21a30e6fcf572b3

SHA256
3931f72684c426980978d268edc743e881a4127a3962e3f2c8abb4ed1749b634

SHA512
5cadafd87e8aee9d75433b40e1ae9bdde1dea8dda6c283b40d283b753d27d78a41fd3bf1a88c8188cafc595559fa6aec218d59844fb26de10e2f7bb37ed39da2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql
Filesize
24KB

MD5
7ef8b3e4f87de00dcee94a30a5c208e2

SHA1
d00fbe35b6d9ab90bbdd89ecc83ce90e822a68b0

SHA256
4e8705fd1edf0930549c150733b06c9095fc0df15a3a8ea059a3f10836e04afd

SHA512
52cc0f354418304f5a0db61fd64b37fb282fd297871f3affa94542285465cfcd7b990a6af62b65a1f8a9b4603fad44302ef98921a739f8c103161b36bd1e2cfb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql
Filesize
54KB

MD5
3c8f5de82ea0323ddf96622d987a18db

SHA1
d3c3c016fc2666ce283814b6e456560a408e6fce

SHA256
02e53e2063eee94e2ceda38c97618f01220aa913cf10780f34339bf963128525

SHA512
104e81588af1bc448046717e2fdb3e2b1f35fd34334745927a44320a511ba68cd6d2a09bca698a7dcc111826a3cba8af9fe3a182b335b39b1100b13bc2d14080

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql
Filesize
51KB

MD5
66ce3cf26608177a2b4d2eb4281db703

SHA1
f5c4922ef4f96cfb48223f2e18d989e222c8973c

SHA256
2eb4921041210496cae0ec96da0d41dff2fea31f85b22ede4a715eea17f7a58d

SHA512
67e06629c2fd83a04312cefbd42a2176fd5c52f58d4b55184af6d3afd82896f2e95bd019eb717b8bb150cca019a89d9ba97495fcaf125fcee40f72a55cf8575c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql.fantom
Filesize
34KB

MD5
cb44b527b4b9665a0bcd40a965acfd21

SHA1
8cbc2b82ea9a57e39e3e5dab5371a7a6bfc6c252

SHA256
9b69b0be956074a6a435b6910c8eee1628e56109e238b8cc26aee06079a7ee84

SHA512
d2a5886465904f8e778c54b27c4e883223508be234849629294cd803cf9c9c6a4de1db3e8ee9b4ac7d5b620b88458aaf715c3d8178b01dc52e35f522ea1aa06a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql.fantom
Filesize
33KB

MD5
3811a2fe841c116f157cbf1d7e52256b

SHA1
8fb17d3f39c3dd4e3c904507e896599d80625764

SHA256
c2800fc7199db03ea9c7deca2da8eadd413c34adc024a9e14d2ec2a5f794de3c

SHA512
64fe324225f9e6e0c6765fc75b0f948581c09cf21b2f73d72a1757426c5ab4e5e94faa621642be82c456478378eb8699434f16abb55874114c45ce6fe5910a90

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql
Filesize
50KB

MD5
e00bf5768d5b664aa9d564f353e0c33c

SHA1
a442eceeace84dffa5429606f0bf80a8cca821ef

SHA256
7f64fb756a17ba2c83ce114aef81aba369be8e5a5ad1c254b750dcc0dfac5e2d

SHA512
fd30fcc71e9fc3808cb7d2af10f7b92f10c57ae4d52bc5a66f62cbe947b76fb35de1ee763a79eea1ce55fc9b6731d68be330039a30d621b0a34f40f1c5b8348c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql
Filesize
52KB

MD5
e9eae25fe34425eaa871e0678036f842

SHA1
cb52ef3f2cb3f5b34aee396642a8cb6011383dce

SHA256
d62fb65454f0102ae9d3a0b53972792fb63f4d49f394fe080bc30e0110ea1f43

SHA512
7612dbed84b20844c03633e739ac990493ceddce0cc55a77967c1ec13878ca30f31b971c8fac1cfd6369864ad4bb383af21230658a71151d46aa59a784ccec7f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql
Filesize
6KB

MD5
8c068b0dcb5775b0d735c65d87eb4163

SHA1
c81c5a3e8d24c4da3bfab470392607c36f89c97f

SHA256
29430814ecb0a54180df0da97357a2a5d7ec2a1b322e06703e8741bc09154ca1

SHA512
4140d22d67202e1155b42e7947f828c83b74432049ea41add36c167868e772fa68eaad9b1bdac052ee13df1a938c1e1f5393983b78479924f36759a488494c2c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql
Filesize
3KB

MD5
e2b9219a2aedebf92f906910a4d244d8

SHA1
a09092f6001016526d5d608a7bf9c91d43b3b68f

SHA256
0bbe4dd166443863faf798eaca18ff58da156f1dc8196ad6216261b31aa23ee4

SHA512
d3a51b2c74a979dfa562400327a1d8a9e604f1549cc209043774e266d518d57cb1127c0ae1d730dd52860eaf0add19f7c2163e56642a77d3a287ca35b8670d1a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql
Filesize
6KB

MD5
0440ec9e9820795b7a5f99f417c418e4

SHA1
c889b6a9e415b5880c2dd03b7d296a7e676e5ebb

SHA256
00c8e47b4786e764d03482b4fae0787aca2a038186e19c1dea755a857c76285a

SHA512
cdd3e06fdd54d5b786e8e2598925799ea3bdf20c36a594b17c35747e1b3a41c7ab5e95b635c99229b12654ed52c54883a29b863e197fa04b1a784f8722be6727

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql
Filesize
9KB

MD5
5ba72c98771d1f524b8ab42f6d533072

SHA1
2a42ccc6503a6ba77bf40a2e0cffe70d26b1362f

SHA256
fee55ab5001ba4544b9c60141c87174dea9019afe7d6b6e144e004f421cefe39

SHA512
26ba46dc30be30434826da5374aa72d2e34ec604ee6f257926a1aac229cb43e40ef1cb2c974283ab3a4a7037bbeab6e539a745cdb54bb08a7264ed9ff5dbf939

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql
Filesize
7KB

MD5
93db3b56ebd7fbcb0809d0588477d3e8

SHA1
31ff46171ae5175753a315b2c9005c6ebad4cde8

SHA256
d2ceba55b7a5562282c6e18f882cee8cbc4ad672e6d48ef6bdc66eb27dc2c91a

SHA512
ebe1e5c66e2a3688d583bbc7c345bcd79c78855779b273ba00fefdbcc145c02dc27863c3c7aa6fd818c0a90bce03fd413a58a87c463081a0499fe3affaa8de51

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql
Filesize
5KB

MD5
06dbebc47aed2c1df8062f4e80e5beef

SHA1
16b7b08ebcc8eaa323766f28a34b88823dfe41a6

SHA256
99949b7d401e5225cf5073d5b1abc0bc77e1b8b9688cadb1e12ef9b2ee603f24

SHA512
452250a53bb38cd1f31a197bb2ae18fa49944bffeaf56eb92ef74923b287657d6da39915b8f4d79b67ac700d3f6a32acc04f88bc7de95adcc56869a0de1419e8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql
Filesize
9KB

MD5
05bcea52f760c3792fe17c35993d5cb8

SHA1
0977871569790f891174e22cffe1681982b64e49

SHA256
555e66b9cd412cf95995a4da35b3d43b0991c3ffe2a206fff3c9ce24679eed75

SHA512
11377552477d81137a5b0b842699b09a4de418258acc95e8cce549a643fd2835caf097fe55351cdabd3d070731950778f7c246d8e897c761f141ee374672987f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql
Filesize
11KB

MD5
e872d921507db7991a53b4427a9d4ae6

SHA1
5a9a4d5aff512a8d71d096a34ad5f034976d03ee

SHA256
d38efca532154e0131a3c89e746957b23f632ee31e5196f127c222061a39bc88

SHA512
87daa86aab83dc3d938c630104efed4787a87960575aa89afbc0efce601810380d4ed767e341a217865c136d4754a1134a238af7ec45dd8b1a396c22a618d4e6

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql
Filesize
2KB

MD5
d99759d30b050f8782d32a1a2f255feb

SHA1
198270f67349136d837393bf5eb393dd0d06cfb1

SHA256
15cd84c0730f34f060e5080e1ac2d4eff07e6ab71abdd1d2b2f0899cbc9f80aa

SHA512
19e1078fa357f005d7abaf951ba22b3936b72538ce2ab55d4dfb63b7bf0462dd7301d2ba4827010c9cb330639306619fa6f6aed2c94930644be47f8b107395cc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql
Filesize
23KB

MD5
851b4f71443681c06b15c022814a92a9

SHA1
80b37151305e8204dce13d349951882a4bf6b02d

SHA256
b336315194e4a5335713a9ad1b36389afbf39f2800c5ac288f0d540e81982bc5

SHA512
db001fab670abbf7c39ac770dcc41ff014a3ea1a1750b96e8e674d114373b5b47b03a5236c5a035bd52ea0a3671d8494f4624cdc356f251b5a1e717679e7e1be

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql
Filesize
4KB

MD5
4271c604dfd5a336ac6928c55d996a12

SHA1
6a5bfeab77739e19be2cfda6062fa8903f6123c8

SHA256
47ffe268587bba9b58622e2054b9eb88e0f8a54a78ea2808432c4c062bb12048

SHA512
e579ac5f32e3f32e380c516312ec2d6ba2787cdd72fb1e36560e406c96164f7f2d2af37832f44c58746198d87f9d811866cc6020314a7afd51f0a72cbff73cde

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql
Filesize
372KB

MD5
77cbfb0f983196975a23a9b32a1b3607

SHA1
83fcf0927b90f70932e1033d8a104172ba9c30a6

SHA256
b623d58d758262c69ffde551c77d4335996887b65ef6ef3b07f8b75724dcc965

SHA512
656e3c5d71d1d92e8e1a766b8714048093431d112d281c94c35794edc988f0366a7c292f346af8321b77efcf988a1daa6b18f14e20a3b3a37f5491dda223e4ec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql
Filesize
49KB

MD5
7ac6bf029b4f3c45027d43ca36513431

SHA1
59f8a8c6f076f08a2c3dfbccd4c02dd6c4271650

SHA256
9709cd541863066170128dcfca5f74b90e1bd693b5e71736c1022e7ac47e3246

SHA512
ed3b079b453ce199592f3b8d08b4c84f826bc24410bf456189962b098f951fbb19bd6a5419e41261108379da5958f909bf85334a7080777dcc2d167b27d6b2cf

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql
Filesize
2KB

MD5
86cd627df26d2c8115d9c66c412ad080

SHA1
522afe7c4e47ed492f7d0b488a2c847b1897afb6

SHA256
a286e933aefe68249deca8bed097cc2dcba015f50116189e39328ddcacd39fe1

SHA512
0f14b684d98e771ca717841e48f6e6c2a8698741cfb0f3d254729d17888e59b62746db429fcb9c1c165ef8b3d1cbc389b78adfbeb9182132949117501296e5e7

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql
Filesize
13KB

MD5
0609d8f9fb028e125c0acc6f7394db2b

SHA1
b4ac7008cae4fd834e96f629fcf65ebf13b43de1

SHA256
d41f6126dd0451da005a58baa6ffc9698cc8b5efe75e2078dd9dd708a6b29cdb

SHA512
106b217aafd04e8c3b9001227fb158ae29306c0374dd7dbd7bc924cf72f5baf0eaac0b537d06c851089ac318d2bed352b480a6338965694d0c0d8b54efc001bb

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg
Filesize
64B

MD5
923e3d37488c7e17184a7789365bd51a

SHA1
8118a2d9eed970bbad0120b7639690c4048507d1

SHA256
f39cd7d7973ecb44c4f2e79abc5140d818d7e1708ebe545dfa35835660d4362a

SHA512
53086039aa84cc9b53c544165d3695089a9d21c83cb4fd5b6d09cd0a1efff5791699cb4f52975fedd6b251e7bc096260dfed1467bbef4b07fc544fc50d278f4f

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif
Filesize
80B

MD5
8550c40b5fea1e7c86b5c4ca83b13453

SHA1
3086b0c2e281fdc335a4a26b1c1043417eaa98c2

SHA256
e357533e3c19f60f83f4a0cfedac7541302063895b786d0b95d9913d7e478572

SHA512
56256596e72512e211a9fd3e6a5183f5fcac0bc44569e2f3caaa4c5077e6cfe7495e021dd8326af75e32a6953b0780342a11716d37e1dc887517aa41ecf8257b

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
Filesize
80B

MD5
93685bafaa4ccaa30d9e0b7f0af69ac9

SHA1
1f8408b87f53098c2b2ddcb1e3abc76868cb7326

SHA256
0c8055a082d15ead649607672e4c8e7e3d449795502e560db2f30f1e1e9acb6a

SHA512
3aa43fcd65dc8f7d53118f37cc13c67968a23681f3ee1eea2c676bc4b923d91eae6f57fb50842f1c83a3bec37b1f512fdca96e0e45f250553def420661e61415

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml
Filesize
111KB

MD5
a02e00c7abef9c7018a476613c0fbc57

SHA1
7de42ca7e702ef2825e770ffc44888f33f566c3f

SHA256
60ee247fa9dc63b7fe8a1e2e774634ed7e190a666f10c728ad005fa48d3e6031

SHA512
e2bfba2444585cf925ec551736d36ef7a1370bd24cf36e074395c69e0ea2b3e9655b7bb64a742013315376be48390a9b3df26eb5869202d6a3184f6e23cb72e3

Download Submit
C:\Windows\SysWOW64\update.bat
Filesize
88B

MD5
565ed1a1187f88ab0ea0f9963cb132a3

SHA1
786204682d8ebccee5261bc9d8d6d2c855364f92

SHA256
06057270cb58cb7b8827da881b87f6544bb06a36b78d7cc132bf710a79d8c5b3

SHA512
3d9ba6c240b3f00f0ca950668c150886283f99e033eb8d715106db11272b4af2c8ab53af29d2d389b34c7d4ef10dffd0d9e2734fa6df76b252ab8707c41340eb

Download Submit
C:\Windows\SysWOW64\update0.bat
Filesize
78B

MD5
397dc7373e23f1980ecf849a29708041

SHA1
6c91608ebe57a3d9375f646ff287e46a9f18c861

SHA256
3ffedf213b18d61561cdbdf3de6946284c7b0541a69a89ebda74add1aff7fd5a

SHA512
9c8cf8355cde0402b71fb4e713d14ed12a1031c3120b4a1af6e10ce02dd5828b8d27345ef28f40c34da329e47b36f4f0da74c7cd4cf3d3964d004a16e72096fb

Download Submit
C:\Windows\infpub.dat
Filesize
401KB

MD5
1d724f95c61f1055f0d02c2154bbccd3

SHA1
79116fe99f2b421c52ef64097f0f39b815b20907

SHA256
579fd8a0385482fb4c789561a30b09f25671e86422f40ef5cca2036b28f99648

SHA512
f2d7b018d1516df1c97cfff5507957c75c6d9bf8e2ce52ae0052706f4ec62f13eba6d7be17e6ad2b693fdd58e1fd091c37f17bd2b948cdcd9b95b4ad428c0113

Download Submit
F:\Readme.txt
Filesize
1KB

MD5
34aef588e23df80f1d0b1f49bfd4f6a5

SHA1
32b20b32a41c97816ed111a56d9aba8a96113385

SHA256
eaea19732c0c5545b4b748aefdd56c2587657cdcb9c7d975858e2fc30d0cf1dd

SHA512
1c2c3d12f91f94db7e30cb91a2f2c322bb6384f4e3515267ccc009365aa0a4285e06bfa978a1fd038e71d4e896988f9205c0a533cfb301373656843146de48ef

Download Submit
\??\pipe\crashpad_2420_AQFWLZHVSPPNNAFM
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/1376-754-0x0000000004C00000-0x0000000004C10000-memory.dmp

Filesize
64KB

Download
memory/1376-724-0x0000000073650000-0x0000000073D3E000-memory.dmp

Filesize
6.9MB

Download
memory/1376-597-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-595-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-591-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-589-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-587-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-585-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-584-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/1376-583-0x00000000025E0000-0x0000000002612000-memory.dmp

Filesize
200KB

Download
memory/1376-582-0x0000000004C00000-0x0000000004C10000-memory.dmp

Filesize
64KB

Download
memory/1376-581-0x0000000004C00000-0x0000000004C10000-memory.dmp

Filesize
64KB

Download
memory/1376-580-0x0000000002380000-0x00000000023B2000-memory.dmp

Filesize
200KB

Download
memory/1376-579-0x0000000004C00000-0x0000000004C10000-memory.dmp

Filesize
64KB

Download
memory/1376-578-0x0000000073650000-0x0000000073D3E000-memory.dmp

Filesize
6.9MB

Download
memory/1376-778-0x0000000005360000-0x000000000536E000-memory.dmp

Filesize
56KB

Download
memory/1376-21382-0x0000000073650000-0x0000000073D3E000-memory.dmp

Filesize
6.9MB

Download
memory/1376-753-0x0000000004C00000-0x0000000004C10000-memory.dmp

Filesize
64KB

Download
memory/1376-710-0x0000000004A90000-0x0000000004A91000-memory.dmp

Filesize
4KB

Download
memory/1376-711-0x0000000004C10000-0x000000000510E000-memory.dmp

Filesize
5.0MB

Download
memory/1376-712-0x0000000004B10000-0x0000000004BA2000-memory.dmp

Filesize
584KB

Download
memory/1376-713-0x0000000005230000-0x000000000523A000-memory.dmp

Filesize
40KB

Download
memory/1376-599-0x00000000025E0000-0x000000000260B000-memory.dmp

Filesize
172KB

Download
memory/4424-452-0x0000000000ED0000-0x0000000000F38000-memory.dmp

Filesize
416KB

Download
memory/4424-460-0x0000000000ED0000-0x0000000000F38000-memory.dmp

Filesize
416KB

Download
memory/4424-463-0x0000000000ED0000-0x0000000000F38000-memory.dmp

Filesize
416KB

Download
memory/4948-786-0x0000000002720000-0x0000000002730000-memory.dmp

Filesize
64KB

Download
memory/4948-21375-0x00007FFB27950000-0x00007FFB2833C000-memory.dmp

Filesize
9.9MB

Download
memory/4948-1216-0x00007FFB27950000-0x00007FFB2833C000-memory.dmp

Filesize
9.9MB

Download
memory/4948-785-0x00007FFB27950000-0x00007FFB2833C000-memory.dmp

Filesize
9.9MB

Download
memory/4948-784-0x00000000005D0000-0x00000000005DC000-memory.dmp

Filesize
48KB

Download

Analysis

Sharing

Errors

General

Malware Config

Extracted

Extracted

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads