Analysis
-
max time kernel
150s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
31-05-2024 15:16
Behavioral task
behavioral1
Sample
87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe
-
Size
25KB
-
MD5
87731031fc89b5e3505a47298d2cc968
-
SHA1
3de11783a9e0f2836a00a0e8085fb63133ff388f
-
SHA256
29c99eba250489aa489a52aaafa30f567bfe5ae304e68dd045e96d084775333b
-
SHA512
29decb91ee2c4187de6a25acd8c69d7cc8d3d38e2c1a831b05479f1f34c4664f845ed4415b5729cd73d6854c7fa3b5089503f7997b9f548f7c45c15f08556900
-
SSDEEP
768:S0FmBkpKjPYpfJ88l7HOo47SaUzykFT2Rv:SOhFJ84Oo0yh8v
Malware Config
Extracted
C:\Program Files\7-Zip\Lang\HOW TO DECRYPT FILES.txt
3J1MD7EAzdaYeWBDA71t7NShkC64W4a41T
Signatures
-
Renames multiple (8815) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Drivers directory 30 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\gm.dls 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\it-IT\ndiscap.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\uk-UA\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\de-DE\ndiscap.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\de-DE\wfplwfs.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\en-US\ndiscap.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\de-DE\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\es-ES\ndiscap.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\ndiscap.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\afunix.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\fr-FR\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\ndiscap.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\en-US\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\es-ES\wfplwfs.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\wfplwfs.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\it-IT\wfplwfs.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\es-ES\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\wfplwfs.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\ja-JP\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\uk-UA\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\en-US\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\en-US\wfplwfs.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\it-IT\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\it-IT\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\de-DE\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\es-ES\NdisImPlatform.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Manipulates Digital Signatures 2 IoCs
Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
description ioc Process File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\wintrust.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Modifies Installed Components in the registry 2 TTPs 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe -
Drops startup file 2 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\yw9rFERMcLTp2PS.exe" 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Drops desktop.ini file(s) 64 IoCs
description ioc Process File opened for modification C:\Users\Admin\Desktop\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..32-kf-commonstartup_31bf3856ad364e35_10.0.19041.1_none_b2014b56ea660ec9\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-shell-wallpaper-theme2_31bf3856ad364e35_10.0.19041.1_none_8ccaf9c8444b9274\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Documents\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-accessoriesuser_31bf3856ad364e35_10.0.19041.1_none_d9f53b39b3834744\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-fontext_31bf3856ad364e35_10.0.19041.1_none_5476a60692fad199\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_10.0.19041.1_none_d69cbb4282e4fe2c\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-shell32-kf-commonmusic_31bf3856ad364e35_10.0.19041.1_none_2f07a4cad3dec315\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Public\Music\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commondownloads_31bf3856ad364e35_10.0.19041.1_none_a914e3e3f19ceda1\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..opini-accessibility_31bf3856ad364e35_10.0.19041.1_none_905c6a851ca62951\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-shell32-kf-public_31bf3856ad364e35_10.0.19041.1_none_0cf1a65e91dfb2be\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Web\Wallpaper\Theme1\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..32-kf-commondesktop_31bf3856ad364e35_10.0.19041.1_none_a81a33274fb1b624\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Public\Videos\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Media\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-fontext_31bf3856ad364e35_10.0.19041.423_none_7c917c97525f1487\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..2-kf-commonprograms_31bf3856ad364e35_10.0.19041.1_none_047fa97bc9873117\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Videos\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_10.0.19041.1_none_a208296858c76413\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.19041.1_none_cd0389b654e71da2\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commonstartmenu_31bf3856ad364e35_10.0.19041.1_none_f6eee8789c1c6fdd\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-userprofiles_31bf3856ad364e35_10.0.19041.1_none_39d6d106c6f70bec\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-commonvideos_31bf3856ad364e35_10.0.19041.1_none_923716ddadd939c8\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-programfiles_31bf3856ad364e35_10.0.19041.1_none_cb8c8caad1a2ad44\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Pictures\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Saved Games\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-maintenance_31bf3856ad364e35_10.0.19041.1_none_148b41803c849a3c\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_11.0.19041.1_none_4b0e6b545bf0f4e7\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-maintenanceuser_31bf3856ad364e35_10.0.19041.1_none_bbf8ad8ff53c9b5b\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\$Recycle.Bin\S-1-5-21-4018855536-2201274732-320770143-1000\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Links\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Searches\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Public\Downloads\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\3D Objects\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Public\AccountPictures\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Music\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Public\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Drops autorun.inf file 1 TTPs 1 IoCs
Malware can abuse Windows Autorun to spread further via attached volumes.
description ioc Process File opened for modification C:\Windows\BitLockerDiscoveryVolumeContents\autorun.inf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File opened for modification C:\Windows\System32\DriverStore\FileRepository\b57nd60a.inf_amd64_77a731ab08be20a5\b57nd60a.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Embedded-KeyboardFilter-Package~31bf3856ad364e35~amd64~en-US~10.0.19041.844.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecConfig-Package~31bf3856ad364e35~amd64~es-ES~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\ntmarta.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.19041.264.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\hdaudio.inf_amd64_fe5b23ea7991a359\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\oleaccrc.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Multimedia-RestrictedCodecs-WOW64-merged-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\de-DE\windows.ui.xaml.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\mdmmega.inf_amd64_f35131186d3026aa\mdmmega.inf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Storage-VirtualDevice-SMB-Package~31bf3856ad364e35~amd64~es-ES~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\fr-FR\Dism.exe.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\uk-UA\charmap.exe.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Offline-Core-Group-merged-Package~31bf3856ad364e35~amd64~~10.0.19041.928.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\combase.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\de-DE\inetres.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\it-IT\iologmsg.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\wmiclnt.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-LPDPrintService-Opt-Package~31bf3856ad364e35~amd64~fr-FR~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Multimedia-RestrictedCodecsExt-WCOSMinusHeadless-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1165.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnge001.inf_amd64_1daeee8f3aa30fcb\Amd64\MSGENBW.PPD 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\InstallShield\setupdir\0816\_setup.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\urlmon.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WebcamExperience-Package~31bf3856ad364e35~amd64~it-IT~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\c_fsinfrastructure.inf_amd64_1ef682cfd6fc7d1c\c_fsinfrastructure.inf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\LaunchWinApp.exe 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-msmq-triggers-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.746.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\appidapi.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\en-US\inseng.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\netwlv64.inf_amd64_0b9818131664d91e\netwlv64.inf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netrtwlane_13.inf_amd64_992f4f46e65f30d4\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Multimedia-RestrictedCodecsCore-WCOSMinusHeadless-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_0d06b6638bdb4763\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\et-EE\windows.ui.xaml.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\uk-UA\dsreg.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1151.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\net1yx64.inf_amd64_8604d8a50804b9c1\e1y60x64.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netvg63a.inf_amd64_9f5493180b1252cf\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-RDP4VS-Package~31bf3856ad364e35~amd64~ja-JP~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB4537759~31bf3856ad364e35~amd64~~10.0.1.0.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\SecurityCenterBrokerPS.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0011~31bf3856ad364e35~amd64~~10.0.19041.264.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB4557968~31bf3856ad364e35~amd64~~19041.262.1.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\de-DE\els.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netrndis.inf_amd64_be4ba6237d385e2e\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\msxml6.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-ShellLauncher-Package~31bf3856ad364e35~amd64~~10.0.19041.1202.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-merged-Package~31bf3856ad364e35~amd64~fr-FR~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\ctfmon.exe 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0010~31bf3856ad364e35~amd64~~10.0.19041.264.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\winusb.inf_amd64_ced441476847bd1a\winusb.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\TileDataRepository.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Storage-VirtualDevice-PMEM-merged-Package~31bf3856ad364e35~amd64~~10.0.19041.928.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmnis2u.inf_amd64_0c5757ecd1574b3d\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\it-IT\p2pnetsh.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\NAPCRYPT.DLL 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\SysWOW64\XPSViewer\ja-JP\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~ja-JP~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\ja-JP\Dism.exe.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\de-DE\winver.exe.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\nl-nl\ui-strings.js 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Services.Client.resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_ForwardDirection_RoomScale.jpg 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.scale-100.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionMedTile.scale-100.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNotebookWideTile.scale-100.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-64_altform-lightunplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\MakeAccessible.api 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Transit\contrast-black\MedTile.scale-125.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\es-ES\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_et.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansDemiBold.ttf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\197.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\EnsoUI\id_arrow_black.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-80_altform-unplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\System.Windows.Forms.Primitives.resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.Excel.Tabular.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\Microsoft.Win32.Primitives.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNotebookLargeTile.scale-125.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe\mfc140rus.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\es-es\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\clrcompression.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageMedTile.scale-150_contrast-white.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\PresentationCore.resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\System.Windows.Forms.resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\Welcome.html 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected] 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-utility-l1-1-0.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\share_icons.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files (x86)\Internet Explorer\en-US\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files\Java\jre-1.8\bin\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.RunTime.Serialization.Resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-white\SmallTile.scale-125.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\AppxBlockMap.xml 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\StoreAppList.targetsize-16_altform-unplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\en-GB.pak.DATA 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-48_altform-unplated_devicefamily-colorfulunplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Common Files\System\uk-UA\wab32res.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_MoveDrop32x32.gif 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Windows Media Player\wmlaunch.exe 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Videos\Help\Unipulator.mp4 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\jscripts\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-64.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SmallTile.scale-125_contrast-white.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Wide310x150\PaintWideTile.scale-125.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-200_contrast-black.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-256_altform-lightunplated_devicefamily-colorfulunplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\de-de\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.34.28001.0_x64__8wekyb3d8bbwe\Assets\GameBarNotificationLogo.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vreg\wordmui.msi.16.en-us.vreg.dat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Entity.Resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\status.json 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\MedTile.scale-100.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\contrast-black\MedTile.scale-200.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-60_altform-unplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubBadgeLogo.scale-125_contrast-high.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Generic-Dark.scale-400.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\pl-pl\ui-strings.js 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\tr-tr\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-networking-hostname_31bf3856ad364e35_10.0.19041.1_none_9d89e15a3cd3e569\Windows.Networking.HostName.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-onecore-winrt-storage_31bf3856ad364e35_10.0.19041.1266_none_58f5a5acd2795abf\f\windows.storage.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..sktop.appxmain.root_31bf3856ad364e35_10.0.19041.264_none_a71c9f7fdcd899c5\r\Search.Core.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-vssapi-core.resources_31bf3856ad364e35_10.0.19041.1_es-es_e381428330f15319\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\diagnostics\system\Video\it-IT\DiagPackage.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Assets\PeopleLogo.targetsize-96_altform-unplated_contrast-black.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ntdsa.resources_31bf3856ad364e35_10.0.19041.1_en-us_62b964f2c0abc148\ntdsa.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-f..truetype-segoeprint_31bf3856ad364e35_10.0.19041.1_none_aa85851e9be6d522\segoepr.ttf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-r..iagnostic.resources_31bf3856ad364e35_10.0.19041.1_de-de_3b426565ce9d0aa3\rdrleakdiag.exe.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..shandlers-pcdisplay_31bf3856ad364e35_10.0.19041.1081_none_471a0e8d26b13f95\r\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-Help-ClientUA-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-ci-wmi_31bf3856ad364e35_10.0.19041.662_none_6ca666bb17871538\r\CIWmi.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-directui-resourcesrs4_31bf3856ad364e35_10.0.19041.1_none_11f5e3d1011e8695\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_dual_prnms005.inf_31bf3856ad364e35_10.0.19041.1_none_1eab1be1d38e5678\prnms005.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..kstvtuner.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_48da29f1f8d6d5b6\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-systemreset.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_3a6ea3fedcf4d133\ResetEngOnline.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-msmq-triggers-Opt-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.746.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-a..bilitycpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_1fbd6e377dd4448d\accessibilitycpl.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-c..t-xpsomandstreaming_31bf3856ad364e35_10.0.19041.84_none_a6bb97b2133eae78\f\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-e..ifiedwritefilter-ux_31bf3856ad364e35_10.0.19041.746_none_c7c6fccae233c8b7\f\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..-credential-manager_31bf3856ad364e35_10.0.19041.1_none_0787d10826b57780\KeyCredMgr.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows Sidebar\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\servicing\Packages\Microsoft-OneCore-UtilityVM-Containers-Shared-Package~31bf3856ad364e35~amd64~es-ES~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..nailcache.resources_31bf3856ad364e35_10.0.19041.1_it-it_1d166fa18d31de05\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_10.0.19041.1023_pt-br_d93db0ddb7bb6ecd\f\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-compact.resources_31bf3856ad364e35_10.0.19041.1_de-de_dac31e0f2bbebb02\compact.exe.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-m..wnlevelmanifests-ds_31bf3856ad364e35_10.0.19041.746_none_78b1f5f5c57dadca\dpapi_keys-DL.man 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-o..layfilter.resources_31bf3856ad364e35_10.0.19041.1_es-es_fb1609d11ebc55bd\wof.sys.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.Appx.PackageManager.Commands.Resources\v4.0_10.0.0.0_de_31bf3856ad364e35\Microsoft.Windows.Appx.PackageManager.Commands.Resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\Framework\v4.0.30319\fr\aspnet_compiler.resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_fdproxy_31bf3856ad364e35_10.0.19041.1_none_31575f740deee58a\fdProxy.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-eventlog_31bf3856ad364e35_10.0.19041.117_none_badf0b90718f4ae3\r\wevtsvc.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ie-f12platform_31bf3856ad364e35_11.0.19041.746_none_71f233c42dec4aed\r\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-p..reensaver.resources_31bf3856ad364e35_10.0.19041.1_en-us_c6c820c76fa3c1b7\PhotoScreensaver.scr.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1151_none_71aa7fdbb41824a0\Insights.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.746_none_0b4ed891dd9ccbc8\square150x150logo.scale-150_contrast-white.png 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-dnshelperclass_31bf3856ad364e35_10.0.19041.746_none_5638ea63ef5422da\f\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_dual_usbvideo.inf_31bf3856ad364e35_10.0.19041.1202_none_27bd1529e8f0be36\usbvideo.inf 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\header.css 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-powershell-ise_31bf3856ad364e35_10.0.19041.1_none_1ed6cb15a1b51b10\Windows PowerShell ISE (x86).lnk 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..ork-msctf.resources_31bf3856ad364e35_10.0.19041.1_en-us_5d563c5058a2e407\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-unix-socket-provider_31bf3856ad364e35_10.0.19041.1110_none_c281af5a93a8fe4f\f\afunix.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\servicing\Packages\HyperV-KernelInt-VSP-merged-Package~31bf3856ad364e35~amd64~~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-Editions-Professional-Package~31bf3856ad364e35~amd64~it-IT~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_dual_netrndis.inf_31bf3856ad364e35_10.0.19041.488_none_559eb4c6233414d5\usb80236.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-rasipfilter_31bf3856ad364e35_10.0.19041.964_none_c54b32151e10b400\r\ipfltdrv.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..rd-module.resources_31bf3856ad364e35_10.0.19041.1_es-es_d91eac78e1174304\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\de\UIAutomationTypes.resources.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-d..anagement.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_a66648c1a5f23b39\dmutil.dll.mui 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-i..-unicode-components_31bf3856ad364e35_10.0.19041.1023_none_8d723d8c46de7ebb\icu.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-rotmgr_31bf3856ad364e35_10.0.19041.1_none_e3d0085b562a5c16\RotMgr.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..ttiledata.resources_31bf3856ad364e35_10.0.19041.1_en-us_b2e00995d5413cc0\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..k-msctfui.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_99555e01455b4176\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\servicing\Packages\HyperV-UX-Common-Package~31bf3856ad364e35~amd64~fr-FR~10.0.19041.1.cat 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-filtermanager-core_31bf3856ad364e35_10.0.19041.1151_none_85d98801dff5b241\r\fltMgr.sys 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-peerdist_31bf3856ad364e35_10.0.19041.1151_none_91f4a96c9f464c76\r\PeerDistHttpTrans.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\es-ES\assets\ErrorPages\navcancl.htm 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..iagnostic.resources_31bf3856ad364e35_10.0.19041.1_es-es_3bc3adf8a5251ded\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-printing3d-winrt-core_31bf3856ad364e35_10.0.19041.264_none_741076a3d4cce13d\f\Windows.Graphics.Printing.3D.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-speechengine-onecore_31bf3856ad364e35_10.0.19041.746_none_bc3036e3312c41cb\spsrx_onecore.dll 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-deployment_31bf3856ad364e35_10.0.19041.746_none_d9e841974c1d46e8\r\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-forfiles.resources_31bf3856ad364e35_10.0.19041.1_en-us_8e9fd784898e82b0\HOW TO DECRYPT FILES.txt 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Modifies registry class 11 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\shell 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\yw9rFERMcLTp2PS.exe" 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4018855536-2201274732-320770143-1000\{CAF714BF-E499-4039-8889-7B271DAC1229} explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\shell\open\command 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\shell\open 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\....PAY_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_PERMANENTLY_DELETED_PLEASE_BE_REZONABLE_you_have_only_1_single_chance_to_make_the_payment 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\....PAY_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_PERMANENTLY_DELETED_PLEASE_BE_REZONABLE_you_have_only_1_single_chance_to_make_the_payment\ = "CUJVMVYCURZLZNO" 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\ = "CRYPTED!" 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\DefaultIcon 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CUJVMVYCURZLZNO\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\yw9rFERMcLTp2PS.exe,0" 87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 10 IoCs
description pid Process Token: SeShutdownPrivilege 1508 explorer.exe Token: SeCreatePagefilePrivilege 1508 explorer.exe Token: SeShutdownPrivilege 1508 explorer.exe Token: SeCreatePagefilePrivilege 1508 explorer.exe Token: SeShutdownPrivilege 1508 explorer.exe Token: SeCreatePagefilePrivilege 1508 explorer.exe Token: SeShutdownPrivilege 1508 explorer.exe Token: SeCreatePagefilePrivilege 1508 explorer.exe Token: SeShutdownPrivilege 1508 explorer.exe Token: SeCreatePagefilePrivilege 1508 explorer.exe -
Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe -
Suspicious use of SendNotifyMessage 8 IoCs
pid Process 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe 1508 explorer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\87731031fc89b5e3505a47298d2cc968_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops desktop.ini file(s)
- Drops autorun.inf file
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
PID:1552
-
C:\Windows\explorer.exeexplorer.exe1⤵
- Modifies Installed Components in the registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1508
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
129B
MD5b9eadaecff4b64b11a66137d75c43875
SHA158e0f7b3d83d1ed0c4ffc06c7e3aad02f83d9209
SHA256a68e6b8b6a3a6c9d8a657ee585b7e0a3a05c3d682f2b65c37fe2fa5920aa09f9
SHA5123a1b50340ca65e4394f72b47afb63a2aea648a74733d3b66c7eb9195b12f51ec3ad790d71a6bacf776a8f95e65ec48a3dce6f2e7c91c6de079425d9a5942c38a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Filesize50KB
MD56652a43ed307e366127b107786a10bff
SHA1f63faf8fc5e1e0ef9d9adeda69e32dff7f7b41a8
SHA256969e83c565e600c79257acc2998647ce680f5620ea754982019ac3bb600dac55
SHA512c724681c8e070c2d76479bb9bc272a9c0573cd9e60f9e75df0cb55730af32a95af0799a321d485b4a2a164dffeb45c547152f308915fc5f6ac7d4a86c553aad8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
Filesize711B
MD5e8bfba1f627b6c63a843613a531ecb24
SHA16d055d65525849383b51955cfe3975af186db38b
SHA25678618ea0de14de3ae7122aaeaf1d9571e18d0a1bd2adb640d75bf0d99111c8e5
SHA512a21da4998da8716d8dd142edc007ec243e879d4e9895df93473c9b33a75fb59ac03317f5f968d385fba62dd3b8ffcd8ee3f717ffb469339761e7362ce7d453a7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Filesize1KB
MD5b9579a037f902897f5a54de1bf49f4d2
SHA1aa371882d75d930b358b83377c05c616edd0db7a
SHA25612bc08ac2fc04eaf028115a1fc81e3f916d07986aa4a3eee1e16c33f8dc7e44f
SHA512a5b94a3a8349b452f731092408404a8b5d6c930f5cb992cc73e255feb5c814587677c67defb383b3e10fe0ffc334ec4ed39b96e43c8c0326f6d7d65ced813b8b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Filesize3KB
MD5952bbe3c03a6daa644739902f3756c32
SHA1a328b37b5f01045b22c4716630114276bc2e944f
SHA256fb0e77654545905d7098d2d84897bdf51ad1b394d461e925da2817faac7a6957
SHA512cc6b4f3f8a0f6fefba730bdd52c8b8296b6ef45dbeebfbf151453e3e667b7ef58cb89858e5219ffa28df4d284f8a3ad79fb7ec74eb0cab48a59023d69e3a0119
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
Filesize1KB
MD5700b8ed333dc19abd0c4b90f46853d2a
SHA172cbfa5c078b1b22120b2f4c92f38604745d9790
SHA2564c0fe4ca01c67f71520a5bc29aa2163d248b2ecd0b646e1ae10bd71c96776114
SHA512eaa21dc4455645c19ab7aca0cddb68d0077f795715a53fae36e0828b160de64381a6f70572a5ec8a446bf22f0a018fcb4daddd0d77f9032464b95f8ddc72b49c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
Filesize1KB
MD5c967202d5c05a8409c56f84f892512fe
SHA1ba9aca3442ba2c633b77f678631fd17cb4c3c834
SHA256079cf3e9152a91b1cacdba6eea3f275635e0240dd7a9995e7ef8484ee22fc2dc
SHA512518b9a3e724a54a36ca79d170722bffa6c1c08fe0595b6d57d79596500e71d7a93147e843f1d15488ba352a2545fe7d3eea64fd2cdae7ec059b4fb9f190d7a2a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
Filesize552B
MD5f6fce5929bca934bc50a0a9aa2e190a3
SHA136167666409f4b8b71ba0079a3c56d47fe14136a
SHA256de0ea2037bb391b4cd4ab4229a561abeb559ef7c36dec5bb06863fb4cc2acf97
SHA512bfa68e48f73df9af8a2e4c46486103b42cb68343f2e7055b68555f434eb5b79d36b3522f4c4e2cb6f0318667058614b679c7fb11441e8a3679aac80bc7e7396c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
Filesize2KB
MD544e04072421249bf85ff8c8fa24dc697
SHA1c63c7cb76d447a1fa9e60edbdb9add38f9a33099
SHA256c32487d6c8060d5a424dc21946a45b739e4283d05ef2315052c8bd48cba556b3
SHA512794e138f3ca09ef8b4b8da8b2e5b1835d58531a80a8666a681e455146d73a76bac772b916f487c58bcf4dd0b980e0e929b4e338cf501be938452cdb7c197dded
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
Filesize1KB
MD59a0a5bcdb752bce1d606a0015d4d3dcb
SHA195458ef696b3f48a0525f919cde752dfdf484dd4
SHA25666474e8335c159bbde0c2a8239898a3a551b9bc1dcf81e6d605856f598246dc7
SHA5123b52613dbb16954c34b69c84009a7fe3a7c3e3a970aef479d08de7edd7739b6bb1b62fec85cf11fb1e59af25fabaddd771def51b399c0acbf4d30f8de80f0727
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
Filesize3KB
MD53eb8c1073eea32dd734dcb1d9e930cc4
SHA1f6acd5bbc7500c8e74d078c40957aab3e930b1fe
SHA2560fdb6b9f8770d443164887aadff768f2142ab1447006824417fb9f630f00cf74
SHA512272b687dda5b18b2ada82b25a54592c82cd0e8c6eb844d795118d9da40dae321eb216f10680e5fa8f8be38955b69e220d568a28107150888968ab3ce1798bb0c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
Filesize28KB
MD5603677a1220bf383b2d64da2b28d8044
SHA12c153ef3bdb1b37174db158750ea0b54b8891a5a
SHA2566c2fba415a24a3e94777718606a6c60410fd6afe2508761da7626aa95ec72d89
SHA512293e230698565bd36408aa8ed66527bd1d2d9d174f4e2c4cee7702d0322bae4cbacb87b2fb31c83e986d734b7480ef2f57eedbe59b4bc812d695833f67286004
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
Filesize7KB
MD5f9a33cbfd5b6ef4755329ea6bfa86048
SHA129601c1bff0352c9ca74c2d469840efe9d492ac0
SHA256a4c796c8891045109b8d66ebbbbdbd28ff1bd57f227f0cf861eaccec0e49efd3
SHA51222c53b99ec32ee2a653ac1941b341cdfa9b5278f1e3ae10ba7854c4a8f763f0c4643165c309cb6fb88bd6a13c1692fef3c8fdebb2b8c8f56db8fd9d8a59bbafb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
Filesize886B
MD5e78b6247b81486219260de7fca891a33
SHA1d14b7dd113ed2a762ef0176a428ef8cc4619bd79
SHA2568e2a6e2a2991c691fd92b310c0cbf03da04d10df4fec1668e9070524a9263649
SHA512a50c4a9f00d841380f42d7add50eef971516c16520f8b5bbf097e7d4723afa5828b55f0996681010b1a92163c90e72207fa67e1d6a8324fd4f88617e38ecc692
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
Filesize4KB
MD55f8f8b43d8761f3d8d8fdb262379da0b
SHA1637aac13d9a737ed4776b97a2e95fafb418889be
SHA25618de344b9a5ee9c4fc47cd04aa3e0604282661c764c50cce40087aef2628dc88
SHA5120d53ecba5fe4c54123d58afbf925b23f357b1db4983909919120beb29175fc2c42480d9f5ec2933e53a553196be70c6fd59b4d9fac5d363fb2a831e00fbc585e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
Filesize1KB
MD573a1bb6fc3808b07fda00e844ad26520
SHA19f056405a2b965c5bbc2dfa4ece043ad346c442e
SHA256d5bf52cbb9b760bd24a11e62cf17c932dc7ace9494dbedcbd6de4dd3ba2eb86e
SHA512aa4ddb197c76cc50fa1ddf0df75ff17a8065f380fa5a063d77b0f15918073fe17e22cbeeed87efd014298678df5c8331c89b764ec8ffa7c1a1927886ebd2dfae
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
Filesize2KB
MD517c29580bcd037cf87a46c8b0836e062
SHA12b2a3752c2514d19f640f3f7ca10dc4eb21bf1d3
SHA2568b1aee1ad03267bcae8eb01b581baadb080a0daa7eabfd8a28624433d976f008
SHA5121fa98a7820974fd2017d3224e37cbeeed5e3fc36d23d2392c2923fea2762f59d87952a868b1bac2794e19973f1f644f2cbd47f62cddf48795abe1097eaf953c4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Filesize1KB
MD5ecf20b55863892dc0609e231d108a27e
SHA1e19099074b55cf3ba449038d2433d7befc3eb64f
SHA25669f2074fa55de6f021f9f0c5f6440d70e06ff5b9d4f7805a94b06423e3ad2cbd
SHA5122a4ad399f1e2e4b49eadf81d55dd4ed44764544fe378a3da54ef5b1df1a7bedb60eb8e8fb4dd4b606959fbbc7a2e61bf6e23fcbc507cd3a36301bb560bb83b7f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Filesize683B
MD5de914a713ba1727c444b4c6e5c930bb0
SHA1d79e73041cb0a2b5430726e26468fe785c30932f
SHA25669777fdd52cfe0a3bed4c8edc33117d7fe23a5898ed3335cf4df8b7d3b88f98b
SHA512642609814a5e1113d7499b15b4d951be65345272048b7ec9265ddb58cc726e08568e20c9e46865385077bc35527243b065f7fef05729ca626768ee7a3e820308
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Filesize1KB
MD50814a2f280e4ede7530af9c30b87246e
SHA1b5796979140f07cb78d95d65637d9a7fd40afc72
SHA256297af825f556efe88d503dbf4bd37ce8204a7b84358e69d2aec84c086f89cce2
SHA5128484ab59a84546bcd4c7379b20f13e4c15ffc4010a31603ba489f5466b922402aca04cf7f52c8f613731c4f9c3cd63c3e419029b6d144bf0fdf96c29815af6c2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Filesize445B
MD5bdf2fd76cafc45c6bc90cd977377d11c
SHA1b89e201f441d50b65ba1c3719b7e411ffeecf9d9
SHA25624669a55051e4d5befa9006717d7aa7698ac59e65975318ea899c5ff9b2a057e
SHA5122bdaff70e4918018c9ffdcd803b405527f2062d86f6bf42bcd2b98de3a6f62f262ad1d9dbebe557a5c0fdddd5418fdb63c9bdb77f98c9251d6c082813781f5c2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Filesize611B
MD54ece0804c5c5dd19e1a992727b0fd255
SHA10bb828caf4a64eaa2bc4ac02a1fc044970209ef6
SHA256938ce2b6d846dd16822034b2bbfef59e30fc4da3f0834e4069bc84f8e043de9d
SHA51258c2bb1c83d345dd6d4d67d39ac025d47ef2eb71cb65d2270a311e3d9ae5d4d70643795b6872c1844c2d307b03e197ee4f86840ec410319908f4de23f6b40a8d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Filesize388B
MD5bf748086ab2aa8990ecc6900d52125d3
SHA1cb3196b31e61465ce6c46fc4f37d1fe642a2edf0
SHA25646a50d1e51d613445e2ec7ecff0d2d4b14bcbf4831f50690bcb51c54e1e4a461
SHA5124e6ce7a7583416f95e48341c3aedf7abfe6eff3e3f58f7b46ed0557932e1d2127688640628e6e01834bc99431e658d2b9dd1e1bbecb8d6184945a21c27b3cc45
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Filesize552B
MD58239e2bd7aba45369294e642b7230355
SHA11fbc825f109b1c21ee9bfdb30a002c6eb4ddc181
SHA25609f335f6785a3a49ac9d243aee02b4b6e1bc9526b86230742530f42e1a2ea1f8
SHA5123c745053813c7095e9f6b9744b73a9872a6387131d3a379235c052bef25cb7eeedfdc15dfe8bff1b7c8a51d97e46eadc3c7591d6eb444f7de4402f916c02f22c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Filesize388B
MD53c5ccc7a4ef61f65dec3b8d88424ae7a
SHA1233aab2fe87843d413dd8f6748303172733f03e1
SHA256d815799f5c2b595dcfd991677630297c5871bf6e64d912feacda0caf29ea6735
SHA512843c723a29c52f213555e495eeb7e619492ae67c68450ed3e342600be691c36aaa3845e037ad28f05c5a1e1230f5372ed282245f444c20a37ff20dbe7856868a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Filesize552B
MD59368a83994911c65ad7a19cc76ae04ed
SHA121135e385a99e56b0ab0bd9d031dae97fc2036b8
SHA2562d58dfd94c23363878981e99c656ae716e22957fac0bc71fe055d7dc09f2885f
SHA512032b3bfbe05fc57156f396910868703a2d9f4b7373ac9d9d5a61b3f3c8ee06267a4e1487c8f153abff9548d601defecd3c8c3e63f0bd65093b9defd3b6366bef
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Filesize388B
MD5ac4c477d49ce98c3af3e1af41b62d1e1
SHA1855b1f039830eab7fca98f326184a8c6b295752e
SHA256f5ebee5848ea7524da55bf4144e3fbb8954acbabe9ac30f4f2f21d56d20b9286
SHA5125cce94b415c417f14d5079be9bc50a8956c8339be11f1e666c453e09f56027f7e647a6c3e1b8b589eec894913f815767dfa58cb94e56eb26e5016bd597cd66ab
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Filesize552B
MD517b80b2e6044bdc3938d53ab6b03d26c
SHA18779bc5ba3f9517bfc6d8184da4831c46899550c
SHA25601514efd34ddd76bf2320d67350ccfaded908b5c97de05b7979122df2718378e
SHA51206f46c7c768c5553dc487a7672a6de73e0da43f9f1b2b022a992d2e03f593d54ca27c4cc7e0026208a261a284bd770fffc9b610c964ca99772583d914a4a1f4f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
Filesize1KB
MD510669b5e1fcd72e62c31df1953090517
SHA124564a5d79dfe8d8270c42f85c48cadb88f81d32
SHA256e379088e03c879619812e94da1c1d249634185358b7b6245d9ffb0e11b535688
SHA5124b2a865dfe5ce39f88c749a3ee27e8909b5e3792616aebb81319a124d3c6b6628a1b2eceec01b1140aeb0579e496668561c21d489237be599cdfce14d79c80cc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Filesize1KB
MD539a532d790467af914c6ad73545f2488
SHA1659129cdda02fb8c613dd6132fb8b27f9151f2bc
SHA2561f1fc64bb82ec2561fdace40661154b1c40f61d070f0c012a4b8242dda0c2407
SHA5126f2f5717edc54984f278923ae4ea7b7d62b7333c887d86e8fe5e4c6fb3df4d9d56d8c7e43b7d7e91f9b08a12c0900dc99680c6b5a596cd0bb83f2e5719feaa3f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
Filesize901B
MD51ab87787dba1c867fb3973202d679719
SHA1a689b68450b21412c9015156a1da811584f98a81
SHA2567da39b8dfd40ac14dba5f27e301239a95280f0f1b72cc9312cee8883bb4906f9
SHA5128adc71e8ed1de41ce556e6b28028bd6380a793b1c0aa3d02b2d229ca456ff97e3abce0424bd55cc900f8ae0998557e3474a066b6872834af56938f29b8727003
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
Filesize1KB
MD5762c9f81d929fcf14ff9ebb743b312f3
SHA11f3f4b938d5f96ec8bd714abf79ca692d1d73431
SHA2563b33894a8d0c94b0b52c5cae0470a44eb9bf0a5b1d1c4bd3073ca8eefc1a76ad
SHA5129b2cf41d7f590df800970b012b52172467bc465ee95aa4de18c16e00742fb9bf60fafd8f5bf2869c2330f3b1af8660dce77e0bb3a553ff58ddd841e6f198f0de
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
Filesize8KB
MD5d2897b46614baeeebe4e699109573994
SHA13f4095ba9fd2d481785bc15b84bb0d8f535562d7
SHA256d8d7f0d0e721ab0ef96a3ea4c44b7695970f48471659be11c7a31538e5d61322
SHA51215a5cf38e992e7bf45a8c5867483ac31e7a2a834c0c22be25823561e767cd55c79c9221f835d5e8d522821483c98effe43c9d924fd02ee622103f237e199640c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
Filesize1KB
MD572c3c80afa4c9889bbe7a689e7d469e8
SHA14587315c1edb3540f668b73771dc0c87e017d52e
SHA256a9587de2acb80a305661ebfdb00ad703df7633c5f63ea9f1ed62b9d644e57b77
SHA512c2a9efc23970ba6714e441e760c8c140539bb05e7e2716b0900e377a14591aa16d2bd7676b390f959016dd1cd6390b852cb4fd2ada7be16ae2b515450d381d27
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
Filesize1KB
MD52590d1eefb1534e7eebba81b22c3c8ef
SHA1970f6880bfd408c3fb8df4ea4d6ceface9311393
SHA256163b71f71bb06e9df57caadba28e59cbda723b12892efe98e3aab77afa5b4af5
SHA512934747835088ebdb079c804c30a7353998664dd66545143e0753ea385f5005b7d09ab95e58393f314fabf6e5486c5026b72c9fc040b05a4fefe1a00dd31eab9d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Filesize7KB
MD592db0a90e34c5e3a1d6513ce6b9cc67a
SHA16db232b41a7418ec16045a88905f43f41011fd38
SHA2565f49742cd3a469a3142bd1d1e80ef1176230f9dcb1335506e78d7cd9438d91c0
SHA512af00f7cfc86dfec7ac6529ea2253bc8f43d5b1375a0d5da31f263434a6018c43c15c86bbe17cfa3ac0e2353fe393689e4fdbcf617dc5277fe00254f05116e869
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Filesize7KB
MD58fa0e0c429065e8b2f8023267cdb044c
SHA14fbefc31697282990f09527a75c1d6065313329b
SHA256c505cce406b6672b77c73a4067a6e18f3dacbe1c25b853d41328907cd98796e0
SHA5123f9687d0ec15670245815c8777f1a4006af490916afa7dbf9101c0dc8f573843a746669bcc3f2cfd46043803af09776e379fa7d1719d9ba7db69d37404ad98d4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Filesize15KB
MD5584a9300635621d05a6a68ece4c69344
SHA193bf7c4dc46da4b65893d3578f65dabf9e5368ad
SHA2562a90e9142bbf2d7d79a3fcd6d92ef1b9f4c8947a342708cd7284e8b7ad41abf9
SHA5123323384d32c08b357997dcd54cfb408dd9336b6966a7428e5e1fd95233839e035f7fa8dcec482bfd41fe2169c8d6fbcb91b81dfe8823fa6eca8e8d3c77ad8f2c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Filesize8KB
MD5a0f6343ffc05e46663397f56aa8dc94c
SHA1ad94da73d9439434b221b3571fca2d4845af6a31
SHA25648f6b5987792c95403a89676b7ce60810f945fa5ea37fa48fa5051904baa53b8
SHA512c27e25a4064c2e209e5649ab9af2eb12fab3e0b7fa8126bb05ba89340405fc460cb5ad7844a33a8db031f36d0fde14b305531a9e42cbc0aae9e2e939046f2d88
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Filesize17KB
MD58a670b0d4a1a671292f4b7b9a1d73b2e
SHA1ebcf9d2b10a6f01d62f52bd208ef072bf3e86540
SHA256f0e0b9e5bb1eb44f08b9c3f0e095b55227eba7031369118d13a88ec9567e94a8
SHA512b9eb32e51f94f6032549e03b58132e66ce3b77486900d3db0e798ac0ecc012af6541eabb01293e70a70be29a7c4fbda0c91c133064b1e2d879270ebd50398581
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
Filesize823B
MD5533047fc1088556acd37396c179b4c06
SHA16db29762edd7431c0a6abb0b3db1e7a4f8bff8ec
SHA256c4983b1f59fd17a672524850cc2385f11bb44ef253af8df4eb482491dca4d2c9
SHA512ad594734180a824ecf6ee2782d9eba86cca3fd980c2e75b21e950795678cd31290db4433ed7460f9839342a30114a23fac0171f92fcd4a2efd51e4233157ea37
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
Filesize850B
MD588daa5d96fe091d7bc9d2f9e3dfb0d27
SHA1abb76248a8a406629148977a757a0cf9b0cbb6eb
SHA256448f37767da27d96a15744bdead120d3ce0f25b91cb29d179cabd12fbb183ae4
SHA512f953b15b6b465b0d7f93f721b812f2ab36086065a84821df796147a83b41f2846ccca0efdc21071b63661a10e0ad29d20d5be0c463efb924a15be66aa259ccfe
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
Filesize1KB
MD51241271a644f436200a6e82c89f09502
SHA189e2efb906634fb7b478fa1831a5748938bff808
SHA2560a3a95c6d9611af6479dce95158280aca11138c15476d37492958c204afe162b
SHA5120e573549ddbf86d6e88c498e83ca79be5cf3b90c6f7ddc7ad8d2e1eaafe76967667ba8381c03333d6ba8782699f156e46dc460cd31c11ac26fef0057787b7971
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Filesize179B
MD5de37504a554c1ff0a8e42f9e7be6ef60
SHA136faef7934c6de5322a98c7bab221293d9232d18
SHA2567f99c088a5d0a802c0fa7a33ce4a69ea2ec50f917efcf79bfbd5426f1d8fa635
SHA512ea2e6a77c2b5bbdfd9cde36877a7d7291f59680be810714430f3e8fe8c313767ecb240e9dd53e51466f363bbe5d8bafb08386e6619e20e4c8c5c4ddfe9cb9d94
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Filesize703B
MD54bd886d3f06712a71ef492e2afd8eecc
SHA1e3731d1a1dc3270a88d68c87b63f9e501dc539ae
SHA2562f796e49dbaa91921ba22cd32fc03496ba1807db672728bc2b94ded12f75737c
SHA512bb3a1f0879e435728a95fae2c8d422fb98d94ba9c7ca2f767417306d35c5e35cdb4ba9e6c393f48a0de3f828b425861fe56e68dc5777c7b279f9e106a6bb6c6d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Filesize8KB
MD56c745dc727216d6d328303aad0c1fd33
SHA19839d988ab5f79ff19bed435e0966bc5afc6b54a
SHA256efaf2e988faa7739de5c3929e505c1117a58f8e72f5ac392e98bd4107b3e1e1e
SHA512a07cd17030b18ba3195043b654317039897c6bf48794dcf5f5ed3d97a07cf32848bd87dd559b113facc5bfd7787b8f3c907c41891480af1f53317398ed9dc3b8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Filesize19KB
MD5e310a81f83137859857cb466aeadfca3
SHA1f1df01aa9196ea485090a70435789d0af308e7ad
SHA256c05a52931ccbc70fbf05a98af2b2e993e1b73941d543a9f5b540f415759542fc
SHA512edab8a7569d56d8c0ba729ddb0dcd17c7f84aafb3410a80c3d9e4854a2a8d965b00ed8a4a01fc81f7b7754020c91daa061f848261fe968f11e6abcd20e4f3f56
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Filesize1KB
MD5601ff26969393efb500cc983deb0897a
SHA1863715d4317ae2ffb8ab1249ea6f07c3e72b0a1c
SHA25601f35c4dd4607042f01f2b0d16c4ffdbd4de62c61aa973bc7112cd79d4339116
SHA512367fda743be40f706b10551b24b0163e6c5d328813c8d44f6f1219fefbec13864b64046fbebc0181bf6c585900d948567f79e1af9fde03ce6cedae414cb5bec3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
Filesize1KB
MD5d59b4225e3f1d79b24cf4fa52835b94c
SHA16557d9757a646c67483892561e764b0b383836fa
SHA256a038689cdd422d315df4575cb93ca9a5eda6367b278f75e2e0a92aa4be7feb1a
SHA512f181092704e0a14eecf2ee18ded81a5dc09dc66737723cdb5e200e45fef4a5270ea8ba8abbda197d7036ca684d55cd8cd86e81743f77903c0282e891aaea325b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Filesize802B
MD5b8f065996b6cd7b60eff16f789fde520
SHA1ab34987499f083673dc8d558dc4825499ed42ae3
SHA25688f5512c1506cd583462e06ec7ad4aa1d8b0c8de8bf49ed1905de27d6ed1826f
SHA512ce18e303403f5246aa9497b3ea5106631a0082715a6d56d5ab915021dfe9938fb23221bdc6c694e09862257149052dda580f4c053a1f74ee3e269289267da53b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
Filesize1KB
MD5084c62db8caf347b18d9dc89c7eb6d3f
SHA14d92b91f441f8e063fe97acc955b47cab73392ca
SHA256f9376b9e155878229a96a767f4c046ec0ecc43a9235d81f521a7dc655c21900d
SHA512e393d5df4ba2e61f65028a6f627f21bdf64d41abc1aa426f74879f368d2f11fae4cc0342da433d95c6a585e05047e1fd03edbff28705335a3707ffd26eb38bf2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
Filesize1KB
MD58f33189193613587f25134deec86c17a
SHA1db8290f598f1580fe46252842967f67ba9ef842f
SHA256bf9b42a964a3d1664d84ff2c3a5bfd8caa63a4fb7f6c79035936357a42b44127
SHA5126be905ff5458bb9f37213109541abb0a4543fedea6e9008c536b3b843a6c046e5a30de5cd367d6efde7545b6f5bee09ca1245cd2d458d892022ec044345cf623
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
Filesize1007B
MD5b8d8fefbcb6fec25cc7252afc30ff233
SHA18c2ae4c5c25edaf1b72b6782ff0d2bb7c3c95f99
SHA2568f860604d7d302691d59d0b36756c4ba7589db4f8d18edb6542163efe0b92b22
SHA51214534b1d3390c9eeebb6beba891d4ab6ea34e630985af19f599e1de932fa323758cfd121861c3dd8ec824fb36a857cc541931942ab64765613ec3e9ab2d66dee
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
Filesize4KB
MD5f3bf62ddeb3baa78e6d34d851de137e8
SHA136f3f71dd55f809a514e537de017fca51cfdf19c
SHA25670642f7798205ed4b108171206eb75432af78826e4b6cc559db994c69923d475
SHA51230df5f1c1d19835ec146787239538f039c13db567a271047905e7de8b9a1d7489a10925b5d5ef4dcd9fa8a148260c06dfbff30631627437e175912e5da46fc77
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
Filesize12KB
MD575d933dab71b00b10b2c6bc344b41252
SHA1695547d25b19676e0e9d7db461c962120c812e3b
SHA256aaf6cc317f160faf263fdad2c5cc7adba6aefc6ab01afbfd2bb8b2135ffa0d07
SHA51241918168c709d8a843d1de3b7016595207772b7d3d793289cd6e228987d04ab427acbc272a055e4dcf573b0c2ae360671fb6975e81ed2da0baa4ab8f186dce15
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
Filesize14KB
MD58844b39b3090c45f50c922ef923b408f
SHA100669c053a5b5c28e24d6829c11c6bdd809273db
SHA2563a881372faf36a2a7d8903773dfb2982d0229b50c650b2710ec75563f0f0ac18
SHA5123e96dea5b0246ef7b85bfca16e50455d2723760b7ca552da256d173d649dbf5949e20767a8d00c8eb9bd942d033f573a3ee7bca594852a5dc90b9c31d0d84cdc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
Filesize924B
MD59a0c54c07312464c7e72ccffc6f71e08
SHA17a35ca15d1f766b7869947ba1b36e7f107c56eaa
SHA2567aec9816de304a4290682808868c0679a607631d4b396dbbb0fcd4a71044fe32
SHA512bac7c0e86f5bc1ddf743e46ea5a65b37cd931b83f27509be4ad6b685cea0cabf63ba9a95533124496c9358708c66722f3e0bc9953dc5338e9a1b55c15c3f8afa
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
Filesize802B
MD5fd7a1f3ae0c349d0a438dbe731ed8a74
SHA195d4a44e972bd59e3e1f660d3889b46ad6b5d5b5
SHA25645dd52ad146cfd34d08e9f55b02ab6702298c3eb8630967dd337989fe43b9e0b
SHA512b3b8ff1bd64be998fd46ef124d3c6339774efbcb014866aa71baa365bd0b3bad08b049f195dc589d7cfbdd201d069bf7e1af921a7d98219984b3ed95e174e7dd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
Filesize1KB
MD50387bd31da2392b17509ae506863386a
SHA1617ef1bb355fbc7636f6104c77a71feb103bd3e9
SHA25627b7152c613598fba7ae1858a9122724bad072ff7a82040d8eeb51824b2481cf
SHA512fadad0bef3157d75e53d083309b60357ab975ac46c775a4e1cbe32a53917372e854d7b0a125b50fc83e521604df5c42c609427d5a0c117c91dee4771e61c6fee
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
Filesize1KB
MD5c95823446d375fcd6126dbf8a47f2a27
SHA104563a4b278c78caa51e3d91c0150509798d5b77
SHA2568eff134c6e0837f812fca0e99af8f5707ed9daf697f7fdab8bc0cb368906265a
SHA512a17bc7066433ec26196c4c1a3f224bc16348c826db1b6aa0c695655666d7c6268a3b5f742d1df138326617f009bc6673b5e1e86362f5080817baa1f08328ceb7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
Filesize802B
MD58cdabbb5c59fc9398680b822bf4d5ec7
SHA1905d3429446491bf311832aaecfe06e20cce8344
SHA256d9113117f10b5d8fff61eea9a8890ba614711adb86adaf3363925d2c8af92440
SHA512379d8d21e736a461ba5b2fa7f6bb734dc2e285a4fb6a699434667943c08138ccfd65e1d24d3129d9d9481c4cda611a92bd71aecfd13cf72bed5251b9d148c493
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
Filesize855B
MD58ae50600076279539e3b801b6587716d
SHA1e9f68ba4ce7e6dc437008684927f4f65be4ef390
SHA2564512615787032f3ab795d5ca247ba5e7f31f5fd309cdcce2314b1f6e4d30bb71
SHA512706567ca300f04813a7a5966d82424c923b2265e29c8d8d3cdde5c50139afe31c4b9d3984426859d6f84b28f0dd5a080392925849dd9bf0e6c26068f8a9b8f3c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
Filesize850B
MD547c91f45412582e8d6a61370ab63cd4f
SHA109ff966c79ef24f10f7fff63461be9c4015c34be
SHA2564535239635270c031873877c2e548856b6292000b8ee62c6fcc69b1def2aad1f
SHA5127f5b16e88485fe3fd31847b8cff1828965a8e3efe56c348789cd46f8e6a2fe92184b5a7ebf808d986c8043ab704aa8a9ae63da6976485bc3312b1e2021fd8270
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Filesize849B
MD53702cf920f766d79c7cdae6ec2a1c415
SHA1ec203a5b8840a96d5ab6008f753f92a0a848fd13
SHA256fded1a4eabd12d420b7ad7f9d5a2815efe1fa99c76f0632a0548e7478a868e2f
SHA512ad98202dd0455499a02f7f3fee6bee762b0d393fdd91f500159a55e9a0cdd81c5df013d78bd28555b5d17aedb191f52398e42630923356bd9267637912c01e9b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
Filesize802B
MD53a232ddff9f28f3ae282dae5db244b71
SHA1cb8496e0ef26999f018e41ba50c5d514a6920d76
SHA2568551ab2b787fc5b1d96e4f9c4724850de15c476d074d9e5f6b40c96fb211c929
SHA512d9dd2a9e34f12128bc98e3d7c5e5502f2bfe3056a555bee6cc8dc824a1e1813910a7ceb030082518f2bd457a685a575f46b025a40135ba79c74739e7f1c18f57
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Filesize6KB
MD54eef32c4260639b76923811f7059f717
SHA1eb3adfb37e38d640c9549b7c6233c1e752d9dda8
SHA2565140db4f29d312d17e6b4cd2a2492579241dce975da927d1e9473f9a8557b345
SHA512600dbe7d08e3957cca1a68d6f33594dd91f0531d9de504a1838e8f255dff1f582080b9bea340e0f501762ef7823e896e5bd9e3c7fd6da7ae76854a1683964fbc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
Filesize7KB
MD5ce78326f387a1cf8cab2bcb2897b935d
SHA1060abd5809b666dbebf625009a1be3b685657536
SHA256ace18ea294a32c431f325e007df8ce5e4c1ed407e67d1c3f346e05462de1bc1c
SHA5124c619d0454eceb93eae6329b886636c581e72ebfd285e2046a6509ad39d89e6495ba9961a1d88c30094fce18cd6994e6e11247fc1d420b412d2b9a52d2530da3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Filesize3KB
MD581c268d86c881659c5cff899343d7a07
SHA1b320a9bd22b2520bbb2a363ed8d6cc06ee7f25e1
SHA256f19566ff6b1d9869768e88bdb9ed730c2aa62887eb52372844fd819ec9c33994
SHA51297a7db728d64f40119b3e27ccd3e5ffcaa39df5a5c26041a17beba0cfa42cb12026ef73db461846eb582e4031b98f1bca05ab08afe9a2477d40d9538a9069215
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Filesize1KB
MD508119fd7ce702c84cf3c3eb9c9665153
SHA1ab8182b3580e94f5b28be50a7a8f135733362a93
SHA256f79ea1054ce8047da889c568eafd4d66cad82d295b94deffccb419014a4086e2
SHA512fa22f8fec2e31f47707b56c8a474bcbc05afcb75d3e20ac1be9bc5d0856534d49373151b84410b5ca9a6f535eb176d83b2d2abbbd49277a805d7dbe232f117c5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Filesize2KB
MD5f6359c3e54c187d5d91e8e24deb49a99
SHA1b0f3abf54892ecaa1925bfa4e3ba1bd590ac0dc7
SHA256b2f03d3e7bd727cf47cdf17d042b9efc28bac09774d2ff3d8e1be5e119130571
SHA512ae119d4aa3cfdf097a2f6612a756c7d405c620c6017b39bc2b1fd79e65a1140709b057d1293bfb44e74efe3285a98ab141226faa1eabe27e200113ea8ccca514
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Filesize2KB
MD5fc6c4550906b2473592f1623528d5c51
SHA1bab53cccce45cdc9f2f14e8731c5591600172021
SHA256c258c405babb76e1841e4d44ff9f10de4a2d6104cbcbd978df1ba809a16786fb
SHA512297eb33caf7bf240289b4f69e783eb2a9a9c98fc2353716a4af8adb9c9b8ae97c87312bbefdeea134ccc865483dffd6b56279eba76da9e6b715099352e207de5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Filesize4KB
MD5cd2fc4bfc749ab69ab87657a1771e518
SHA14cfdc3d0754e6de776316e493d219b57ff8075fd
SHA256f814a1fb46a5bd720b13405ef19228e8c3e51b16d983d46f75223ccbee5ef75a
SHA512529d103fc2babd86513ae7962881d8d3fa84c0b5c3eb36ebcc13adb94f06b75c1506e2dea84252637ba1630c11940effef7da56b14e93a3cc33c406fb9d441bb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Filesize289B
MD58913f95c807d1902ceb6f2dba01bb2de
SHA1e5543758cc957910d5902a008cd946719e285f99
SHA256ae4ba8d9e5debc98b580c5374b11848bcb1d16ac7619d6f1cf73adaff7941e20
SHA5129d506b98a3fa890a849e6bae8bdd9dea917b675eaa5b37be6e0dfdab8fd2a044b18e2454a3b92918234ad73148d2339407ac2e3d588cc3e910e549fd0ad5ecde
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Filesize385B
MD50d68ca36f48a0fc1f8f9d98ab6600fdf
SHA17ab334817a6d173c456acda4034d3bfecb4c0dac
SHA256bab5a00396c4dbd5bb0909768f4f6c43b821f43f05ed45fe9f0cde5055949f22
SHA5121e39b38d10ad4ed57ee81f2e046c8006fe105fcd10cd45b897eb838f17c209539a3eb3488e96563e0274ef39228fafedc30315528ed909bdb1e19bf5f1344c7f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Filesize4KB
MD51fe630ae2ba8f0b734c0e35cc888b74f
SHA15680a9c9d0f31fca449127660b34bedc1e16f348
SHA256b0e21ecbfe440e0bb95c7be4867122d987b10434426385820caedb784dc54329
SHA5127e731c4419989a1879d2f10d71afd282064da2d082cd31e783f1eef3fb62318e44005b6344742febd766999210b59c21811fad2777fc12221f178778f3400855
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Filesize1003B
MD5a9031e6a2e13c3cad84e7dc40c5e5295
SHA11aa1a3c447abfcc498457de24faab84de955efbd
SHA25643b1e0d01e7ebca3d384b4d9f1322403c5b9b7c5de4629899cfea4c89f67d959
SHA5129a091cc30a48d957d240968486b873d64fb7f0b43b8ab65048481a076f1415f96483e31c4b4f6858f94053117207f0c16766f6aa8a0e6939f8bcfccefe1efc7a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg
Filesize804B
MD5c618818453dc38441fb159c08808e93d
SHA14ced029d0e8c1ae52918dafbdcdc45ebbf8dee3f
SHA256e89c00273b002deb1eea8aa10e105e15dcc61fffdde6ac71985bc8d7c5c60445
SHA512c30752ed68f21a5c137b7711e64f73039d9bbc64bae68b6dc3148e6ee232cd7902d74d88109f7affe9fdfd23bd90ef0c393cd62c437ed8a59a6728ea7365acf0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg
Filesize1KB
MD53dae27f64c31446c3ca31b8f4304c29b
SHA1d81c08be5c9073f3526a616b21f74cd6f6618033
SHA256e5c0d67d063de791d6c11c9b2e2f1bc0f25efa96d8d27870c226b576ace7c6c0
SHA512f11e32d1b64a25250f7ba0fdda4c59d3169952721e7720d86be2306ac50a82ab433855bc5b09da29524ae6aead8db6ae13ffb007f8e7b42a0572df6c8c1915b1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg
Filesize850B
MD5bbf98997bc7ae5954f17bef25d87c7e0
SHA1ec926b434ddcad0479f10a1d5245914923c62cd6
SHA256f0751e36d02fcfe8b7c81d69e51212f5defe0b61e279717b3e0ec4e07c9c23d1
SHA512dbac3c59c63c41fcfd1b023de97cee3092ea69b93d77de95b35875249b7a5077dd3f82b973cd7c50f5c0725ee5df589d95654177fa3d0e3a9d1d297723137b83
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
Filesize1KB
MD5c20770300824fda0ee9b415ee46afc9b
SHA182c4a094657f74a30cee7ffbf0aa3748cf8d0dce
SHA25625ee1736996b09dd8a5d73e93e16db8431b31be24ad5cdb03b9e94f5e2aa0cfe
SHA512b5eede4ad50970ae7007545850fb4cc0a4a543175050c4b12acdf5a452199ccc4693ef2243f20e14f70872dd5b84867079e17cafd2d580fe4bf6de4c8a60bb22
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Filesize1KB
MD56e1927aa1a6fea14f8042c2ea28fcbea
SHA1b33bb5a7bcd15da18d7478010ecb60bd508d98c2
SHA25694e06aa89a26e21b2508d19a8170c3624c5a2de67246ea24477a9ccdec23b068
SHA51280c6832e6c2087d5f1e13abb5236e30001ba0c779cda7ec51d1ffeb169a4e39fc425f9dfc394e7fe3d415adc6bfd711433f06837a805a6e93a1d1a4fb53b3019
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Filesize2KB
MD588444ef9e1f6a62ab8642481413d3d21
SHA18dbc848d56df8e0833b2e8946c43ebb84bb14639
SHA2565161d34fa7cb776b539bf868512fcb50d48be5f0ee7571d3dec15c8476faec16
SHA512d96aaf83d54888ff770cf716fe8eb089e95c6ea7eeceb7b1d75e08a30076858e22fafbd66816ea77fa24f0631ef2e63427eaa5f0d521faffb1d06f589fb22d69
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Filesize13KB
MD5e6b605cdfaadfa527c2f89bcc7902778
SHA1d4ba15a4372cba5e08fc9111c976e3e9173b9ee5
SHA2565c9a469bf773283e13fbe63f556c8a0b5578128399a0c04e73d84909e4a158c1
SHA512bc1db5e411eabaee050ed174ef47bc8749052db7c682c0879d96bcbef91ad2ec83edaca73083dcadd63985f9d47a0ce0526888f5349ac7d2fde342bb1d1a802f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Filesize3KB
MD5aa3d83c5bae565b9a37559b33884b1e8
SHA15d67c8bd8c168e51d7eab4701483f41612d9a24e
SHA25635f528a026852063ce0c1de4d63196b1aa807815691bf47f4a651f2ba9b00cb4
SHA512bf0b1bfbd81cdf76bb9bb057b07fd1375a2dbf76ece46eecc7ef09d2530d951f7d307c86fa58f09bbf53c10d933bbeb505109db93e59f9a9d1e06eff54f23adf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Filesize556B
MD509e31671ff7c519c9d793c4e278d4016
SHA118ba63c90acecc4764fbe218775c97e7a9d6f8d4
SHA256c59678cd0b8c6e8d54a7d467af6ca6d4e640eabd914091c530d6234615fa6b08
SHA51228271e7e2a5c78571a3191a00c3bad534f80361fab114ca5e78fbfd1ceaac98fbcccf1a8d262eb69606143f7dddc81f7b5e9a1680f170bfb4cf0465897fb9a6f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Filesize6KB
MD50c2e788b2865b3756d4f8e7b414f5e6d
SHA1b23046a296e959f5ddeb4409d195292e745803b8
SHA256680c319520ecf2106a0af00175d59fca3e2095fb089cd98fb37b9cba519ec893
SHA5121e210fe152b86275abbc3e608e6bca7558cd701927c000465bfc4b2ae55e772da1bf3b4af3e2ef7100adf391f0952fc37c20fdcdec4c08a6784c967bd5f6cf13
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Filesize826B
MD539c9872e2669d6a84647bdb6920a1507
SHA15e324adbc8e8eb4ac800740f0099cc53cbe2b92a
SHA25659ba7a8debc10841d74dfbef67340114abab4b7f922e51007c7390fd0ea5829a
SHA5126df2edcaecec3cc9316d2b003262aebf847f9063cb32c0d91d0a9d6ee9593fe7ba08fe229759f1130db983c3ed750ee20c2fd403092679400fa369270f64979a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Filesize1KB
MD58d434c109d5397bf17d3f12fd734ef07
SHA1338fb3120dfd111a7f9c368cb5271b6d615facd8
SHA2569c2d509d8c99cd0f13eb66e13cb3f7461003d0c0620522545fd22e64dd10d505
SHA5124f05429c3dfaa923037eba59dd2c89e60ae0374d0baeacf3814116fc0a2ca20e273c95c327211ab63f12daf69501d9fa398d6766a02bb3e4c82c0de07fb65e06
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
Filesize10KB
MD57a29071c081371e423a4b6c34d41469a
SHA134d1e7ca10f8424da7d0508711901944ee9b08ad
SHA25617250418ae9ad4e3c0aed35114c7c9011f9a265bad222b7aeaf987e882d6b3f7
SHA512dc2ed46fbe146d7dddcce50aeb7fcd7c5428d36d748f65d910093047627b3006361882c0f6e0fea7caf2b2ae79eb1ae304d4f00659a3b985492e40f6b627482f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
Filesize13KB
MD5098777d541ac59dd40bb351f86c3eade
SHA183dca6db83a2a4dc94613f707fd935203b6e55bd
SHA256d5e3473772922accc3f60dc94a7871b043e1f8e1543dee7f169e4a6c1a20c885
SHA5122ad898bb728745e28be68132eabf98f5428690963e74d12b3c738b7c8a667c1a3cd4ad543dbd920a165d4ce4ede3aee2478173081f546eddb6e919a6e5ef4c85
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
Filesize840B
MD55a8aa25949250eef419a623546692471
SHA1d88ce492bb28699199603186e27b3cb73661361c
SHA25622c2f5564456e46bac4be5638c792d0f6f6842e7160b79b2591d62fd1120cbc7
SHA5122a60f5b5004c2692994d35ae86eaf05a165ac6e7b793c18a27ca82b4d997779bd623e6ed02dd0e3438b900a286b357cd7ddac9e3f31ec0e2345ad766ff465e6f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Filesize17KB
MD50e4942bfd62a30ddabbe246f4d3c98ca
SHA17a404b2ff510dbc404319054ad18cc9cf46acf23
SHA2567055a1703d69bf323808a41c178980951d0d001c4c0f549ba077c6cdd72b5ecb
SHA512b9d9d8e81b9ac641397e23f628b61ebd174bbadd5b6ea64024d78c248849ce696a564aff4e0b85ed62c146136dcb552da21a36e5968f78c5848504bb6fbc06a3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
Filesize1KB
MD5e8fca2518cc90738bb77dae625a455dd
SHA153f11e6a2f62d581c18360c8b060c091fbbd6001
SHA256edb77aee40ae1f60f5687b76ebb4fa59d5dcd422adc756492d4906c735c76b16
SHA512fbcb7e3d8afb9c3cde81a8efad360f25071ff9f1d15a88592def7db5740dfbc546915a607c40fb24c02f2aa2d2838e800757a2f9056537f4ee5ff513cacd4a92
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
Filesize1KB
MD5aadc2412913a998fbab4747bfc228812
SHA10bdba5cdf3b61ab06801ee3aaee2bf59df0d999a
SHA256cfd37ad661c30ba2e1f4a812a61f0b48510d8caf532287b29821838a718a5432
SHA5124d0f862275ed2c114d1dc253b36e3570aa6b3e4c7edd936e3fb9192ebd591687b1ebb342217f9c3e4af33087b0df3ea9d47fea47dae7bd9c690d43e34267fdaa
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
Filesize2KB
MD5d87195e06e1839b0df829cf4a427c94a
SHA1ca1b073862c8084b4679f9bc3831085c9c64a943
SHA2565d2f447e6a3c933cad4c0f531bb1be2b522b9f80934ee23eaf75f628bf587580
SHA51273ff91eeccb2cd480467fa3ddf6eff31d43bfc159794c47ac296fc9e4c7e719d77b6c0940348b53723a760860faa761046aa5e9cb3cbfad2d6de69291ea21a01
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize32KB
MD512be3766af5d6819ebe1e82a6ddbe689
SHA1727538de74daf4a1c639322586722f4ada109e6d
SHA256c85c93984fde26dca8fdc06dc6a213457267b83fd614e666992794d700e47964
SHA512467ef017d4b43490da21b11ccafb4426b3886e28994572a0b8552c3e13a3429ab058b280cb58fa258b620927fbcee9373d475e07925a11c929fefeea2ee3e1c5
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\external_extensions.json.DATA
Filesize99B
MD5667462aa45840c742efe9c1456e4b69b
SHA10762da43caf347127bb20f30c5673b1b498e6333
SHA25639efbda398b88ef5efc5d99bfe709fd7193626119a9d42cd4636185bd0fb35e8
SHA512ab034207398119ca7cccb6fc0103d3a54319b494accc1c698a44fd1827b4c1f4c47024ad4bae1257df63a73c82b44bd678c13a0abfd456d88ab8d848a2942c74
-
Filesize
106B
MD542ced27704154d2c83aada5aceefc37d
SHA1efadc541e7866f70397da3f5d0e66d4d42947b1e
SHA25680834293bddbafec0899121dfecad422753b27cbfb9ded4e948d03dea0c97799
SHA512160debc0093ad1d3c0736caab5867341239ad85dcf931d67555487ae60c37d8d9749b4b76e7916721d24586435783f642bc87dca25392bf771796d22af1a79d4
-
Filesize
984B
MD5cd2e72f604ab693b2733138ed8b80f41
SHA17ed2616e789c7dcd0fa415989f40e1fe95be8a09
SHA2569214f65825856c770c3e1fddad93752ee3af8c96c0a9782b09b7acfe298d9860
SHA51201a63e4d34ee6edc599a1d9c9fd5f330c7e282e306fc9914ff90ebb6f370d62fb1a58d5bf38c3d99a35db4c7aabf371d96ae248b80547f422e513229dd57aab9
-
Filesize
558KB
MD50551c0a756495d8383082d211800622f
SHA1f9f977562023356d522fca99c2dca1c6c3222559
SHA2568785f658f9af61ae618837fc809ca2edf36786184a9bafd0ea7a182ee568f444
SHA5120e5aa05c738722e54248fc3add05c89083d1b19be2cbf904d3d91b8d964a91210fb2344dd65a26284d59489e42133febfdeab542228983ff77e31712759f2bb7
-
Filesize
95KB
MD57cb3035297cb547c29eb4769fb0b86dd
SHA129c71ca1f744be966480a7a34e38fbf74f569df3
SHA256a39e9f133971d8e4189559cd2f90fde731f812e1c514311d0a22721aff0462ba
SHA51258686dc4a22d786953276a3ea0eefe5d796702abc86d714936e8d23d2f39877acb1f51c6f37c9fe1b64c0add35f7f714d2487984eb4e9ac011b20b52d26f7f2d
-
Filesize
36KB
MD5a837618223c70510b9fc8010c309024b
SHA1a0ac42ea8d3bf0837caf9be0de6adc37579feb1a
SHA256e012469f1f0f8cd258b987f31e6d6e2c4e49860e17d5eb7d4cba6e4b43aa8857
SHA5125bab496347d4255f00fdc05a5f44fb95147cba09e98d75cb22214fdf23af04d2efc94cf9a25df792338a1ef538a777fe4f327f375731fcda24c619ed696f991f
-
Filesize
153B
MD5362a4cbd458c18d1198e703c3e4d91a2
SHA17288eba6d3eaeeb75fed8ec44cf28785d239afe9
SHA256f519881c426d639da52fad0e46b647a238e048dbd96af8d0c6c62df2fec013bd
SHA512218e2468a3f6cc4082c61559b399e63ec80e041f44087f5f2d72d381814bdeb0d71348b85f9c1f32a0a1dfb032d9295e174a7b0b229558d8743034045b3549dd
-
Filesize
190B
MD54b95f5ed680a87a39e7a1bff7faca6bd
SHA12e71ef4699b900c425224641d0657ce84b9b331e
SHA256d89eb028df7eb61178a6db7e9d7c967ca2f48272b0c10753981e45a0f92b5f36
SHA512f35087432ceafe62d3ca175ca2e322166f39acfd2df5eb9d9f84550435800e434304abb398386a8b734e1781c5b008c01fc9412f4137b96e35ef74b71720f618
-
Filesize
190B
MD5dd11a83858a2e96925064292b9ef1699
SHA18fc955259f0d3ed0a70d6c5e85a56b1da5131c74
SHA25689c27c3f02b6cf827f3787c685677b6261d5b8c052ca8b3e686dd1cad0e840f8
SHA512b2a7c3a590d3be2f80414a1d5b8da0c0f040f84c99f9e3cc0744a39557fda971687169069c2609783288c2d681d3bf28589a55f9a47c0d5aade14f0ca2dc0ca4
-
Filesize
11KB
MD5798d0abd51696d13c0baa8da85d496db
SHA19a2ec4906bc67aaa8d2997130cee005606c54ac1
SHA25657d1d7972a6620c6af4f33338a1a5958e19aea8f8788e0ef5fb92156a55c2d7e
SHA512c1db89d07c98c74b58224b62c2b7bdb3915f25e89ef59ba4c5c1771a2fa9ef2278b309290336dd4c78a8336fe5d44f6509ab3005e06a583802331a347552cf4f
-
Filesize
11KB
MD512778f95cf25baf840a1789d7746735c
SHA1e9c41ec17f8d9f6a00731b356b96f82ac68b4615
SHA256760d6063944b7aca0a12797a8aad0afc7429ef1510388cc11de98293541dcd10
SHA5126d739935b8e200df6fa7c02d57a154c97c70e360429be4bffc7f4c38277061d80cea4a357f7893a31e3b11c12a258c6a35b7cbee4024331ab55fed1e2886947f
-
Filesize
11KB
MD5d3fe5ed122cc7941dbb95639712ccfd2
SHA127f98a05b81c20d535400143737bcb394c16ac18
SHA25633f1c0d3322ee7574d89e5659fec8d9ba0beb8993d69fb97ed9ddb224954dbe4
SHA512daac3165281690a0910c94c326a245c2b5ded3d3ceb071822bbe95e0a1cf74ae502dc78126d5e3c8d81ba48bbe3a9b90f6762b26cfcb08ddd213ac9f928c9e73
-
Filesize
11KB
MD54f7fbc83730f5ef6e3746f6748e25982
SHA10125a320ca4e61e1147cf5dbe97f3798b0197e9f
SHA256e8ecf032dcb014d3125bf6da1a032d255863f891f5b0dee26fde2d1848b3e1c3
SHA5128f6106a891cd73471893dc3691b808db0a140e50a01e4af210829c4d8f9e25b7812b2c103eb413a63c6fab608168463da7f58dec7d05fe1f1015dabcee8647c4
-
Filesize
11KB
MD5183041baaff28042d7aad67c928a6c5d
SHA14db28de3f0faeadc16d3c571caf2c4dab4aef9d4
SHA2564b6b1f84a11c7cb3b88f9a7fe6dc7137fd2440eca4045ef80d676942ec1bd976
SHA512fb55ff1495eb4ed5530e48c09e3172cb63ad202063569000dba5baba3ac0f6c18700d8aed3a802496ad5de18c1c6fcf24d4ae68ec74ed5c510c08dcad7d66ba4
-
Filesize
14KB
MD5355306a943df28b5c43a7433a17c520b
SHA1a7ca28226302f99713712d6ededc074f4bc5c5df
SHA2566007230656c8138e74ba5b550cc6a7a22ba1f9a62bc2e33734b67c867c195b4d
SHA51265146f1da6189956243d7ad82096e70ed8b59a61d3323e41c57ebcbe810ba456fc74b40e2de0b8fc34286fb01c6086e7a7dd0f4360c693086c58b01b62172b37
-
Filesize
11KB
MD5af873b7fcbc5d38ede675b2b989a7929
SHA1525c6eeae89dba2decee27b9099460266e4f0b90
SHA25611ecdf4b8dd92cf27c257ee3fa044a211dc92ac16a26701e620fe983b858ba06
SHA512f2ec3d71b5a1a25a14adce58147e3fae53653c309aed9d224026594d32d4a25b894624e6881f768f66d9e8d8ab4bbca12050023598a87926bdf98540d48a7c3a
-
Filesize
11KB
MD5a57910522e490522976e58e3d16f744a
SHA1091a7313dc1989a6159fb8462044f66dbf135212
SHA2561fe5685e89735868b86a4f168903884d5cd43f71888bc7c8eba85c2c01d425da
SHA5128ce6e6d1f61220270ab77d4a2909a117821d4cd9247aa21bc7917b93346c8bdf27bccd4abafc64ac8bf7ce1be40263af70220f15db5bb762093bd710feaa84a3
-
Filesize
11KB
MD5b463d066af8d4b0f2f29280d56660276
SHA150ed7d9a4f52fabcd1c8e6182cbc5db2141a3b11
SHA2563a752130512539eb2fd639dfcd263ecad268beef6004ceecdde7ea78fb516ce5
SHA512b1a188165afa9a15b885c0db780ea8d144c2a5fb6ed6e69c8b7f82b31ee3f7034483f18ba31f3019ac2b197c3af8c88a3210ce5a776465f11e0d7aeeb97f51aa
-
Filesize
11KB
MD579a7d9e7a043e708648b0bb3f623e518
SHA1544793fe8e0c62a9c7372691eb9db0d825ea9a16
SHA2567a82aa0fec8ae599c403b4333f0f1b192d1964e00f8aab2021da63b86cc09a65
SHA51271c60c8a61a46dedf9a5d27f145858122da374c897484e4b18bd766ff387e3cead56cadfbe75e0dabbc20d4019b3bcb7b0eed3d8ed5f8752cce08ffe3b39bfa6
-
Filesize
11KB
MD546f415e5f5be10d1e655aa5d78cb0eaa
SHA1ddffdff0340e1d705a455f250afd5a79a13838d5
SHA256d03ad567fec278bc8b0a68d20b19b26c782b02fa28a68fcbf55388b315eb3ffb
SHA512953e711b4143aa2903137e9c56334d1f3b4533299341543ff4c568dc6e338a2d43082b9fcd1e0aa404ef433e5df96a73840581da0766bb406db2342723ff98ba
-
Filesize
12KB
MD539d3ec2c902a4cb6f4f80d28137ccb33
SHA1cd4e9c064dc42e6571cb73bfa64107f3335ed7b1
SHA256148a8b4d1497abca307e1719e9225dff5f3c202fd594073945a68391a0176423
SHA51278b99bdbd04beffbbf74db2dcebb9c23200f18391c122f2b1c5cf76a99543f2a3cf00bf6f74e5eb6238b2a33b8ee7ba7474518ba0c4b91b7d1ddc951ee94ddd7
-
Filesize
14KB
MD5f6b23cfeacac924c92c9689099398414
SHA197a03ddad0664bea12921a5759271ee0ab1d58b0
SHA2560940a161b3026883017c53c3be129509ecf759f5a2942a54cbd763b0d9e1219a
SHA512c0323ab268da7ea9e425b09f796a360091bcc2ece4981e01e9f4c50f1d17a152c995eec24731f24094bc16ebf07cff8eeca45e7beac5ae9118a53821063c0887
-
Filesize
11KB
MD5043f6372c286fdeafbd3d48f51b337ce
SHA1a7a88cc8f200c4481d60922aebc184e209cb2a17
SHA256d4d223d30252499bbd8a0293cfd1230a5f9be0f65b0b4121f8f25f49cd23e9b6
SHA5123fdcaea317adbafbb68c574b9f7387de2d90b85d35061fd78f9b15dbaa9bcc0b4dfa51f68da443a3228d91629a0f535282d308a31438c4d1d489c0a38b85dc01
-
Filesize
11KB
MD5cb9702e023f6416074f690d455f09d92
SHA122e0b74cc29d29ecb715d5bcce1712ed72b99ee7
SHA256527aba13052aff385c7721a817c923acba7e519c3c002be29e371e2a9f5a65b6
SHA5126dc77f2f94e2de7a1bb74f54c3ec8348455429072ad1703c721a53816f791c18cac08387449fed312975c6e1dbc387b1e97ddbbf576212963f0d0f2f15cb0bdb
-
Filesize
12KB
MD596c2ea07cbc931293575d52d05ac8f62
SHA1e7e836eed4320cd3b7038e82ac1c5f5bb5f7243a
SHA256cd6405a9505d3aa8a12d7b7230bd0671a3e27abbe06d881c630d92b2fa73e96c
SHA51238b8609ab3ef07e0f6e8b395d5d8d01fdf82fb76aaa46d5d4777594777b74127f5f696e1130192a87a76afcdc8d0c80f29fd03bcc18d539df884857cc32f3753
-
Filesize
13KB
MD5a8d9f4191fbd98814bf62aaad5905ddb
SHA153c2bde2ac37f2617b037df95981652e0a22570f
SHA25633ad0a635aa11d350a679a75653590cf714522a5b4a3cf5202f0ad398025c8bf
SHA512d153de6a74aef62aec9a36e7c14b9620235aa3bbde20d8153bac495172195da1b0d7f0cb5d877c74465b116011313c31c6084b311f6357628e588d66522e9192
-
Filesize
11KB
MD51bb96747f75bb09bd2f36130f15739c5
SHA10a61561af62862543d336d11ead036a733edeadd
SHA25621e3909fbd16b8187cf2a7824a11cf8ebffb27688d28ba9c1957e3843d4ea6cc
SHA5121ef046f81457e9d847e991bce4cd8401c83355d8af12d69dbbfa58f4d21e89169a3bd7dfa707bf59c8f44e0069f82e55bad825fbeec5aa85fb3773678fca4437
-
Filesize
11KB
MD5449b1285818f439baac40040c35ddf99
SHA15cdc24abdce2d5f66f9438bc4ad78540c666e614
SHA25671ddef98d3b758610da945a41a41f2d294690d4d5dfcb27480301a7ea48d1479
SHA5127a079adc05e5cba70d1b8c54e839b37a9b722ffd7a7bacf3ec9f163def926c7440e95eb20308ab27e5186fc085e6466e1e7bf2bed0ddf66e86ba48b20ae4fb5b
-
Filesize
11KB
MD5b8c08c1d2e3ad1d1327b0aff2a2b68b6
SHA18d5da7fd8a2d0064ca3443cc4f0c25a32aaa074e
SHA256dab179bb7fbf710b60f7139ddb5bd082192595ff7f80eaea25bae4611bfb6602
SHA512a832e6146697bf0aa8cf564d3ae1b5ef57aa2360944c775fdfb0b673c1ade7165e99fd71399fddf44f31de94737571ccebaf15ff6282ad5a88c5d2f8e984c368
-
Filesize
11KB
MD5b8d4abf0ffb69f148573915e2b6be2a6
SHA10fb3aa9b86e2a8b8b1be612804716ee0d33ad337
SHA2569edbcefd7175b03a73ea4658918212802e76777f67793f4a3253317b7a785a9c
SHA51211268aee04b09a94b91691a7d06d18534230973bcfe1db2b17de5a674a637f268992dfd5641e7b8cec50446375ffc737266fb306eb26c37c7ab2194c87c389a3
-
Filesize
13KB
MD53d86d3288a4645877b6c6d2cd5aee393
SHA19ec2e30c18be836ce79252c64e389de979ee7455
SHA2566c48431b64b1cd095221ad960891280bc461eaab3f472b3ea89df87de21f0fba
SHA512bdbd5c87ac2898fe93880d5855f518383fb4a1b0aaa91b3d6908146fc0e82f6a0763cc8f7c1ecf3f51515800e2800f8bdc4575da7c990555a4d37e2600fba090
-
Filesize
11KB
MD5eeddbb5d395346a765d924581a00bc1a
SHA124212576d853abbfb74b95affff7ef0ebd5a63f0
SHA2560077b8c7ffe8c2504e59b901b550e6be6cf4dad6680dff3c9243274d9212c1e8
SHA51273639761a0da0e256eb036962672c7f83f486c719c2c48e6b689a79368e2a8f8d02be2878a4b254dc78f30e8c06257aea6d27f735713c5df8e3cf069a891dd09
-
Filesize
12KB
MD5d7bcd4a42519d3f1643d0c37aebb3008
SHA16dd050b830e882277c76ead4918b6478a3982c0d
SHA25619bdc9f8346f361995492605ffd022f5d6701c0148380fbcd27642ad0d853d38
SHA5123d71079939c1edfbfbd908eeb409f7adf3c202786dcd840573ceecba751190aab142aee06f63b0925c9c9c3b0517b3f1a8f1200fd8c15ebb4c13f3f805092870
-
Filesize
11KB
MD587b552aa3d9ffef112bd202f5b9f51a4
SHA1754723efd29be4cd6b37dbfed37ea1c46357886b
SHA256b3de9912b96edaf70055fbd6424ac80e860612a9d3a1f165a6f20fc361c99efd
SHA5128b132c85bb0616dd9ed8d5534a9a005d9df7774d552daa33a3f6447066deef2d0c1defae37a384bd175256a1ea624d214d49e9627ab36ea811f9dceb648edcc4
-
Filesize
11KB
MD5418df9dae42cf8538d460b85bcf50da2
SHA15874989ed77961bd445fcea4bc8fa8f65bc41d3d
SHA25661116ea14ceccdff16c58c8973381c7aa4fee8b81eb06b40aa1fb7ee85881271
SHA512e38fc3b45b278d2606b8e6ae16cd2bd95bf185640a8fcbb75942a967c5f73c3c25a3c8cddacae72b0af4283d2bf642c264f3d7852d2723017844a31469dcfa8e
-
Filesize
12KB
MD5c1a0b083ed9c192b294d7501d5f62c12
SHA1b1e7d37c43a3c66e7a98170ccdaeaac6ad515f56
SHA2561e514a9d73608529aedcbcecace133fc8caec7eb2aa9b446b86a9f726c6cac2d
SHA512ee3cd650e6215ba7b9a4fad33ec79f2c793328c38496b3192163dd52b741bbbdf0835f54836aa54762800d725374ca640d7384e9c2f1508100df2817417268e4
-
Filesize
15KB
MD54160324cf1d675bdbf200c4d31741190
SHA144b5c91a82d448aa444510b22fbad8eefae87322
SHA25649b2789b003f0e7a8305eaa31b1dbae5bad218835af9e352611059d0ab27e289
SHA51229601659e24ba2abd0808b669581c3a6da87e585d2d04c5479a516a42e1df4f5a32c340580d5e8b02e902e328ba9edd7f9c91abcace2e67388b0c8a216f551ad
-
Filesize
11KB
MD5684427613b10ef732e7aa452acbd2be9
SHA194e020b97bfad6310c6edb574b0f9ed3f564347d
SHA2565170fe55470abfe85e0f4a21fdfdf05eea7eb3e8108b358dd270476b58a32ff8
SHA512a50189428c30fc10153e876b5904b1862be01c2b235d59bdbc33a9ac6cc8e2d6a2deaeb2db8a11d631f47a3d242c36e9a9fd018d0954f0a2c4f73718694f47d5
-
Filesize
13KB
MD57e6c206b5540af64dab73c31fe0318f3
SHA163e357b2a07b27e98531e8334315a08dbeef3929
SHA25653e4f09de31729f489d50ec366f297112793e1b9a0dc1854413116920367d083
SHA5127d510b316b90c5943ab1f5c9da985645672450ffec69bf4dc327a2cb31cd29c6a91176a49311334195cd1f5e60cdeb64a71e825bedbfe21c60c030751c5a9c2f
-
Filesize
12KB
MD53ba1bc2b7c3470cdb35a1a9a74cf16f7
SHA113d52cb53bbfb6a1e94ab1ce3795f7bc59d2ca84
SHA25664d3267037f429c595cc9260ef3a587b10c51c38ef12713666b5b2f0ccbe8214
SHA512bf0a5e54275d94edd00f295a81609f5b209963632ddc356a67effdef33072b73cb54c6f5a9ad46d92387e6cacb5c2a05b0ca1ab7f810380fba9e3333ec9558bb
-
Filesize
11KB
MD54b384c96bab76f674f7d93c8c37798de
SHA1cbdf6e56181e6199c2799560e7995dad0ee36588
SHA256fa862a6bb5bbf4bbe652f2b470b1be2779fe19e4c9b581b27d733891c49ef955
SHA5120b7a991bb31459732187dbf8c13ead60209f02aa5d9c2a72ccd44379c1fd716daf38cad328c10988b612ce8e958adede8b4a57ac8119ed16f2691f378ace2041
-
Filesize
20KB
MD5cc05741e1050b8f370008547eca003cd
SHA1a360fed251bd7a2364989504143e36bf1c78db15
SHA256399f06f986157365e2952ea4e5603940b95f3abf8c2b40d718702bc3c83e9dc8
SHA512dc56b5454e4ef03d7f7156aff1576ff0a6c0bbedfea89b6a149c7b0db8ec95e2b6dc3ceaa393e181a759d9252c41302ed77f87c14e8f679250c3a1b698a688a7
-
Filesize
19KB
MD59ace769e49b6f37390802d1ff4dba87d
SHA108f973509e107dc78f21b198b008e81e45eb4114
SHA2562b8634973ed4bcb723513847759217c25213e5098ab7ee52b4e74eba4a9c50f3
SHA512e069e419b038b90684f86a044d7b4a042143b4c30ce449e4c5e06c04ea7b543121f3db9d4e97a11bd0285599d1532fabf47b6741aa90b97f4369630831962e0b
-
Filesize
62KB
MD59433d5391b04a7f8327b50d34e246223
SHA19b7c39b1d378d5dc135fd91a64f6623c56f5e130
SHA25668241106acbb4a0029b2355cdc0473e42492efa711e7da4274b3fbf0224b8871
SHA512805a742b7587fbadb2c7f8a71b136e322712d4437ded9e2817bfce9d7b46cf0c7c26123b7a7c5305aec4831a4767980ca4912ff10de709780a6ffec286344a38
-
Filesize
12KB
MD58cf31c00af11c119cc411230220fb59b
SHA1c1ec1674a79e0dd4d9a32a4eb2ce05f3b6217eea
SHA25639890c4c84f88329c7537949baeb7fae453467d5000a32df63f119ea8639761f
SHA512e2d7059da2bf3d97d8e07791fa8b82debb44ba2bcf46d82f7717acc3b380e088c7f567fd44891e5491dc1c3d9e4c17cc345cbe47e04b63bca54b9f2b9fdac663
-
Filesize
15KB
MD589d07099407b86ae93412c89da71fc68
SHA19bf3eac6c59c3c0074ecb4138ca7da2ff83b624c
SHA256e3dea84029b43840404c4f21aeee17dffd3abb18614ba38219aa97bd1c8774ba
SHA512d8b5ee54a72d2a465a07b652bbec38bb8f375c279d802807dd64c950c4e37d9c9d804cf7b9642399e57dad0c3f8a91ff352bd0b35d188f1974942ab612f7df23
-
Filesize
17KB
MD599ba412b1e1f3d85a20ebe4cf9909c2c
SHA1e03a16afea2b3f614edc72224a1bbf4e7a8093a8
SHA256a44c2d6884915673d17b2dcdc60ba8a6a97ab513d813407788eb7d531795cfe7
SHA5122886782ea3033daf76a63440dc9702d4550dff0cd4e9494a5416208db721545d0640b38c6b884632a79ab547678fc5f7c317f1dddfd0e87a90f242e18344192d
-
Filesize
17KB
MD56f6861cf4245318b3f705d2ee451222a
SHA198c2449136bbfde8cf23ebbb31d0c705184824e5
SHA256cc079c408306a008eb782d0b68f219b298db05df6c201a627e1d5eee73c54d64
SHA5122729d308fd1ab672f118ffa80fb914f5090d6ede38e53b5bfdd60401da7ae30647fb3901a4049736b5343b56f23c2366b47994e7f46c28107dce059d884a04ba
-
Filesize
13KB
MD5b8e95fe43ae91f0140ccce32c46d9d67
SHA1cf3c5783557de79d8b6ea029f08e735fe7481012
SHA256e04fa83b5ce5272a9056bf2716980b8b4a0bafcae5ebb8c7fb811a902d90f027
SHA512ac33ee4a65718735a3aae6dd61089fb8821962dc7991e1e5aaeb41a5042895d974e18b8d0f9601819db191b3460ff6f90dba38a222462ce8149d4e4ee039f6e0
-
Filesize
11KB
MD589577d6aa054018eee027049aa3a18ef
SHA14b974736339bebed61b1b4e0eda7209baee2e2ea
SHA25608b47c299e54428d6b8f045436e60a7ae9240d72d214ee86a7bbdd648b080fa2
SHA512af6260045f807a7cd7c0535b99e5b1c3e6be0bf34f32db0ae3bae64668ce9ac8ab3ee526c6a6dfe957d73f10bded60fa4a79841f7bbaf0726ed4f4d3130e4c6b
-
Filesize
1011KB
MD58376879185be598f6bfc3a0414e98e2b
SHA16d8a9b14101dad2385ed318ceb53529679302f60
SHA256f7e9a07e0899bb051835a643d32e6389b4c83478b26e4d4a45ebf1f3b512c5f8
SHA512525e5629069e2bf5e547db54e4e14b3610bd3bb216d405e616079e488515abcc258571b4f61042ca44847d0f23029a022dd626103aa310d7d41930ef8870c04c
-
Filesize
1KB
MD517c892fb7ff3760b7a1c9c2c78cc4ca1
SHA12a40a4a9da3cf2e93d9bc3e790279f9996c284b8
SHA25637b6e8f1ae6c3bb05cae775f05c8e14f6ff7245bb273a19f77eba52a73be8e55
SHA5124fd0a1271a174010ccb5485e5abf060e8f16da05122fcac2c1d645cc98d57dfaebe1886d8893c6679b21e14f8d9be0f6cde30598704921b88d4a9c498b4cd190
-
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md....PAY_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_PERMANENTLY_DELETED_PLEASE_BE_REZONABLE_you_have_only_1_single_chance_to_make_the_payment
Filesize31KB
MD5a3b12ab7124c21f959acbe93c2dd018d
SHA137f9ddd21072f2b390b6522340f5e3df447644ab
SHA256feeadd1cab4c3f43d07145738ce0e39f906da7f9bed9d6ea90cc49bd34efa347
SHA5121c39e23851bff20d56c23c5a7827d0c5890aa2cea8c59d083d0fcac5ac8fe65c5144571f7547637db88474c569759e32437112e33207c6e74ca11e2d251c6187
-
Filesize
34KB
MD57ad8be29c48a857438a1217997276fb3
SHA19df43a2c89e355da2545f020499941dbbe4fa4d8
SHA256c15a56a2ff557dfaa5e21b854092dfd062e5e3c6db3e006f6d821c5be43ad292
SHA512653cce31c0cc9ae1bdd2dc83815e7e83d2a705845cab7b887c362d77a5b0f304943f5178ce7778b2f309b5323b12f6910cf6b21f549103369d441138d929e995
-
Filesize
2KB
MD55ff4bf5e092c8c5f5a67e01a7af4128a
SHA1d4cd90fe091ad068afef06b7e7ebbb9d0ceee1bc
SHA256f962db708154e6902a9af4591a76deb1e964de9d644fc8bad2315ddca2ddcf77
SHA51224b3c61e3e9ec8c40c8c1d522eee5c278400c84f674077f3b07bea221190314ff11df01a30ca363f28406d778107e8197ad409fb2556c5934ac24a2f454e070f
-
Filesize
3KB
MD54b2d2a541b76e7ffa05f21326f9220a8
SHA1dc209c9dcb7859c7e5748d98239f0d4e989f48c3
SHA25644da4c4da2987c839a2c5df0902151b2c84c52c2ee6f144b7f7248a2c507c9ef
SHA512c6a17d1e4286864247df542c3248a957352547730950d923d55f0e4af601073c285715d889b2ba2e0f2fb424b1769a15346644928b7209c599c188c1a4f013d8
-
Filesize
2KB
MD589708cb3f737de74faf40294c7ae32a6
SHA13e874ffe3c50cbb3b7809342a2507b6c4b9f89bc
SHA25632fd56c75458a4baa533113380525c761f9c7e2391eed19f5991156da88a6c7a
SHA512fa81ff4200246a489c0bd5110c23e65da0d6dbdf5dbea45f83ddd01f2fdc679940ea628a7668dae5a031a537cd55c5c2654efbb70037dc03c97f667a886f3215
-
Filesize
5KB
MD5f3a2be9b34aae586dd2887c2b50129b4
SHA1b565562e1c68a691d93edec63b1bd32fa56bab39
SHA2564ebc0e259911a702a857e2c51a6570cc1ef37965cd6e8e44f5e04012e0f580b6
SHA512393abe7dd9677f57b1edbe29e3db02147b803c72df5aa3856d7b5681bcc31afc6ddab67e1a38ffa56439af5fb243e2c2f65f8f5c1720663c7322033af3101b23
-
Filesize
1KB
MD5c5bfb5fbf8c1abc0d85a091bccc3a323
SHA160b061cdc8076dc0553c61494205295e870a972a
SHA256c3ccc5c1fdd82cb0992e0427c72b95e2bb7fbb8aa5577c23bf508f4bdf664477
SHA512c9085272f122bf53d96818029941177dc08c4d57ec6ae4d597ba0483f2e80f8e2f48426f5676ab9d5056452d0850622e011fb1b1ce3875659dd263559fb5354f
-
Filesize
10KB
MD577c2e9232b1729a25450fa0be40f1d02
SHA1dcaa3ffe6f58f777fe07ca5027a9d98cf61f1d9d
SHA25697f778fc35de173c2ae791595bb23f997509db7e2141d6f2c567ce1ded3ae698
SHA5128297023c196d5ea2caea311d6f617fde9a973b048943fec1ff2a9b118dfd8574dbe6d956458cdb993c4b6ff88d44d26a5c2ba07fba46f3b707994f1c2b18bd1f
-
Filesize
3KB
MD5782d8146699ea18e3d88894be4254e69
SHA1db900dc3888416541b36b2f3ed472e6b2fbb25bf
SHA25650f4e7c5d43b58d5487848af14bab24d6bca5bf3d4ba07944ada8348ae9f4b7e
SHA5123b9bb1ae38ded79f8e8db139c1014705b8bd7b3d8d6695aadf61003971d031157adc82dae843c96c35042eaa5feca3574fe7241110032388462eb2ed137662b0
-
Filesize
162B
MD5b99082e03e79d2a468cbe971efb45739
SHA14a25e4763362f4b9d30d93aff19e286d76722175
SHA256761ce428778ed13087c66f99c510c1ff3ae16b4ca10b1a205a8612340e69dc0e
SHA5127ece82ec6f80e4ee193077a6db302e90ef8a167ba571e866aca6f58d83594c013ee7a962e7ceb5db5796d3a601004ef4b2ffa417e85536237a493c05e217e9d4
-
Filesize
1KB
MD52704430bb0ed3301962ac4a93611b37c
SHA1b28d076b34c5bfed4afe417499a40b03f7b09d62
SHA2568c58caf15f4d4597f61262a72af51aebfa31753edc06440c642cdd33c4e6dd82
SHA512bd29317556d58a546687f902a8d2e89679709d443ced1a41d622d1e86eb31f965545b776e87ac3c3b4e603f10ebe0280ce1e2841c8375e456012bd57fa9745be
-
Filesize
3KB
MD52768f4f5e370ca732f5df84f59cbc1cc
SHA1b9e600e81973c7f262644e3486707e63850eac1c
SHA2562fd7eec1e87ea2c5c2d0b0e11a04e06ee6e8cc4893bba10eb32f3064961ad5b5
SHA51262933fabc83d29921fbe3664c9d4a0d6e9e672e9f334c00c307da59b585c834c6ded62b2a164956fc118e6e1ca5b1cf7830ff7f4eea9b24bba19e77f85109006
-
Filesize
1KB
MD550fbf53feffd90b38a1df48a6c36773e
SHA1ab73e99a7c69905547dc7aee3a7e9a50f804424a
SHA25659064430f16358371ffea70c060d141a37d42242d75e890d735129be50c42998
SHA512879f92e8aaaedf232b7b03508ca475da13bf5cc35069ca689f17d51cc22806590864994e589efa894be20e823670e966079a64b95f0bd92314712e53874fda4e
-
Filesize
28KB
MD5b53655aa14c89fb7dc10567cdb5221f6
SHA1c0e8e918f0d450ffcc7f97d7d9523696485a4ae4
SHA256e097883bb32505ed080afffb1dd803f37a92b70538c88cc6618b1f9460de77f3
SHA512419d98214c7d617df1cff61d1b7953955d5ee8a9ae688b9e498a4a54b878ca3178360aab5d4ea05407a644a4835c48b1b881795f37a83ebc7605140ed2da8880
-
Filesize
2KB
MD5e709a806a63c362b576afc6d5a0f0ae5
SHA1f18a9156829496ee72179825e664edb68b82ebbb
SHA256fa760e282740b76e81ba9159ee5bf392bdd99a1ae6ed0c7b8f0727fdd1c453d0
SHA51222fa9f1f54287fb191e7305c2f7b08b8c80c335b0b31390b98902d25cd5aca845417b00d2b95c7bd12db54ebe1b27732cb04b1b5dc1c0bb6dc9bd62879195b11
-
Filesize
1KB
MD5a1ddac5548ac07e4dc0ea81b8d9f3df5
SHA16b602485695cb74ba69a3632f75b799207fc20b7
SHA256bc7bb812aefabb31d82043c2ab237e7969fbfb907af65a173dcfefaf49d33821
SHA51294339e275dfb9f313accc6983c2429db3c3864b6fd9e17684cc3ea94e20965462037b24b275d40d4205d074d9d5049833a82b79aa04e5bccd4fc934aeee21700
-
Filesize
2KB
MD5253d54040a44fb9bcdefa2d81ec3d1ac
SHA1da4ac7024e5fd483ccc87360eb317c27dceb403e
SHA256765f64be182e69a962d64f5860cb97d83acb192ee7c6ac036c056dada1592bb5
SHA512b95337e35032667a4465eb4ff0ca240133742b3091159a50ba40d0d6e306823ce3763feb692b41ffdf34249f0842a6cd2021253c3c7286f23a63679f38c2ab57
-
Filesize
1KB
MD5f1308d776830d11a70545c79b2ccb81f
SHA1befd24481dd3dd7e2c207c892c35ec53c9a4669f
SHA256887f959a3c9e5f53d19d08f9d86354389599a50689d65d9bf9a1f7f2a9c8e905
SHA512d42161aa6bf957ac05bf94f9edb86807585e7b8a566721d749e282ddc730d477802b2ff61e15bd818f8e2de68aaeb4d33d5b29b5fff3a67edff9a250bc90155f
-
Filesize
1KB
MD516d29e6c027bdb6fdc8786c3b4c8f2c5
SHA132fc7c2339238383d36b00e74c641443259d0ca8
SHA2564a235d763c647853c60fbd0b8d64a0d90e21664bb2b5affcdcf0b957b6caade5
SHA512c45cac4fefbab1f21b1d1714992a7cc053fe1c53179fb032dddc468a32f2d194d4cd6a9e9bdf1e0d24a4ac4c056a2cb2ad553e04b32606e3e55639254cfa7b76
-
Filesize
1KB
MD56db376352cdf85e6bc0f4bafb6974891
SHA1273b53f78bc21f432862567578cc6fd62a640aae
SHA2561ca54eda920e68b2e1ebb863e4a3f3bda216fa001ee42e5c88631b4c8528f735
SHA5126d22be18ef338566170afdc5f2577b3e5a159b77f22d6d4b40fc498f146b6a74584ef2e7b98e36c926f686093383a7140def935ba892b345f94a3f54080e15ec
-
Filesize
3KB
MD5ad45c420aa518d52d88f8601a4ee225a
SHA11ea0c6e983b1370542390dba7211c139ec94459b
SHA25650bc9f75a08dc190c710cf1071da182fb0ec73d7be67b6559213fcaa63be37f0
SHA51299022587ba1717e6d478191521e20d63b2175fbebac7a36f007c3f624a133933728a1d4e9f3bc94530deadb7bd1d04616713e072faf2aa8eb4086bd54e55d057
-
Filesize
2KB
MD54754b4edf4740625ec13ef325f8c7edf
SHA177eabf3e02a414e201f6ab5bdafd4da0526fdd17
SHA2568bf56cb88c09e1cb5a24684c028f3b64717c5c2684d8fed0f0a5b1094525fab5
SHA5126af4dd3186fce8f64ee884ba5adbc581ddd9ac77a1babfe7c6658a06be8dd52a2b5b5e2aa90b70e934c57ab3a0dc027d314a463dd34b08faa403827bd5a41a08
-
Filesize
5KB
MD5745832e5f0bed937c13dd9e010ab8e29
SHA156a72dfc39961d99fb8f4cff34e67acc8d9ff32f
SHA256bfe8627d87d5a632e4349ace64fe866db4ef9d175d77adbe4acad191dc6f9889
SHA5126b2dd2e98031933b4ab2c98312389f38894bfbc6544bb9eaae45e5a0ff7e99fe40f54a7c951a2d36aa232217ba922ccf81fac7110254c106e6f260b642ce5994
-
Filesize
3KB
MD514a0fdc1c5727d7060f7305728a23497
SHA105589c1e0bc6127e4ca40b8441ab56705213eb78
SHA256de38c83860390516393d07839029fd829f5c8918a5eb5ed476b571e6dc776c67
SHA512352d3cd0cdbdc4da4a4e05eb0036194b8356595fbe1af5338eb55129a567c93cf5c9126e446e9b7e197b0cafaecaa5e184fe27c8a497f9bebeb4543e931ec358
-
Filesize
2KB
MD57c857cef81d309ee8d5e52424ee2160a
SHA13f343cd29ba16007d71620d3f11a64f6e7f1cf27
SHA256b3d7ea35643fb5cd65cf6b093d27f77e99d67eb9c97d02de6317bd3fdc87ae96
SHA512c6d1e1460b114e07c8790f99caabf4df0ec331bc27f23ee4a2f419dc8f3a08418e744925b9a978593243ecd45bf94d9f102952ec671c76a93eb3cb208379043f
-
Filesize
2KB
MD59bb67f8792a438bd456af4c4c81294f6
SHA146893bc9b739fef152817b505aaa36f2724040cb
SHA25666c1537cdd51277b97d58c84993b1f865eea8070ffa0099c0a7f78e8d09edba8
SHA512c590dea4f85191b026fc83e07a971cc230219651c1d4840e5231bffdf2bbea17d4f6eacae03c0d1b27a216286c7d68d53121308701fbec8a6a8c644396623630
-
Filesize
1KB
MD5a2b71095ba222dd8e234c71cd06da119
SHA1d5214dcd31333e37a7949b01be08afae30709f55
SHA256794d803d05b10506d130196aafdfbd2bcd076be316e60b3b0e65175dd77d7b39
SHA512b52464b82ff8a771a278c04738435c2dca6e743fe3299fb2c00d3bbf4d6f3ed050d9ade00d59cd23523b2b88b109bf777d220f1dd75cf54d45ab74c4e2d87f76
-
Filesize
1KB
MD5e98d4a0495a5a5fc1201fdc4c5b4658a
SHA10ce113f4538f786686d6f1daba69b3d3c82cf56d
SHA256a3b41c750d605e6e8336b76d3c3a635cb80d87b93a9146d549b8c16ce87c97b3
SHA512c15b96704146258ca254fde6fb6ebf14828697f6bb60f4cb9b8a06c4dde15830695d84ea83b17ba414b7365768cca96186c7246c986f48a567212dacf1cc4792
-
Filesize
11KB
MD53295e405946665371c28f5a7222770bd
SHA1d256386e7743d2c6a9bdf447f2b1f17496c0cacf
SHA25640c6c209627fc6f3c5a5439bad18123235a8e1b0464fa9f8a57ee7fd8eea7298
SHA51296bbb75c8136ffaa36f479445e6ca00272c7c0b132f6f4b096291f82e0e0fe831d8bf761c762694a4c9d898969172596fa04b74a197383a6b6fc523b5b7cc521
-
Filesize
1KB
MD5d79dfc41cb511cb929d55d6da804d558
SHA1793868d8f50ad7e743e3db99d573f201c5ab10f9
SHA25664248b4fb5ec3074e6d3366758d04737082fafc8c3d172a4a92e573b60a930e9
SHA512a5dfa631eb00946a0ecb811d8d63f191db9041c4819043ee85b4ae6c76b8be25274c194096aa0a397999521e8a0971e5e14e78edb77078d5afeeb29a298e42e9
-
Filesize
2KB
MD570dbc1bd50e84ca9773787c016e100d2
SHA1a2b9a8786c1e90e9ba52982805b1e75941081360
SHA256921be259a5c8f9dc0fa1eceaaf5bed724f3ea1db273a14b487eef4a2b1fa8b58
SHA5124d97adfe6acdf81c704a144a852e730cbddded77254bd820f367d3420a01782827e0573e604cd46784c959a44a2c64ce0634673cba8c976baafd9c881f0cff76
-
Filesize
11KB
MD58dee0b79d86f0372475eb11248531ac9
SHA1168c06a990f305e27ed0b4717bef794365ecdcab
SHA256ce8dc3e1acd2690a258940bd9437e251db3afad9298a762fe7118325199afe80
SHA512e986fd1ae165bf43640110360d0b12d5f27ae5bef9e6b9239259e70ef4d7abbaf42f589967802637aa9bbd520ab2b64307fcc15358aafac901157ad3d8753866
-
Filesize
11KB
MD55b9ead5f859ffbe2efc5b1707df4aeb8
SHA15fafac465cda3810dc7f212fad55b325cd2ea722
SHA2563979bf531c591f14d0fcb19f4c3acb83172dc7a747f36072531eea6024841307
SHA512ebb095bc19cd425da1342c5c3b5858d545316a714aaa65b2abe567cb1a4a16758c31c69bb8c5bbf16bc60c04ff8433ebac93af7cf061c250d055fa44ad9e9e12
-
Filesize
11KB
MD56a96a752f61c18feb77b3ad486310baa
SHA18536df73c03db507c377624d1d16aef292816cd4
SHA256d1eb70d7f2d5dd0d15883259f4eb86db8b0b8d64afc6e48d22d120a07d13cd18
SHA5122167d21679ffd86ffc12781ff96ac02aa28e78bcbdac25dbaa265827a0a86e41f2ea3cf22482753b3c7cd07e87df0b9b1a18511d42acfd4011b914c018b68c75
-
Filesize
1011B
MD5b4f73bbdb8c8249fed9a79ebc5068e25
SHA1be75dfd096bb326f7f93315cb78fef93120e1505
SHA25694a67219715004d380fa636ffbd6c6dce02d0ae40dc5af874a36d86de49721d8
SHA512b357825b0ff8b5a6888408311e6581aa5c221123e18fb98d4ede63725cb8a56b4b701b2010f9ac7237426960f9ecdb8c6dd303834ce6f5e573439819a327b03d
-
Filesize
42B
MD5c4e0f8b40bedebe71c2339b6ff038df2
SHA156737c599a34546f64b3729372b09b22be0ef8af
SHA256748834aedca5a301346867b5ac6fba2386fbd1da1e8987782089645bc5640053
SHA512b0a1a7617ef35cf9c7cf6786f4b2b3709094b9870f6850412e111b6445a750acd9da0216084097eb591bad7566ef73574e0601477d309d1488eba78406bcd76c
-
Filesize
274KB
MD5b10c3aa74a590c1c49ee204477421043
SHA16bca7d52462f8d8b690c9c90e1f97823469faeaf
SHA256cebe1996726a7f7f813e3fa89a7b58123a56fb8a43bb5e3b5ed260dd17026f7b
SHA5125a2f557321f10bacb19e642e30efcaeb5cb5ae906133e017369dd2a147983cf41c283611f3f4fcac2ede333d0ded7c0a632c5a0e2350a6774f3b63c69cee0e27
-
Filesize
18KB
MD5eae1a108299b0222e332aeaf94d7af0f
SHA1c31270e0848ce1676889d4fe44dd3ce97a236a0a
SHA25674ca0f5e3f20c13aa20789f5e7631b168ad5333fc0ba514971fb2a6dedce650a
SHA512f7d3a7379b3bea44a95973e6b2edf5c38ed7d6306ac6aad52794f5402cebe2a967fadd89f0540e35101a8d6d1f085794cb3afb39ca750e7dc7891e08d7758397
-
Filesize
18KB
MD5c8dd245ceb77ae65c6eb0557a12f15ea
SHA18e1f9f0afbba1f33735546e66843bd3f8da0cedb
SHA25694f7a63153554ed06dc6b00b670ccabf99d9242e3e5534488c9382a0916fff81
SHA512d670c3fa540f7132d13a40192c6306e23107e7072c4e6ebdeeb43af80c61b27b43588f99ad5529d9428c465baa8de586b9c3e5a9b44432ea3127e0e82a8336de
-
Filesize
20KB
MD514dd6ff9d0c449f5b739040e2ecc0b35
SHA1ae27b8a6888571522a7a46afea9314215940d321
SHA256d81e76d9616efd6456de05246ad239234c8e2ace82f4f5b8ba23e51cb14eef24
SHA5122d9768ff16a23f4fd267da5c454bfbdd55a56a3a701ab15229c094a9e167dd247340059cf7b776ee489cef296dfb2b4137defcc5f13df8229495ccae3f168d75
-
Filesize
18KB
MD5fa628f6363a7f90cfb68aa94efffee1d
SHA11d2a8a6b8dd66cc714ee8f9360e61a9043e96cfd
SHA256f99cfe5cb5d9631e7d9965b4a908f1a63d145f5c2b818b43d81781d44b5597ea
SHA512ebaac5b9be827323fd859c0c14d5eb3a7211ea4eb3044576d2fb2ed6809b43b3e026054f941cce497fe234725ed4215b80ff7c5085767683365977a5c994e57f
-
Filesize
18KB
MD5f59c88a9b21370751b3f5594b600b71b
SHA1e4fb3e585483c22044a1096070054ce3a1d25fab
SHA256db64a2eb2f469406c1d2cc6c2fac5dbde1b14445aa088994d28f317f284164b2
SHA51250fad913b5bd0e8d714f0e11626141b0d09667e0629e1aa930333f1e26ada30d8904de2ab212f527f99296343a85543c2c2fbdceab1aa7f500c4e8f05d132ec9
-
Filesize
18KB
MD566b798312cfc91d15db9dbd8e66b296e
SHA12cc2dfb1da41904aa130c7271eab5eb5037341b4
SHA2562ab14b99e265d5bfa90344fd81491cb25cdf984f52eb26ef6acbf83de82a3367
SHA512bf46e3a47a55470880880fbb0d753474a38fcb8a0c1b5b2c8a4907b889b9a0498bbef08f48d771028804b5e7e2ff28aa2ae109f34e1f4634568b1013fd1d398c
-
Filesize
11KB
MD52f1e4e6b4b2373603f5709385e28770d
SHA18fdbe1374a157fc0c0c128c1de8da999e2d7cd0e
SHA2564d70d3b0fb45bb5be0d6e445333ceb9005d88402f2add905cf26c2d26a3e2a2a
SHA512df5e7a6025b4d4c143bf666225b545b332a4fd8d3716f7c17d25dc438a43a975d0b0403719812d6deec8a88c10f98549f435151ff9ed3464a5c11dac6f7274ff
-
Filesize
19KB
MD5429f1288fa124019f7b7dc0e6f6c8a80
SHA1a34ffb201d5e283cdaf0037078efa2b2d6d01428
SHA256c3822b4bc3df685c3b2f398dccd09f6dc4a77ea626f44190b8682dafba30649d
SHA5120ee61add7dc66bd85cee39fb4c877d8fa583ec7f09bfff032b2de81840e7aca6322def04ecd9047c01c3ef33245950279e46798491dd4fe1b54369a5fa2f1f79
-
Filesize
22KB
MD59c2cc5f4529bd6d84982c9b3e5bae733
SHA18fa123df84062afa2e201966435b4a5af7207c1a
SHA256be06da1f08fc822de2dad8f59ffa446d30e170654be055e832f6581218145432
SHA512cbffbf00e163a9ce4b4de91dc28bb3919fe73ea2230326a55f7f983d3b53f55b95a9553e23fa40a4b4210afa42835a460f13cd2fb8f70e8415297aa886d60ac0
-
Filesize
18KB
MD5822455a6013b1fa7a2a03cf22da007a0
SHA108e03df23ff3dcbbbf3d1eaca2010c9c87fc4e9f
SHA256caab969c7cdb989b0dacc031b5bb7e0cbf6d2bd2aaed9f5003a6fb84087ba856
SHA512f1ccbcaaa6229aaca5d849509924f725e86111e1904606bc3159eb695286ba521a3afa9bb62d870ab0d471c6eac1e871781305033df83af965b5d8025d39a64e
-
Filesize
20KB
MD5cc19e01e5867865d89c2e76b85073667
SHA11dfc477f9ee26b4aa25336afd4dccc0b1f26a0f7
SHA256705accffd35b962c4fe25064c8e515e6901ca4731af2555d383b2365c4978f3b
SHA512eb4b3b648f0f13acc71f55bb724ab18d008dd31f878bb87b3a2ee95f313862c2b8ba22338306d9095fc876dd408aa3c2baa5300204c2fbdd8147c90fc7a11afd
-
Filesize
19KB
MD574c88000502fb7df9011edafbf6e4af7
SHA1267a624ea27e88b12216028dfd48b6dcd879e340
SHA256d21afdcccea1817768776717fb07e35d405647d07bcf2c4a5704f9c12db267b9
SHA512b2e458b950f19d0fcdf84e202f5a3aecf2d9a89b61c2cccdc2ea4ad4c768a95d84e0e5d1d36d269acf8d7452e20bddc1d329b4ffd71962f0f36aa30b1673deb5
-
Filesize
18KB
MD5995e8cb2b1edca351fded27e15ff5ee4
SHA1857fb0b2accf789c066b43ca974a9185aed8735e
SHA256fb3b1fca417b40fb1e611310ad50e38fec520f682c08784a2839bb90e90da08d
SHA512507de7441acd20599fc61ba0bfae85dbcd1247ae609cae3ac1124add30e5972c08d277c35f7b10d54c7547c28bb34a8d7e309c1b4f7a5733f42f89bec6c726eb
-
Filesize
27KB
MD5b19c7accc819febb9ba07d14193d0aab
SHA1fb9b3119db2b52eedad68f80e083358c833cde85
SHA2566cb8483adc350b8ef0e4418eebe42a3ce1135d98d2abb08e2f2212df2b3c8770
SHA512b130ded82afe4f53b3c7feb00aa00538a7b9aadc750be5f06f73e455eea5a14ee2af880de3527a9a58f2d4a778b552a102f25196e9990d1651d363c8573ef2af
-
Filesize
26KB
MD50ba828c0a7cae81630495531a2ccc7d9
SHA1e6a7457476030bdda4057114009db85c1fc26ab9
SHA256a9d964d26c38bfe06c7f6673eadd7815b7ebf924d614aeca3de94cbfd54d1a65
SHA51295b23200031b5d945418768aee4f2f538903879193b9b525b8e4e31daafef84e3d33fd0511ddf6d45156a1db4640d993cd3be1f1cd4219877804c774be0e79ac
-
Filesize
69KB
MD5196cfea9e9e9a90069ad7d59c77b7ddf
SHA1dfdbc95a0123964768016fdec027a564630311d8
SHA256a942922efdbac79494ed3ecb12cb8771bced250705e8739a219d75c6093e3975
SHA5123cbb7f5824790c172b124cb999187f485fe9f1f6eef138fb58dc9e8e86bcfd50c7b1f889bf0c38278186813967fac6e2c28066147395efab190ccc821d5972dd
-
Filesize
19KB
MD5ec3a8d379d0cd5f3d78a02472e70dfcf
SHA1598b85c4d796ebad4bc3b4e7361da4a282ba0e31
SHA2565e4fd42ce26863f8b05c538240c96a9d6c6f334576575a25e1cce820263b8a33
SHA512c625938e6fca8f812c4cb23fd4e2a6970a5fd7084c49c40a6a40de5f4c03190bc703bf1defb1fbdbecfc0f568c5fc93e4999280c55164df566fffeb926324119
-
Filesize
22KB
MD5efe49e931e6a5ccfb467d28aaa57c1fc
SHA17f12275f47428fc687911aa92eee0451d9c88da9
SHA256a70afadd430860a40c468a805908f3aa2a0470fc20b669009b5bd85bf3f6979a
SHA51272a7463bbf70fcf3e38c04f6064aede42296fc0ddb87fc76178ad4920f209ee9dccf46802c9cd1a900f129251636e876412dbe99d5dc992d6a6d4999684ea3a3
-
Filesize
24KB
MD5c015e6480805cf5d77791ea93c5ac269
SHA18d79b326f5ef89e7a9fcee21380c410c92f17cad
SHA2562a99723c816976447cba9a899ff5f3cfe9094302a4c749790fa2a4bd7fd00235
SHA5122741697eed7b7deeef531c21620b44243abf9dcce0cd1ae9858032435770defd47b85d92d28633c1b960ed55cf876f26b749d76af92681c5c3b5df1cab5537c0
-
Filesize
24KB
MD5c0ba787f9b58e8ec14b8175821b9e312
SHA10f9a27b22b9e3574af9edc34178af82df092c742
SHA2562d5f1b61cc0bbf3d3ec5aaac8f7e55de35dfa989494eb3311f14d5ac81fb7dce
SHA51237677342150d323cb6c7bddbb5dfe470d720c163928f545f8ddf5f261f1aecc648277456d881aa15b99e65a3cd675fce44c925acee9c21173f76e75a3b7cbb40
-
Filesize
20KB
MD59e6d1243d6236f09f6d88b86bba61692
SHA1bdf848054c6b7c0ea20e41987914d19311ee0225
SHA2562f7791ef9f693fd42837071f5b12ec607f46e985253fcf28d036f0aa52cc3a6f
SHA512b90dd8144b6cc71578a00c3ff30228b7e684c2b5a9d055fff786f38b7773de3154f6ffbe7b89831caa88e3b06be9e05815776dbcca3f5ee543876ed76782453c
-
Filesize
18KB
MD53a5c61375495edaecdaed4f9467aa999
SHA16ba6a0cd4214c69671a04bde6dda17590239e1e0
SHA2560989ea15bcd0986c1be59e102d89db32e869510b33c1a104ca3ab4ffc4dd9036
SHA512d1f8137318ce1ddf7eb416a60b5ce11d03c2ce4ea3262c3e11d88232585d133083a8678f7e72711f4d9ce2cd4308d8aceb3ef069a173c71a0b5211365a89a09c
-
Filesize
324KB
MD571d6fb081832ba016f58d81510196b4a
SHA1205c61f6cf76985bfdd70f3828da8d979870de74
SHA256ceca7270293a5cf92a9c1243e4f0d2c1448f2a3e85ec27195b9e9abd31748a54
SHA5128f2f2897e74c1635bd51f22fde90f8b37fa58e88e0935cbbde28a8d5d5151cd4b8f9b89fdf4be90983bed16f12fe33cd3dee77ff327b8d565400a3a7738e3b28
-
Filesize
358KB
MD5e1260da8608c039feb7c62fd02ea778c
SHA10a1d517b8862edb27b40eade37275d9b6dda0710
SHA256501b3748822e19f4d9ac4a8c774c810ba24b93148d7cec0538ed3a0f24ee3fe9
SHA512449a3690c9a5e70bc8eb384d57058668a77a6beb13e72e9cfba08c1c878ec3e5749348903bd0ae5555048f082c8b03f8e050efdda432b09ba6ea16d38fe767bc
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmia32.msi
Filesize3.0MB
MD52a86abc1c227320f9e7ec3f79d07bc23
SHA11760d57941883d786d80cac70186dc6ab44fd7ef
SHA256207242900f0169f19928e0e157e0d980d2684fe55aaaa45c6c21b75c94c86b81
SHA5124f6c37ffaa2807ce71a76b7cb119a1c4d1d231c41f51e03f304726233a5919885cf04ee04b07aecf0a3f8c227d917e32420b2e05871bbd63fbdcf7ccd1164fe1
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll
Filesize5.6MB
MD50c1b20944c135c0d8c5a6cf740e6c634
SHA191f48013ccd007d77c87c24c94830f46061fec5e
SHA256f8f3bc3bd005ff477ee91654e2712411120ad46c7cd1af2030140c3fd63074bf
SHA51260dd63ece336546605428c1f52ea326fc91ec4019c20ce7b2bd083289ba29cf7b93a9ec154de3467bafed1a9ba28079504884395226599ec36c76ff2f63a749d
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll
Filesize644KB
MD5180693ef7c3064a0a7180f7d397225a3
SHA17e4b930ca5f01b9dc45a3a2047d2c70242177a3a
SHA256d856ab35fdb748b0a6c7770b675b662c14f7c4df1dd0c002c007bd9cbad44824
SHA5122c468c28c813850e16404914d85793b56b2e80fe6c0bb198966a8c773efcbf606b7bd7a08807740b4275eb133c301bc1ca69dd4b8484ccc8b18cd83997f043de
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll
Filesize613KB
MD5edce7e1e980ee78608cdeb724182845e
SHA14e09d2e78e3f341eb246e440fd568889403a9e21
SHA256f51d29ab8124b433f63b28ba364e21b93ada4fa6ad49e3767d242667afddca2d
SHA512b5275b9c0be2c65d41067edd7f989e607b54cb479058ef7f3bc9345a9c9305306596c3271f08ee5a3e4bee0ac74a69bf1bb4a8a303007dff95b084e13c3634e0
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll
Filesize940KB
MD560e0f7305b7627bb1324b47cb55c9044
SHA1d5ca1fe2b52ad7fa22ab9824a3f44c41bdad9d3b
SHA25605a94acdf0e5298a515e90b749624ceeffbdc5d38185c767cc24a2fc70383a5b
SHA51239209feaa40c52539928752ef005c4c1f2a04740721ce865cca619b74b98f81e81223ceb326a2dc1a7ec7b6907512f9750f6592e6c92f0e6f1b4144b8ac37c65
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vcruntime140.dll
Filesize83KB
MD5789a8afb33dca859b0eacab6439adb38
SHA1a9464fd3861f7192213c8e6ea42d6b065429daac
SHA2565c3549a21ccbc525e798d21ef04f5473433b5eab97022cc661d14f82a14d7b8b
SHA512f6e970496531c45889e93cc3330af68c3fc8da51386d7ef8750c1a83c299353d60f8f7401889dfb4a85f657e4804b7d694b40d7aee542d025c25e2be83317762
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msjet.xsl
Filesize29KB
MD544267e48079518a12f8adf880027adf8
SHA1ff0d5a91fa857d17421f9610fafe71afaf256690
SHA256d9b8e61149d19b533b320f40d1e49c0cf87ebca008e77b2d331e4a2ba58557ee
SHA51219663ac962fa221381be1462bcfc6c6d975478253a08f6cff44017485c1a94ce29d294a29f068747c8cd64c05dd23d57866a2120f676719999759675c74eb9f4
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl
Filesize34KB
MD5e6e2309cf8aa3c82c459c5034c63be70
SHA1189280447b4cd612295a0f50335ed53bd7a7b33f
SHA2566a39721b760893462e7d1738107bd9011991014413ce2ca65a6ea62236310bba
SHA5128fd671502a91ca56fd5e968ebe2d330ca159094c681b491e00ffdfcba9b06ebcfcfdc6664835b996f5358274e84fb2a2cdf1a130cfbc74078971c9eadb582efd
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql70.xsl
Filesize32KB
MD5c5dbc6ebadb847598706398f07f1b27f
SHA1aeb5705feeef2d85331976285916c1da414833d8
SHA2564f3e754b680699e229031dc5e3bca32c53216a8902295c494cd3648a38a4be9e
SHA5123ecd88be285691d58b3ce9df2e3731f8a3b1619c5d7f7b3bb8d6e9df392e1427283e58f4d8b04ba874f751ea0ee80d03bbd9c6962ce189b08fd213349c51bf5e
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Informix.xsl
Filesize31KB
MD559a5ce25d68c315347c6e6310512d806
SHA1af95dbbcd3ae5a276099c61f5ef51251d3cc7502
SHA2567055e604edbc8d5e716f0206a8aab02c8927e75b012376b3105d723a959efa1e
SHA512cb98eb9308e0c40ebee4536014aea28d41b42bf5cf1795f2ce0f2c84bf3e19e3f7769cf45acd694b2b4beb191c49c263c92fb57ade6c97b351c5d929894e0c83
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Sybase.xsl
Filesize30KB
MD5c6b15b606c1727332d4bc08081edeacd
SHA1902395e22c9edc1ace9c179fe5aac163a51adffe
SHA256b93c2524199c121df42db0cdc63cd518ae93d165079ce35280c3a60e0dc525c7
SHA512827fdaa1d678fe63bb7c68a9473eb1ef128f52835003b94ebcb94a92ebc06b42a98c1597a25bb35c9207534a086ec9866ec274e149f6c46fdb7e3a53c4f9ed37
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
Filesize79KB
MD5fdee86c77df3d03475d3a3e9f6079f95
SHA15acee7fe7ee8421603144843bbd711a284869511
SHA256b2fd894dd572cb78d1ead39d2e8eaa6387d962cd68a9b7e59dc58ec86409d992
SHA512ab1e373f5993590f2986d687a31899fd50f8beac5a445f0dc5e91022de53ea445b0f21ee0088a0ebdef7d8be5bcf41d35616022e1a0e8f2c8dfa158a73cc47d6
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll
Filesize18KB
MD508e666b55287703847b713c3cfb31d05
SHA11beeefd7c2739975f9175389148fc2f6cc366728
SHA25675475a71643789035b34ffcae9108b33ff2c14fe4f29e9bf63be070484fad481
SHA512eb2ca8ccf1beca2c9bfb1984738d95d650d45ec13398833d1062ec27c7cff92426ae70e08517dcd297de213b5251fa3c28f18f17532a0655b0145d52c9afb02a
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll
Filesize18KB
MD58b7f64112f4762d9f962cb3613025c77
SHA1599a35d6d3a5a43c2250490122f73c11a6584a57
SHA256f5d83a9871d354403ae4252d0f1b1a0b2bb3c4dcbde0a60481bbe60638003828
SHA512e22964d3f03fe1b46ef5ad05b59733ed268dbcd3607a4c4b59ddcd1a47181b8f7bcd749355f87d1dcd1fae2107f5e529c86b4681ef6f4b6fbdbff5c573333a2f
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll
Filesize20KB
MD5c750aa1ccbd4af7ab5ebabab66c50f99
SHA1716434207e0508bb67eb2792bbfa05732b4e7455
SHA25605dc97b540cf784b1686904cb31e4d9ca1236d6ca635c85a020ac55fbe95cc51
SHA51217f1d1ef6606da53abe116964e1ebdda1abfdd751039568878db794bb9f7dc409328107f904d537ea588b87399f496e54323119920a723576b9eac97b5c80857
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll
Filesize18KB
MD52c8fb41b0746ef28eb4d1b22d6b6f1c9
SHA1071f5c1fbf35ec25394c1f275a4df6024f105759
SHA256677d0630d05cc727368596d64a82a74eb99470862c11884c9bd32124060c3985
SHA5122209e918cb05214760d350a30b31a256b252bf9e30a7fa7012645515808b1a12631488c775f5fa6210761d95b0ecf9af3fa484b45c79cbe091dfccc5b295d547
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll
Filesize18KB
MD5d129644cb3c0eb1acee7389c7f26b9f0
SHA17eb33116614a56adf68cc8dd05a99d23a564d69b
SHA25600f0e9b726079b6ee04c89026e74650a85be1a99eb4a29ead1a5219946aae6f6
SHA512e988ae1ca7e108de3baaa2df5549606394843d64b60a04ea1d084ef42a147b267136acab98bbfcf277b811085c7b4cf685332480fd7f1b305854a3ee14f39e27
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll
Filesize18KB
MD5e11cf8abffd0ca96b89cea6cf54adcdc
SHA1e017771a2cff1f6a0482a649b779fcfb81ea4dbf
SHA256ab238fd5376f2a66a6c1ce65be1c2117dd891872bbef18cb832832c5e7cd5a9d
SHA51215c3768ab2920eead95af099afdabdf963063939cc94a5638f413deab32d0614b9b867dcffe3351f745a720667f0bdf4a59a1897dbb691f06895ef358862143b
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll
Filesize11KB
MD5a6548c7fad0161b5475bb6e753784adf
SHA1c4342f7faf8271b1e451a50af53d571437305020
SHA2566751128380fc0ae2a170305e7573fecc4336536be5b1948bf2653afeaf359075
SHA512aa8405a9abe125dda4d88a3e337e139885e3ac5fe4a56f18c9acd3bc197be4c74f2bbb16d817a7e1b820309076f25db808787b59735cc6dc35aa9150579a0d4c
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll
Filesize19KB
MD5d6843e76423f98f07a9b6543f622ff0c
SHA10ddbc8dd8a4443ec5f22a00e2b4e5acfdf5b5237
SHA256b8fe5e53633cf344579337fa487abb4dd2870121cbd84d05678d935fd5b22a94
SHA5128b5a65d176357a72a94c13b350f416f6d65c3d7c037dd3e6ba79c6fac0f6753c536ce252e210eae471fe760dc23b9cd2d1ae52a83d30941dcb21ede2fc425cc3
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll
Filesize22KB
MD52da5d76d8669319d17554c36c43ff962
SHA19620e2ae2884f02c1eee5c0a90b3e2c15203e991
SHA256cc0285e1a77af46d927551d1a2834d71203ca53f610e57d4d2f33d441a32cdc6
SHA5121fc82a3790698033cb63f5c3dcb9f549b59b89cafcf19fb6ae8ef055179b8de54ae8db4bc8eb36128170d09b882ba11497b5cb11811302e6cdaf9e621e1fda3d
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll
Filesize18KB
MD531e659caf40cedecf59b40665644e535
SHA1fe945aa668b0afc1b815f5ea24d89f953d5ef0a3
SHA2569157c70a6e1da725b0bb6d42c63bd4e644cc52a750b4f5146c0a0f8032290d87
SHA512a1ebcfa1b72dcb496d109553ee2328b63458a840468c0aaffadc99667bbe39de2417b41d00a6df70b322a30f150ef695c7d62184e96493d9ddf716ac081a4f6f
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
Filesize20KB
MD560615667846fefb93eb23ec5fe876f7c
SHA1942327312434197668f42eb4c81cc8713ce81250
SHA256d8f62d39610b80deeb7fb0a1a4af31c3b1192fd2b46b984167565fa145fef4b7
SHA51258a67d70714ceccf91435a0f97c0ad76ad8a94b1a9e7f8ec4e7ade8d1db6116b8a26420bc037ffb20dc3e7a553ecfda4af7fcb8f69ea1840e197889901ed012a
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll
Filesize19KB
MD594e7427c4c4590f7e34b828ff579ab6a
SHA19cd88d39e9b6ae45906cc65509da813eeb93898c
SHA2568395e6fdad3ef142f179a1b342e2958b548fa447bc55505cc2e1a02c837c54b1
SHA512f3e372f25d15eb63e64043ad61a033e91bce77a3a963215f9860230ec9fc82942e04e7a52eba71c6c673d57583682f2ec621115936292e316fb753d6dd733974
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll
Filesize18KB
MD582706e75888d8ed1ee14aed0b3da8292
SHA11e12e26117151ebf6556045d9d858b012fa2e317
SHA256da1020a28af854f5f5e2f59f0f7d2e30c2e10298e5b8c7566bde3714d9e00159
SHA512056d7a38e2f6f6caedfddbefa334528b0b56091af06de08e440de8fc5e07650c8f9f13f51b2f8900c02583d0176d8747e28c6350c74d8a748fe2ea3b33e803e8
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll
Filesize28KB
MD5d24e37c365cf433d9f58920434916ee3
SHA187d2ce669b34576cf966e085240c101a3a680fd9
SHA25610fdd87ecaa1914486d1e77a2f3375916e1a2f514fb7b63affb5840522c9124d
SHA5122cfb8a119b60cef5c0b817c2ba0b5097983b410a59619ad36c6a4a3783bf4d6ae464d70dc8a205af0a8ed27591fbc28c17e1f15f58ed6accd32591989a39518d
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
Filesize26KB
MD53ce8235b12514d78aa9cd2f9f461955f
SHA1585dfa54023694c4ec1101d8fa155ee37a5c4e19
SHA25635cdbac857c0d14fb52d24b7ac30121e54857c02a9b695dd0b18ac54cfa86def
SHA512f84ccbaa28937dcb071e70b9361d94c024cd297eeb9332623aecd2dc61b571b6b45edc5b536fa813dc11c678611977018ddd6e7ad86f08b043be12aa0f599d23
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll
Filesize71KB
MD50c5259bfb2373c4e7d3541f2d85b2fa7
SHA1e0af03f340ae7ff34ea8d95c530c4db762ab3903
SHA25678e3e56037b2fdfede29e34f7c54b30e9d3ae1dca4f392164896838f75644fc7
SHA51246061419ffcf0cd06a4c64c825d1a24f217f77c937ffab9dab0dd7553c0a472d973ed23425314ffa5ceb6b4699995124217eca3aaa074020e7b1065b847149dc
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll
Filesize19KB
MD59dce59d21165447c3d153c33b6b4ba5c
SHA11281e7e6756303ba2197c0c80c6373634e379d33
SHA25683be1024c7313cab9395249374176e166768c0295772bbb26233628d10e72e1d
SHA512830084dd6c5e0ebfd29b99b3e1b73a6d12a7d1529f0dc9666f33a71a5015907c9acd71a910f32d291457c86785e8617e2b4fc7650387a296707433bc851312a1
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll
Filesize22KB
MD5b9af2a058ce3c423a1963d50ddf76a9b
SHA1be989298c60a0c4a55cc66274585dc148e5f4a37
SHA25615e2da2cea8dd21130d7e1a5237e5cbb185498e5c06b0439a797e172fc40e10b
SHA51234caba744adb4888a18bc805eebd9fb17f71a24b028eb81f2f3c86d504551f3ded2958d03cc4e0febbb0757acea5c9a1930a4cbe86625d5cfbd011000d089cb9
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll
Filesize24KB
MD5a7419255dee70c5de7460b4046c49134
SHA1fb74cf6c4f83a33e8a3597daebce597e91bae19f
SHA256e5434d4e28e3b923a4630b9d014c7c23b28f1bd00bfe131e0cd18c6c34e756c5
SHA51287ce55ff3220d20eadc962761681a499afa5d2d8dcda5fbb24e4d219ac78fd68226f2731a60a4e287c383f9f14fe90297496d3183f3ed03ff414f0a7008c574e
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll
Filesize24KB
MD59d194debb8ccadf34d5de487dd61efb5
SHA14803e3bdd92a9e3573e78dbb17aa764f8850b48e
SHA25653098c3a7d2e8b527bd1656aa7c6cc723a15e9e5dafe03f5bfddc12a1d02ce6c
SHA51233b4eff414b4cd0f26aade8a1880a86228d94411b4b8a4edc553f857d09d819f0866ffdee187def411375870d760e2aa7dd5a12a7c1fb6772c890ae68dad5bb9
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll
Filesize20KB
MD54dafc44bf4c7f7d3caea3a952ee16e5e
SHA143cf3dce3858db1ab1556ffbcf1f5022c8f1b3c0
SHA2564b0b9f64daae91b607a99585bb77c24ac492caaf51c5949034c4bc28a0eab8a9
SHA5127666611d6477f0b4544f3b94e362bd03d52cf4e326b939358119aa8a72a007026b3d0a8ec1d9f06511a3a6b52330f98ca26fec5c5b7f7f66912687c2cc3a10dd
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll
Filesize18KB
MD5ebbf2f4c8504ce1bf67711f926e68d34
SHA10f74447155836c45c87c1a30d469263ced0075e8
SHA256148b5e6ec3099d896ea7681308e008602b78ce337d8dbb179d5524a70ab8196f
SHA512f99ddd9a4957d418b38a1d281a6e68856d1352a8c12649f7d93007965504771fe33fc95feef3f2e33824e2924196fa4ac6cb30e845366f972005c2499dbc8c9d
-
Filesize
244KB
MD5242e60ff3bb0135acac517b2a2705213
SHA13223005d40255b17f4733087de50b34f789a2b61
SHA256ccf3d0ef6b69f30bf84ad7197f93ff4aeb9bc2ddba95a678c170707e753d87d5
SHA512b70e50ab78994ed478b56a48dee53c23ca41e19179ce8bf54554de01fbdbc5d5eeff3c2563feceb4c1285efb61a9d5ffa96b07d43114bc53fc10f45c810db3c1
-
Filesize
4.8MB
MD52ed3ee7cb36c7a68a9636b614f65797b
SHA1477c64c77c5b6c180f69502e304728b30497ab7e
SHA256ac05d11b5e8eee336706a62ff1569a329942ab7ee67589795625877449fe3cb1
SHA512a0f2901f63ef0e97cbb5dbeed8e1c260c229e4d35253277ebe97af8a1ed9efc062903ebd1a54792e2d40e68936a079a4ff407027720b2e933547f0a04bb77cff
-
Filesize
444KB
MD5d990404de8c652775f5f044da37df349
SHA192d01872cac222676d71af5feda121895d61b651
SHA25665c34e3c682ccf0414cc9fabe6e8663ed32783edb15c851cc843c7344c8795d8
SHA5121a67dbf670361d0540cef19a2cc4f750cd7c99d99f37a58af846c1ef1824bc07de4c41b8fd22dc5fd0e555c7a4a604d44f747549731d29480bce6dde191565ab
-
Filesize
439KB
MD59193d968e7cd4ef2d59acefb58ebc85b
SHA156fa6b0b572c003ac2d8d5b5efad4c79d07cefb0
SHA256ca05bd5a2ac36a2a9074383272873f2a7b7a3e4dbbc5fa501f77fc352b85f363
SHA512eb02a315917f7ffd000c2ec073e95b4c741adc9d5c7cefe244ba7514fe3bb58ebec5d853b2cfaa37a03c60105fa29009c91dfe166e1b70c52d75db9805c0c3c8
-
Filesize
946KB
MD597ae63bec8e09d7b780eaec6c4123227
SHA1ed9a5e670c525d8ce545269c291a4b48dfefdaa8
SHA256c0ab48aacffac14bf5603fd81cc612c2974dca6fb36deef0aaf77d12b512d48e
SHA512284742f3424b3be79e6174bac261249d4fd45623b49891f561173f2f55d19069441beb73c64375376039d7b49b6193ed4b8ae1e8125a10f215ad4d740d032ee8
-
Filesize
879KB
MD55e7a48644cbde0b1fb0cc7bac7da0573
SHA1e1ed46dbb175484fffc4f8a87d38394f6e88d842
SHA256e1cafacb15a365c5d19714947f781cc811bfe12081fc5701fa2b1b992852ae25
SHA512bd10ae47bbfa4811a1030ec8dd1807c23a813ad01fc04c8ba250d68e0432a11d252750aff9b7e282597f80e1ab1815ad704bf5f67e43503c05686b57dbac0384
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll
Filesize263KB
MD55059decf76c62ee750a020ab23890776
SHA171ba72a35f6df64df41f8d25eb710cac8fddc23c
SHA256d2f2dac4ab17a6a457e89c30c7fd8754c3f344b1e073fab6f4b37dd2c7490195
SHA512481009ee3781e6a16cae9f9d10b91226562e45abe3746841cc934b6e7de34a30d0085f1615831f76c815c8d96ca969306419a2320c8820a4caf14e7b79d3b66d
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll
Filesize78KB
MD5d9f15b7ad660cd405d5f672c60fc3762
SHA1ee963a52ec5793d8eb8dfa2c093a331324d79389
SHA256169bbb331e0d89c94088b4fd65464b382dd36813a930d4b29521af2406f023f8
SHA5129aa6629f057cea8e6ef443b2c9bc973989a9c3911255c079f74b9fff6516bea297c3a378b9c741d008ca07d4017c30bc26172fb61a5c8f4b04e27f02feed61da
-
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
Filesize1014KB
MD51467073e041baee1fd7b7cbd4882ac13
SHA165c1c15d9a88ef5c48a8d7a4ed0162eccda733b4
SHA2561675934a54ff82963eaae216120c1c2bc750093c48355e503a0ebc085bde7eb5
SHA5120ff4968faa3a231ca42c8ba3d5ea44978a84e4ebb720182720b80d125a72e873cb2df546d4ecdc2d891eb0b0ed2af2e41dca5bc3c8c9b010c9a5f7d2913d14d4
-
Filesize
1.8MB
MD51291fdebd1ea486f0e727b9d89f2e899
SHA14eb112791b0b51afc5963f20a6c306d35d7e3a66
SHA256c1654bc56bf2acb50e44f2e10ee7ad4db80b5bb7e398458b9d27d8835bf67382
SHA51211a658f65c2ce3329e7e26dd732c327abaaafd51f85f3835a6e8ebe7fc9e4cb8e3116408b0890c5a0b919c50cba07c10d905e2f56eb3337a9a9dac97afb2e658
-
Filesize
4.7MB
MD54b947837ab4d46acccb5fbf1e2aad28d
SHA167559ff2cb076d8135d559db9ba41062e5e9ddbf
SHA2566c2262caa9ccb1f14389d003b83385c43bb495583a759aebb7def638a3c0b857
SHA512358491b2a5137571af86a8537ba60a15786bc2c5f07dac9307ca84952d87ecb662246917f4803d772781e5c7b2a5d3b4e369102f6e3617d241084fec42e84087
-
Filesize
116KB
MD5a9ba0ef607a6f1c6d128d53574adc3a5
SHA1c808d200810d82895416673d48e9326325395a9e
SHA256399c9d3b6bdf4c9c94610a3cae8d8256d5500e51dc563e7a0c3cfce0dbf614f9
SHA5126036d9a5a9744bf90609af8018ac34b9ec29dbfdabb6fab64e2965fa6ef57cf573498e829cbc4d1e41ae859998e568a3a1b98ea3075b5ba15a1c096853c8be08
-
Filesize
1.2MB
MD5fdd7ce08cac7fe10d61b00210f8b2204
SHA1b19c40e2ecfe4a603a4aab724bb5d402a90946d5
SHA256f126286b23ea8ac29ca6916da539114fc8ab5fb59829ac0ec1b4bca17163c637
SHA5126050ab1e76e10abff0520623eb007a11c1875e12fdd5a5ed33d4547dfac05f8b99306ac1dc4e734833f241edd899ed063d6f608013e70ecee7b74f81b38dd9ff
-
C:\ProgramData\Microsoft\Windows\Caches\{2A558C2D-300A-4BBD-97E6-4F3DCB536006}.2.ver0x0000000000000001.db....PAY_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_PERMANENTLY_DELETED_PLEASE_BE_REZONABLE_you_have_only_1_single_chance_to_make_the_payment
Filesize1KB
MD554a1fb5e6479960a866b1a1edc4cf61b
SHA1388781b04247d82b10ba9f612bf812f6a74d7cfb
SHA2561da716857f385b4ef7a62868aa995481e811f6d79452203fd36bb0519995eb29
SHA512fb2c0d8c478fb3b37fd5b432309ca8593966d92da396ec08375958cfdec5e0d01fda4d02982e2851a6530f15c93c6f5e4c8f396863ad02fdb9ebc1849cd6b3d6
-
C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db....PAY_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_PERMANENTLY_DELETED_PLEASE_BE_REZONABLE_you_have_only_1_single_chance_to_make_the_payment
Filesize622KB
MD5d9bdbbcfd32fcac093603d67e662d130
SHA1ef2926707f9d4f9e15ec7157d58e1959259227b5
SHA256d91ffae95080469b019e530f1d9bc19b8b37279f4ef646374d15a269d0b24553
SHA51255b535f79a5ac396a08eb9e26427dcdfd76ff41f229539ecba71ed626fbe0e57651c4c0b5f3e4d8840c9121e8c29efc807c0b304fd45ad6560b5b927a28aef88
-
C:\ProgramData\Package Cache\{3A96B93E-763F-41E7-85C7-1F3CCC37EF27}v48.108.8828\dotnet-host-6.0.27-win-x64.msi
Filesize736KB
MD5341852585d08faa92b9300f5603cf97f
SHA1c737bcd8331268434b3219f1c3bf7e6cdfb2ce07
SHA2562fb0eccf2cfd5f48373343c77a55f99c10a232efbef67cd5e9d328450e2573b4
SHA512721e64861df86da1adae62ab7fcaa850660701d46197c9ef92ff72fe5f6226cd7a3209f0c49b6b7a20bff669289263b461998e23985bcddf4ed961a5273d6585
-
C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
Filesize180KB
MD55000ac8901a748117184f3701bc4057b
SHA11b172d69bf302f2f6b32577154ba89e99eb5bb0f
SHA2565227f79f5289b4ec45c3ea7bdc5cfadb1ea0e8e8fb7fdf04898612477363bf68
SHA5125f332e0bb9c582312207e2a4c3fb404e3dee898b8e4d7db9f2bb443c8fb53f9894d81545c5e5c26876c59f5876645404a32101500dc1c6b9ae1ecb6bee592dcf
-
C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
Filesize180KB
MD53490ca955e7a65d62e39acd253f2bcf1
SHA16d9e65b889c792b4ae84df22ec37bfa28ba2df4f
SHA256b207edf38c3ef1e25a50d90a65b5100bb625219051e34571b38ef1c1db6cf9a9
SHA51209ec22eb8b8328546f103c171f090614c9ce0a92cdee13af1e863d98f4824d86bdf3dc67ee59d2ebcbd575a27877bb0a23a094078b1198e43350960a7cd0928b
-
C:\ProgramData\Package Cache\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}v56.64.8781\dotnet-runtime-7.0.16-win-x64.msi
Filesize26.0MB
MD5e5e5fd60dc6cf315dc52f0518daf2c77
SHA1c1dd9986ff77b73cf8120ac1da11e24915f9464c
SHA256a54d2ca3669a689049bf5a09c91a1b1cf1e6f97611da911ef1a6da646ee6bbdb
SHA51206c77353687e8e3fda2b4ce58c07fcba20b79328e99d16347402475c0c3fe2ae2d8ddb52feb6c9e749216e949ac056554a88abec95f642123e69cc72ec619299
-
C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi
Filesize28.5MB
MD5f5dc4eda5224fe0d55a1fbc07216190c
SHA1af09d6425ce7e71ab6b5fffda5d1eb5e15ad61da
SHA2568b7faf02f1bf747aed1ddc12a16b8bb875b809992dd1dbe572ee002bc468ffd4
SHA512a098ec3545f705f534b9c46bfe33f1f467c3b6f16aa58d7dc6c61488b4d0675f274c9c5b14aae013be1bc90d434242416feed119c2a1d5c0f9272e292cbe174c
-
Filesize
174B
MD5a53e39c666171744d96d0f89e3d96f11
SHA16d372050ed5da780e30bb3a4b9413cfa0de49175
SHA2562b06afa40f938dc35042d6fd69aa1f10ddd156cad39849b1f25f52d4090c6aae
SHA51217856215890d95d97dfc4953808c3911d0d02fd9128249831919a4385a6c77cd409f3705cd189be750fd37712a6212d71807be09aa6abf1c730b95f6d253671e
-
C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat
Filesize8KB
MD5e57bb1a97329e3c8222793929fafbf26
SHA1b52c4753d6f9d65785d576e4fc76fc263db71f51
SHA256efce4c64cf7d1db089c0485958b9ca64f53b0674cf20829129c0d92440a1f3ee
SHA51283715486b40a8f3c9529d6fff5a991a53a3a1963cd61d1b5f145ef60b7f5e0d47ad3a964ca52e12c7b24869e5ebb39c0cdd66dc5b65565e1884116bc0dc0d6fb
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133586086206312543.txt
Filesize77KB
MD5bb1cbb82e646fe537a6045337aa72bb3
SHA1235cb7915039dc0b302983c1c1e7a4a2c8ea36a9
SHA256e09ecd164a4378fb4b6aaa527006648747adcddbb656a7dfda01e21745bd55e2
SHA512fb97e3dde5f320acd75b88f29351e5214e60def3f141a5ff4396ecb8d6604702e89b941837d26906d41440ff71234e23ade4c8596d4ef274df828c913c8e2ce2
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133586086798249226.txt
Filesize47KB
MD506b043c744e9a303a4595f1575bbca69
SHA1a202569d198b5dba7f3b3aa4785017a444ebbc76
SHA256ae9773c35d24e3181dae3a9470217111fe687acbeedc2b29d3c4c63ecd84641f
SHA512556730951277d4e251b2b8602a6f8cec6f3775e2d195fcd0c90216d200d34e4f18b56982fa78e49c4052b9838b3e03de3022ef589b9b1fcd52da37f9c205705b
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133586093532550880.txt
Filesize63KB
MD50c63daff13c31f69cfd0a092dda6eb62
SHA19abaf71fe2b6b26e53b6609ca18ab3fdbec2088e
SHA256bd5a126e4ffb07c6099d38bfe0845cc5aaf49805026d5c4e0c767fb06ee4cdfc
SHA51240a546b1a53f4b1f1579a6d4c2de378ef06f3223e1dda34761a2e54c02d2f9f51107301ddeff61669c2b4388d78f64dcc9658934c79474acf71a017fa0853b36
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133586104966146694.txt
Filesize75KB
MD571b84eefd9f399cb758870f736885c33
SHA18884c585513428bf7bf37b7397f15ffde54b7081
SHA256bdf6e936fec27769b36f379371b7d980ec46c97b9726b2e0761b372351e75ccb
SHA512c7357ad03985888d1c282ea7f09f9ad91a076d70975dbf0bd0e1c7401cd6d849be18e4a9f0aa6b473638a470d15a806a20c6c38e4c07e6b174ff91e949fc62b9
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES.json
Filesize214KB
MD54440ee3a7c00beab927eb224ac650e0b
SHA19f78141487ca609fac0ddd8aa87aa1ef7790bb28
SHA256ebe98f69de94f07e012a310e249724c6e8e0c49a58e73803b3be074dfa02873b
SHA512bc0e769c0a3e16c04f537d60026ca8429786c5f138c205f928a046fe75150e7fc023e8d9eacd9191d0f512f4bcbf7e4abdf909fbc43e7338d425d3541ca72de1
-
Filesize
63KB
MD5763b40528b9def504b2a0bb3a5ffc3b4
SHA12167034c5a548ca7b9ea1dc984eb0ed5f46b21b0
SHA2569d21ab9dc3607e0b91c8e3599ce0e76e23d4e6ee74392b754ff9229e353bd16e
SHA512566402653c6af4f11b1b9fdc54f147c6a654b7638a1c8f30d36ccb5e2aad8967cc732076980026d42477b9b9add5bf5eb6f029d37d83bbaa49a1aa85a2cbb1eb
-
Filesize
170B
MD5cd648a0927ecf6adcaf83d842c8d11a9
SHA1935dd31d1f4f6867185bea2a53ac00c505b49adf
SHA25605fbd952e249d4ec9bf70fefcbf4a8714ee37c0808642ba79ddbf11b1be2b2ab
SHA5124b3ba416b1c981c93528dfd90d254458c06fbfee8ce9264fdd1c07c171be1929883ee4b87a45f768cc871711382b11b18ac927abb0da453eb0d2090bb283502b
-
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk
Filesize407B
MD5707237ace327b41e56148a1dfd19ca15
SHA17d72fc2bf49514360a06a8f7bfdb766b9af0063d
SHA2563b13535a79f1d9c7da6ccc52935800f5c8df86933ac1d2b531d95dc1b5eaf52c
SHA5126700d84b371001a2683ce63b23cb42aa8bac112be35dac681f5229581ef5904929325d2466c697cd3fc3c1096f4925319db828bffd4d63b99d382d7683c1f6b7
-
Filesize
32KB
MD5c9b6759e489e92be8bcb2f4c7441d10f
SHA1d56a090d236c31e2f362059c18e8b4c9ea962c46
SHA256d2152f35736184290f64b88ed09fff826454da5933275c08fb690f8a36ccda6f
SHA512eb4fa32a1ecdc77dd20317a28b5509d72617bca46fcc55988f0a2b94d242979dac355b911dd297970c7453bb4bf0fd38976ca6659bf15d7d045c790927fc8a78
-
Filesize
290KB
MD5dd674ed61f96015eacfd2e11e8c6fe91
SHA1001972ae0b59ab2b7301e7eae2e957026638f073
SHA256a6a2fe66e4981b3e628b66c192e3be854e86df5018eaa7c6dc090eae44caf473
SHA51269465336d84b0217a3d29576ed5f5e78ab44010c09186b64ae77e5d34fb518d3fb988a4489d4cb72e50313c1c4705be5fd6799fed3e7613af0ff1210e3d8d604
-
Filesize
180KB
MD59147f83f42cc0e7c428caad5951f97f7
SHA136b63b3b5c4594f53fc73f4ad9cdc30b83a39d27
SHA2561b89cf2d529579562dc22866dbc27c9c12b4548467cd5453f1c2421c900c78d0
SHA512a472bdbb4f32e828b37d883b35e243f49ce309c9423593601ced3409e2ef59bdf970bb24a9fd5a89f1486fe4fdc678f03318624e9e48f67a9b15b85006956775
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx
Filesize3KB
MD5f9350dc3f96e734f6df42bcf82ad6da1
SHA1025eac9bfdef96086ceb43b80641b17f547eacc7
SHA256a2b555f7d54b8e1f64c211d4c03d2a111797007e59fd9981b66523f096665b06
SHA512c63ce15c56b71dd9b78eb85ebbdb0a622e80a5fb9066024b3c83ec2d14acb6f202c47ee8e2393c0e0e572044a6677161eee2020289652588a4ebc64a9d269336
-
Filesize
2KB
MD559dda7a332efb5637dbc05927b6cc2a9
SHA16201fc0433bcdeecbaf2415166051a9f29d6dc56
SHA2569886ac68aea6e43623f534c6573b7fca86d3e1f186e44b16ca45f52600cc3c7b
SHA512957621d5b4ba8352a199002bc7e9862277267a22c84961ed74f274189f325d0e4bd4c9599b5e8edf2dddfc9343bc269bc9a94107e3e2893558720bb31a76b822
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx
Filesize14KB
MD58eefeeacab4637ce7f17feba9c6d28b9
SHA1debb95c4429b4f20e15376209429c4bb7c6bf782
SHA25600a7aba82addc6f2bc1c04af600b8e3d0ea5245273a39861c3d1bf6e7b36df70
SHA512766b950c4714a6f303de22a3acafdbc899260aecbb4f92d510f98653c87e13a4e13778fe8ae4dd9d7f894f4112fab29cf9e18ca820cc0c0cf0bc920929d3df7e
-
Filesize
317B
MD585d47fb1b6e87e00e761c0d9f7a17e2f
SHA1deae0dbafeea5cd6030aa8d2bac9342a8a13f760
SHA25623152e856c10d53a2b9b34cb08ecde1f2ec82a47596261c1a24545b59f101534
SHA5127d60e360f1f595516e7c457a78e033270959ca3eab78cf2dfd3040eb2fd6cb68c01dd11a256f77b82f856e2b2dcda8e7a3d30249015a689964e28d06c7e3043a
-
Filesize
21KB
MD5402b549488454cbce34ed8a9fa07db0d
SHA11ee3a581cc47866edbd83d117b5350e1d50afc0b
SHA256a0fef3c11c3a760ded4ff04843d08b4bc7135be9012639424a13c2b426a89e8a
SHA512fda535db8c364d84396f7e19b2badf29e80678e2d58aef76fe10f32a81aab3a22192b9dd90d9a954eec60868ce1fe07f26ac4f2bff5d892e35628b7ac40d1b74
-
Filesize
1KB
MD515667a28424a0d0404a60f50b996693d
SHA16d166687c9454466e58f6059e3c91cf6148cad91
SHA25656e4f16d7f0e7760f146acbf317a82fc322be0e843fabfba98c04d0f6c2b786c
SHA51271919479a783869398e9a19c9901a119dadf8c063bb96189080bf6470858304b8c7220a729c2b077c6897223c406e63d759f622ea6100ef6ac39fa33085a6a68
-
Filesize
952B
MD58fb13cff2f829c9e4e09733adb99140e
SHA1e8977874c9523e58c328a0ff9d7911327d461149
SHA25683c197ce441fef4caa2d70ce27783e0d3a0ad62f25eaafbc17a3207212afefed
SHA51211a83978b44d6380ca6af9ae20204888d4463fe1db426a8ec27990a254d93648934fefe6abc984db7d338382ddf45519f03917f92ccaee0a6da37619f58dd1a4
-
Filesize
121B
MD5903d72cde69345360a6ee5fd8dd7b6c8
SHA1097073f392a1afed53d39fac10b15b7a53a4b0a0
SHA256752de9d264b38c8f07cd0c35bb06dfce6bb69b255b472caa363c123395bdba14
SHA512dea19c469facc533ce1a1861d9ea877d84619af48fc692be646eb630272fceaf60db043d68262747dd66a496930825c0530cdf4276806322be615e1d40d85714
-
Filesize
1KB
MD570d8a895061d68099f77648cc81ee647
SHA1f899375e2d21831ef7f1ec867ee6f4e2d660f516
SHA256b333d4080b6e814cbca122f1104941af902fa967534ca2eed60d76920be2c7c3
SHA512f3db60ee9cdee27c3773c0d96737e46bf1d22ef251229681bdb82d39a7a92134b99dc17a3ee2123ddc24036226a5fd9844bdf710ed70ac52f078a8b4fcc8c1df
-
Filesize
8KB
MD53c5b12c963fe50cc5a77dc297bdbc5ec
SHA1f10d97cc19314abf4c9abbb5dfa5e894a7aec74d
SHA256f4f7f8eba19558e68b35f3174b3370b4c582b3ece2577c7f701ce0e7144ea96f
SHA5124c14748fb823198d15770934e9918cf77cf6557cadbfa8edcd284b78a09b92625c1e94870afff2d9a9e95811b91627e3bb6f7eb426f110a3451e23385344f242
-
Filesize
61B
MD5a538541a89c705f8af6ba46ec3cbe427
SHA14523dab75931f20ec7bfa213201e9a80a3ca3271
SHA2567213d610d4b721fa02f7c23a24efe1d84f0d5524909495aabb46bec79894e063
SHA5123857b8c78fff2268ff369031fab2e083daf5cb612d7dfcaec1512e1293deffcf93fe74a3c2091238c6d5bf058c8d02c4c784b66b22da3595caaeaa1ca83cb4b7
-
Filesize
914B
MD5b96811958ab6e85df65fe30d70d8f9bc
SHA1dc87d2ba52d5fd032812fb5187427264be009835
SHA256eb5eaca8253c50d565760ca0c1917821708812a88870ba2cc68d35e3507ce2bc
SHA512a68d1182f71385adabba3b9c8687f6c94bf6242077a54d3a42fbcfc267e49f6d751f7a2e5e93180bfec9d47cc10c0f6cab1d5208195631c911d354999d3117a9
-
Filesize
90B
MD5806feed0cd6be08aff50851ae69c2767
SHA1957526d7922e4225019222dc915c2b0b9989fce2
SHA256b26fd490236899a4097537b6297a11147e4992616732fa7437f03f1d0cd39d48
SHA512ab90f67b745faddc6e53eabd41d5defb27e1178253fb3d0728156f88d379797f252c230c6067f042469552ab8c10317bfa8ed12e7a02ed2a60f92007007b133e
-
Filesize
90B
MD5c0933a9fde376570cef915152571f6f0
SHA112f4c18b22bdd216035c345a238e78eaa5a80998
SHA25648da12dc05215f81c7f937d8f4e475c5763c537a09970bd1f3f0e1662f917a0e
SHA512637fef9bae3687c22734065c2c5c1ea2f7c8c3c68204a7cc843cf856f57f9dd860c5ca2d2bc97a0b812f2954a50b8512058c220ad10763e0c90132972119be25
-
Filesize
328B
MD53a2a40e5d3aa31f2a06b5dbbf875b7a0
SHA1ff6f46deb64e88515876e42156ffe08cf2686bd0
SHA25648a3de7ba2bbec45ecee1c8e51ae71c698975db00964808a991f0391ae599d19
SHA5123ff663a1e806d6e1487bbb2a3f169c6844fb07601d0ceb5b03bec004ee51d385b8ef8800e0b30120e5c62d8e1b22ae9dff3bbc58c080a4f3d0aa14f8e8448b26
-
Filesize
1KB
MD5f3c32e0e19238b8cc57ac51f37b0f753
SHA1bb205cdeb45145cb6ea8beaf01a005d834a88053
SHA2564bbc98194f08a136c7d53978db74a245de7ed5e68280e4156a89ffb99e42e7e1
SHA51282a4b950868bf329e56c650844fbba4db052cc93ab560846c414142d1a5de5d1b65714ffd232440f4ed70e47f69cbe563e8774875e37164477cfec8740a34da2
-
Filesize
162B
MD5551a51a8fcc5f91f8292dd958a84e5b6
SHA19c3a92981cba6e1ac067e38df9294f65378ed836
SHA2563f31c0523ccfcf2a69c51860d0c5c1f592a43954986ffbd8ef81683b59fcd0dd
SHA5124efbbcda8a3f7329eec621e0ed0f00c682acb8b297e9f44d20fc093c6d757630da4bf4f69e6c8fd94e1e5246c99d4b4db28b6086c2c93d688627c2fb59d00c4d
-
Filesize
586B
MD5b7313a8e30e43a5b7bbe996c5393c678
SHA15d47bc6f347158d2b162812357bb6f2f59d1825c
SHA2565e45d07facaf7814bfe16f3eaa6b64b688c6dee293651b1eb06bd2395b04f764
SHA512fd8cac5eec32ce879420b065ed02da1147a220b3b67cb6bfbb33660cb5de992db23e98310e64a3d9ee58de602f54f2a21df6b29e120c66719eee1f645bc65d79
-
Filesize
124B
MD5c61adc9745d48d5a47f07067c3bfdffa
SHA1e55bb54b48db7a0f1db8f2146ffff2415e88e0ae
SHA256583ff647e05f73841869d91ab7a3e4d3d090495d46d20e80b8401f969d074fdd
SHA51269948001e19327ec86f354c99c18441d35202e353df4d69669860c8e680cbd98a92b828c533c6897f99119038b306387c9093d7ea7bba691a101583698060f9f
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif
Filesize65B
MD509d90527fa026a8b6c776b60d8acf1f5
SHA192150d7edc169bb6bc8da2339422305e83d20a28
SHA2566e1c1e40088ca32435c48ec388a535362dbd56387ac0e2a114195db8d9c375fa
SHA5123c1eff540d8f7564774609a2ed091970fc8f9dfa8e63478fa658e16da94013aecc40220a96663ab910e644d3ff0bdd79db366980b1dc4605a05533d74958c693
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
Filesize65B
MD5c8d862d09fbc6239fe6be47676d0e54a
SHA17af191d984f3bd206717cd81abd8745fc58c3797
SHA25626e20216d953a38a3e0daf9867157c73bae000b5ddb8d32bb60835808e54dc03
SHA51264d65c643d4c63921382d62a0174a6377368de82f521a0156b75d19aaf71e755fd143101437716dcaaeaacc706ecf05cb2289106275172e0e5c5f5f301a38d5d
-
Filesize
8KB
MD54eda779a44acfc7475c619ced3abb70d
SHA12ea1de27a4613aaa1e8e992bea225d268faebf2d
SHA256983015c2dfc61856964e2f21e7f9b1dbb66efb691bf0edc794e3f94fde075b7c
SHA512f251762ceeac18b749cf62609c8422e4aa1285e523b5274eae0f50bb101b66feae9c23e24f899687ac1d4589c682d6ece890c086dbfa30dd1147508b4d5899d0
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif
Filesize65B
MD59a71aee04590069078872196b0163fb1
SHA1d7a719d5d2456b7da3a9d27ac730ec7b090bdb1e
SHA256395ca9317d0a6e7e9b059fa9d6b24f65f6b55f4dda12fafabacdce6d243f100d
SHA51258f67db1dd669b200d6cf804e0aa84c31ddaa625a094c5e93aa43f59cab2a0071db7bdcb0a1f7d050f0b1ecf6bb1e67de308e87329d6efe13a240f18bddf8085
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif
Filesize65B
MD5a2adce3ddee3d812f4aa540358da549b
SHA1997ab04174510e651399312f0514b97b38c73261
SHA256c7344a272114e7d9d319950aa1344fcd03a73e5e5fd5c32779d1cfb6dee7a687
SHA5129479a1e65236a3fc6ad407ca3079e54f56a09ebc2d56aa078e5ca1191786d97df0d8f1c02ca5b943590f0eadaffdbc38a762b53b16a57356962283821e655f2c
-
Filesize
880B
MD50af44670c7f21a3f0be478280846579f
SHA1fb731f9b0a30664c5030b98d776091b039faba74
SHA2564d5866a8f67ad14b0344bfd9d815f16429e7373586ce7ae29a4430d312799572
SHA5121e3be123132d9fc637a7134567d3677d328712c6dd9a86983199935cda076c2defcb21b6a736481e9b4b8d75c7c6c76492ce0510ec7aa43b9f5c058f96027e85
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx
Filesize12KB
MD5a1d928dca9410c8923479e73246b48bf
SHA147128bf39e2a78ad24b51d8b777599c0341c4909
SHA2569dcd2ab9159ef85b463ed523e3de73452d1069ee47847869777c6aa354805ca7
SHA5123fec297594586844eed3d5e5a760b86c9691b1a816b036374018e2460faae01065b89bcca3fd3f5be7cfadd9e07bfefa856b9d50af426c770e2797fb780c12cf
-
Filesize
9KB
MD515f55a7bdd333d6acbd08a4136b9dea5
SHA1a28e10ca18a15c1360d3fe6ffde05114711d7ac1
SHA25685d5ad28ee5b0d058f018e9e721c2b20ec64a3e738f4f988e0791bb309fc8060
SHA5127781f9f57f0f616ec28746b3a539089a6e8d770fdb7ec5f18d3535526795ec2b4cdc99a41d6b9b2451d5070aa1cc1c69e0ea77a9f0627e279293a23121c15437
-
Filesize
8KB
MD5c5732ef375755ad50d20acdcb70556d0
SHA1a64e36e8818eff52b69dd479f43b361cd1f4c14f
SHA2567ac17594e0f08d1c607daa2bd35f968d103f2387c45dd3c992728c0f8ce64c3a
SHA512e2edb359fa5e6c357aff1ab6f6be8b0b2b45398fe102a3bfa4034a5de2c29bed9cc29b423d65beb2d6645a9d49c52cca4276a1da2bb7913d9015c2b91df586e2
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx
Filesize2KB
MD5476d7a21b6c1df9f8980e021f5bcddc3
SHA1a2485f9e87724f1764916122b097fb3e86a58393
SHA2566553e2a0a6757879a5f2c483c94cceef86377af0cd68b72e1a4b04a801961f07
SHA5127db6bd87b54db8214048fda68599dda6f16727f23950af2927819c36bfb64a2e676f2f040c8fb61927146df7d32999608e7cc226dbdbf16249185d08e6416f3c
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx
Filesize10KB
MD515d2387969b56c34dcd02fb9d43fa285
SHA159476b6475fd4f20dbba15eab54169626f504b8c
SHA256d910327c2c1764013ea874c339e83b1132517b781c0cf65628de19c10527245b
SHA512f6bbb6649298e0ba68311cd383cb61eeba8a473b43edf770eb7c45f6fd80bec5158ba386ac7648b4d415336ce152335fd511b2ed8779292a4ee4587d292aa8ba
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx
Filesize21KB
MD53993931a98f6c87d23c3b32e02dec618
SHA19e493b56ceaedfa9459d8184e879275d8fc1de26
SHA256cebb673fa395ac7d87635cc6ef9a9484b4b3d6c14d824acc0fa2dba14f7ca19d
SHA5129d139b6a3eed46fbf79ffb34ca1c5d45b0f41da0361565ac7002e55ecc696caf6a1c81d4909656e30ecdbf1cf32121412481e60892bb6b22b3b8db38ebb7521e
-
Filesize
11KB
MD562627af4ece47369a18dea46f9ef8500
SHA1b83cc801638f24c6070bdbbb03d278c4b9cd1519
SHA256be2e156c46bbb69ca513579a04c30166ef54202b016a90c729490c4b0a684b65
SHA5127c43db6f12caa1d8ea3c3eb6faba397bcd3e83cedd05f0aac83421a75b64b48329ceaceafb8779da7efaab6a53ce65c7bf140f0487cf2d6defed30baae66f5ec
-
Filesize
10KB
MD57aa94db6aa3b64a49c9de1ca9f7cc208
SHA1f59c03459dcbf9fad7c8a1593a10164aa68c8136
SHA2562d473c18869a5563e2654a86589303f413e585dea2e258a213f0317452079d3e
SHA51234656b9a1b1209b8cd8fb4d14a7bf09ff336bc95ce5a41ff8e0132f33a9bc2b11aeb9ac4122ce6d747a07cf7a817a19d68698324ca9eb96ed9ce7cc6aa278ac0
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx
Filesize2KB
MD53d3ca34a52bf214a7388774f799fe283
SHA1636ebd1c9b5fa25611dbb109f4c808177d455f75
SHA2565c4854cfd00feb6729ce0eec56af46bd479d12a7b979e697ed3abd04573a0357
SHA512beb13d8f58282b2a78a00312e696d005bdf60728759d77169b7a08c6abcb57deecc1280fa3db146095e49d8a613c331b74fed44d7b0f5dc0eaee7d3d7c85eb2b
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx
Filesize7KB
MD532bdac37e1a42de5eb94910342b8efe3
SHA1e31c46f4805345e0d7b64d6441251f0dccb6d6bc
SHA256958ae5d4de485a66369cbc219cc252b2d285a790a45156903700374862d9b3fe
SHA5122dcafc4ff37d8dd6f91e80780af63d380b2a131d4775f2715a8eeeee8b588de2c5e5afdf656cb0ae601a2a2d5ebe218edbd7f086baeb4ded58623d2c96b9723e
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx
Filesize271B
MD574360e447846191c9f3256601b909204
SHA1d4a32a2f90f86fbd1c153fcc2b7a746bccd7a9bb
SHA256e44b692d8cdee96b7c0066c3b0ecdba259929ffc56171daa2cedf8f08d42fe54
SHA512deebe0cb58f2e5d5d27ac47e441be41d07e07a81ebd619243e8f79773746b4dacfae110a3aa7e259ce0540560c8523c9c75b84ad5ed427750962be715eb671b8
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx
Filesize491B
MD5a14bbf2787ab1483855a9fd37e24c715
SHA1b633e719413412cfead613c3622d2261a9ff9839
SHA25608b0b10a8d0885d43c9f29981da41a3dc81a524397e131c1adcaa49fc512f737
SHA5126b06a9a5ae13961ee205138f34cc003da59b3e7fc26645d2a333ef8e3fbab1463df5ee7fd7fa6aea0b71b11f7de6864330933f8ffc95b931c25235ab4c5ff055
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx
Filesize24KB
MD5b335c16d66cd706611683c3e445122fc
SHA1da283778c95907d4c10e8a4672a316c4df576012
SHA256ba72927644f9af661670d03faab4c34fb688fde3e3e3d1b0bffd406fe9cfce3e
SHA5122d9396853432d314bc04e669df2f85b23237ec05a69024618657cfdf0a747e0f490b972693d821bb38e5a3bcb4397c35c883fe5652ffdba0b67bc3d32adef338
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx
Filesize1KB
MD5023b3b596f205ed42daac227c253e428
SHA13e14a59dc9f5ec41879198de60177e04e95a4beb
SHA25625d2ce375db3b733b8eab9d542a81d3ce19072df78c2ec76c0e4ec2d91953e81
SHA512859fd0329124754176df66a94f3eb300164138ad951c719070435215acb10bfe3544e7aa72fab08d21d27e1325fcc785ef6d2909b1e67e124b5419aec53e2bc3
-
Filesize
9KB
MD5ec13d7cfc93058904adc49a06e18e6b7
SHA14661a423ba74aa888b0006dfe6df320c567a6b0a
SHA256c3074694c4ed6b6b4009fdcc8d7851709fc0450e7eb5a1fc3451220310c7fe60
SHA512bea6691ccb2fbebff3ff5bc215a3a87feb3af5674518064f6f3d35b085780be24a06743d1c412f4f943f94f6158dd89965dccb497ef7c230a1a46a3a5da519d1
-
Filesize
1KB
MD510505f5009e2eaf592a07f4af4c96c06
SHA1fc3a31625df133d67cf60adae85ff7315ca87130
SHA256c4528e34717352654d6de0e83ecda377d1e8d7d7d1a6c5b976029c18e1895264
SHA512763194120dbaee4b712438c44d0c2bfb79a0be55a6bdc5bd05173a009984f68e5c71911828119b8a11510208f1effb065d2b169531d946aaf4b5219a8def9ca1
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx
Filesize2KB
MD57b7221b9208024f93af0096e05e2a642
SHA1dd8e99043cb09bedd99d44d52a84dffc52814932
SHA2560f528d48c5e389e59c69e82d8783aa305d24e6b1a3f93ecb498dff425a6fef9e
SHA51209b2ca62e477e2672990c78c5d3240f9f051f38779ab854e2357ef7f5362735a5d95a18c8d74867c2fb2277ac3fff9099b93a1b772c1f63d88c015ef2d7a030f
-
Filesize
6KB
MD55ec49957c558ceefad40c3142bd0ff61
SHA1dbbe546cb085df12897f559fb4a5df863cf94a5f
SHA25696f559524381ec8cc9eda5ed2e87b5d3ed16c0fe41d3da13f47afebe8508ff67
SHA51297cf7158e30e9123dac97c4b9d4da32afa4512c0384bb53c1bab358f9be0c59a41bb0cce4eed256178cea0612ee2d9dec6ae7663b1c24439d76cd8005546d096
-
Filesize
13KB
MD50d590fdda27b000ba97e35b61cb5a43a
SHA171f73c7f6929c99ed22f2f5d5dec6472a38fc2ec
SHA25667f516b09b868b3687ac72a7b777bf99ddb4d1ca0ab7ebceab413c8fa4c65203
SHA512a9a0fdbfddced3fd45875e625243709ea6b854795d360908e465f1a09735a00a43feb20ebfd6bba7f0a2082b4575f56799021a84243c072b6e00869109cf508b
-
Filesize
3KB
MD555d8f58976e2e5f74d9d09fdb696030a
SHA178aff850872a57fa2b9e9e6ef0f39bf1b9c4c70a
SHA2560c1ecd16087af94e8c19c62bbbd92fc93da6cd238887070a32cc06e4bb5e8dd5
SHA512c0ab1c7f7697238774c8bd695f74c8677dfee3c26205b10cd3e07ef6fb869c1ed4b5756d3e916d5efbe9620702509ec9b03ca24c588af1ff02e24fefb811e382
-
Filesize
6KB
MD5f6cb8da9c78b36118e48b9dd24a38c31
SHA1e9a9852e8d3c300278cf128806b773f7f672186b
SHA256ffa3e20541312df899f34863963d64ed12cdfb38a7f513ef8930fbe06291e4c2
SHA512aadd4773ea4fd82b80a6cc1a18d119383aa9b80e834cb90014945157e97d5404c611a66059384bf03b4eabc255390007211d3f56b1ec0165e6cd61feae98ecad
-
Filesize
10KB
MD5605002f4ca70147ef37b4c582ec53565
SHA178e682bb852f07e34b38f36e1b49c1bf4f456cc6
SHA2561d0e8ed92ab1c476100c6d1f565bcd40468dec31d3a496902075b20d162c8f7b
SHA512ffadc45867ba1cd88e44235f34aa7cfab344fdf3bb80280f8cf2da4ff2aea62effb6b84e0b5678c51fca6c8b5197cabc10727aadb252ad76ab74cc08c2803702
-
Filesize
4KB
MD5b3d79e8f7a9ec37a4a945e273e7343e7
SHA10f8dd40770637d5f56f191bc2ff96fcb9dcc76c9
SHA256b822605ddcd35e8a0bb3eb63cfc9d51a4d47d3aa83db90aeb5a9e544c0e43562
SHA5128ca1a4c3af7e0d936b48e3e3582df26f7299198d5f68e21bf84d19ceb0319eec26b34b7356858837d83011fa3ad3e4258af62e3885f5d1fe35defb7f2e9866ac
-
Filesize
6KB
MD583e3446e806e1441cb63fe5b7a240d8c
SHA1af7f15705e60ddc975d2049e79e62b3010b4b115
SHA256f4a3b298152ce04ee5ffd9a4b8d78b60e2c195afb661feeeaf6dd974109d443a
SHA5126df2a5f01fdb84e98ee679b28eaf1f175eb752332ad5d126d9f68472a0f867de67961a49a96fab562280dc72936f7f1239f0767e73c6907597d1db38f3a202c0
-
Filesize
1KB
MD5168bb96e3f09d146798327b03cb135db
SHA1d7e9dd2e54a14bcdbea3b4fb6b080bac48c123dd
SHA2565ac1520852f8da07f04f5014d56def2106f40f88f1e5ba1a9dc078939880ea21
SHA5124b8d70632831a79623fcedf4d846ede08b424b5699c30729813b893ae9fc01b1b76cd23b3720b0edcc7a6e92e3cb479d9db7ac168876b789d2624c50d79a80cb
-
Filesize
740B
MD5ff433a5cad0bc8a37147bb9a21e32d07
SHA19ee3761015f2fa3a193d17ab279310606bad93d7
SHA25633ef6768c852b1fae5420c73e8ec7b76b8e7706a06c9c7f239fc7d257183d38d
SHA512e5e3e2c55c7386ab01e0ba9a5f212011afb29102673add9da7bd6323774e8b0ebdef239b75562da309bd91a373c1ec2a62f4eeae3cf2e5fe8358fae8a69534f6
-
Filesize
1KB
MD5adf8989fd8c9296da30438453f77758c
SHA1feffd0f3e9162658adea1a21315febb3b1bac3f7
SHA256d9d1a5afd2e2d6512bcc7b5d6fa8cd24dab2bc47f6c1ee0c5cbec85b0a85d80f
SHA5123f58336ddac8abccc5f8b34f48d4dfc4a3eba0a4bc4e07a3e63c14857850573bd317612cb8b4fa7cd9df168e093f30b7d006996fc38b814db02dbfa6d1a2d269
-
Filesize
8KB
MD594de015664a1241be9f9a2e7b9e48989
SHA125e2085f55bad8aa89c46af63e1869e7875505f6
SHA25644fec14390b5691cc91378424e53de2b4977538ce9659cc1d1642e38ebfa62e9
SHA5123984e0a486de95588d2ae0c6090576d6b353442da7a7609b46280f3c832ef9a996b522fe843841dcca06c3e54a26a03df9140155c8049f98b0dbbf646c2113d2
-
Filesize
68KB
MD578655e3bb5b1c663aca67e2e10d59aee
SHA1d9db6f491d7a27f8eaf68875d18b90c4e2a8ba64
SHA256e383e5cccf56a0024b5bb1e1745f867b429b5931f09418d57e8aed7f4c21247c
SHA5125955b3e02636bf5dcf7150e372a16cc9f2e83584e54ad3ee60e4136e1b495eaf949206e2329cd77d804f43cb38d9dc8c6ff0d31d56b5dcce4a89b25dcde23ba4
-
Filesize
24KB
MD52062f8bbc70a962a188cb507d3422559
SHA13c2e1e4ca6b03a7f5bc0576cbcd246e2c45ddfaa
SHA256c7988e1442924fbd9ef6269d67743278ce27988bcdc80a3fc4efd7c1e4b287ef
SHA51284c657dfe65d45a0537b9ab5b0da4dc1a054e46b1a88cca45ff927485495d30a62995165e1b756db96f9690f7b38d8c2b25a0803a6cf7faf17fd92fa0f4f1e9a
-
Filesize
54KB
MD5b7a381bc12d3895df87674a5cb8b1f62
SHA1106dce986da5036efe403d10e41e54beacc4b343
SHA256f4c234e21f3f91b36bd13d380ff271b1cb519e086c93a21370d8c339d1a3b430
SHA512fe9a120dac78ea3d514e8e2498ddb0dd34998d8dac79bf062b959307a53ce496bcab16019352ac097f2ffe30e72009ffd1c29d0d37da7fd430d6b3456a5fcc26
-
Filesize
51KB
MD5a2a5eeb8cbf8cfce508665a5e6e7165f
SHA1d396fe61c3da04647fbcb4b7d545665241b163e6
SHA256a39fd647f37a6c5cdff5633f942ad066f66e4d1b0f84051f03d399fe2c11429b
SHA512aa1186f2adec9b4b19015f235f19cbfc9bd74364078cf33885ed190e3ad08024e8f3b14e8d7dc51843c1055f32deb9bdb32d5b786b3ae4f1b44d1b369257ebc0
-
Filesize
34KB
MD55946b2099112ec8e1ca14f0767b9146b
SHA1c93262f62940045b3fe318d1adcb485f783c02e9
SHA256d43d7e9bfd9334d29fd74054ed24ecdabba15926844ac80e37b4916d942c24c2
SHA5128aac25d18fe95bdf92c4ed0a3d87ddb2c17eb4252dd25dca8044cb11792d9e02d89e9a3bf03ee05a5f0ff4e4c9bd6e1d6545b07a91faa49a2ff0109a30ead819
-
Filesize
20KB
MD538aeb491303a32b18ae67f517612f554
SHA1a7c00c44f32eadcf073324f0ed81b9fcc2046539
SHA256614ccc0a415d4054978bca16b56be21c841e1e931abf1eadfd3dae40b86ab72d
SHA512a3b5ce568c092e5e4befb23003d98e3ca02157b2f46d0250582946228664c8d88e24a1762eb2ca5a9bcc6d38a1c6021a54f4004c3831b71ac35d640a1afa1d9a
-
Filesize
33KB
MD560ed8acda020d291fe1ddbe99b1aa32e
SHA10a648e515ecdaa02963f6136694597c38660ce2f
SHA256d69ded9a0868c60e34f1d996ca4d8d43659b0faeb8b554025763a5209830ea69
SHA5128b7cd53cfe4fda803fc880a214e31d04ec2aeee3c41c0a4bd2b8f800857fd63f43cd9de63c8864c99746df355e890e70b0f74c8a4a687600cf497686c8139207
-
Filesize
50KB
MD537a883fc612bfe078e8b4426936a1e4c
SHA19aad9e95f816d12e2e92d5cb8d5e12c48276d5a4
SHA256776e87ba6cf012b0bd505385febe7f09a796fd0163321acfc4e6a55d5361ef40
SHA5124e5c0afd10f82e5f498279fb88da5776150cdc3f32ecf0ab0d046ec4dd140f617d4fbd95c28a3bfaa9232bd34a8a1d3ee097788073e2d5dd2827b3cbb45ecbdc
-
Filesize
52KB
MD5cf52840eb575bbadcb9fa1b8cafed90f
SHA13f670e9492f16b51c8fde02ca87bfc61224a990a
SHA256f9345f26959ef658ad98108de392bbe8867c0fe1b761f547921ffb8e133744c1
SHA5121dfcb0e0324a701444ad65244c55e9b1a496357e334e14a5ec2fc6e20da7c670f389fb31154265952e47a6cd3f144c143f450720c4d163d3ff0fe4bad48b6787
-
Filesize
6KB
MD584d20450ac48d6c09b0434cbce98610e
SHA17203f739ac887f4076570827325c5bc2fcba5f8e
SHA2568bca81085c51e1a2caf7b9a309e836bcea1b6df01c7f6f893357a1dd4cb24c79
SHA5127b25d24d47b7b6f70f57e3e3d39179f8a9f625a6eaf99d15b3012705c416573f5d7d8f9570a12e133cc038b655ab5fe8d59fb5b3e095ba267ce10a6bf3daaa3b
-
Filesize
4KB
MD550912e6e9181c5d20050eb54b960cd11
SHA1f664d41f9a0a3db6aecef51bfdad253a1d971a65
SHA2560ae5e95e72f6076cfc69461d3ed6fc17c9789d0dbee13515a0f3bae7cc9cfcd8
SHA5128fa6903949b2608522101e216f4c88615d38019566407a7b944bb521bd5a52fb2a0cc37f47aa556559940ff76c10ebdc09eaf2e32297ad5c389fcf876ff9d79f
-
Filesize
3KB
MD533fd16c244d09f62de53059e5880fee9
SHA1eb46eea90f8e4d5fabf6e11cf37a55490823d01d
SHA256910aa6c473e7bd8620d7a3c5eab8c6f17b964aac697b5c480769aa0e706a32b7
SHA512f1ba63ef5ad1092f69407d38ddfdc631c2bac5b497e37eea334d891a8a7a3b5bd45ef12afdae4f0406005d5208065eefdd3def6c2d5bd373219ccfde1a2e9bd4
-
Filesize
6KB
MD5f4020ba8fa2b4bbb4ead04faa36ee7f2
SHA119b3fdf9e2e032e845515ee720e6c5262ca53adf
SHA256129c5e009c4d455e6fd676dfb0e06baad7f1ff267dffa34d475e74b58d1988b3
SHA512878f1020478636090f2f19956817110fec204fdb1e6d974d9b08eb9fb7723d1e54aea73af45aaf843da8a841cb1aadc40bfe2cadef878ccec37f60f77a0dcdde
-
Filesize
9KB
MD54fa3c2611549e728698cec74aa070691
SHA12f7b4f57dd5ec8fb10e3544db53ae35795762722
SHA256217256c0ab2a843ed5b27f98f8713a3ead84b61494f9ae543e9d6f0fa28371f6
SHA51255ae34ada9f208c375a0fddc57ac6a3c9ac39b48f2efa54be498eb809a1c20b564822e2879c9a6f7200a766650418c19ecdc3caeae47b5b143b9a1dc0d437c50
-
Filesize
7KB
MD5ecacb8c82b7471c67705ca8c4855bc7a
SHA1bef5927b91e02bb882c137dd14dc093828acbf09
SHA2562674b82200b8ef7ff0992b10147678e5b6e33765b6dbe27eec8dac4d1474fee2
SHA512c8fab0a897400f849b68ecd565d178d9e04439c6190070da34a3ce0a43adfd97538d7dabf7e4fb3b6737b6201d4dcd9cc454279a9ef78c4ebad72c56701eda6e
-
Filesize
5KB
MD528fee1e3fdb662746e0d300847766b18
SHA129a4733e3316ba0d7a55475120f29d583e2c81f3
SHA25616a8d323be1b15c64ba27581ecbf0e6873e0cd4d3977da6d265422c57f6b0415
SHA512fed7dd3930718dcbbbf838dfe55ccb957a209aca7401ccda719db61f43944df5e93038af96ede558b0719d2e3e93b18229c65b92c7ae824adbb3be16e4cadd5c
-
Filesize
9KB
MD583375d77ce54bca300cf0eb435b4063d
SHA196b6e1ae3d1906f7552b7550e80a8b45d9040a46
SHA256824971270238f6e81ae8e15c6d8d667da9198ded3e08f4f288d2ef9f9c735d97
SHA512b366066456fc707988e708d0a1b4d000e3ea1e0a5256115d74297e245feffe983e86f0f45c1796fc4837b090a05b9870ad304201d5ba0ed4d4d24da9456a829e
-
Filesize
11KB
MD5953df7d6a21911e9fe4569a6df37b2c0
SHA143e4cc64c93e045dd5f1954cdf63b4811411f056
SHA256defe6afd85ec0a4382d839ceeb76ba53fd7e9a4e8b312d7309231615da760ad1
SHA51295e411898279c43f391b7d051ed223d833698e39bfa1e5f7d374dbf5fdc29a36f5085079e55c47c4958e65e4778cfd0934e541d4a4b490faee65772c01acccb3
-
Filesize
2KB
MD524e90ee0f85c6055f77ca87993a63cf8
SHA1b017cb5bfab02d36d6cabef5dd7a15883e49978b
SHA256ce118f1ec2708d8572df2ae68886883115ee52249f18667f56467390ee448096
SHA51221351885db51761dc2a3a935d5622f611849d7e69ce6e4983091f95fe97ffe63eaa0471d40d6f46a6fb5c88e2dff4dc9bd28e1c60edc21b1290ecc07de5dfed6
-
Filesize
181B
MD5b0fb49bf8537ec0ab45d686a6b3ee3e7
SHA185180371a5074484f0658759eaac8a6fc595c196
SHA256497cf7707d190ff8e1bc0a46453117d927545dec1471700e3eda3f27076315f5
SHA51266c1642ade0ec90bf8c054c4bdbbd57e3bd6717d985866bb0580eef4c08b61bd89d9bc237b2cf6658ae038f6846f37f0f30495cbaf09352d260fdc8a6b402e03
-
Filesize
181B
MD5c0dcfee64f0a0f99f866ee8203d8872c
SHA19d264eca58142eac1ca7d3ba6fe26a80db2f0eaa
SHA256ec422b6df49be7190817caf66dac668d1cadd44cc0bf1cd23898575c82f5517f
SHA512e45d9845a484db7f76d9d89cccf530b08bf1e429f9fbe9f6ad1b7157f767a6da8f3f26f0a97d79d9aa83fb13e7bb84293019a3f8d9fe5c7d23c03a92fc4a7617
-
Filesize
23KB
MD56907f212b2494786ecf6621fed019c51
SHA16982f389cbba838e3c8a35de24e70dab5d5bc8c0
SHA256e6c8a97dc1604726e7d24a1073d79e5973a6290d1a0a3c20fe84bc92f33d3777
SHA5120dfb470bcaf9ef55700272a3f97d0018f7b2bc3487e4e920f90d65b84c21de9cf9d08aba3d19ba997ea40836ef19f2727436ab63dbf5c77f7a4e91186f308d34
-
Filesize
4KB
MD514439f77dd95bb951b13d5c8cca5e7e1
SHA1d17a6350576dc70c0380986a89756ebfcb6d1ec2
SHA256b8b3413b3871c21ff461a9c5e237f64658a65a9cece426ec9e24991dc47c9fde
SHA51235707278e92d2579c69177c37c2a0d47687a32aeaadb7b3110884ae13695550f90b1c5dc23dbe1a38dd3e8e5fc7ec48b29a471e6bc36b2049b11982590520454
-
Filesize
372KB
MD5b7e3e8b28c7d6a81ec27c92a329fe8f3
SHA1906233fd8d614349b850efd30c09bda5b9b2be15
SHA25693a5db8a38127fd7ca7d9fecabc8e52da5656095eaab5f697e1ef1ecd79a2a89
SHA51255727030136d8822a85ae471edd8b13862ad9ac5832be87f1e9a9cc3f08f8dd719b0faaf1138839a7b97e5a5682abf0c8ed04bc583548a7efe7172e9ce0a7250
-
Filesize
49KB
MD5ba6b2817a276cc9884505407322fa4d5
SHA10c881ece03ade347a84ca97f43bd02fdcacdca34
SHA2564d93296dcdf064632f3cafd0d74f13509e93b38423f1b602dd0ddd45e7767b0f
SHA51283995dd38f3ccfb03483a304ef7346c5c67db79d1640801b604fc2e0370b37510cf696a70341ea8bfaac8f314a7c1afc1f3ae737e705bd1e4348dee8635e67d1
-
Filesize
893B
MD580a816a831ff8c54a59c13fa1e1a779e
SHA16e46b2e39e48f827de1a797405b0fe0dfc8658d7
SHA256de68428f8040826b24608a5528ba07a0740b587e4f67a5e96fd26c40f475ef88
SHA5128d716362068ecca01263dae9c2017e2df2d85121dc5ac6a1ea6e66df2745d900b07b1652b65b44056784beda0a5dbbfde9ef10c3707ca3bc7049505fe7d27d6b
-
Filesize
2KB
MD5e3624d65aa14126f4d6df4128af417e3
SHA17dba2fa48597888cc1225e9cb14b6376c9132673
SHA2562ee5da8d589f28fd5fad691f298a5e6cd396e1478d2070b30485d73bf0c16a18
SHA512cef796e441a49a3da79228a671201c23387900c21e0180487b63ddacd2e312f340b142688afc42a60c53d757a288013c9e72946b94950f12ee78230cdc5bed0c
-
Filesize
13KB
MD5da08c22ddab68d23cc16734365187766
SHA1c66bb3e5d33252eed84dd8e368a8d9f5675b149d
SHA2560dc2404156d62904a44cb2e16fc964bc6473731820b87194d5c08e9d77ddb27d
SHA512b11beecf4eded46b63576ac20b8cd4692fd789bba619545a5793dd218bc1ab2d1d7c716374ca00e796202c3b412cf06d4569c39982ff3014fcb2bf1375d9a27c
-
Filesize
49B
MD5c2f8ff9391bbcf980a461e47050abc00
SHA19972d17e92b006c34b1ca8730bbe15028a6ae189
SHA256e8ab7f067471f272729505d669284278ad6a82d352e7db2fd1828ec57b889fb6
SHA5122122d506cea92875f97b10b2110491f524c7f8d5ae2d2f7426fff0472f5d6bf9c7373f66424262a6358d07f2c4afd2042a53bfa24abde8a81af444e4bb04b475
-
Filesize
80B
MD551f35221f4e52124300301d891102c1c
SHA1be2ea8e7e5da6be61ba1c74d4b63fbfb56191335
SHA256f4ac284cb86deb545b424a534eda791960deb0f063a50d1aad8a4240dd13c06c
SHA512ba1875ae40ed23c8a7103fadb4d73e798f38b814b8a1967744659c24671e5725d9b5295a8ac2217a09bc5773d3c99e73eccdbb0b27e4a6e821b7007fddf98ba4
-
Filesize
62KB
MD5978c35bdc33818c13240566922c5931f
SHA13d5d2febdfec58a07db75047f152db38b070ec05
SHA256f7f20afd38652c05d2aa076f8448ff8adbba01d2a9aaa6bb77dd0185b194b8af
SHA512eb458e3e213d03a38715bfb51bbafa061e2b9a206eaea76d645bdb04e97b4dd63e0f3ef4c5658e9e5feb0ab38c6989cd0b1fb0024d228e3361c90704f35396fe
-
Filesize
1KB
MD5f6e21f220eceba6a16be61230c067d8b
SHA11adfc7dd83582b17d28280294a1e8f6c5b753610
SHA256cf7873ab9284f400ecb82c099689af77aff786da00bdc40f8865d05e566d1ee4
SHA51262a30c2251ebe0da6c25121e56434f25d6018cf2782377f1c92c96cef2ee1b6f8a581d994e3fe7e1a559af5fb2f121cae2b3f0f1ef2c5adeb16129fe3ece4e89
-
Filesize
75B
MD56f05b9952693b4bb6a560c0f5d9d1b0f
SHA160cbe0562ef8b8b01e7e299e2080145badd578fc
SHA2562015350a74b4c22bfa7c4dbb15d22b3cfdd832527ddbc8e9d93aba9b4f298547
SHA51254e457990830117857d90a82d0fdab3ef09c129392ed0ae8154f9fd2cd532c5109c8205557255cd5cb0a20c14bf46b204fa8adc93460926fa5d3fe8983a50c8a
-
Filesize
1KB
MD5ea198f000eb556d69e0b4a676504b612
SHA15654a5c38e63c8556147ad3bcf0c4c86395728b5
SHA256d55958323433ed585b8a805a3434a410e635cc7a154488915e60fe67fa06b8ff
SHA51238c812a1dd4581a90c82f8fc11b6ed901ca6dfe6aebf93de35fa9076f221f46123cbcf011f471afbb2bfdd33379e92191eeb8537f82e004b6bf794f48dedaed2
-
Filesize
1KB
MD512465273d07d6f72e1f7ab4fd9d0601f
SHA11cc59cb6480fe5ad319b0797ddbdbbcb4066b6b9
SHA2568c5e46bc89628e68cf8ac7c702231d26b898146a411ef2b3c6b3287d27ef64bb
SHA512aca03270ab0daaa7783c6c9498b311b9706244a63d8b0e22bea05253af6eb30127cc32d4fc55dd3b943f0f96f50f9d06cc0b9f0f23afdc1a61f4016d146b5da2
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
Filesize1KB
MD5d4b74cbc23efdd05cfc7490a36e723b7
SHA13d848a2221e3e5131a07bf8e7ff798167bae2cd2
SHA256d334f900bf707690f0a978ec3c1599c5b3f5bb3019b9a5464135cb6bdf07f09b
SHA512a9d16df35fcd8b3cccea9525aa86d2936ba854f3923e276d3048c4f66595cc4a699f5737b948a66308bbcba7bba4625f2aa5e6aaf5ef74902da39c9deebed4ea
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk
Filesize1KB
MD57c295003c9e2b19d5a1ed8c65b1e5c26
SHA18e6691567c39e8f447b8dabe102776ef755a9303
SHA2569efacd4c2cbf92b3bc5507cfb3a52dba906249c3cb26b9bae22833a686122b0b
SHA51239ac923b277115e55a933fc4fec8c728284e75a0415e997ee551034ad3f17ac8a3c764c142b566651b0bc27551f4582c4a054657dfde58949fe7043a550f25ef
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk
Filesize1021B
MD5dd098f47496e5dd04d084017a77c475f
SHA1b2f0fe587e7a61f782a22a76495ce1b2accee985
SHA2563080eeede474c5c2bbede5da059348c42e9fe7f5b2ff9cf13cb292e975a4bd2b
SHA5127a4e9d1e872796d8a0c10e210e895b1d0d7ccd4d50800ee3be15063b5bc31121e06f23d67a51e8a9c672cfde045a1e370f843529a723a570944ac0ce8a52c965
-
Filesize
325B
MD50af2e6f32439baee33150f392dff4c0b
SHA121ba8b18a5a0436b8bda518fdf3e890039c90ab1
SHA25624e2e4110b65c3cc5ce6666d4479f86e0b0c22365b0c1db972c4561cd4b498a0
SHA512941559a2ee308da46c6dc2394e6827cdf4bd0692bd8764d7681792b35a565b9537f7438be47e791c678cd6407cffab72c01ecc89da4eb0209c3b3ca7329aeb0a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk
Filesize1015B
MD5391025847d696981f5b03ee3a04aff27
SHA10bd61676d420a74027519904db8f82ef380a6e14
SHA25636cc5f561e2ee8194e6e49249fc67b23535aca5adb8ec9d28dc6ac9bf35c5bee
SHA51219c3ef845f1a44cc51b554cc195286f76b7c14e9405e56c1cbe6d1b8f2e9ac850ce0e06d25f26056b1f490b8af5ebb281f836e62d90736a1dc000bd84b5717d4
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk
Filesize1KB
MD5faef7c028ad621a78b18510c9f7aafa2
SHA1a63b74f8ef5ca06070e85d03e6ecc7a66e1e347f
SHA2563188e0c2f915429a9b2294736d9068de914fb580950508ede5f615a5278d2b9d
SHA512ec5228841b8f0f667288a5cb77cc99d84167f24421cf8546063fdfc586ae489b9a696a756d35aeea6f4922295d2ff5fc1daad9413c4b764b2b800f6a8b66e521
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk
Filesize1KB
MD556e684cd95dd0415128a7f7c8d0476cf
SHA16c5477a2c88c29d65cadac6a8d1bf34ae7e532cb
SHA256663a3dc51a86f9d86d998ad56c3534d69ab1f0c3a9507263ec2e645f9807690e
SHA5125d611cea7b1ee3f61dd53f795e41a3d76f665aedc5d60f5bd6cd3fcf56d2f9312f4f876980170517e74191864279e84950dd1768ecb45598b7f277ea27269816
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk
Filesize1KB
MD5707286251719bf263f7c8ce328ce6785
SHA1154dc466eab6591e763049dfaa038c2c36ff9768
SHA2565337ef738db5becc3ea3f2cf158d3d9f2cfda4042c43cbc9ce37ff824cf31bf8
SHA512677ad17ebb40c521dd4ac7ca0225706529fc0283ee13c26291e0c71136516c95ebc7204c8f07dd6953394538356b4ab81f47714fd9489cec1ccf85a03541bb23
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk
Filesize1015B
MD52408497d281eed583fd3785c29f2e9fd
SHA139a5a0fed146959e3619cc447d4d4de6de33fe29
SHA256f5f2b3e2e39c4bffac1fd0b4eb662763d41784af32d61e3947f405ca0c9cec76
SHA51243a951c325c9bdd739a994611b96c9b975de44e6e55e90e4bcfa0924903896b177dc116790a0b25e5f763e54a5413d0b65fefe97abcfb36d9e3627d1630e132a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk
Filesize1015B
MD560438555331b024e792db07840f0d895
SHA17e8c7304021f5fa96c097bb45d9fd77ec2b92b21
SHA25690dfde69230f7e24debe6f71ac16fc97dd0589b104009e532da650559aa24091
SHA512f1ee6eab73b7204b4f66dd2c471c108417ba0c709f201a79e89b008291117c1f79c40d2d6c2e341bdbb423328e1b0bb1ac4729c0e0b5a705c998934359835352
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk
Filesize1KB
MD553fb007d0da372242d27e8d8a0136c01
SHA196973504b8ba9b998867105988daf6cc58ca8fc0
SHA256b91303ae51862f14499a06f1ff8dba51a810f81712aaa42e093d991186f84bd5
SHA512644fe3cff273e06d2f20a1aaba155b611f646408f147beea424a652e0b1d1e6fa6d4e02f1169f425ca9efe985bf905c7dd891e7c888bc9c4bd7af1adf4a08eee
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk
Filesize1KB
MD5ffc6661e0aaf6e706410bbaa8a4936ed
SHA189289bf1f15f484ece02678bb66dfd7579dc91e6
SHA25695325ff740279c201a91e7329036abd151cf0a9c0c7b60f04a8bfd473e4d71c2
SHA512b880605fd2e315ca42eb14603b9a02d7f21071f0776ffdfe48cd4e7ed790bcac436a779df941f9ee0e0ca9a1cbae3245bac38becb07f6a79a1a0dddaff8b516b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
Filesize1KB
MD5edceeaf711fe0ddf9add9bb259682c75
SHA1f64649430822fd8bcdd0780983c87d3de62f22dd
SHA25611b3854572022ada5e48ef70d0acc769c82b22cbaae238ea1d5fdf305e608221
SHA5121f936628a009a31a2c735fec2984a333fa86c2ca1d1e4cfbbae1b8bde699cfed68b792b364fe7ce6000ca9b1b4078483fc63b8e71492e11737b0e4d168919b9e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
Filesize1015B
MD5fb82cd17a75c00bccfd7952733da83fd
SHA13fb0b116eeeb78c2b2bc23c78d668c7949a14783
SHA25648caa7780d985784741b8e7ceb31ebb17d3bc284e12005551cbbcf63e32714f6
SHA51219392b8e950019aa302116c5c05d2181c59d95de7d6b9e37e251531bdc8f39239d98737edca99ff67b4426df7e02e76addb51535e5f03190662ab9f6db41d863
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk
Filesize1KB
MD54487dff5b0d1d2aac76d0166c6e8b9b6
SHA1b34535a35008a929c10698b11e1e0010df34161e
SHA25691f1c465440b8264d0699af8b28eaf323987044d3e883b9671e019f22e04fbfb
SHA51223d64c2b751b957e55f820d6c775a3109f26d09a923bc142186cf000c08e89b57dfe52e05a84818c284af1b83036a8f4773ee336aff2ef9777b69e25c73db55a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
Filesize1015B
MD5ecb6baed63eec50a50c8be3dbc5948a4
SHA1dd50217804e5d18a67fc1b1a3de602f6665b87c6
SHA25631642b0a41c46c473eb2b0eb36d3ec319361131ce172a2f515242e97a026af6d
SHA512f70bf1468d83d443c3e569c67c83a6f1ce7949ebb0560bb0ac6b3266b87097a9e592dd9d7d6a4685c6ac7dac244acefe029a71c39e5ea2e7f10359915a4288bf
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
Filesize1KB
MD5be0fbba7fd5e479c0fd885d7485099cf
SHA1cb12cd39786766289940be36ccc79e74a0837533
SHA25666bfa26ff888ef9b0c86875e05eda5b265f4b9a0298ffcfc23554fe673cd1cad
SHA512b88e624563f101bea2e91a1679c32ab6007378aebd84fc5f9995bb3328f711f5b62bb04295f815be1d1d7e6edfdcdcf03752159188a914dc1488bd2e63393673
-
Filesize
941B
MD5dd192da21021aad08b1df47f768bf1eb
SHA1c104a301e1426e4a9b6be401e169969a8aa23c42
SHA2566f3ab49e8a8102da2daa3a2aefed489a98c058b32cb311ef7068187eea8161aa
SHA5129500efdc755cc3c434c7b6ad70399f507780ffa485c0843b09cc86fa167b01d6b350381ded89c4becdcb9e31dbe08279303e3f79830af244ed74e0820a5fc590
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
Filesize352B
MD5c88a5413deccf76ce40cbc6e7ad7d6d8
SHA15bc5b4cc4dfdb697eec78534a3fd7b7d4363d825
SHA256f6276754a6fd9662935b7624dacb097579030799d53b7becba6c92632f515027
SHA512cc6d3007724ae59c78d230da82be7bd8206f28b121da740a00345fe436a46cd9526d2bd9838b7445bdad17522d6716fd3f6ba7b11a29a58b0086439d659b5199
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
Filesize334B
MD58500b19ce81b6f92311ef68897eb713f
SHA1f3c8b2a14aa9e62a5c5af89c938abb5d44597f89
SHA2561f889df90382aea2e9c6d83eb43699cb6344f840ff5a7f2eaebb2e078f933ebf
SHA512fee665fa3ad5b6b092cf3b87021db92d5f1372163e8eaebe02a1406526d059215e0be52d6486b855eba8ccd56110d4c33c8203ad905ae026279a125e15280288
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
Filesize148B
MD5555049b21163dad72459d2f853caf07f
SHA1bc40aa7bed183b4ca65fda77f99eefd1a1b11200
SHA256ce1fbfab6ea4f152e270a88c6c2dc6fb6c36072667e4ae1bef18e96790e9c2ad
SHA512c5f61b0b5f835abc06a75f9648cbd289f17a605503127de4bad6c14735ca15608b33c138f9924061858ccac1439f78d0f17eb4a54a7e5d702ac64170b436ab33
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk
Filesize1KB
MD551ed93425f5f87ce99b58d8136c9b0eb
SHA1dd60e3b271c633234ddb7cd618bb9b0e1e7aa8aa
SHA2560705e847ad85e6713b64c4413377192c7ce0fc0619e689e678d313d9bef7cc05
SHA51204d6b9af793ccfa56e4117772642f3494f68a30a619075bf704e076fa4185cee683846d7f72ba9b407d70be47f41cf2671b3dae8bbaf4429acde3cfe245be203
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk
Filesize1KB
MD56f519ac4048f1907b2ee5c660c855c7e
SHA1066b80a2127166458a66469a42d4eec962c9425a
SHA256133a06a696094ab69317f7947a402a8c4a04fad0533192960765e9de13e3ad75
SHA51278d7edfe00a38bd6c351c8d361e83b76af075484548630caef1189202c6f8dfeca4fe9b055a37471c8d7ba95f786e352e02122547041ea9d75164a258a503f50
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
Filesize1KB
MD561b745e99b827ebf227cd5439360d3c5
SHA18ca39bc1073ec4e69602f530468beb531bc8aa96
SHA256c5d8b574036ac456787736876bcf348c4332b9e1ac0f6435923c663b14a4ea67
SHA5121df0ef49ab62147a38875009f1d87401364d3217ef804f701d1771bee0745b0bed025009eb99a561c8f9f7d9d200a5a6c965cc3aa3a8a3e73610e918f6e8e61e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini
Filesize568B
MD55e0b779d9ab2165ce9ee4b249b42af03
SHA14d0213cb8f2a8b878f0467157a168d9e7c668be1
SHA2562a8ee0ac34a1e1b2f2fff040b9b9dddd9b56c1df22a9ab8ff19e2a302ead8cb3
SHA512665c4d199cdf20fb9665fc4d2f4ccac24c68c40b9c54150260dadd2e845bb613836bdca52e5ca5ef37fc87121a835eb0b6d244e002e8c1155d3e4dd3f30c757e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk
Filesize1KB
MD502f652962473b3cd17653dd3da23730d
SHA1961557e629dc7ca822e55891cbc12d9c536848be
SHA256147862ba91dc54fc4b1bbb93a6948be1c94cf27150a2e332fe3c4745ea271ef7
SHA512d8f7239c4edc600406969561c9fb5a2676daeefc0bdf3d0d0503ecda08758c0e20e23d5ddae2ee0fbaae2c5fadadb738734f78a344b3eae18379375d0b0f0e0b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk
Filesize1KB
MD519013d7b1d541cd87d8e2d277c2ec361
SHA18c2b9c721b68de01c8a62b43595b8ef63cca333b
SHA256c72c2274e84819325f4b1a2293065e2e42960ba20005ed4fe15072fc2f5581f7
SHA512850a56090c74ad6bb98a15c9573e04ee0ab478f55716accec1d1886c3fcb40e32008d44600b4da0a2ae825dca3b3e83e98585230853afb2b255645f0cdcafde2
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk
Filesize405B
MD5d07099f8bfa4c78f2f09af47e42ac326
SHA1f7c4267c525c32ec5a2d98e5e049ee7eefb0a23f
SHA256fc85029e1bf2caf9f7fadb2c4e0841506f4df8cf49f175efbbd4adc8824b8b18
SHA512789a60c64e5765972903f46c5ab7c5ec804232dc9d8ed6957cfc9cf4f313d73991fc40b0d61111e63a0d2863c907590d90b0887ec706820464d66a60007d342b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini
Filesize934B
MD56417e18d797b93afa0bf04c423ba3617
SHA14aa1fc5f1c402d44b96ea1ec1eb031876afc79f9
SHA256e2a24a854eb5b4e3a9362f20eb98ac7a1bfe9f49cd8733c526c651a7f75cc647
SHA512c62d1a0daf67695860a2fdfe5e2d74678cbd0d862447a35cdd41bfd9a33fc9893dbd365e9a955b81596120dd35b6674947de625fbac967f2eceafcd4e40c764a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
Filesize409B
MD53645477709585174f4b0ebbb06317f8f
SHA115a36671533c5c73b1ec66d66bc345ca7c80e3ef
SHA2567b6fbed65772208ace4dcaaf00c5474debae3a0c7e05a60f3696840d4d8407fb
SHA512c510504d7bdf44e12be14aacf1c69dcd30deea4e17e6f5d48f713a9b31ba44680d2212a32921e6e3aa4da1c270cc82589dc92643d3af1f99ecd318b37b4f616d
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk
Filesize335B
MD531321bd4812ecddf1004a7e0d9f42192
SHA1772efcb10415d6954b00a28010ae8adb9c3f3f38
SHA256c33c4af9eed431034c1e113d964daeaf220f7c875d25b31dd3f016c531b6af3c
SHA51243abb8ea733d323b6460846b6ac21b5c94e68c17a0371ed90ec4da812baf28b7e09eec6ae1fb0e510a875c7c4d15ce160d53ea35c2e3bdf08cc054d55a87d9ea
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk
Filesize2KB
MD552fd730c8d69a79b24e102282830a625
SHA18ea8fc79c042e632d684c98817015aa3c4f91ca6
SHA2567fa64261bb07a2ef9516d8b1b9c364b84c6be0c4bea3f8c2947913c3e8370675
SHA512ffe298aa500d9975e27c5fa3fa9e5536920fb906e7f21f305bdc82a1b09f3be0f3562a3005ef9653f87d58379ca782be99113aafa523e592a62100f739808ff9
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
Filesize2KB
MD51ad5ad22bca32c373a076c8a7ed35c12
SHA1ae1c6e27082d0842ecc48be255a3212c26396933
SHA256685aa1f912fb7adec16b30e86c21790066bf939cfa150009f9d4793557138bf3
SHA5125d6552d5c1a142b9c24daa406aa0f07e3fc508a15895a07b4425dff173fcf44b9d5a52c6b46339ff4244937f25c552d6d0aa7f51d2afec3eebd1183e8e010efd
-
Filesize
558B
MD5c37e473e75f834b600ce2a8d493f0ac8
SHA122e088472f036d6568c5c6cd2566188000d6b65f
SHA25699824b2f27aaddd03d0073810bad11c937ac520345d4f59c47e63cc0dfcffa11
SHA512176d0c2da2df7899d7fc3e3b35029c5eb9079776c7f81ed4b17ab71737bacef881f3dd4910d97ad3ed6c5ce62d49d78ca644c1b0e5d23034809f9a5e6f8f0731
-
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini
Filesize218B
MD545aafcf92942f28caebcea504d66732c
SHA1bf7197cde178a16fe679b11f7cb591b127510872
SHA2564693186d6da29110c529a1b8d40ec2de141ea7e2291a67eaf1cd6c4721cd85c5
SHA51270a2e9e04167454ee2487ce4601a2f4787283b746cc2a724186166f9bf8c4262b949e9de5dd87ba1fff8c41d7bbae87d235040ec39570d94b971b328fcc2be5b
-
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
Filesize47B
MD525490ff54a1e8c62c09f72e56a72f0ea
SHA15eb30a36266aadddb2b8631acb47c70f2e4956a1
SHA256d0e1caf0b365940198762fd87ab8fc11b25fdd43580a10033320dbfd7f189456
SHA51214abb2058a2d005664af2c55104d2959c6342199558b5f53167c39cc5da7744195e34359306b774a4f21869945d611999a3f6f88126dca051f433a28e2071158
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Filesize296B
MD5d17b989ef4926d8a7da76c3a2863aa16
SHA1b6f7ffe0b8c53c11fad16831d042a5555d5ed4be
SHA256c69a5999c5851b29503843ed8f055314088f205c2fc5a4a0cfb80d80961e9534
SHA512218d4f31967b5dd04bdb276cda50e883580c98667772ffb7c63065a7521887c7e89b0dfeb3a26476f85606b4c9d64c4c7e80c97e3997ad02902a0ed59202fad8
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png
Filesize276B
MD5448b91d84d83eff849fd324d96cc40ae
SHA156f43f94695cb42958c7a807627f82c927ea1e94
SHA256f0fa85a744ece29e3730bff7ccdab1d11e45c6563a6231a8073422db56211a3b
SHA512899c8b27daee7e5ee835d0c7f7e404adb95ccc2122b26e372b690aed8a202b78aced3872fe1c8b3d5176083c83cd375f1dad2479585fd38866302bb0db900da0
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Filesize296B
MD5f84377251da8970497bbd1228202c290
SHA1a0d17772c261b0695f77cc6dac9700478bb2f7c8
SHA2565bdf99b9da0db252aa93d147146bc17ac9780f10a8cbe6c2a14424c4ff04f099
SHA51256d3b71bad726a377166e125958603b1e9d03ce60241f9029f405105a4bacc3b3e8a62e28128efabcb7a52f7b2a722c275b4a718b2ff6f4a5c74cb565b54c8b7
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png
Filesize276B
MD574e5086be34e4829353757ea1b3e2ef1
SHA18adfa2a13483b11abf8ef98a82500dcedf8c5e5d
SHA256abeefbd2748b92c2c45b1120a15b8e9bc1574a13e4fa0c5befbd657cd8d06081
SHA5128eee81e26b961f908c21f2fb2a3da1f7e2857d4ffa2689fa52fa14d8bdd2aecd2e9348be0a5b50be1c24cf46b5f1829c93aec4bca541d79b2b77edaf3436f1a8