Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-06-2024 07:28

General

  • Target

    2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe

  • Size

    98KB

  • MD5

    bfe1134aa647e0eae3fd8e4093dcc788

  • SHA1

    945c30a53c5bcb384cc885f72028c91870a0d34f

  • SHA256

    458a7a345bc015a7585d114b98d3ef9077a571a72ada9b4f07d385b44f7119c7

  • SHA512

    bcc6beb5311a8c8280903cac569259279f73ba4f5e4a722559b366930520597362ee9b45c16d32fc13817327a89ca0d1985f7df00ebd3093da6768f32564e2ca

  • SSDEEP

    1536:JxqjQ+P04wsmJCuxbV4DzANeRBl5PT/rx1mzwRMSTdLpJOM:sr85C/4QRrmzwR5JL

Malware Config

Extracted

Path

C:\info.hta

Ransom Note
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'> <html> <head> <meta charset='windows-1251'> <title>encrypted</title> <HTA:APPLICATION ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no"> <script language='JScript'> window.moveTo(50, 50); window.resizeTo(screen.width - 100, screen.height - 100); </script> <style type='text/css'> body { font: 15px Tahoma, sans-serif; margin: 10px; line-height: 25px; background: #EDEDED; } img { display:inline-block; } .bold { font-weight: bold; } .mark { background: #D0D0E8; padding: 2px 5px; } .header { text-align: center; font-size: 30px; line-height: 50px; font-weight: bold; margin-bottom:20px; } .info { background: #D0D0E8; border-left: 10px solid #00008B; } .alert { background: #FFE4E4; border-left: 10px solid #FF0000; } .private { border: 1px dashed #000; background: #FFFFEF; } .note { height: auto; padding-bottom: 1px; margin: 15px 0; } .note .title { font-weight: bold; text-indent: 10px; height: 30px; line-height: 30px; padding-top: 10px; } .note .mark { background: #A2A2B5; } .note ul { margin-top: 0; } .note pre { margin-left: 15px; line-height: 13px; font-size: 13px; } .footer { position:fixed; bottom:0; right:0; text-align: right; } </style> </head> <body> <div class='header'> <img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAQAAAAAYLlVAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JQAAgIMAAPn/AACA6QAAdTAAAOpgAAA6mAAAF2+SX8VGAAAAAmJLR0QA/4ePzL8AAAAJcEhZcwAACxMAAAsTAQCanBgAAAAHdElNRQfjAwwMJwSFwIn8AAADNklEQVRo3u2ZTUhUURTHfzozmprmZ1pYEmkfJNEmiwwkSEyFECIQpEUboYhqFYHQXlcti9rUKldWBEUiuQpbtDDNzD5G8qM0HRXLRtO5LdJx3puPd++8+xyIztm88zgf/3veufeee18SdimDI1RxnL0U4gbAzxhDdPGCfpZs+49JWTTyFB8iAq8wTju1pDgXvopOliIGX+d57rHPieBuLvLNIvgaD1KvP/x1FiTDCwQTNOkFcJVfCuEFgq+c0he+minF8AJBH2WRnCUph8/nIZVhb2d5w1smEbjYSTn7SQ/TucsFlnWkPxBW6Xc4RkbIoHKooSNshsxRbT98Eb0mtyM04oqgmR6hUNvtrwrnWDa4nOVMVF0XLfw2aPuosBfezQPTmNpiVtFmnpj0W+wBKMFrcPeJ3RYWNfwwWHSSZgdAHX6Du5uWFpl0myqm1KiQrASgnNQQaZFOS4t5nhvkAnbZAbDHIE0wIGHzmsUQKdXkQwlACtsN8ijfJay8zBjkovgBbCLPlAG/hNUcswa5IH4Ayasdzxr5pBbWRRYMstGHYg04QAkH4FbQFSwTCKbdI7mzWVipbMceKtiCCFqO0OeY1caRbAaKOcgOCpQ+WWTyM8EwvfjkTfJoYZDFONqwaPyTHs7LbktlPNMYep2XuE22dfhsHjkS/i+3Wn/SK2EdoE72UeuyGH8rxbbLLjqlkRlb4TAzDo5fIJiOvRTnR+ju9VJuwveC/wASDsD+2h5KUyyQTVZiALzjFt3MsY16mtmqx2mt9BbUw4EQuzpGpVcCLQB8nDBZXmJFDoCeInzFS9ObxwzLmeoBMGA4/QBM4t1IAOHXDi7Zqwg9ACrCWotS8xnQWQCHOGsafzOFOhzLT8NxmoI3RZncULjG1ARA8DHYupxUucbUtxd4ghnw4JI30wdARHneMABx0j8FYD3xCkdefQByKFl9KsOjy6nKNBR0cZRCTjOk1JhrBCCY5r3pZtSS9bZkueSqmljVgPoPDa0Algk4HD8QG8AXph0G8Dk2AC89DgPosFKodvR83G/dtiRzTevtUChP0SCTpBQuM+bI6Bvk51gl96X/FFvzCh9oW0v+H2zO2tYtz/EgAAAAJXRFWHRkYXRlOmNyZWF0ZQAyMDE5LTAzLTEyVDEyOjM5OjA0KzAwOjAwG6lIYwAAACV0RVh0ZGF0ZTptb2RpZnkAMjAxOS0wMy0xMlQxMjozOTowNCswMDowMGr08N8AAAAASUVORK5CYII='> <div>Your files are encrypted.</div> </div> <div class='bold'>AYour data has been compromised, important data has been stolen for the next sale in case of non-payment. But you have the opportunity to return everything.</div> <div class='bold'>Write to e-mail: <span class='mark'>[email protected]</span> <div class='bold'>Write this ID in the title of your message <span class='mark'>9D8D69C6-3545</span></div> <div class='bold'>Or write us to the TOX messenger: <span class='mark'>F9B62A229F748C0211804208C4229133B1D395CC746C3ACBF80255D2E4484F03306DA0FE3ACB</span></div> <div class='bold'>You can download TOX messenger here <a href='https://tox.chat/'>https://tox.chat/</a></div> <div> Payment for decryption is accepted only in Bitcoin. After payment, I will provide you with the key and complete decryption instructions. </div> <div class='note info'> <div class='title'>Free decryption as guarantee</div> <ul>Decryption guarantee: you can send to me any 2 files with SIMPLE extensions(jpg,txt,doc, not databases!) and low sizes(max 1 mb), i will decrypt them and send back to you. This is my guarantee. <br> I don't want to deceive you, I want to earn money. You pay me and continue your work. My honest name is more important than a one-time deception. </ul> </div> <div class='note info'> <div class='title'>How to obtain Bitcoins</div> <ul> Contact me and I will give you instructions on how to purchase bitcoins. </ul> </div> <div class='note alert'> <div class='title'>Attention!</div> <ul> <li>Do not rename encrypted files.</li> <li>Do not try to decrypt your data using third party software, it may cause permanent data loss.</li> <li>Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.</li> <li>The intermediary can also convince you that they can restore your data themselves without contacting us, this is not true, any recovery takes place only with my key.</li> </ul> </div> </body> </html>
Emails

class='mark'>[email protected]</span>

URLs

http://www.w3.org/TR/html4/strict.dtd'>

Signatures

  • Detect Neshta payload 18 IoCs
  • Neshta

    Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

  • Phobos

    Phobos ransomware appeared at the beginning of 2019.

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Modifies boot configuration data using bcdedit 1 TTPs 4 IoCs
  • Renames multiple (506) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Deletes backup catalog 3 TTPs 2 IoCs

    Uses wbadmin.exe to inhibit system recovery.

  • Modifies Windows Firewall 2 TTPs 2 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file 3 IoCs
  • Executes dropped EXE 2 IoCs
  • Modifies system executable filetype association 2 TTPs 1 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops desktop.ini file(s) 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Interacts with shadow copies 2 TTPs 2 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 45 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe"
    1⤵
    • Checks computer location settings
    • Modifies system executable filetype association
    • Drops file in Windows directory
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Users\Admin\AppData\Local\Temp\3582-490\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe
      "C:\Users\Admin\AppData\Local\Temp\3582-490\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe"
      2⤵
      • Drops startup file
      • Executes dropped EXE
      • Adds Run key to start application
      • Drops desktop.ini file(s)
      • Drops file in Program Files directory
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3816
      • C:\Users\Admin\AppData\Local\Temp\3582-490\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe
        "C:\Users\Admin\AppData\Local\Temp\3582-490\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe"
        3⤵
        • Executes dropped EXE
        PID:624
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1568
        • C:\Windows\system32\netsh.exe
          netsh advfirewall set currentprofile state off
          4⤵
          • Modifies Windows Firewall
          PID:3744
        • C:\Windows\system32\netsh.exe
          netsh firewall set opmode mode=disable
          4⤵
          • Modifies Windows Firewall
          PID:1944
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1476
        • C:\Windows\system32\vssadmin.exe
          vssadmin delete shadows /all /quiet
          4⤵
          • Interacts with shadow copies
          PID:1600
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic shadowcopy delete
          4⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:2784
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} bootstatuspolicy ignoreallfailures
          4⤵
          • Modifies boot configuration data using bcdedit
          PID:3248
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} recoveryenabled no
          4⤵
          • Modifies boot configuration data using bcdedit
          PID:2756
        • C:\Windows\system32\wbadmin.exe
          wbadmin delete catalog -quiet
          4⤵
          • Deletes backup catalog
          PID:276
      • C:\Windows\SysWOW64\mshta.exe
        "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
        3⤵
          PID:5832
        • C:\Windows\SysWOW64\mshta.exe
          "C:\Windows\SysWOW64\mshta.exe" "C:\users\public\desktop\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
          3⤵
            PID:5936
          • C:\Windows\SysWOW64\mshta.exe
            "C:\Windows\SysWOW64\mshta.exe" "C:\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
            3⤵
              PID:5644
            • C:\Windows\SysWOW64\mshta.exe
              "C:\Windows\SysWOW64\mshta.exe" "F:\info.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
              3⤵
                PID:5800
              • C:\Windows\system32\cmd.exe
                "C:\Windows\system32\cmd.exe"
                3⤵
                • Suspicious use of WriteProcessMemory
                PID:6052
                • C:\Windows\system32\vssadmin.exe
                  vssadmin delete shadows /all /quiet
                  4⤵
                  • Interacts with shadow copies
                  PID:376
                • C:\Windows\System32\Wbem\WMIC.exe
                  wmic shadowcopy delete
                  4⤵
                  • Suspicious use of AdjustPrivilegeToken
                  PID:3520
                • C:\Windows\system32\bcdedit.exe
                  bcdedit /set {default} bootstatuspolicy ignoreallfailures
                  4⤵
                  • Modifies boot configuration data using bcdedit
                  PID:6068
                • C:\Windows\system32\bcdedit.exe
                  bcdedit /set {default} recoveryenabled no
                  4⤵
                  • Modifies boot configuration data using bcdedit
                  PID:6044
                • C:\Windows\system32\wbadmin.exe
                  wbadmin delete catalog -quiet
                  4⤵
                  • Deletes backup catalog
                  PID:4412
          • C:\Windows\system32\vssvc.exe
            C:\Windows\system32\vssvc.exe
            1⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:3320
          • C:\Windows\system32\wbengine.exe
            "C:\Windows\system32\wbengine.exe"
            1⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:2296
          • C:\Windows\System32\vdsldr.exe
            C:\Windows\System32\vdsldr.exe -Embedding
            1⤵
              PID:908
            • C:\Windows\System32\vds.exe
              C:\Windows\System32\vds.exe
              1⤵
              • Checks SCSI registry key(s)
              PID:2964

            Network

            MITRE ATT&CK Matrix ATT&CK v13

            Execution

            Windows Management Instrumentation

            1
            T1047

            Command and Scripting Interpreter

            1
            T1059

            Persistence

            Create or Modify System Process

            1
            T1543

            Windows Service

            1
            T1543.003

            Event Triggered Execution

            1
            T1546

            Change Default File Association

            1
            T1546.001

            Boot or Logon Autostart Execution

            1
            T1547

            Registry Run Keys / Startup Folder

            1
            T1547.001

            Privilege Escalation

            Create or Modify System Process

            1
            T1543

            Windows Service

            1
            T1543.003

            Event Triggered Execution

            1
            T1546

            Change Default File Association

            1
            T1546.001

            Boot or Logon Autostart Execution

            1
            T1547

            Registry Run Keys / Startup Folder

            1
            T1547.001

            Defense Evasion

            Indicator Removal

            3
            T1070

            File Deletion

            3
            T1070.004

            Impair Defenses

            1
            T1562

            Disable or Modify System Firewall

            1
            T1562.004

            Modify Registry

            2
            T1112

            Credential Access

            Unsecured Credentials

            1
            T1552

            Credentials In Files

            1
            T1552.001

            Discovery

            Query Registry

            3
            T1012

            System Information Discovery

            3
            T1082

            Peripheral Device Discovery

            1
            T1120

            Collection

            Data from Local System

            1
            T1005

            Impact

            Inhibit System Recovery

            4
            T1490

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\PROGRA~2\Adobe\ACROBA~1\Reader\ACROTE~1.EXE
              Filesize

              86KB

              MD5

              3b73078a714bf61d1c19ebc3afc0e454

              SHA1

              9abeabd74613a2f533e2244c9ee6f967188e4e7e

              SHA256

              ded54d1fcca07b6bff2bc3b9a1131eac29ff1f836e5d7a7c5c325ec5abe96e29

              SHA512

              75959d4e8a7649c3268b551a2a378e6d27c0bfb03d2422ebeeb67b0a3f78c079473214057518930f2d72773ce79b106fd2d78405e8e3d8883459dcbb49c163c4

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe
              Filesize

              175KB

              MD5

              b43a07a463c9ad9d8419d986dc6211de

              SHA1

              8c8db898325d2d3bddae171773ec374d85fef90e

              SHA256

              e0d6fce3bb1d440b19a18a3deef77ab4b9e24dc342ed0139492328d638178e54

              SHA512

              6036525f03bcd817b80283dd18ce3f30fd09f2403429c056c1f62d59f44179a9e0061bc72fb3921f56393cad82c8c6597b7929d87c8abe57991e595956ff7f73

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe
              Filesize

              328KB

              MD5

              3f08f2e23dc44990f0ef9b9869351758

              SHA1

              8026b7e51c8b3fceeaed6d1c2a6671b63249e183

              SHA256

              75cce63070db3d924f709518399ada2531d12adec577bff86f23be7ea392bb3d

              SHA512

              086645cb6611bb2c32b73297b35ba642d6720c18e4da66cad9e1e5902aabf631320407e19be9920b1dd264299ba57c1bd2aa6310c2f9e08c997b2698c4aae68a

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
              Filesize

              10.1MB

              MD5

              5e4aa8c73f5f7a7c7a69ee473a46a4bb

              SHA1

              8fcbca50fd2283d13b410f899be7038cafee4f6f

              SHA256

              0fa14838f3ee531e0e76c63b6a6727e4ad5096ac2b1484b8d14b69a435730dcb

              SHA512

              77ed8bfd7f0e488aadbf3a14dca25c4980eeca2837fca90ca1ddd4ee05e1dff90f20a27aac7116e615377a54225991d3a7fbf61868b3aeddaa539a52b1daef3d

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
              Filesize

              3.2MB

              MD5

              a212f6d25c51fc713556f3011fd09902

              SHA1

              d6281fcdd115bd7144fa0142d769c8c846c8a8f5

              SHA256

              886e68c0b7674ef42076fac17a0667b3dc079b2a7b910ac57d057ec7da0eea91

              SHA512

              c2c4d93cef9179f8b11472e0f601afc51f1a612e5461ac05a84560446f9dad88fc60a0ddbb138ea94f86238983426750bbaefaa30b1226b4e75cc6e527b571b0

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe
              Filesize

              86KB

              MD5

              1f2faf4cfe37cd2c874c9646121c214a

              SHA1

              acd0b74b2a39f2b58c2a45c1c4d29e0573f7d638

              SHA256

              666a4b362d5a895ce7e20c15a8743ef6d838bcea568619f8d4a607338617c1c2

              SHA512

              2ca20ca809338d248b76ee0fa30789ab173d8176f7c0d957f3ffedd8780643e7ee89653aebc7d2c1059ef725494f402b51e36d87f625bef3665488ba1c04cf13

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe
              Filesize

              6.4MB

              MD5

              fd27ca1216dc35d57ff1f3f3bb3e7b04

              SHA1

              1cabf7d7beb1d622ec5e05594e3068dfd48c0247

              SHA256

              250dc97a483c37e9e29b04496b5b605ecf1cf6192ea96e289d71d004fda3bef5

              SHA512

              599225099c3362301895133066a7741ffb25436b64a67cd2717ea71b4cee37df379100736f2d5d93675089aa3b32e715495c5016c41334bc4a1d752624dafa04

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe
              Filesize

              183KB

              MD5

              cf9ffb7ea7001f26fcb3d5f6da2aed64

              SHA1

              479e5310378d1e773e4b38cedaa5266eb82cf79b

              SHA256

              a4a5394541eb8a08d54a354f9cb445e577e54d22ee3679391f9c0ca07672fcc2

              SHA512

              1af42e32c203aec582a0f561297c1338cdf92be5b46a02984515a6c4ca5cf45429c79972f8e1ab5f1a2cc0162ea5e61995f01c3179f303a5c95419e360139736

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Eula.exe
              Filesize

              131KB

              MD5

              69e4ba1f83980700b6676a20dbf7b3d0

              SHA1

              030edea5f616be1bddd9af64a23aed89f5e14d5f

              SHA256

              b5ed2baef8e4752fa2f84d711597c0b9db1d501daa501067c5345d8cc2c73a6a

              SHA512

              abcad716ffc648bfb6380125e9e1f2f728e39b380ed6757961fb8f4c3b87506e70db0f7a0dbc69636b6c7c75cedc978cb4e917b63db1e22f97b29de9e3a72267

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\FullTrustNotifier.exe
              Filesize

              254KB

              MD5

              33ff04415f2d8f2a29ff3908429a3c23

              SHA1

              294ea591d235a728e5023397e1aa32e7f9cce2d8

              SHA256

              e3fbb185f7debf1ab7dbb0bea1c19b69473806855bb8efb267606baa3b01964f

              SHA512

              99b14b21d06ba857b43d9b6db6a11c6feb95e6f279e8f7aa182d92a2688bb2f946c75cdd7b4849d937944b1f164e22f1ce4cf1c6352367b47b22cfc800c33d52

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe
              Filesize

              386KB

              MD5

              ddd0389389450f55ce1a1154fc6caca2

              SHA1

              7dde57eb3afe8d0f1d413c278e342604e1df2427

              SHA256

              aea9fd9958934efe57f14b2e375af4bea0acb728a61a8ee3664efa938cb840bc

              SHA512

              e6e3efec88f74a862371e3a20404ea043f12b1a86f84db25dfc3eabc185b32713b8c168b7ba285fe2d7ac8bb1900ba421a4b1e49b78b6eb36a09478afd7bba38

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
              Filesize

              1KB

              MD5

              eedd2d13e3671d589714446755b78b38

              SHA1

              2fdd23507187a259f5a7edb01611a37b6b09f4da

              SHA256

              467082e15a8ddefd51088e12a6189f9923dadfdf363ac1b0448ec43dc483cb3d

              SHA512

              ef47a62ce6ffb0c5b34b2c6d72f5874dbad4109b98aaa21f56b8b2d83471f5ebf983f6dfd889399abe4fead6296cf2ca3f409a4aa4badad8cc3c48f688323837

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\remove.svg
              Filesize

              1KB

              MD5

              b651e9101be833e87337050028831efd

              SHA1

              ee594ba38a6324369ffc7b4dc89407d3436e34d9

              SHA256

              4717e5fb82c0ee85a7c97d022f410990a62efa2492070e42385cfeab67afd619

              SHA512

              3552858c2a688c95a76c0bb8a6a76b119b744b2e8ae7e7f30135ccd8a145318762faa52c1783a639fb179056317caeaed20c15f211db1d45bc957bc3ce591aef

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
              Filesize

              1KB

              MD5

              1bf37c0336c12ccaa1c62386acacc858

              SHA1

              f1e187c79588e4e9fce931997443d7e5cafd1db6

              SHA256

              a9044f3c6877f4fa6789bd90f11813a22696bda53e0be17bf52229b70fa87673

              SHA512

              f75100874b1dd43c49f54a9aa4621e8bd1efa84359ce44ece2444b639c7bcbddf6564f6c4be089f5d656550c7293b9f5ec4a4b20880939fbeb5ebc21e30866b1

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filter-default_32.svg
              Filesize

              547B

              MD5

              81cfb9735fea15ca8791a3c34a78d992

              SHA1

              9b4962166a47f5edc62e5fe3c4f8772446db9296

              SHA256

              3d89171c24a889bce28f04adb60f08a141584b7c345b158536a72a8070c252b8

              SHA512

              f6ac853f4012ddcb29e5079ec00bf058343af1a6d6cedbc9613056db0575c77e964b0864c9693a6e02a525d5e13ccc54e0e7fd938ea39c3d2c6005db959b346a

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filterselected-dark-hover_32.svg
              Filesize

              642B

              MD5

              55215e8f92d35f26cca06fa9d5d221e9

              SHA1

              994838c8df5921e3828749a7703ebfa8383e43b6

              SHA256

              e94ac27227c8a25c3f8ede219fd80ace01e7176a12111125b31ae1dcddd487ae

              SHA512

              7972d3fb8c305a1b41f3ec4a618c9904c1e655fc757f1dc83f9d9041433f3c30e6708ed3d4fb3166cc41d9773df3f159aa44333f76fdde28f317676046bc9c67

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_newfolder-default.svg
              Filesize

              552B

              MD5

              2807924fc18c958c38a7004a5dbd4091

              SHA1

              85534040543c3306284e6a475999c46249a35e4b

              SHA256

              0345bffb28f80f4d0ded1a2af09a337b18ab3a80c68205bc8321a6ad4d409500

              SHA512

              264d29c6b920b3005ebda1fdb0e0ee6e17059c69d63969c61ea4b5c5464022166ccc04b2c1f69b91052c3e3dd551a087e8e5379d2a62c452184a12b278a8ac3a

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reminders_18.svg
              Filesize

              1KB

              MD5

              3f16cc51cf788a50e6cc1ae60897bbf7

              SHA1

              e5a8c8f5227ca6da79589192892e81b6a3f43686

              SHA256

              30f1d12f90b61f22130b22667f722aeca0aadd59ba3e19d866d72a99a3f0ce3d

              SHA512

              17686bb9e01aa108b9b62b33bb70bb8aa35e4d88199281aaacbc8d8da7d54f1f353bf31a109dc22a4e404780ece4cb3d23f0ec81f80e9553ef060011e568134c

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg
              Filesize

              711B

              MD5

              cd5d2472a2bf9ac7eb4e15146b30bd2f

              SHA1

              bca600423f99b87df44fde9d96ff874017037afe

              SHA256

              038589c0f8f0b9fbed7fe7835de0237de4a28ea404078955a78c0b8145fa323c

              SHA512

              dde83047b85cf0afd4ac77c9f4e850ebba48a1e1d581ed78c30733f58a9d5e2e22d34a2b2e57e4527f3c314f84922c3aecd6366052d46e0d6157990ed888a27e

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_hover_18.svg
              Filesize

              783B

              MD5

              0498cfb8aae1383c049e8ccdd85f3abf

              SHA1

              c5fbfcc70b441e91a5ecd23295c745aaf076aa4d

              SHA256

              ad125b854735c81b5782a65b5b006c7c991e28688b6dd8e5998f432976b9223c

              SHA512

              113f19bf726f79473ae2b4406a76676ec0bc4709a26f374aaa3bbd9d0b5790ee4fdd8ebe1a3ab68995973923ae33df7c1c6798e93bf060643c14acfabd4e9302

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sortedby_up_hover_18.svg
              Filesize

              979B

              MD5

              30c9bd1aee3794fd46bc99fc2a359212

              SHA1

              9817640da0b98babc461d277a39b323dc9a76cd3

              SHA256

              4b10fc416763ad7b65a6d6fb3c0016505ec5aaa7a117021a26e4dd6d11fe7d1d

              SHA512

              bae367b7555f5f7f677abbad1dd548225c2580ffe21bcae5022f8eecf8c97cfe8f7813fd86c31a7f9052c174610ae9d2ae21ac22b381701975492e2386f67f94

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-right-pressed.gif
              Filesize

              56B

              MD5

              e3c4dd21a9171fd39d208efa09bf7883

              SHA1

              9438e360f578e12c0e0e8ed28e2c125c1cefee16

              SHA256

              d4817aa5497628e7c77e6b606107042bbba3130888c5f47a375e6179be789fbb

              SHA512

              2146aa8ab60c48acff43ae8c33c5da4c2586f20a39f8f1308aefb6f833b758ad7158bd5e9a386e45feba446f33855d393857b557fe8ba6fe52364e7a7af3be9b

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hu-hu\ui-strings.js
              Filesize

              3KB

              MD5

              0d3a12fd3f68decc694da04b57e61d8c

              SHA1

              f73d4d591f6ef0b2b04fc90d2e840329f7590743

              SHA256

              ee0352f75df1009fa6f5eaf323a1ed55c127cc679ac6b9de70b1b3f8dc9ece76

              SHA512

              2c58a879d4022b441056c85c301ce26401da5f7bc9619debd35fa3bd98b5f1cab8f21e2ae5a177865c64e741dae18f39f99fac1cf00c468ba0e281037d5e883c

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ui-strings.js
              Filesize

              1KB

              MD5

              68b6f0644d50595a97c9fd60b8d8e697

              SHA1

              a4d0edf9264ce1922dc419c7f3b3cedb2814bea7

              SHA256

              bf9b3f1f9a3a163d41b1b20a2c410355e6ee72ae97725a7bad97ad23993b0b5f

              SHA512

              d1a26cc27c302f06419abf97507c0a4d06729aeadab615acaaac0c3fcec6d7715e10642121a4d773ad3d5f613030728e49fb3d07303fad05f7a342352ebad003

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover.png
              Filesize

              388B

              MD5

              65c9f3fb24b80d8c470d518f901b9c60

              SHA1

              b9521c39944357d4b55b91f9f3739575d1f3bef1

              SHA256

              8de76ee7eb6b32c307d4a46a43ac55bc15b917e2a24d36c3d001878a97fd39d6

              SHA512

              6572d65abd587055a69980558b2568266ff76555faadf3ddc93fa65bdd7a009a2fbca10f37f44c27ae889d3de99a3673c2b9ba6e6456242e951703fa32d9c636

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-il\ui-strings.js
              Filesize

              1KB

              MD5

              a778c47dd8521d6a12093b3e97ed8474

              SHA1

              2099d940cc672373884e1c622bbb606e9e9438b9

              SHA256

              d5343776747d802d64faedd9954d2a4bf555a6cd85396c55c39a8fce4c5353a6

              SHA512

              7c9c9b406c1b79b3298e975abb3f64927b6beb9e8784b75927e19ba649936c19f04d958d07499a5d5c52049cf2d3600e32f6f437c98b2946a977ca82c71e7224

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\fr-fr\ui-strings.js
              Filesize

              1KB

              MD5

              dd24e91615f1963a5c64bc9878a0a8d5

              SHA1

              407ece3322d57d16a448b5522d4f29229f80b8b1

              SHA256

              4cf9816ed1062189ff0c8d427fba5e912cc68fc9af76cf7f08fd255977de3b33

              SHA512

              a88d5e6fcfd998b0abe79b5b314f3f83f424be9447dca01e1a64a3e7313eb247baa894c10c5758c6788cad27582c09207d00d2e7bc41515e7f1751e05aa812ba

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
              Filesize

              683B

              MD5

              3f7323acc829bc8b3799148d439b3d47

              SHA1

              3d3c540c4080462a8013d6db9383ad69606779e8

              SHA256

              d9de646d51650572b66a6cf8a52ad1efd46b7a47830fa7972da0bc05baa2fad0

              SHA512

              09e2a175dd874ac369331fbfd863be20c9ecc005bfd6c7eeadac071804653265e4f7195d70058f2f73951a6a6e202fc96930f2ce71c2d815b228edf01729b559

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\root\ui-strings.js
              Filesize

              1KB

              MD5

              fb4aa89fb89bf94d0590a3174d1193ff

              SHA1

              c3812f2105099071c24141a994a9d5087199dbf7

              SHA256

              655a3ef0465a9f30fddf25f4dde0c19a05c6f9069b83961800c1944165955273

              SHA512

              a494c0d9faf3defa9ff320421d0c00e4e39845f7e998c6a06c50b5e7edbb1ed7a948dda23ace06a3433843615553d2357f1cb04acb4ad1155ec43f1d07511524

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png
              Filesize

              1KB

              MD5

              7ab2ac51d33778dac850c5dd8b4ba45d

              SHA1

              b3f47f20c438aa488fe835e0145c014853ee48aa

              SHA256

              ca17d6cc1f7ab317c34a7cb767ad017163e71726ac648518679c6b1c59fa86dc

              SHA512

              c14ac0ad209625e0acb2ca9e0afc5f6c98901b01f92b675d073b72929455f47ccf29cbfdaa248c602b02fc2bce484c56753b1a54e66f6ce9df2ea57bed88962b

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\hr-hr\ui-strings.js
              Filesize

              1KB

              MD5

              07bcf4e882ae521ec6ddfd0bb2a608db

              SHA1

              88e2ab25dec6ba9fedced9bbd21da03639da9409

              SHA256

              bc9df2774317cdca8e5a702f249a6994fa3b63852e7749124e82ef1f37b89aa6

              SHA512

              ceafee63fb03e94b418bd87c6af91a53c9bef53b86eddb51a7aee77d8ad5e6654045da12c3c28f3ab4486d2f6f135f7f834790991037708b0301085f62e22fa7

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\root\ui-strings.js
              Filesize

              1KB

              MD5

              0ec670fd70f5e89c3d2727df9f2a5398

              SHA1

              d19c88c8e11361d4f29719518b8543e0ecf5ff09

              SHA256

              8267479623714339b61159b2f8235b15a38ccc1199eff859e5dc13359f8711c3

              SHA512

              a429234afdc29df1276238d3e329299a6fb5b1ef6044429c1acd8abb95c0b76a14836b47805c5d464cfc95978f5e3b10eceae6c26a2964e2c352fafe1d7dd6f8

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png
              Filesize

              445B

              MD5

              2a78f84427d1d591409740722e60d793

              SHA1

              304f17d9c56e79b95f6c337dab88709d4f9b61f0

              SHA256

              4eae979bb805992739f77e351706e745076ed932d3ef54dd47ba119c4c2fb5c6

              SHA512

              d687c646bba8b801511a17b756f61a1209ea94938940fbe46d9e4893f14606f9e1e5ff468ba4a77474603f5cdbe0cb9df3d24767e5c9ac81a0b373dcf4a4f3ac

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png
              Filesize

              611B

              MD5

              c7fc95def1d53bd3e747248ecbd3cd5e

              SHA1

              1b251f02465f9c7dce91aac5aa0679a3c34318e8

              SHA256

              4049b739e6322c7d7caa241ac41c8e0b1f2893957204a910c9708c7731a7a8b5

              SHA512

              f4b90435a3b250c1d3dc8df9bb4d331dfe9b1c0212eeb1768073afb81b3915fe61a7c4af151c8090565f778dbdf1f4fad7b5f545c9a21b7782cd7671be2ac96e

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\en-ae\ui-strings.js
              Filesize

              1KB

              MD5

              1ea3b76135bb4a589027d6243075a936

              SHA1

              2951fdafcb862ef53fcf213572368bd5e08094ad

              SHA256

              c960c819e997c1c9d080235a5e24e65059b63cf66b95ff3da9a44773ebf81c1b

              SHA512

              3c10075e71d2e44535e19c8660bee7071a110d07dbef67ccc4cc94c45f93afd72f8ce6b24be31e6193549823b7db204e20950e5c1a075ae159c39682db295d27

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\[email protected]
              Filesize

              162B

              MD5

              6cbbe3240a203b0ff387d9bbdadd49ef

              SHA1

              2c65f6ea9acd8d164ece87edf2f142942d8cdb42

              SHA256

              7b3bae54e7a2931a1957c1ca23189cdf913f567e92af15089f033b99e33351f1

              SHA512

              cdd8e32fdf610a0c00f7e8093c98d421f6c60bb75be67fe0a22ca1b5144351526a2b56ffd955f350039e4dca823e45a3f1f4595c3f9f209b3de28cab972cd140

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\line_2x.png
              Filesize

              550B

              MD5

              b513ae819f7d8d10fa4f6cbfdf055b22

              SHA1

              b4228971cceadd4a698f3c206d8f4bc24a37f991

              SHA256

              25778f162c4243167f8eaa876f1b0619e67afc158de7805600471a563ec5e8b7

              SHA512

              c11266406d79494f7d74f8f8a5f955e2bad14b8924877e882fb3e7cc7442998cf6e7a9be3aa7f1a945af8bb2add9dfcdec0ef54239f6ee80748d77444dafe6fe

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\ui-strings.js
              Filesize

              1KB

              MD5

              b17a6a8826832fc2e1098d0286242861

              SHA1

              8ce2bb5944d61be2b628fc80ebabc769768e0b48

              SHA256

              82a1cc52037ccd1ee4a73cc41b86ef4c9b45db28025d56105566bbc9f06bc41f

              SHA512

              688757cebb6aaf1a9948ce1dd30318ac2b7afb7a47938e6eecf1bbbc1be058ba78744c208d71a9747ae514242b09322489ad314119cf612a7e4a717907521962

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-ae\ui-strings.js
              Filesize

              850B

              MD5

              d3e4c2fefeea6e6c467df305f7a8f3af

              SHA1

              a4468bf4d5abcb4d720b0fefb396dce5864e4717

              SHA256

              e9288289beec2fe3b6ac24c1311451c8d079786a09515b95cbf2eda7f87f0b22

              SHA512

              b81a9d38a4a6cd54c2081289192ce7aee3e34d71f834c9b94eac8cd79a5cb90a0dbd3ee0da89be68e4fb69a82903c658addc272a9d70d8f8f8f8cff5c2c18f10

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\pt-br\ui-strings.js
              Filesize

              857B

              MD5

              a3f07671642038caece41ff2a52d8673

              SHA1

              53442624b01b79a3729a23d4f12efc8dae4b1002

              SHA256

              088d391d696ec15140e7b4dbe6fe17e95296af9d09c7eeff17a0a9c241925b89

              SHA512

              5d1ab4b072eec924d13d760da6aa958cc81fa58cfec3de8ff239d131d37b31cdd547eac0fa5ab34c060f0f28a2295e071a1a9573815541c5b92cf0c63f11bdb7

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\tr-tr\ui-strings.js
              Filesize

              856B

              MD5

              74ca2c01b07af0dda4bb39ac330fc49c

              SHA1

              7cc7781cca7798ce0940fe9be999e85f8b5064e1

              SHA256

              ab9ac8d62fd064748c921e6bd4c123f5cc8910a384d1804bec33ffe27da27c4c

              SHA512

              cd71201d364c7cfc9d317f091a9dc318d77bdc7340ec4abceee2fa23e3f58cfb1a8f45b5216f5ebb40b3738fef28eeb37717b2508aa1369316da6b7c82c510fa

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
              Filesize

              1KB

              MD5

              df3b4d35decc08d05ef8ee0644ab7274

              SHA1

              6b0381b9ee40dc8470a63218e5cc5feb579f7334

              SHA256

              e27e5eb93a24a2d866e30bf027e4f0c3da9fae8968cf5eb69446e7f668356164

              SHA512

              257c770416a94f5b79ed837fa0f5e7926cede3ce06c1a9b819c1ca77c645f37bd366564cb028b0ba6afc5444aa5ac774c3af36cd7c108164d1000254cf85c94a

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\css\main-selector.css
              Filesize

              802B

              MD5

              651bcf535ed50ffa7724c8751bec1a66

              SHA1

              5758c4862740517ba28026c298d1b3a61f43716d

              SHA256

              359f38eef400e2fa3924a3258652e74ee19cd46cb92e47bce91f1194fce25e9e

              SHA512

              492b73f1622e8a1a064141a2edbac9fb29e5f604b629b063fc7251289d237e50721e1295b4f3450322fe72f01b57561a79f0ad4b3a20290cf3214ccf0204d372

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png
              Filesize

              179B

              MD5

              bec4473fc43b77e28e60f89da4e29c00

              SHA1

              d5dbc7c6642a8a23da14f952a0f64fe874e8191b

              SHA256

              5e06bfa9ebccfa3d8759270620b6860f0b92be9d69ef7d7802b78ee5b5f07f96

              SHA512

              ff2c101c1172e64481be5e98b2216d5eba93b81210a1a67adecfe05bcf37c3d965c06b368ddc1ffb7e4187cda0373720f6a27476f036a41517762d5cb3729aea

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png
              Filesize

              703B

              MD5

              39e7048d412b94bb2dad145a2daa5875

              SHA1

              08778bbd84d9411f2e531867dffe45fee5d60d24

              SHA256

              4985216f1f370fff03c45d4a711c18b3f49165f8278e6cfc231bb38b920095a7

              SHA512

              65803d69def3517f0021a291748b55cb5bb2e8437732e6cb9b99b1f778f766fbff2c484b664d16ccbedcd51c14f89e99cd5f977cf97d680eca78a9d4f8b87fb0

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-gb\ui-strings.js
              Filesize

              823B

              MD5

              92f1f77de0ce17e9486d53787f69618e

              SHA1

              41198fdd6a18321c15c3d4647962e687fc036af6

              SHA256

              4ecb5e390829b5b11dd02db2f22ac1349e32a24e5bd3a8489f6fb5fb0f07eeb6

              SHA512

              b389c8364936fbb96a407fb1a848254fd8b7bcbde05637ac1acfb48ba0b30e887dd44b2447e1e3eb75a902241d67571584a819927cc8d0a91d325f5df79f12ce

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js
              Filesize

              1KB

              MD5

              72542b122d453927f3d6c59552165606

              SHA1

              6e2b7f049b60f10edcdec06f357114448c0896f8

              SHA256

              3b17f8b83bec3e72acd0d014f58e7de206106a7644bf3293f93c7456ced47419

              SHA512

              25eade5c88cc35325978ba2e103050608fed4330a1677280eb2e0445946a3367d26796ca1233aa6d7ec4c87f04faf7706d82c72b3f3485d80c18e088813f7a1f

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\dd_arrow_small.png
              Filesize

              289B

              MD5

              3d55e1e012d3824e53e84d404a6e2f2e

              SHA1

              9983296698d4e2736faf1c529e8d27f8071d7939

              SHA256

              6559f403524ea6ef9bf2e1d0bb66d1af8152920fb002ec2c4ced993083124a88

              SHA512

              ec75d4dea30bf7567b2f6e30ffed408815c57680a38659f6055d770c85393d8a5678d38a066ceb7fd0ff9c5ef49cf9fd73d7e8eae5a9a83360a41ca74343f576

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
              Filesize

              924B

              MD5

              421cd12b43e660f10da31bee36e85f4b

              SHA1

              b568bb931d5bf4b5805d20fc339b06f9b3763c9d

              SHA256

              ce7c16adff608d624a412164fdc692305fb461f4b14f9167e6efa78dbbad12ba

              SHA512

              f56bf5a7a713cbf018203c24a7f9dd426a2cf018cb3ddf9e27f3a7765be3571339421fa5a2cc68f677eb4929a2a2835238a723db4de07bb0634e3f151878ac86

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\tr-tr\ui-strings.js
              Filesize

              931B

              MD5

              7d8302df4582de342a31d0335e979ae7

              SHA1

              7a3e918e23dc8002dfbe1695f8e8fd52db995d1f

              SHA256

              899ad5e0b3501d7e00d2f3bd3c7729b4223839e8629c61328db0f818ba0870c9

              SHA512

              cbc23b3285f6d8d72221d0fc05ff59336402005e7d3f50d66249ef6076648ec2e22d33ed64f5436767c123f59d37dae45270a259153ed98b885f9c43ec9bc2aa

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\fi-fi\ui-strings.js
              Filesize

              1KB

              MD5

              0900039f6502c5c4418f5b712f0dc94e

              SHA1

              cb39e28be0988298003a966ac208c54f83a6ae27

              SHA256

              7037318dbcb8809fd3d03ab0293d58666df18363f0144ef65b738ca3fbe028f0

              SHA512

              be9fc36c81963737569c65e4f295f347585bcec88b4fa6ef9da1478f4e0f947b64b8ccaaffb816a74216f713060ae0a56f58c3bea1d12b16bb8488a7663db391

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\pt-br\ui-strings.js
              Filesize

              1KB

              MD5

              35d5c7b80ed270a94872c0e56a6c59c6

              SHA1

              bbc4ed04ea6c922213d7cc19c62c3c4cd23b7113

              SHA256

              5c03e31975b96b3d151d9e034b884cab9c6fb29576d2b5653c375fc5661b6dd1

              SHA512

              57ec341f6ff49f24516e117d5c0b119ba4c62dc0537cfcaa15bbba248729c06d29ca224462bb331c44ff1b3abd724df86d0b2ec473ae9f5d54e31ae2002e8bdd

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ar-ae\ui-strings.js
              Filesize

              855B

              MD5

              29dbb24810bdd7f802c1165f8bc3a714

              SHA1

              9ed5ed2ea58cb6d9196e8d88fccdd8f0d522ea47

              SHA256

              c9fdf06266cf9e6d61f7989471abe569239a93cc2c0f65a7c596a81af8d6a67f

              SHA512

              3802320bcf7b20a6656460456d5b03ac4f85e4572d7530518dcf99f28162964adc211c5adcfb7ace603b6734271581cea26c9e85821b88b1915e13780a19ec24

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\eu-es\ui-strings.js
              Filesize

              851B

              MD5

              b54b9c5d611b062aea9d8ec0d192335d

              SHA1

              a6a96602b80181ef494a0da49dacae1c44f7c739

              SHA256

              d70a13e9b9e9f4026679200872160d667979bd0ae57e6527d44090e49bbc2c83

              SHA512

              e56e4a0dba26c3bd824bcd397d495249466a3732bbe1466f9ed1c23ec3a25d79e44e360fb5ee5a229fb24d6961ac32a2a57d0a29fe669e767bd33b956f57ebf5

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\hr-hr\ui-strings.js
              Filesize

              849B

              MD5

              7a232b079f30771ada44ab6a1843ec14

              SHA1

              72349db2853443af021d538be9417fe32369d2ab

              SHA256

              e33edcde1654c47b3f834797623932ff5dd99a4331b255b60452d69d61ccfb4c

              SHA512

              431073f497196ad03ba92a8087aa6c50717ae137b05aba341cd8f7ec1705b46f2878b30455c10d7339f89ef16022ca5d054b0f96e5956ef0590121ad8e1a6638

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ru-ru\ui-strings.js
              Filesize

              852B

              MD5

              3b8883ab58438b245c89bc76ee848752

              SHA1

              7b01b457344fcf92362d14247f2c389ed0c89b6c

              SHA256

              b3b87c3ad568de5a1f07702392e3bfc76f41a47b2fa1d710198406c3c5172697

              SHA512

              200a52dd5e9334f2c768fb2d152a82cfd551c0991eada79ee92ae41e8beb82a1eac2d90fdac2d9741afe0b7edcbe046cb92a6cf339d25709b53d51f5feb55b1c

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ko-kr\ui-strings.js
              Filesize

              1KB

              MD5

              edbd91ead174c60fdacb765349ea4fcf

              SHA1

              e55660206658be80e2033a93abd8854653246eea

              SHA256

              dfd68e26d32c27e8c7d096cd558b12da3228019525baaa2d4b32030339fb0b6a

              SHA512

              9c664370c6c102a0e6992f2fe711e7fe7f6ac732a8562bcc1839a0d99d828e4ab0b3dc70f33f3cba444d04161d0df13b70e72b9079c5aabc7a85543168d58854

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
              Filesize

              1KB

              MD5

              ffaab524b0c94fd06a44c1b5b683e0dc

              SHA1

              17dcce5e4d3b9f718c902863652cb67e060e2f3e

              SHA256

              d0a34414103960973357a239952bb0fab5f988ccda1b67ff8e6864afcd806272

              SHA512

              a7ecbd3e9656cb0fc1304b4b86980e97680c73b673c4284bbca08c4a3f3ade0699a7de61f0905aee9d521da4beaed61d3ec943090ecc44833118f1f5a29318ab

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\sv-se\ui-strings.js
              Filesize

              1KB

              MD5

              5af99e838bada8e34b660d7fcecae2bf

              SHA1

              ead4e402f4696ede69adb3e4cd694e7d52925844

              SHA256

              e3f604ce27fb93d417b9e8a4a5f10f6fd17b59a76aad9754ea0cc5c56b31687a

              SHA512

              e69f6f12a51382491b4bec6f19260df249dc6dd9a33fc590a90a055baa5f6dcc80894e2c65ecc7dd0d10040c90740dcfcd2f98dbd1f2fbd94c34941897f6ecd9

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
              Filesize

              1KB

              MD5

              9b4c8a5e36d3be7e2c4b1d75ded8c8a1

              SHA1

              1f884298931bc1126e693e30955855f19447d508

              SHA256

              ad47fd9e87159d651a53b3dfba3ef200684a9ed88c2528b62e18f3881fe203b0

              SHA512

              e1acc0b10c92c2895fc916fc8feead869e04315e5e6e279f8e61b344545103b4c9ff808c9ca2121d1b013879071364f677da128caeba89bf918ec2791e5ed094

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
              Filesize

              1KB

              MD5

              45ad813c887294a1c5c88358f6e6fd12

              SHA1

              45266d0bda31888b67b10c601d303caca8786d30

              SHA256

              91ed5badd0d99f45c65c0ccdec04fc59fffb1f6d055a4d2722dccde82a6bb73b

              SHA512

              b06ab5889fdf50735ff0c3cfcac3e526b9f32d694ac631e7c2a06eceff357f17e92540df5f84426f8e8f75726c1e7df3592f1620728b70a4b5290c9e49e377f8

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\themes\dark\adc_logo.png
              Filesize

              1KB

              MD5

              5c4cbc56377969e41dcf39d60690feeb

              SHA1

              a20120d0d043af4d3b6a72db517ab8a623b3febc

              SHA256

              c0601bc1bac97e69da3ef3e2898aafe64aec5ae4f3ccbdb7649471f76da4ca0e

              SHA512

              4accc91aeb47949f1137ac69a0740a25c957853f59ff8d18077e64b1a3262488b71fc4bd45714075a0652328e1a49a602c7950b86edabbbd7e5abbd9000b705f

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png
              Filesize

              2KB

              MD5

              a7a19c86ac01e03111c30032ba417b55

              SHA1

              fd7f42ef37d82cf1704b65762a8bc6b4a868234d

              SHA256

              494032a3293df271c7cc5d26a5753acffc5f6df811d024e9b573f2fa380f3591

              SHA512

              728d4755dd7d21c5ca285906d5f043728fd089de42d2fd04beb514563224104f7672e5f5144e4ed68770b933dd1069d76b26d140eb692d83d907176330f3f6dd

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png
              Filesize

              2KB

              MD5

              f2f1d5a683617b2bdb6cb0b1eae67135

              SHA1

              3e0dda160b0f8b963dde8036b45aabab5d86504f

              SHA256

              96497e49c11ebeb0f73bc01b033b7f45cd9f8eee478176e11b1c7342efa63569

              SHA512

              cc9688ee19a6391296abbae9fb1422a6d72d87b7abe8552e860eeb092f8cf7e6864a7f06dae6a60784b77353c38103abd3632492f8b33b7b3d900531cdb673b2

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png
              Filesize

              385B

              MD5

              4eefd60f439096ed98b6d8a585da12ef

              SHA1

              75cb70498807b0c823cac760e00652842c1a63c3

              SHA256

              e743d6195ff2f42282e101f9471874e8df79dc05a69ca20abf22015d48d28c6c

              SHA512

              78241e2336f4ee826719d5adc70543db0f0767a1660f723ddfce72c170322a13c0f3c547eaea6b6cfc47cdf6d8e5edcaff4bd003cbf3eb9d3435bec5158fb8d2

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png
              Filesize

              1003B

              MD5

              5991993dd41d6d2b062d58bb70971e0c

              SHA1

              1a75ce12ef1c4cb6a85225d0bf4f68d4a3edfce5

              SHA256

              bd66e8f62d34f70917102405af895c0b07b79c13fd2d1ea65ebfba3bd4853aeb

              SHA512

              75511589b1937aca668348061728734718d02065ae76446b61e3292834709e3b66f2a453717fd593a8fa1db92ad7b97af03f7d2e7f5538716582ae7d8c11e09b

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png
              Filesize

              2KB

              MD5

              6018a4862e3cc6b434d517a47858a2bf

              SHA1

              23769e9ae485bb2c35630db9a6ecc8a40c2207cf

              SHA256

              fde09d85ac7ec84dc0b5f2bf1c1f935b80a3e45dd9257af499d412302602f310

              SHA512

              4fae17ef027649315cbc73ea47a2fbdd8c8c05b9d818af5b41439e9e5fd81d62ce13f6ad125a2817d0bb4b24a831358803c53003628520cb9c2a8376ac8e1aa3

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js
              Filesize

              840B

              MD5

              cf69901e6d4609009dff8be5b3045c96

              SHA1

              712afbf4bdf24b6fa059f0fcd837449d75432800

              SHA256

              16d0edc8b7ad7705b23a14058f366ff1c0dfa16a0ad14f741924c308754cf8d1

              SHA512

              84b63e071f56e8e406fe361473dfd6eb17daec1809eed425b1b977f0135d6a78a3375c9bd1a65daf1ac7977f712b63ed735eac8ebc91e55c1a3f366e288a9ed6

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_checkbox_unselected_18.svg
              Filesize

              952B

              MD5

              8c8fd1cfdc60f513bf20132a1d5aeea2

              SHA1

              40167e542ddfd848fd138e2914dbb7f116a8f99f

              SHA256

              f438a4e713df6a982afbe2eec993cd582edc37a876fee88e1ddabb478f2b5ee0

              SHA512

              e5a985404619bebfb615d4b5378942b56089b40170e4072c61eb9ddf722639941e820f039437b59cd3859944b3e06ed72ee49e879522e81fd9d49b56c8e40d35

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_close2x.png
              Filesize

              631B

              MD5

              5e0d423694dc87169e1124f26d755117

              SHA1

              340b47ffc7ffe45c30ce927f1c839d01600f6161

              SHA256

              68df674391ddb32170020e5b55b8df9ac1bb5274419dbf8748ce53efb18584cf

              SHA512

              17ace592b7b00dd530d923711160c39417b6c6412c3528cecb002fc065a16dc439555f61e4f6de7ac86291cd9cac5f5ea8411bec8ffe043faba887026fd2ec77

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
              Filesize

              1KB

              MD5

              8ab4b211dc3d2947d2466033f6d524f7

              SHA1

              7c457aa6cb3b704da3c977bbcf3953c3c1a7a7bb

              SHA256

              5bc633d52bc4345c9cc4ea7cf49422a85a9fe401faf3239ef72b53aa0dd667ee

              SHA512

              0b7e9cda1a82a15fc9492a35808bd1ea43966cf5e55d84b9831f79d64f36a66583a14f0ba95eb12098bf9df6a95eef0bec6606aba1cf56bdee0e046aa60f8d5f

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\close.svg
              Filesize

              1KB

              MD5

              2518c2304a390e60d20b53b101fc0056

              SHA1

              aae24d58011859ff6986508882dd7eecaaa7f604

              SHA256

              03e98670a1d9049b8e1f02c4fdd449d098465f7578ee0eebfaf3f138a78301ae

              SHA512

              b7457acf824d68e7728088668cd8d44e06566dc71d156db7e9480b957305f2268778907a8e93e4e2d1937b3c3cbfeeb327399cd7f33a60274d91efab2ec3f534

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe
              Filesize

              125KB

              MD5

              1f40eec06bdcc9e949b1259c5e61991a

              SHA1

              2cd91e12afb44b2ca62e9e82e95aed01fbca00c1

              SHA256

              cc43063ba6f50fb20a2632be4fd156d388c4ca6d527594c70477f5c4b6e13795

              SHA512

              cffc55896afe44dd3ee213425ac1bca9e9104ecc9e283844709764a828acafd314d251e14a78cf8062d58447a20b59ec340159264e290b779bfbac7557b4d636

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe
              Filesize

              142KB

              MD5

              30d7d53969ea68a8d4b36ebb2cbba7bc

              SHA1

              2456c3af5412ede0f510db4f65569433da119f27

              SHA256

              bbebb679023fd1768537ac4436a0a4ad0bf86a162eb04b3e02e66059f097f905

              SHA512

              8152071217f67a8f816822f2b6941036d4256dcb24e6b7cad9cee99c7cc7cc0deff61340f43f4e4a925100b771a43b1fc72fab3a521601adbce693b4578449bf

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe
              Filesize

              278KB

              MD5

              653aeebc98df7ee6e7867b25e835e3c1

              SHA1

              bca711524516bfe85d7aee7a83516a41dbaf165a

              SHA256

              aee0bc18d855eada25b25016845447b51b9a885755ff85c7db9954419ab9f848

              SHA512

              a9cd010e20ebbe3120515ffbb161a8326aace09b9a07c729e1a7723be99423102d47e6c9e94db7f3161ee13583e7c205cd8108e0e4c2c9a42a362746dd454fb4

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe
              Filesize

              92KB

              MD5

              95610f9dcded01432d179f76a715400f

              SHA1

              435b7845b5dc5c1d3348640277a231be146ff646

              SHA256

              4f97cdcbaf61c668233cb0ffe7a4868e287bfa2ba969760ef70c20a703354dd3

              SHA512

              de4b305b541a1511780e6bc3a759fc1c64addb96290decc9fba6d4ea42a320aa422c8ed55a7b7fc91d308491f711243b42cdecad47c39c47cbd418106a8ee0f8

            • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe
              Filesize

              147KB

              MD5

              6b0a4731a12f99ceab2a3a60aa2062d7

              SHA1

              22105cea1a8f82d2825ce76553abffe85687e804

              SHA256

              da0864d98fa6599601257e4d098d40dd2a3611382f66baabf5b4bbde70c5167a

              SHA512

              b8425eb8d548226e06e6272eb77ab6ea54549f6897881122ea437521a13acd219ee63ad0af0bdc1a107adbdfbbf92b4fbd524b5b2813a5176366eb6f7ecaac1e

            • C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
              Filesize

              1.2MB

              MD5

              d898745feadc433e88f150481184f0b9

              SHA1

              114b2cca045890b72dfb7dc7abbe7878be5626b4

              SHA256

              9a265e8bae92ef6eee0c931d32bd13c843d3c49926a0e7fc8d7735972f28e381

              SHA512

              7faf47d247c58bbf5167ed8bc1dfaab0d01b585a911b69621efd1719fc81bb202cd512855389aeb965927aa0e15e25ba7ddc9aa05422c17f3dbffc80a15dda74

            • C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
              Filesize

              454KB

              MD5

              9c59ddbd6efb94149ccba07c086de145

              SHA1

              e2c98419b84e37c1c4a394b8ec6451072a1b8dc4

              SHA256

              dec84d95197eb2c166e8a47b085b02ec2d21dd7b2f0d657d832b4f38dd257e5c

              SHA512

              2355f97c7435734a675f1a25068f0a77fab08e29868c82b107813626ee8f705dedf63500bc6ee5e898451de147d9a0d999217385a42050f9a7ef071974b1809e

            • C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
              Filesize

              558KB

              MD5

              b8f31bac1be89bec86839ea45c0b8055

              SHA1

              27cdfd69fdf474ec4d961c599bcb66ffcf9f3a2c

              SHA256

              e41ae236411596b566331da7f5f798299db5629cfb05d1b43074f5975efb4c54

              SHA512

              b7844403a8b1ec7d976372b2c2a84315ee92c00b0d97ee95a264f8ae7c29f9db5e5ee415aab0a5b83f2188997cad3e702395eb1720f80df09c1570bcf35dc1f4

            • C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
              Filesize

              1.2MB

              MD5

              c107f93db71d6562cea157d4f5c761ec

              SHA1

              747ab8822bbea5e1580d38a3f270048223123758

              SHA256

              eb1a06f1463f499bb148fbfa0a46b5cefe7e2b2648ce8af163e095cbe451afa7

              SHA512

              cffb86819c05d2fa6d00f3f1c21c77800ec0a13fa24025bbe4b49fa16d386bc050c7e96e87e6f2f903f7ddbba516f05b4af55336823ea6ca0153795617a4cadf

            • C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
              Filesize

              773KB

              MD5

              8991abd1fce1ec520bafd50a5e04e08f

              SHA1

              4e85cda9c5a1b64fe7e9b93a217a739d95f40186

              SHA256

              3a12117fbcde5289c5aa488bb4d304c748607e6725f80abb2031436b33360f1c

              SHA512

              68c1f0b484448cb8132fc0ab3098311e4fa71f5f2df50c872886329931812b2657c4a4ab2118c9c077f560b1afa8eefd8dc61dec57d655e95f52aff276675a40

            • C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe
              Filesize

              121KB

              MD5

              648a2de249b93c97992bfa1b091378b7

              SHA1

              8ebffecaabc9bd80da4ae8e543dfe2f195eec3e3

              SHA256

              79cbe36f204b682248295dfc99ba1838b9b473d61c81b0b12811dea9c15e04f2

              SHA512

              cf4686f2a1efcfcbc87ea64a5a3621de725fea877855fd641bb34f0c898c17d07c6d8396b2e5e2075eaaf36c43060f0d71ec9711047dae56d317ba8e01a07ff3

            • C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_99718\javaw.exe
              Filesize

              325KB

              MD5

              24aefd930cd0067bc1bec3a181d14570

              SHA1

              218c007ee9e37224488dfb849c80f791902d78aa

              SHA256

              1fc7d0e532af4bd685206932715ccc46019e8333b57adf2e7417fdfa2d756ee9

              SHA512

              8c9ffc265527391be4972c9d7620f00da4523f4834f9f4fe0ea79537c3f166c5f18d6cd9d5cd5444df2a420fbc1541fc78e29ae10d080413460c08c987dc80eb

            • C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_99718\javaws.exe
              Filesize

              505KB

              MD5

              728747e82b337373a05772a52cfb2d9c

              SHA1

              3dbad154ba7298bcc16ec9c226f52718b778d8b5

              SHA256

              be1d040714fd32b9a3574d41fdfe407d1f87fdbbc568003ca06258d13d5c7b46

              SHA512

              0f62926da147a65218a464d096b18c9514370f40b69fd658ad6e56cb5bc8c0f58513c1a55045cd7b805989f66b4572d30c883f42b250848c4054e8a4fd3152cb

            • C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe
              Filesize

              342KB

              MD5

              11b808a636ca2514df18d3b8a4e0e6f9

              SHA1

              77e101fa15da2fc0032a9fb7c4f3e8aa8d426295

              SHA256

              eadb833ae0dc8e459473e17769228508d0cd2099c9468ddbd7ea18fb2bbf8360

              SHA512

              664748827ba087b851861f65e7013910fd56347e3b5018891d633d43e4ccbce954267304ad6c952350ffbfcb3f6bce1aff2f38d7dd95d500efc34fc41d566fb1

            • C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe
              Filesize

              439KB

              MD5

              d7ec8fa051fd1a84482d8c75fd4874b9

              SHA1

              5feeb949ea637dc6119075a99395dd1264195140

              SHA256

              119289acb5bb1aaac9b7de849cb67b8019d36a4b863e34043eae264eb578c558

              SHA512

              a914cdc117f60d3f663a17338f1701caf76481e46d1ded5752d096aea9534bb2a22086976adadd54773dbd6deaacaaca52ade243a15472c317ad25352d7f4a1a

            • C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe
              Filesize

              207KB

              MD5

              6393e803f97c7fca713d899cb9886d18

              SHA1

              9172e7ae4f35a478cd416ece868cf308d303c3ab

              SHA256

              e7fe1ff96b2dcb1512bc530e2ac86ded63c495618d18aaf3c3db52e6ea3e2b0b

              SHA512

              de53203ad785d523124aeea4f5ede064dfa635d13b99db991728976bef4af2fa9afdc17f27a31c2b854a38cd2f37edd2343a2bc14581141217d09495dcac9970

            • C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe
              Filesize

              230KB

              MD5

              85bd227cce35af823b04887a113a0f3c

              SHA1

              be356b131c3061d5840e249c4d99dc6aca9d61e4

              SHA256

              951faed1264f3f2ecfb91334347895c55e06a5752aa562dfea600faa4ca0a3f8

              SHA512

              c127445719721b9ae8abf940139bc03b9a360c2047ca67b4c0559b3fba4398a0c86b82524eab2721e0545781d6d2820a7d53ff5ae5ecbfc15d1cfb3158dc9b80

            • C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe
              Filesize

              265KB

              MD5

              5bfc589d17d6fd6077affdcff278ccb4

              SHA1

              6ab62ee661fbb8510a5c9dbf1650babace18528b

              SHA256

              58d5c00fb6c0b65b5b313b96a2fcd5cbf352ae6aa3c1d9d86fda4f73716f7d39

              SHA512

              85ad6035333de189b8014da3a611854e415e90ebac57d8038103eb429325f2e57d239a774c9bc2d7aa17981b49ac57d36db8a4df575015a9d2057602fd3aa525

            • C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateOnDemand.exe
              Filesize

              155KB

              MD5

              1b9cc7e46765f3a07113568a76fa2f1f

              SHA1

              6c7b7494d4cd17c8f2fa99313a0ddadd45bdd471

              SHA256

              ae5b8d19cc48f20ba8c466e0122ed37279e9ba335d751e9f7bf6e3f5aab608b8

              SHA512

              fcb61565b91f3d58a207a7893be8ce808bf6d6f582ee353e74de2d284ce81248904b7f7eabc179666764704c386219786599fae61651c071f063a6bd9b5c9746

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeComRegisterShellARM64.exe
              Filesize

              220KB

              MD5

              b3b54f62eea4c48978732109b8a177fb

              SHA1

              28d7592721b41b26dd528e6cc204ec29ed294713

              SHA256

              f18085f1e0c8633baf0f0ddc0a0b0a8e388d4e2a9b22d7e01cc7df3c2d6a1994

              SHA512

              931517bf15f022da87c71b9b7c49809f14fd802268295927f83ebe579e4953b071241217cf8af9798bd92bb2e03c76858bacfa069a51af65a9bd5f3018087206

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdate.exe
              Filesize

              242KB

              MD5

              17f8d7fbe297c5551397eb42c0233765

              SHA1

              6475fd23f6126e8ce9da8b915b5e54e6b490af92

              SHA256

              eb158a5050135eba21cfb374f28afd0a64f2a41d416bf4e394d40d7ba1fad01e

              SHA512

              ce9e82aa42d0015b70a79d5cf3e7e1b0eefb2356c5b38b875be141a43bde7cfa1f9e7c157c403a7f63ec98e4aee43af7ad0e4b613ab8e8a4502990e3662f6430

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateBroker.exe
              Filesize

              139KB

              MD5

              e3ec14c20de0fe81687d39189ebcc59f

              SHA1

              735b7f9745dbef62d9f4358724b358130cc82c67

              SHA256

              8661e6e9102e179c9e55820e6e29fedc48893e09febe555e0f0c4d7253440108

              SHA512

              420c5a073b65be164703fc8f0bc784526d07b38d57c39e8f704cfb0ab6fc3d51e8fea4f6e2b3c4674d1bf46f42c39ebbec49758a966071c583b36910d47c7c36

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe
              Filesize

              253KB

              MD5

              fd75e47803d3caf1b43cd207e9e4a9b9

              SHA1

              77c9bbb1e4c56ba9162f407a0a05fcc7fc60937c

              SHA256

              772822c72590705603e010b8097af4fa496fd2ce7889ec927f8be2cb62a72730

              SHA512

              3e8d12832ff73a3f538ef2846bc4291f085701339a315bc46fbfc65b4a1630620226535697aa5edf9b25844ab7d4b0bc54804ac552de61e3b6dfcc19f753c207

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateCore.exe
              Filesize

              298KB

              MD5

              26da80a0a70ea8abc0e5a4f49d8aaef1

              SHA1

              00fa0a7e879fb3a0add01c5be16bed6ac636b648

              SHA256

              aee6a6e6da9be6fa8d7e61de27f87a8102ea2738219fba5cf675e67497203779

              SHA512

              8a029b5bd0c8c49a6f85bddc83862dd9b60fd8a6b4bd9276175c3b6434f224a183e48eebdf7996e9067e1fecd7a2c3e2d0cf5692847cbd46261a9065b8ffe4a8

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateSetup.exe
              Filesize

              2.3MB

              MD5

              9ff8f8423c4ae224f16844355a9467fb

              SHA1

              12a3a7e1ddc3a2422ad2a4b53851ec29ea3abac9

              SHA256

              68a65e95f418f0bebd272f3ea90818aa0030e9ae9e53dc1230bd4b678c10b9cb

              SHA512

              851774214e43d8eb24c88fbf5870415fdd3a6009fc8e5f6d588c9611af055550ddc29faf86f5a732d6a2fc359832ca1347483516bd7e650f3384c2228121e16f

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.187.37\MicrosoftEdgeUpdateSetup_X86_1.3.187.37.exe
              Filesize

              2.3MB

              MD5

              b0b5d4b49d3a57b69175acdb50739f4d

              SHA1

              86ec372b3e1280c198f5e8feca2da6d7c531f184

              SHA256

              f57fb5082df06ac38f290897d1a38485e389c25e17cd86cdd4cfa345e8f9169c

              SHA512

              01b70dca370c245b485ae005530c0d6285c43d2eba112b1d3c11737291e54626f672b2bd0389b6c53ffe25bccf1337dbed24d06fba8af30793d71a0bbb593e61

            • C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\MicrosoftEdgeUpdate.exe
              Filesize

              250KB

              MD5

              c5c4ce70ed0f3e25c7b4c7979fd480c5

              SHA1

              2a3154b51ff2d4d380b6c7556537da0399ac8063

              SHA256

              e964b449f06ce942fb84186b7ab20f0dd77471f75821fd7949009fd91c3d5168

              SHA512

              7761eeff6708c49619eb9a5e14c7516ca16107939f7a3f2873091dc5629799ea4603324cae5869a6de5912858676340e429b8bbdf1382baac9761d748723ee97

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\ie_to_edge_stub.exe
              Filesize

              509KB

              MD5

              f56016801a5b2519db6b6494fe7ce550

              SHA1

              9d0ce2450c5159c6a8b1c31378ef1796761c4793

              SHA256

              e59d39f2567740c96310849df1e9656b804b60e64c5783e0aedce95508fb5d79

              SHA512

              f22ba79c36d513ced089b5e3a89fdc1e0caa3ab19265fcbf665e99c0575318a4d91682774c7252c8dc3adbb7ae02892ec7bbd9fa975e9d76b411dab4d430bf84

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
              Filesize

              4.4MB

              MD5

              59bc86a193ac3986ab1bea74c90375ec

              SHA1

              5800ce38ea461e55187182fafde70a280a245e14

              SHA256

              85386359dd3a3c2fbb15825d08f5103dda01c0eedde7c320de321a7645b72fde

              SHA512

              aea09005e960a62921ed43e9c22466e4200af604922b6b385a7c2719a6b7d94fc4f5d62a6ba3fe088d6174f9aa53abbca479d75f7febc5e4ea79706986ec5a84

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Trust Protection Lists\Sigma\Staging
              Filesize

              168B

              MD5

              27418f9aeb0fae483bcf13272efe6310

              SHA1

              9a28ce8233f1be05276f787e06f872f7dd49f8ed

              SHA256

              e3c2af35d1dfc500e16f826a071cc311bf55003a3de77de7ea3376c6b6fa2857

              SHA512

              35386ad7cb2b39b8d9dc94599e08bd68cc60e3a192090b511f1a2c99b3824b7f74949ed57494ea0e4ba32d25b2c6bdc30117687a5352ec96ca41b1a927ffa7f4

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\cookie_exporter.exe
              Filesize

              138KB

              MD5

              026c541324e53acd6dd7fa5990f515e7

              SHA1

              031761f07d0b635f90dd976f5f8e09a4a5e19aa0

              SHA256

              2468840dcaf48964b4fb38e0b7eaf75f6e9fcb4b39a3c9a518539111eb3cbd22

              SHA512

              8188bc3a11afc42007501137cf7c220ac488175b75c9718ad65497a0ed4186bef2836a49eaa1fd2c9f63647d58e2dfb73d90a5249ac558b30b1f633adda32eed

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
              Filesize

              2.4MB

              MD5

              2088c6e731fc909d782864ceee0ecddd

              SHA1

              5dd8e204e286255f68aa11043e96930fd8b48a9b

              SHA256

              82ed65927aa98d72d8d7426a504cefbfa2e1d62e91bbcc5a914266badd77e2d5

              SHA512

              d211e78a5e88a268bc5b21988fb4bf9e68afdaf66eba5edaf595b2fd9b3084e36b17070c52cef6c886b789555f9a65659a61f227ac8f057e1e8ed5cecf1b8c1c

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
              Filesize

              1.1MB

              MD5

              f2c13e37d477a5ef7b0f0886afbed857

              SHA1

              025587f7b15dab4e98503b7d703ac3b295af4b9e

              SHA256

              4f55e11b91801073662bd201d1352c873f5b4e7587bb883bcf03787b16a2d840

              SHA512

              69856b7b7f9056173113ee08deccc9e47ba773796e0b848aaca303b4c5bc3b8524f3470db4a1294fc38cff9f3386c37565b56f50d14ea76642486fc15cbb91a1

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe.manifest
              Filesize

              1KB

              MD5

              69016e6a597d194701476b8e04d4e028

              SHA1

              71a24ddb0c5bbd321d3f09d7b322c3655fb5e129

              SHA256

              4740d289d0a31bc1fc00e255845b3d8ba7cec2d6d0ee92177d23aa293f9fca3a

              SHA512

              a9399ea57f65c6569e2a9e9ebe9fa2da7184ec92a555549f39cbbe9dff15530ad526107a2a2304d822be37580a965c6ea4e88a46adebd8ff3af402d2c25321ae

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge.exe
              Filesize

              3.9MB

              MD5

              16d8865c29e0a22cc071de07ebef3fc2

              SHA1

              fb24cbf27a90eb3dbb618e7916445c6d39496058

              SHA256

              df805d6774f2d0c0e16c0e97687fd0d25424e926e592daabf14f13049eb909e4

              SHA512

              cd49a3df833ff77a1daa6ad34c3d4d4b58f4930489108e3ac61fc43284dd7298111d923e6b432bb16006929edf7b6942120c3fc08d554e8ff2934fb16bcd123d

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_proxy.exe
              Filesize

              1.1MB

              MD5

              56868dc18ca2a7b382a6f793d46f6c5f

              SHA1

              b1e9cbcc325dc1a643a25a87a84bb858a783446c

              SHA256

              85e818b844c8a3a70141ea2c10afc9f3382486c06e5f757ee98475555e315c25

              SHA512

              c0b20c68b4075dcaed8f95fdc7644326e272cc4c258b1dd74c227d3acf4aa5169f8025899c44dba4caac5b8588491284b7999fdd59957f9c885a20ba7c9fcb42

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_pwa_launcher.exe
              Filesize

              2.3MB

              MD5

              03a151c3f8ecb04c467b3e2c67f9ff75

              SHA1

              b99804798636d120464ec533f7882bbf75f302b8

              SHA256

              1c790cf45e2277ba2711149c0c7febd1688b1b48941e023b6273c555501bcad2

              SHA512

              453e1975da849f26dce8a721e372c9eed2a04e69445536b116dff9bc08df7cdbef1073e5d59063ae2f6fa4bcd6c49a69e3c672fd2fe09956a0685b580e412979

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe
              Filesize

              3.5MB

              MD5

              eff3c784380c4f8a42082ca798070a84

              SHA1

              e16cc1dd3d9d0ce0ec2bbbb077acd84185c66119

              SHA256

              09e7da0eb8b8a7480b6cb66810fa6524d65f4c43d1b577b0795748d1dcaf1e24

              SHA512

              88e04eca5517c8f2e726332c81a755eaddcd3dfa871e25672f5c25d9a8efa78b300cb7b2b670568d7d5331e6f307f493ecb76ca234f42e177b198c2f019143f4

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe.sig
              Filesize

              1KB

              MD5

              d8d0face111912e6dcc93f665bfa10ad

              SHA1

              e171cc8b4abd73e2e6f9e0145e8e3d46e333133b

              SHA256

              5efe288bf88e3a66ead387ee327d7f2ae6637fa507e14271cd1c30024279945e

              SHA512

              2bedc86a79225d3c23067a042a219976a670ee164222cbde077edc2bf5618181eb5e26edf86946e2797016c5a87f3534e47dc4ac76d40487354a701ef77aa51a

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\notification_helper.exe
              Filesize

              1.3MB

              MD5

              1e47a7f8e04105419cc42f7e772f8d01

              SHA1

              3aee077892dc9439dc6f8064b4eaeb66c63ac836

              SHA256

              c5d1b7a4ecb0e5b0b90eca811a5ae8e5c559df1799b7f0c20ad9f3ec0a58085e

              SHA512

              356f82bc3a4d6078dbd3ce563d0c0b6aa756154992067f25f773f0a796efb3e54b872624f84c18ff39006068076afa0f8e01a2fdcaa653238142881b631b16fc

            • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\pwahelper.exe
              Filesize

              1.1MB

              MD5

              f73c61384a55ab7485e4f59e1ac05a70

              SHA1

              06649e828f3e5e9726e788c9f44375d712f0998f

              SHA256

              36ee526a8110c8e8fac3a845d7066601a9d5469dcd38656282edf36bed48f30b

              SHA512

              fea315ce37419867a1057ecb221074f3ed7fb42dd1cce3ccbdc41703db12a3a8acdd464b26db317e0bffaff47299f27b2e2f4089954b9283e3a3de7d6d8e6170

            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              Filesize

              3.9MB

              MD5

              e68cda5a5a3d0032a6e683a2d5f43529

              SHA1

              b7aa62c8fed09b19a07082672eeda8a7c016e0d6

              SHA256

              995dbce0d67411298e5fe8cd9f263ab6519fb6d9dff1e492a4b7e8edbadd0239

              SHA512

              1235a19ecc973f27c5147352084edf403879e85a773ffdb93030dce467878897ac2e15a48ae2c7456400ff9c574a5a9f7e4cb1742ae8c6cb5e028bac070b4435

            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe
              Filesize

              1.1MB

              MD5

              a5d9eaa7d52bffc494a5f58203c6c1b5

              SHA1

              97928ba7b61b46a1a77a38445679d040ffca7cc8

              SHA256

              34b8662d38e7d3d6394fa6c965d943d2c82ea06ba9d7a0af4f8e0571fb5a9c48

              SHA512

              b6fdc8389bb4d736d608600469be6a4b0452aa3ea082f9a0791022a14c02b8fb7dcd62df133b0518e91283094eaba2be9318316f72d2c4aae6286d3e8686e787

            • C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe
              Filesize

              1.1MB

              MD5

              d43858111c676eb12b40ec65a8c88a0f

              SHA1

              517679fc2a435242ec9a328dc1f294997cc42b51

              SHA256

              c4f755fa7c7077293f3cb2e4581f9640a15797fafe58697f7ef7c29687d569fe

              SHA512

              611e5de9623428014a98841aafadcae2b43bd3fd4e03fb7b5816461865374e650fa399f4c48fcc5a74520c61ef005fe2071e6f3feb5b6527ba643e726d190402

            • C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
              Filesize

              141KB

              MD5

              9cc8047a7f7963378556e4de802b0a7d

              SHA1

              e8b64a0be5eb3d465a259c1211dd8d1d62202dd8

              SHA256

              aac915fbd1808bab7670e4a143642ca857a4c4ffe3f9bc0999ffb5b9f566bd65

              SHA512

              260334d4f2967cf52ccf2ad21a346a3ae38d39a07f58188588f55285d58a904afd3b8c1ee7a9d86d1010b90b1fbcfc19f30074f803bf356cb8ee2ebc62fd35c5

            • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
              Filesize

              281KB

              MD5

              4c0a44979bb984470f56bb3cde4dc1ea

              SHA1

              b4e80e639b7871deac7f81b6ccec35e73158c379

              SHA256

              8969cbd521a9cabfb5afee05b4993efbf6ed3912f574073a7064c46defd767d9

              SHA512

              118f606812069d45fe05d6cf8fc90274fcc1fbe221ec6b259984c1c6c2e93960d972bece55ed09f02189ec9c308f8c97f12b940e4d4ae1ea4614237a7ac978f2

            • C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\it-IT\MSFT_PackageManagementSource.schema.mfl
              Filesize

              1KB

              MD5

              1fb20e4a02ba1ad84aca9d99fb1921cc

              SHA1

              169ea6ad71a5c4f4d8312668259ffb793e6cac0d

              SHA256

              1c55f2acd075736d1fccd0e7bca9292072d933e2811b8e042c172e9e7f112f39

              SHA512

              3516ca18f6f5b64fdb2de80c950d114b2c5d979c24764cad4328411eca14c47c4758816bce45c3a691adaef50fdeeef64ca51a7ce603aa5ac11bd308a9166621

            • C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\en-US\MSFT_PackageManagement.schema.mfl
              Filesize

              1KB

              MD5

              125863dbbbb069fd535aaf5f8b17bfbe

              SHA1

              ba601b96a414c6e3dddc42e6a0608ecf099e6310

              SHA256

              424c38504d88d0f7b3691471d18b1a21141b9e31b1cee5dad278963613252480

              SHA512

              18e068cfb976f972322e12fe755aa37a3f44fe79e2da094042f22f1a3b0a6328033e05a625f4faa2a373c654751ed1094f9c04d9411e86888448e367ded915d6

            • C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\ja-JP\MSFT_PackageManagement.strings.psd1
              Filesize

              1KB

              MD5

              9cb17fa9b59645c7f574893b4565d2ab

              SHA1

              274e027aa39e24845fd11fcbf265523de44e69e9

              SHA256

              e2e70c766bc6c37a41a221b53a0e62ef616c8fbcf7a244c4863f6a74c06b8e64

              SHA512

              d28e543a9355274fecea9be5b1120fefea5e4652835e477cc9886527c0a67556582368618ef1ad98fc95a406541cb7541dc30451033a77b8c0f2011874b1a774

            • C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\de-DE\PackageManagementDscUtilities.strings.psd1
              Filesize

              1KB

              MD5

              5f3c20c13de3ac54a574e3dfec50a560

              SHA1

              ff983979d46433ed43e738f5c34c5340083cca11

              SHA256

              a6f6e59f677587238a2b472d2f214b1c95d61d86a7973cdd89a61e2c05ca7594

              SHA512

              4caa9867ce2b6bb9abe419a9306d1e417a2da05d5af5624bd92f433872338f39d5b88cbb4d94efc34ff29ced991cb38ac531ff6b6bcd9f899bc7061c906f228a

            • C:\Program Files\7-Zip\7z.dll.id[9D8D69C6-3545].[[email protected]].FORCE
              Filesize

              2.5MB

              MD5

              01dbc95685a3397ed0ba32fe34ed6777

              SHA1

              0a46e737ac165cbd60f50ecabafcc04d85d95d97

              SHA256

              b3c3e1a964f235ad66c942e9283e777ce2bb422f09a86190acf25f5721c039dd

              SHA512

              be807953e469969067f6fc8a07f70e3256b24086fcddee36fdd102c535691609abf622834c8c406489d79f29548249d32a635e163b961893b8cfd84358c2f7ab

            • C:\Program Files\Java\jdk-1.8\legal\jdk\relaxngcc.md
              Filesize

              2KB

              MD5

              ddc4cb14453391bcb5f4d645b2916a6c

              SHA1

              c4738d174c90c285e17bf51a9218256f45f96ea7

              SHA256

              0c19ba9eeecab3cbbdf38da08c3fa0266f10ce8166e056715931efc543335eeb

              SHA512

              34a32b92ffb2945608439653b5ecacba49fd3312ba5487ba14796c75b07655f0d8f735453dac117d46d204d3f810126f8a189f82c015fa8bb6ea37d9b8e0e30f

            • C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
              Filesize

              190B

              MD5

              c5b7a97bda04c48435a145f2d1f9bb42

              SHA1

              bd94219a79987af3e4d4ce45b07edc2230aaf655

              SHA256

              07ec9bf950252d0254d4d778698c2e4173f36dbc3f57f51f34d1b85a07c2eab0

              SHA512

              7eb1a26cf8ef725ba6d1934ca4802f70cc22539017334c1d7a6873afeea6236bcd643b52630f7fa9d8a9e692f718ba42cc704ed5f8df17757028be63c3efad80

            • C:\Program Files\Java\jre-1.8\lib\images\cursors\invalid32x32.gif
              Filesize

              153B

              MD5

              d13b5ffdeb538f15ee1d30f2788601d5

              SHA1

              8dc4da8e4efca07472b08b618bc059dcbfd03efa

              SHA256

              f1663cceeb67ba35c5a5cbf58b56050ddbe5ec5680ea9e55837b57524f29b876

              SHA512

              58e6b66d1e6a9858e3b2ff1c90333d804d80a98dad358bb666b0332013c0c0c7444d9cb7297eff3aeee7de66d01b3b180629f1b5258af19165abd5e013574b46

            • C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml
              Filesize

              744B

              MD5

              809457c05fe696f5d34ac5ac8768cdd4

              SHA1

              a2c3e4966415100c7d24f7f3dc7e27d2a60d20c9

              SHA256

              1b66520d471367f736d50c070a2e2bba8ad88ac58743394a764b888e9cb6f6be

              SHA512

              cf38e01d3e174ff4b8070fb88ead7e787143ce7cf60b91365fafd01cacc1420337654083a14dfb2caa900141a578717f5d24fa3cadd17c1a992d09280fd8dc44

            • C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_F_COL.HXK
              Filesize

              114B

              MD5

              301657e2669b4c76979a15f801cc2adf

              SHA1

              f7430efc590e79b847ab97b6e429cd07ef886726

              SHA256

              802bbf1167e97e336bc7e1d1574466db744c7021efe0f0ff01ff7e352c44f56b

              SHA512

              e94480d20b6665599c4ed1bc3fc6949c9be332fd91a14cef14b3e263ab1000666e706b51869bc93b4f479bb6389351674e707e79562020510c1b6dfe4b90cc51

            • C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK
              Filesize

              113B

              MD5

              b9205d5c0a413e022f6c36d4bdfa0750

              SHA1

              f16acd929b52b77b7dad02dbceff25992f4ba95e

              SHA256

              951b1c95584b91fd8776e1d26b25d745ad5d508f6337686b9f7131d7c2f7096a

              SHA512

              0e67910bcf0f9ccde5464c63b9c850a12a759227d16b040d98986d54253f9f34322318e56b8feb86c5fb2270ed87f31252f7f68493ee759743909bd75e4bb544

            • C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\PersonaSpy.html
              Filesize

              1KB

              MD5

              3be680b6a8edfdeed37bf5068a37dccd

              SHA1

              75bc261fc558634731e683e431e4a31c5b463107

              SHA256

              1777e4f7955cb5900c97d92081efc4b11704ee3b265717a7d7152972b49a36c4

              SHA512

              a3c8a91689105a14c49b020826944d32540353c56fb9e9a011639ff5107d25e1d3466f0fc487ef953c6bbf0c006abc5204e3a8f0093e1c633013a547f8ecab21

            • C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\setup.exe
              Filesize

              494KB

              MD5

              5592e489da020b60f41b18a878dd4e18

              SHA1

              f910a89f5b8479404a3807e968cba770e1116e40

              SHA256

              8431618e01f9e5fca74958c3f54cb2e612f5dfbf3ecfd0d23d7a0e0df41b85ba

              SHA512

              d296d6842cc112375018b0a6b7f239500f49e320ebf4b37ff7ef9c2fb11d969cad734d864fc582a45d4136799ce13437f7b015758773feaa877f4c8881344b89

            • C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C4DB1FF2-9CF3-498E-B7AA-765DC7D448F8\en-us.16\s641033.hash
              Filesize

              106B

              MD5

              f536fbf78e26387affb82ee89943b870

              SHA1

              3ac8e44a9491c16bcd86dab6781acc4f7e1f76a7

              SHA256

              34dbd6bf55d0d075d666181d9278b8387482a8b5804e44e1ddaafe6876dadc15

              SHA512

              d9ad640884f40495b4255bd221f0902ff64f84e3136053d03abee7ca417d32a1d72f24a75cb67bc50629e102bdb2f81c0bb087e0eb5cb82fa3d67c4fa5d92450

            • C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
              Filesize

              7.4MB

              MD5

              d51593b831995342f179f82cd4ac9805

              SHA1

              4d6a4a5f1f709de7aa1bc87d8f1910ea9cae3112

              SHA256

              e3c52b3affabef340a8848562e9d1113d386abe8fbc32c76596e666f95b02a59

              SHA512

              8499020a14389b8fb7ec3fb3e192d5f13d1b89d7925517ff3f1f19e809a581ce66be55af8939da53b572fb0296c9d443f862f8b191885ec7ab0f284831364c7e

            • C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.P-Eco3PTelDefault.json
              Filesize

              57B

              MD5

              ab9d8ef2ffa9145d6c325cefa41d5d4e

              SHA1

              0f2bf6d5e1a0209d19f8f6e7d08b3e2d9cf4c5ab

              SHA256

              65a16cb7861335d5ace3c60718b5052e44660726da4cd13bb745381b235a1785

              SHA512

              904f1892ec5c43c557199325fda79cacaee2e8f1b4a1d41b85c893d967c3209f0c58081c0c9a6083f85fd4866611dfeb490c11f3163c12f4f0579adda2c68100

            • C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\0a8c1492-65ca-6a01-de25-0e183559d10d.xml
              Filesize

              2KB

              MD5

              234c58fcbf2775edbfda910d2e0cb945

              SHA1

              16314a6f5604aab01e76d5e7f7794b40c23a4785

              SHA256

              68193f3f98611b2aa42be4d2995b0b9a2465277c7520231324a08460639a41a5

              SHA512

              fddd87a902c108de1d986dc6e4fa7347e3908076d1ec3f64b19602d3a2318ad5ee0a1d46599ba860dec61843c2954d3cc9e91aac9718a82d1043e32b3dfb6bdd

            • C:\ProgramData\Microsoft\Windows\ClipSVC\Archive\Apps\8e383e90-b2f9-7bf2-1d5b-4e47dcb2014e.xml
              Filesize

              2KB

              MD5

              af98b62b3f9d6e70c082f05969c0d2b3

              SHA1

              2a78fe6ace36668a1505ce949dd5415cf172590b

              SHA256

              77544451f210250b90637e7ecfebfc0ce00398ef964a2d46f1b92adf4d6f97a2

              SHA512

              6a8d54bbaa9d6f04de832a60fed8f471eaf38bce9f95942d2fa84dba035739b65cc4fbe58904a7d2220af89d735b96be1bb6aa43aedecb83afba6c4d3be20850

            • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk
              Filesize

              1KB

              MD5

              8b550761ab80413c9c09f7fb472dbfaf

              SHA1

              67122822562203c17dd3f762194e470f90ddfa97

              SHA256

              f5ea79165516de2e7e1efb53d016983f5d18c3184413f044a4002f4b751c918b

              SHA512

              9546013cf4d45a2c4c609524b7ed4adecc7dc2fecded7c3b7085415a1bcd1c25db5d88bb591ac05fa5a6313763a8e8d5d8fc6ee6610b454cf7696b647e7781fe

            • C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
              Filesize

              485KB

              MD5

              7440dda99cac9daf7ad9f58d1adaf71c

              SHA1

              c0825448b583f4aeafed7b3e849b9fa73da0ed35

              SHA256

              7233ebc4f8e8db40c189953c9c2bf20ca26f43b17e3fa0b5563008cef38cacb3

              SHA512

              c05af0c0773e9e3e6613974e3bed8b58af966b68e3417519c13a1ea2b3826a4ac358790ab69006baaa5c36b8e461b732f74f5d2883eb891d9037d5aa4a292a0f

            • C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
              Filesize

              674KB

              MD5

              2c6259548cd63529bec138baa24b50f8

              SHA1

              37368061ce71bd6f023c851458076014d1b79d39

              SHA256

              6888c8e0a3460b1a95e45bdb518ec8a4c0934d914af9910d933a8ac1724cc871

              SHA512

              2ff1fab57102f2caa8c77e528022bb330a8ff1ea073ab71c58b880f025e2c5dd2a31e9d872069992f1f7f712fe8a3e6fa4209694e97c591476ad2b667b9a89d5

            • C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm
              Filesize

              634B

              MD5

              8776c367699ad807af292f1f5d085d4c

              SHA1

              9209e352bf9d3999f94881a75d6f7d39bc6d7f77

              SHA256

              18b602cdbb7656129a359046fc68faf1b990da88c6c3b3e6b20c1df399cc0645

              SHA512

              83a17d98d175a122fe98cf89c476826769d8fae0d74dc93c8fe48d12089e26bfd501a586db3783a03e1bfe07864ebec2a6b5a48415554c61cd565131ed40a9e1

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
              Filesize

              834B

              MD5

              4f00b32a70c5d829f8199614fe56af64

              SHA1

              ff2afa238f88ce8cdb4430fe578c58823cd6d752

              SHA256

              e3833793f7412667cdbe15693f5dc4994934d1a6695392f8bebb74f985658256

              SHA512

              6ca12db615454c1b842040e5047ab24906d372b15b547653553d39ebd18cf4f90a360c5032e415d00ba313cb27def27aa8eb7e94ae3d86fefcd856b693f0c6aa

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EAF8AA29A62AB29E614331747385D816_F9E4DC0B9D5C777357D7DB8DEF51118A
              Filesize

              313B

              MD5

              a00c4336b61933a3b7eed1304d15427c

              SHA1

              8f2546735c9653c10cae89332b593630d800df46

              SHA256

              8dea6b6aa16702f424f2679d756a6beb769c64ba4b1c74da279e32cfceaeb396

              SHA512

              20a953a8f435df7eadf5804379be46093f289368024885d80c8531bd80460d6a9245060a6986529b656a5deb8080f332746a12e2d912d3b3599336fa046098f3

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
              Filesize

              404B

              MD5

              8c1d71b2bf2d4d1eea6a825412dd4544

              SHA1

              7160c20079f39f98532f42db23209435edeaacd7

              SHA256

              0441772f66559a1c71f4559dc4405438fc9b8383ce1229139257a7fe6d7b8de9

              SHA512

              5d70cd72a6f162cb39167337001b791347abc07b9edc095516489de9e9427cb824bc79596362b41f78e73144d3e224dad14f3dbf48cdd0fa08f4b5073ab702ec

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EAF8AA29A62AB29E614331747385D816_5C1009244D39FCE23AF8F277537F2613
              Filesize

              400B

              MD5

              a75d7d422fd00bf31208b013e74d8394

              SHA1

              3d59f8de55a42cc13fb2ebda6de3a5193f2ee561

              SHA256

              7a12e561363385e9dfeeab326368731c030ed4b374e7f5897ac819159d2884c5

              SHA512

              af3a1e15594a0bf08ae34a5948037ef492e71ee33d5d4ac9f24b18adf99a34563ab40ba8f47f2adff5d928f18d8a8cd60fc78e654e4d6cf962292d2f606def66

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749
              Filesize

              330B

              MD5

              aba916524277db53210ede106ba4f0f4

              SHA1

              a1e373efa2f5820871e207361b899f5cb1a4c76c

              SHA256

              a365b37a503f29488c93f2656419e7d591002904360f6bdeb2ef2067fff23741

              SHA512

              06741f2b929c8b8df2769b42c2f12385739db4e0457215990e46bc86d4630738245b06fcdb001dd32fda4192e3fb2247bb7f70dc184abc05865d6c45969dcfb5

            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\CURRENT
              Filesize

              16B

              MD5

              4ae71336e44bf9bf79d2752e234818a5

              SHA1

              e129f27c5103bc5cc44bcdf0a15e160d445066ff

              SHA256

              374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

              SHA512

              0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.76.2_0\_locales\hr\messages.json
              Filesize

              935B

              MD5

              798b4a7c5a9f20d24f36ba8daf7b8f70

              SHA1

              0f007b82783ddea5da7374c96925b77a7fe9f57f

              SHA256

              e5cbc8e3a6e843009fc9a9de7a83df9d05532e08d48da06c66f907f58d0c745e

              SHA512

              e3faa4376d03dad6cd714dee6349733abe29d0c2118456f80bcc4c758015b12a06b4ec6532a6e98d512f5c6dec7a7ade5c1d2a418db0f739ed17f18c0cd6b54b

            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.76.2_0\dasherSettingSchema.json
              Filesize

              854B

              MD5

              310614b10980392ebdb5a5a8b90b527c

              SHA1

              8c8fb36e7c2a1574cde7fdea30e8e5f14fad7691

              SHA256

              445c811c35e2fbd4aa59389ec805492c7b2db50d65f5d161417ce8302b103fbe

              SHA512

              416650adf9a61cbbb6eff7af635264e5bdde903477465cce05b63773927b8afb35e75fb68497882bce7778f524b9c7f3f2befcfe3840e99bff90ccd305bac66e

            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\MANIFEST-000001
              Filesize

              41B

              MD5

              f5cfd73023c1eedb6b9569736073f1dd

              SHA1

              669b1c85ecbafe23c999100f55a23e06bf59ead7

              SHA256

              9e1736c43d19118e6ce4302118af337109491ecc52757dfb949bad6a7940b0c2

              SHA512

              5d8c1aa556fc17d6dc28d618f521aee37fc0e1826fdbcf8d106e456fc3bcd3c76e712d23fef3378bd2be17b80eb5bfd884ccd89b67490b63c7bd118eaac471d8

            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old
              Filesize

              277B

              MD5

              7d3165882b27dc69918cc2de97baab96

              SHA1

              4970307efcbff0c15053a742d6db65c4528d4308

              SHA256

              5cdcd733b8b630509bac08589db291ddbde33d79f64664cb9582e66589555257

              SHA512

              2be106c204c36cdd721247bf95eff0f8137b67b3509598719fff28a54dab7cee596796bd356e0a31492cd3bf4ed87b5b555ec82da8a11c0f967a4c15766de28e

            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
              Filesize

              48B

              MD5

              b203621a65475445e6fcdca717c667b5

              SHA1

              c17fd92682ca5b304ac71074b558dda9e8eb4d66

              SHA256

              17b0761f87b081d5cf10757ccc89f12be355c70e2e29df288b65b30710dcbcd1

              SHA512

              ed68f5f49945dcd0d81dfebe2f2fd1fcfe016807d5c64ee0377d046efeb0a7fd9b4b9589b3df8a14194d51dcffbd89c8aaa072cea2ad4e7976bdf53528ea90cc

            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
              Filesize

              279B

              MD5

              2dcea950234175e3edf672936843ab5f

              SHA1

              4ca6dfb9ed642bbfc0002cd47abaa2dc895ce0d4

              SHA256

              74ca16b1138459ef2afb19324097332626ee7c897687c5adc5488f93bf0c11ff

              SHA512

              483866f3ee1d730f1052b0ce34832e0e42145296df490a68901b95e616f2dfdc39fb13e2ed80bd259c43475830f6a74257a5fc8d163e7f1dd17d39556501dfa4

            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
              Filesize

              297B

              MD5

              9ee38aeba19f4d46fcd9eda4661325d2

              SHA1

              d458ade2d50d219b089b0985ef765a80843602ad

              SHA256

              d99258f5d81067df4e95825381104fe6c90d04d01bdd2915954dd06f75d07c10

              SHA512

              f352805d5ebb6b3351dee65dd1f66ae5493ea36dc342c31d8e714fd11095739f755a50d865b9bcfc40c60616c9bcee4cbbcabb6c18566fdb73e778cd41112738

            • C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000016.bin
              Filesize

              1KB

              MD5

              1595ed4372d33dbecabbfd411c6c8f46

              SHA1

              8b8ba962b765110f762f873edbc3193adef48b33

              SHA256

              8f6abb9e202dd8027ac9abbd475a24e62659a0b2683613f219c21d1238816ed7

              SHA512

              e0017291c0d0685ede7a6492c2683a90b37482d21037840ab3e2cef4ed381bbffa8c31ef3c8d06db0a800eff69ba4505012886f88a911997657b3f26284142f1

            • C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\00000093.bin
              Filesize

              647B

              MD5

              97d6d52a254a9cbd2bad939ce1926af8

              SHA1

              15a64b0f07658da802cb0bdd43c9c6f2df2f0af9

              SHA256

              bbfa41253ad301a1cd9c7f6321bff365068178f26cd84e8afb127fb4001bc4be

              SHA512

              98e76665962acd459228cb9635d95bb37c6e538eca7ae50107c665c93be334b907178f87749b3a4f33db34152b9d9035163fe2429306eb3ac45ee539e242c3da

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini
              Filesize

              174B

              MD5

              897208d5df122e307ab837d982b2c085

              SHA1

              cf4ca14a7adcbc197cd84c1997efdd076911d608

              SHA256

              eaae98aa73fe0b561c8b02607a524fb4853bbe81c6de8c3d8a9b7449366809d4

              SHA512

              b0aa03063c42515de12fbf6d89924a3ae7d8bdd64d7c9bae94c75d571c939655253f3e87368fcd96f5784b2aee8fedac8f66200b8672ab47cc8b37c57a9ad334

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
              Filesize

              24B

              MD5

              1681ffc6e046c7af98c9e6c232a3fe0a

              SHA1

              d3399b7262fb56cb9ed053d68db9291c410839c4

              SHA256

              9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

              SHA512

              11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DL7YY2B9\Windows[3].json
              Filesize

              620B

              MD5

              01b53ab60d1307f1db2f793377d3af08

              SHA1

              aead0b1b398828d1bb81e91a52f28e504d717e1c

              SHA256

              b5afda9531d50eca02d7e10dd6a5e5a9346ef452f1aea17049b4acf84be62641

              SHA512

              ee7663533aae47cae26d9605f045b9165ed9ba387789a09db6e4bd0d76ca08aaee685d5299a8ec40ee086123f4e3ab766a793d9199c639d18d56d87c37cc8f6d

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
              Filesize

              1015B

              MD5

              61d2c715839bcfa06ce4d23dd84e7457

              SHA1

              cdb61e6100ac4882ba4863875f63e38b8b804ddc

              SHA256

              1f9ec15f6ff239e14a3a243a98f19ae7db16d425a63b2da0908cc0ffcb1258e7

              SHA512

              cb6577068e0b746a0ff0148238fd5be9e02e4ff6218fc21d78194a06ebd3f54aa12a1a9b80a4cc9a9f66f72f49eb875eb367b344f674807af11373770f75d952

            • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7jyxcjs8.default-release\safebrowsing\ads-track-digest256.sbstore
              Filesize

              1KB

              MD5

              017813103ef615c6e4e41c106f0d8540

              SHA1

              a7bb21ac882f35d671d5f0597f8962f9e04e371c

              SHA256

              f18f13c653940384b01c154887477150b1c0669d5620d263f72bfcfa57daee09

              SHA512

              0a615cbbde1ce71e1e3623454e2dc355f5ff2e2480520ec0598de70a9cdbb287959bf7958435ed05457957e3ae09d2db2884ffd743806191b773d91a5c882fda

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png
              Filesize

              1KB

              MD5

              535ee7f4b7959a29e1d1be5a67e00334

              SHA1

              c8b3bcb1c1fbf79c59a847510d884da10dc62f19

              SHA256

              46dcb7a9e7bde1f57e5ed2eef9257d2d0ad622c1b3da32700f6d9e2ec4a0e287

              SHA512

              b0f9d39cb8200c35c564053454dc9fc67e68140861255f77dbe63679375ff3f892426109e95633fcf6e285b9547d890d1281d8ae4ef97cfb78433608961934b4

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\0bb475e8-8e68-4a33-b1c4-8d44544cb8f2.63c02e56-eded-4500-aaa1-7af4fa2d40c9.down_meta
              Filesize

              1KB

              MD5

              20059d007362aedb8bac5d3ba0a01eda

              SHA1

              20985142da0752637f58876cea05645d04df4dc7

              SHA256

              2b1677a1e2e7af682bb225824537c7495a77670ae56e69e8bd967ce11edb2f23

              SHA512

              dd65d9b35d117ab0af9273f4f0d0409d61315aa6e3849556f30b8dc8df2447ff7548ecd3da4bf3bdd389f99da922a00e906293905b9741a3f6eded45c569b75d

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
              Filesize

              471B

              MD5

              a50b718c3518b630251fb54b92bde360

              SHA1

              a9582222b6f4df2b4e3e4ee5fe91d25ff086b943

              SHA256

              9d2ce1c032646d2a3381b68bc9201e3dcd53b764e83a0d356d67cc4926ece015

              SHA512

              95e0676e3177262d29c4105edd4ce1fa1c2a2da5cd3289ab0f873fba782a0185e4bbede5d64fae1f6c4cea5ca3ae0697d7113e6ee63f229431bfaf3f8990c517

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
              Filesize

              412B

              MD5

              80be6efdf5a776659777bf07d4aff891

              SHA1

              1f98e7ba8de8c6b39f4b202739ca71fa2629fd6d

              SHA256

              9ebc694d4895efc802ea27714a71986f293edf4b63e9918c27d65871b06f43a9

              SHA512

              03a5434f25209a74a0abc6045c66a45e098d487227cab71004363c8c823840b49596857e8f757f42b8953f9bc2066209b1e8f52104d1837705828cb2676119cc

            • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{965e1ccf-ffe9-48fe-9f9d-99fdcc098f7a}\0.2.filtertrie.intermediate.txt
              Filesize

              5B

              MD5

              ca9c491ac66b2c62500882e93f3719a8

              SHA1

              a10909c2cdcaf5adb7e6b092a4faba558b62bd96

              SHA256

              8855508aade16ec573d21e6a485dfd0a7624085c1a14b5ecdd6485de0c6839a4

              SHA512

              65faa9d920e0e9cff43fc3f30ab02ba2e8cf6f4643b58f7c1e64583fbec8a268e677b0ec4d54406e748becb53fda210f5d4f39cf2a5014b1ca496b0805182649

            • C:\Users\Admin\AppData\Local\Temp\3582-490\2024-06-11_bfe1134aa647e0eae3fd8e4093dcc788_neshta_phobos.exe
              Filesize

              57KB

              MD5

              1147bc8076b31c08da62e11cde8a438b

              SHA1

              dfe642d6e298bf46b1fd53f7d3433ebb89232553

              SHA256

              9cdb868940c8de8f7699797d7a3bc7eece989a7ac2bebead885bc02526522b45

              SHA512

              0d4b1ff185e1176e0447986b67f2e5a42354e7518317c3ea1c57123b3b78d8d3071642eb556816f93782919492defa4bf9646eb7ae7764ee3c59e94bec39ac36

            • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini
              Filesize

              338B

              MD5

              fc91658bb81ea407fd37a59d65f0d86e

              SHA1

              6cb269ab1a592dfd2039dc8c50c00b86af94d3e6

              SHA256

              4bafbcbc4cbbda94d0a315a09176de0ce6872cf1d85113539a7b04ff2360efa1

              SHA512

              c5b8832097ab5e74a0c31cc243c98c6a2b9734da4eb6e25cfc28070529ff4b6d77de1e97388f188f00148cd8db32f3ea62dc86aa841d47e25da8d8dd2267061e

            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7jyxcjs8.default-release\sessionstore.jsonlz4
              Filesize

              902B

              MD5

              afffb14251fdb8bbe7d064f77e3d60c8

              SHA1

              3c0975c4c816c8a556ccd5d01a3b675b25bfa0f6

              SHA256

              8e1b2f3c38d9583ec30e0f44459700b5d81f4b6a2b2eefe88198c9230ec408ec

              SHA512

              18ede0f0164d1e1f20a795a77114cd912839dfb758e259e803d029e3022908f1bd3f6f3f3289aca6ea4ca71466b4e6508a83f72fb85e2f393a82eec616c98e52

            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7jyxcjs8.default-release\storage\permanent\chrome\.metadata-v2
              Filesize

              42B

              MD5

              c183857770364b05c2011bdebb914ed3

              SHA1

              040e5ac904de86328cca053a15596e118fc5da24

              SHA256

              094c4931fdb2f2af417c9e0322a9716006e8211fe9017f671ac6e3251300acca

              SHA512

              8ac7790c0687f86d2d0ca82cfc9921c8cd6e6f5392594317d5ee6f3661500de58ebd5ef6300a412c23ed1cd2748c5eadeeb9719f32758590bd4168a0259bbd70

            • C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
              Filesize

              1KB

              MD5

              7a4228aa2003a72a296e741bfa8246f7

              SHA1

              e94ca8cb43d671cdc3ed759980bfbaf73cf4c6f8

              SHA256

              462fa5c6568794276673c9159500918afddf8f170e580fd1f3d483c48934b050

              SHA512

              ed66dc35762f661f760eaf0feb82e22c823f11e552c9f938748a8b158ecf0828f40d48afc4d5cc07122f41a13e7b322950b9f156808b125bc7a1ae19e066d304

            • C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini
              Filesize

              75B

              MD5

              6e36ba0fe61f7c6334305d61299c04cf

              SHA1

              646aaf623a9b65f3054571ba8680342cf02b6225

              SHA256

              367467f43d580c3c07040a78c7890ae4262dad4778878f9a49d5f652c81689a5

              SHA512

              ee5d694d66bb3ee0d55129c96c83116e7af28b6838854d110cafe9dcb530fc05ef8b97469d7fe0c864481298fba5008c97eb2b503e90b58b1e33f8856cb132d2

            • C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
              Filesize

              1KB

              MD5

              45de417378735f7d0d1d3c3148dc6d00

              SHA1

              3295b1605ccb0910148b618c52b4d0c17fbf0a9f

              SHA256

              43782c4d9b63da7cfe64f6a9a06a6cf8007d2a793b8a5f94c9b962bb5cb25b0d

              SHA512

              23ee803d8a1619d5d5a3dcbdea08175b3a6dca7a29a9d37f37342bad73ad4ee383b68ebd237099cab565699150f90cfd9014aa35e2fa09a6cabc0fa6fcae9c04

            • C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
              Filesize

              1KB

              MD5

              35705a33e80294bdc078f5582784f4fa

              SHA1

              3b8d2bc3650098d604e3363fdc41e9bfc2f4609e

              SHA256

              d0e438519a8e2075e13430b66debeb7204e5e8ab41fb24eaab20db0bdb66d835

              SHA512

              e560c350940f15a8d5c5187ed833190cdef9e4862e8f06dde9b0204ad1a0decb9adaadd27c4b7015ea5e7fabe7d7a63538ba72def9997e56300cc8ddc4249061

            • C:\Users\Public\Libraries\RecordedTV.library-ms
              Filesize

              999B

              MD5

              a9d5728f9b0e997753288b3a140c5335

              SHA1

              a44e9168f2e351f3ad4ee2f7c0e0037d64f65066

              SHA256

              84ba348aafb41879cfa434256c8657baff00a9bf41d5ebe041b0ef87e7419f28

              SHA512

              13380300950d351ffb3256e3b65f6dcfda8c52dcedf6627e10ef231925e45b178d173e7a24406bdef42949f9919326e7abf8a9101e2fee0127c578a46a1df294

            • C:\info.hta
              Filesize

              5KB

              MD5

              4401dd4c51f7a1efd9e12a64dcfd6ca4

              SHA1

              f226739a4eb810f846932ef1bce2d779c537ab8c

              SHA256

              94b1e0fd1a2ecd47bb29c3949e63d31bb559eac8fa96ef36f8b10b332a8b3200

              SHA512

              2ba9a20f3657fb7f676cdc56d88fe7257d91f3db1443004e2cfde7b96e85f19a33824e463132d2597481069b7d3d1681e11bd80b7f2a4309c857b48bbd6d8150

            • memory/2816-2980-0x0000000000400000-0x000000000041B000-memory.dmp
              Filesize

              108KB

            • memory/2816-20154-0x0000000000400000-0x000000000041B000-memory.dmp
              Filesize

              108KB

            • memory/2816-24344-0x0000000000400000-0x000000000041B000-memory.dmp
              Filesize

              108KB

            • memory/2816-15228-0x0000000000400000-0x000000000041B000-memory.dmp
              Filesize

              108KB

            • memory/2816-7876-0x0000000000400000-0x000000000041B000-memory.dmp
              Filesize

              108KB