Malware Analysis Report

2024-09-23 05:00

Sample ID 240613-jaslasyhnb
Target 17751526247.zip
SHA256 662824d8d86f920f55333234fd5648e503202dc297ce7e7c34b5a10b039b43e5
Tags
upx bianlian_ransomware ransomware spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

662824d8d86f920f55333234fd5648e503202dc297ce7e7c34b5a10b039b43e5

Threat Level: Known bad

The file 17751526247.zip was found to be: Known bad.

Malicious Activity Summary

upx bianlian_ransomware ransomware spyware stealer

BianLian Ransomware

Renames multiple (6997) files with added filename extension

Renames multiple (7889) files with added filename extension

Drops startup file

UPX packed file

Deletes itself

Reads user/profile data of web browsers

Enumerates connected drives

Drops desktop.ini file(s)

Drops file in Program Files directory

Unsigned PE

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-06-13 07:28

Signatures

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 07:28

Reported

2024-06-13 07:30

Platform

win7-20231129-en

Max time kernel

68s

Max time network

16s

Command Line

"C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe"

Signatures

BianLian Ransomware

ransomware bianlian_ransomware

Renames multiple (7889) files with added filename extension

ransomware

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\system32\cmd.exe N/A

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Recorded TV\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Hearts\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Chess\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Purble Place\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Solitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_super.gif C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Istanbul C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241041.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\d3d11\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239973.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ERROR.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL111.XML C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.DPV C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\US_export_policy.jar C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\create_form.gif C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151055.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5F.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.properties C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299125.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-5 C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32F.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL105.XML C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152556.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SPACER.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\kn.pak C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105496.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\System\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00253_.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292272.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\APPLAUSE.WAV C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianResume.Dotx C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199036.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\defaultagent.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\MeasureRequest.contact C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21305_.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.DPV C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50B.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe

"C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe"

C:\Windows\system32\cmd.exe

cmd /c del C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Public\Desktop\Look at this instruction.txt

Network

N/A

Files

memory/2220-0-0x0000000000910000-0x0000000000B6E000-memory.dmp

C:\$Recycle.Bin\Look at this instruction.txt

MD5 cf2d13105561b0290021ec8c5aefee68
SHA1 f7e3ce92530981c09a848fe3e03b67172d366c15
SHA256 066af97198bbbad84a95b9307425e4b8211706e9afdf93eddb9de108ac6f0c5c
SHA512 79a25f9427da1473e5697f412eed05d8d02a58e1783ee0c19208e9e1a7d935707c47ab4be287989b0949ca3171872d3b733c49522b2db90262307b2b8933e474

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL

MD5 bf4463bf27ba9bccf4e74f47da319243
SHA1 c892fb80349b171564cba45a5be7bdbe72c6903b
SHA256 55f0f5f8f9956fcc81dd3efd8e7d436bbe394f065e85bbb6b6de97b0f4fb2b84
SHA512 cdd175942e2efee1041ef13d85a41cc47df7463913dc80148595a2409ac9dc84021f1dbcbc661a826dca5965b41e61ab801c1b152c41c8452105bbe0408f36dc

C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML

MD5 cc3d5051603aeee456108809a0415f59
SHA1 f84720e7d3ecffad1ea56749b49744331f4a39a6
SHA256 5f41d3780f4ee846cde6f6655542198844370a7c0eb2bd09259d8ebc92cf9bef
SHA512 2bbfeef43fec16fa6044780b4d1313e963dfc3945684b74df2024a97e6ebce29f0e7ca2c30236d05fc363e57999e215140b89fc576212df69af8b42acacbeda7

C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\BTINTERNET.NET.XML

MD5 6b7745fb1ac98f37d6fc2d7866fa7d2a
SHA1 95499463f5ae734387a576a7667477a3e786d725
SHA256 3d2c6fcb73295e4015c512818e602db0f25e9aa2744342810e44480e2512b804
SHA512 59203cd02b4527b68752d587eb67ce1df5301cc1373d41430be833f38ae4723682ed4391f0e6842ed2a8c85e63eb9eda047e6b6573aefa8fbbb485179768adac

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML

MD5 971e55d47f6abc5049e50497b18baa3d
SHA1 2a9434b9ec8e3534ded0b31b08787aed9614e251
SHA256 c9c2c957b808587b8ce0998c5db60d3bb0a61450b61f2920d253264eeae1adac
SHA512 93da6c84621a6ca3ed3779c883d973dc2cc128f3dd00365f88f7de9f0f34ece7fb75aecfae5b057bb44febb176998971645feba7166c922ed6449f944f1da1ea

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml

MD5 27a291c2705622e88a8edcf8ffc969e7
SHA1 60b9ab543ba02cc39c8144a4c05f2b6c27525ee8
SHA256 5a79aabf33ec3e19450987e8ffa814ae0a04ff0b5c400117b22d17bbb12804ce
SHA512 4748dfedd0905e6365eb87ecc02248fa7efe66593136ddbec4a8c158bffc953df6f059270634d0c674b3726d1404efee013641cbfa8affcfd009936e2a6c0863

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini

MD5 826c83f2d48781992644729da8252c37
SHA1 0266ff7306eefcb98e510b9534810c38b17ec921
SHA256 4c0fa2dcaf3d57287052ef1acdfdaeed1cafda1f2e481c266630a147efb8d9c2
SHA512 71b1db2c54165da884634a57266eb9906af6d2a42a8d55f3a1654e06a45153cd061a0387729e3d54dc2034588d9a4fd53d6f267131c78aaa2b057080f0fc8850

C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK.bianlian

MD5 7ca403a6daae1c3bcef1cf37dc52bc9d
SHA1 c5e6277531fbed5ef3a3d2dd3d18f7f3c2c7a7ce
SHA256 86c92995249b854369743c3f66b9f6c725a055548829c2674feaf86d94a09d21
SHA512 584bb212a393a0002cfe13983ac75dbc6ce04bab141d0998e627084af19c8aca4583a4bcde91f2cb78c9b502deccf5e234f2e88f348e8908977f0f721095ae85

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK

MD5 f814e236211d756d69a3785816a433b8
SHA1 a8b2a2c272793626b948e0e9a38bf56fad2e0d75
SHA256 3b6e881c39bcfb7d75fc40d633d499e8ff2b39e5a8ce50e789124791e53f619f
SHA512 4f6001c1edb9a9a76c5aa79fae062daeaf801d972f475e4b3d418b56d87c0301fcc934800028a99caca91ce90dbce2802c5ba548f70ef7f010f2b12a9cb3cd80

C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT

MD5 7e8bd1fa938136f9a375e11bafac504f
SHA1 f5b9d87e3cb3945321bc898f8a781bb441ac32a6
SHA256 ebfe5d8e46d7500466f46a293528be84fd5b8499e7631d957e937bbd98256e97
SHA512 1f12c19a8fbad2e4906c1410f257d29c21e88d8a63172226a816ee432d73792f19c19125c7da34856ff4849b19e738baea497f007105f559fec5c33336bd90fa

memory/2220-13767-0x0000000000910000-0x0000000000B6E000-memory.dmp

C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif.bianlian

MD5 8b2e70c106ea5c43a3a06363952897a9
SHA1 00efaf34e7c2baf58cc47d08b939a3146b8d8d84
SHA256 a41a76e10db41c6df829d95566c54e131047639d1cd639a8a7a34ea27a2e8ea3
SHA512 6e4d1adf7a897bacea472b3e55a5d1e796f32c001a2c17fcc076ef1c0c569c34dd06670ad86db843b651feced292621227026ecc862642cdd53967c5a875f048

C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bianlian

MD5 f8e955ad07e5670668de24433820de24
SHA1 86ec515f1fbb1b637c1ccadddeeffa5786a7b9e4
SHA256 36d6609c36ea9dd83de9ff46a5e00ca7289e8b632fd9afba93d3936721675c9d
SHA512 475d7e9e76dd28db88e85df8c12b58291c193701451457cd4713e1879fd17234bb9b1eb4a667f988e91f9e0aa8e356f9ebf577ff98561913bd2284378e4175c5

C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo

MD5 646080707371cdfe9201252feb71b898
SHA1 eb74ab73c7bf040dc4a4139a2777bbd24e2740d8
SHA256 b2f86a7bb284249767a67534aafcb12d23c43f5779110818e8217d222fe5bc85
SHA512 66671c89dd64fddc008faae3ba04d2d55d7862f3ce1514da7d86d25ba61c4d9da6e210e56d239c4b813f19681f25b7e3b62fa4c9da3a98317da1455f7b9d2670

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CET

MD5 c258b1a397740606cb02d1e2cd84635f
SHA1 b7d62549d9f7ec001591c898f856323d1bd837aa
SHA256 bfab369fcf5e925698e0ddb5915d1599171ed692991b51fd2f6900e8c03ddfbc
SHA512 07731fae2f031947b136c5749836fe587abd63fc8aca07526c9798f698d7b474856260542a24afade8d24fb78127a9e016172570b8e03fed8e839aaee283e831

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_ON.GIF

MD5 821f87da840deb1b03d28c6b0b6d84e2
SHA1 2537690b35d3c459fb615cd48df9f9e1cffba83f
SHA256 9dff046f947f9652d1c1e6d9cb081201c32d68f753bc39cd1941ecffd15a41a4
SHA512 f72803bef5b68da6010e671a43d6092e1cf44433d6751aecd629e3513986c19e305010d54c3fae26448aad56e7f19f4fb79498bddb0489c96bc764e2f8e6d8b8

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_OFF.GIF.bianlian

MD5 29e18ab47327fd77b2ad73f6bce95740
SHA1 a2b98b49bbc11aff2e10966423924731387fe1f8
SHA256 7eafbb33a856e879b5c59a820e677e7bd31a02227bfee1500234a83f0bdbfe44
SHA512 ec3723b7db747017c909f576859773138abfacffce29460e4f3f36c526248508ff3f74ba2762901421637d7146f80665849bb622ac3dba7a95dfc1fb71f88112

C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo

MD5 4177077a624828bb111ed8e961c42361
SHA1 f0da41c705e059ad1dff220e290988a925e3b331
SHA256 d094d23099362b3dad8c40f81d9bc45ba0ef83700ec39fc73fe6998ac651f6f8
SHA512 36876898d29e8897c111fc0e3f2e35d00ed4d0be3a7f199fa416d86024567995ed4351678a9c9b1b0947d5b08c05b20cce823b13826253b8c641d13ca5196ac6

C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties

MD5 7be7a35dbb17a33c318b167f474baf2e
SHA1 1db6262a3dbf5fd4c3aaec116c7b3cf953f09546
SHA256 27a69d656ba312c8e745991e3e21c109d0efc6a82abc89002f65e405f32e7504
SHA512 8f180f144cb6d6a824495f256b050b22e08c509d354613ac02b71e55a41d1976bb5a0855c0031a974aa3c25a93da34015375e2242fdbb56c48fac2812b9b480c

memory/2220-16310-0x0000000000910000-0x0000000000B6E000-memory.dmp

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif

MD5 434e3f9b4453d3f114aa6928cfec9c74
SHA1 743b1d8b17a3cb7c1fdeee1d85b12bfc90b7b327
SHA256 e0935c4d222d8b607d51cc83777a4a99e8501d89d5af99abf38690ca572a49e2
SHA512 a942079c7234a5af2073fbf7372c3e55b77b69ae52d120cf0d12f24bbfed4073ec64d6b336128817e56d6eb5c7696c132c275fa53cf2ddec79b24e9322f0c3b8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif

MD5 e136cf80a91f230ef4f462f0eb33304d
SHA1 6edb6a6a06519a4901c262b201372c86ecbc40a2
SHA256 7ad9280a6390e54b1b46bc39da7d0ef71754d08caa538969f2681fe1ca40f495
SHA512 c2f8f5b6c4503bf0e5d46dac7891cb002738dac9bcd4560d4dd17701d92362685edccd7d27b6197cc08fb6e22a48da31b1bf40757029e116994c177a775f5160

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif.bianlian

MD5 a1f9102c564774025558c397b86c981e
SHA1 7cd264add351a0b09d1830157e60b623471f3c3f
SHA256 665f83570580f7d8c09e4026be4099ead8360704a6ca767b1a6f3afbdc8866a1
SHA512 f474688b20ca6fcfc9793ddda586109a7871f6228c44bad55c7b8d6695619001b243ab81327156185b4180b62d00750d30c84b626d2aa20a43401a701485bce5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif

MD5 7c44c1c5522a45b007a1a028ac869516
SHA1 78964999b1b4abf27eabf2b19363524eae254fe7
SHA256 3b595676509dfabb0f4ab6e6172f14bacc7c63628f9adab0952bd9d7eae6b7c7
SHA512 9c0341b8c3858460ae565b3fcf286c5824391a8f2c730b8ef0742a4bc190e9b19c9d8031dc86c774d98056d26d21de505f6f8f73eb1b5f577a5d4c8764f7f6dc

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif.bianlian

MD5 53af3266d8f6420a0de1d07f40a0ed1d
SHA1 3a97bc4b94be660b92dad863cc11ca52897ba82b
SHA256 bd734d7e87ae13069d5fc36de91774cab5e013d1f2fcc87a077e4a574466bc9e
SHA512 be89c17ed0620382dd31f3835cf62f794fc6bbb63e49e7146cb7aaba5fd729c5b7cd5e436b9c6a1082b75776f6eb29fcf134cc61a6c390e320be8de8daf14fb1

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif

MD5 e57a75fd86ce86ca4492e7f3c4c64fe2
SHA1 66b2decd899dd5a5dfb7a49a4e4cb7d8e39a8d3f
SHA256 5c64498ae08c97cb7f957c8386a2911d3aad8d662fbe9640d96e5ab4038a7ab6
SHA512 f22bb65e79f3e529bd3b32937eaa4bbe668575dcfe5825b9db5adbb882a479ed80dd4ab443da98ddf5a754b499a1f4b068cd7c0be4cc4193baf05ba1c7d55e10

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif.bianlian

MD5 a5ed513f48af56e1fb7f55b114fe9911
SHA1 bc3afe60a7f42053d10cac7a3338e4db972fea12
SHA256 9af5895621bd7fb4a06b3fc0cd22324d4cd9dfbf855b1a111a2475e6c5284b5a
SHA512 ed0af16c9ac26663908dae06eb50f278083f8e9d02195162de3af2e5515337179afe491eaeaca872d902e127fac299fd89348ca14a1a2b3f784b13a7539966f1

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif

MD5 e1c9c09fa25229d2f55187b08eb7f4b8
SHA1 816a1e206331447432ee52b7195311b194b24abf
SHA256 5f70911e921a4a3eda811da006dd2dc87cc3dd486ed72d957e51612fa372efe7
SHA512 7900ff5c7ca0fa996d404f9172b84992acea9ee6cc4b1febe8c68612545299d5686324a15d8a9456bca05f2bcd92c2ef2c2059adf90235682c20229ecbda1747

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg

MD5 e67e82fd759e8b99e9dc9d16e13704e5
SHA1 ce4d5d12293812f695cfb2f73cc95153d282a9da
SHA256 d0a9c355e25191b93817b4dba9787726c6b502b429e803c43ff1a73286b13b56
SHA512 c64b0547fdb697c21bc21a1e4df409169da505503afe1416bdb9c4fd8d46601a46d385aba8b49ea0f6d394852524b65741ee228c99d429af31a7eaa23cc6cf9a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ADD.GIF

MD5 e97fa7f434f1632d1d1408d120ae187d
SHA1 db790a3a2984d0312586a23cbcadffd5114a4d33
SHA256 9e1df363a5547d08a6460a0075fbde3c53edb57ddadab999882a853cb9417f53
SHA512 be2a29d523a7fe7e1cf0b15d73c03c587f35963a306bf1bf9e92af1a01944b8bc6afebfbb372cd09417cad3ef2a7e778534355a955dfa3dc7c9a1317a7427a74

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp

MD5 80f4df5d5a9a266741ee5b69573c90f6
SHA1 6739623123d7f615dd9f20e4b80795f42505ead0
SHA256 b530626ed85ce71210f05afa0d5e51dca2a4f14ff6891f68538be42bfa06d484
SHA512 73df0acd5ad5c3845e88574dd37509e7e29beb95279721f788bec913114ac3cf3e2600b655b4b42947c25352040cce067dc7441048d287292eb71ba61a8f940e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

MD5 df5c98fb7c8544679560d3894e94d4ad
SHA1 cf775482a9db45960bdedf53c1aaeab9d09bf35f
SHA256 3a63c72613acec7042df1800c287ece77d966646a0298a3fa96af67fd48acbc8
SHA512 9401d01b9eb3bc6f0a33448983d44905c15a50b3b1b3666b24d460bca0987a51571cbab04a03bdf3f7f48fe79c9a8f103bc48e908b0f259db978f3f370581a2b

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

MD5 0af5723a3ea2d47ba229364bac9cabe6
SHA1 76ef17e32daf8ed4cd8ace1044856f89824f215f
SHA256 4ea66af6f262dcbb79ff0e489150a8fdc5f6e1b70749ff98861d6a37d1655f6e
SHA512 83ea0ae6bfddce645305808f0f77e2bcbaa8db61814e280e501ac28663cecbfbed542d2f5264527a8189b43f129aca62684164dc650977feb4351ac4e9395826

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif

MD5 aa1ec3001662c0b08da97c0d4ca44ac9
SHA1 a1ceb074a6cbd58b7e86514033d9aacb127314cf
SHA256 fa7a3d1f19a917a68b6c0559c92477b9b56874fae8dc8fe4958023e86afa79fe
SHA512 0c47b3810774dc8c479e603482d0e58cfc1c4d153f7595d5ab0e4d86a3c14cc747b4b2f54c31b6fdc14f582709e132b41d449f169a614287cc48aed3d3b09ca5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.ICO.bianlian

MD5 78be86e41cb5d13eb0bcf33d29f2ab12
SHA1 0a3b174c5e5e99489825d5a8c6d0c51e52dd94ab
SHA256 7963b105af1ee28c95653fde25f460cf3ac3839806c16107f8f59503463e68dc
SHA512 25dc963286cbe8c58bab8e5e864e4138acfe74ad565143d04c8a1acb25589763e97bd9edb7bb44ec5cd57e6df3bb11da6e5589ce107282905afa75660b598366

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_decreaseindent.gif

MD5 5150e4a123e7d3cd3328d4a3652cab19
SHA1 2033bb07ced326a40c68fef8d1dab574228d1af0
SHA256 ba6e54c89643dcce0350b989ee8565414b4daaed8ddacb0683a341da8cd00ed9
SHA512 5554d8f2d2409755e9b753a00860e7431f3224d72880168bed6ab306776229409395ee9c333452cf3eb7ad67b91ba5dd8edfadf43165c34f93f53e9b5451d59d

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.RSA

MD5 f9d3983444241c3e9bcf00261a2a81c0
SHA1 76923ed2d2a26de1a6fc90791bf9ab26efa78950
SHA256 4c86e1463513208789f3c4898f82c56bb42ff9b43142c4d963df67c003d303e7
SHA512 16c497afa40b44567ec19a63f191b1a39d2ef26f8abb02876eb579738995a61e1a9c4b52eb56f58e5e837ae2ccbe90d602beb3dfbd7a342d8a1a621a2c18fce3

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.RSA

MD5 04e3d19d7c1559ef2235b3b2ea126771
SHA1 f69c6afb23a961526498d8421a8a249e5cb365e3
SHA256 c03d0213e5bfe80f3e61751a79831acade7c5aa43fa1a443f0a80987392b2457
SHA512 8056b16bd81475be9849f60aaa8bedc9e46c8a508b29107affebf243902f695626b5e29c3d7a890fd2d53b5dd6b1ff6e3dfcdc4af4c3e4d3796c2ec450d13303

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF

MD5 aa2d9791d91f64d5112606ba67f8b4bd
SHA1 7bee62265bcf1c207441f7c27e3c58a8f6fd21c7
SHA256 4e8cbd0b643b0295d425a1b9a63529de2bff421aafbdbda99010af8b08860b37
SHA512 c13ba0935d663b83847cd610ef2c07132d145d485da3d37a7ee2499e4315483c1a4f0b1da543b311f984c6e287ad10aa27d3384b99e0cacefe4e35103b26eba1

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif

MD5 82cdc5c733558aa707033491eb458026
SHA1 a0227166e230b344732f532d7b22d45fb0f59dcd
SHA256 f46af96e1be773b674bbea438a3e11158aa93584e3ea6924c2ec13926122db88
SHA512 70999d24ae71ef6bce4208d44eedfe49a141dc1bc044e503811995bf81c2adaac864ffdd6b127893ca96236f8c6cc14d4392417b8ee67a034c86ce71ff8d03c1

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg

MD5 ed2df5be590e9f4032610b8aae05ce2b
SHA1 3c7e2d4d428c7e3e91ae31504dd2189aa5efca9d
SHA256 7121cd548271b7b3eb197dbc34cc5b70280baa6994931eb8a5b9948eb42a1e28
SHA512 a244f576f9304b6e73ceda10eb03ac1268cf7fa54d86dd44963715863be9bf012d3f9f7f36eb1193234a501481d13356cfe10300bdde04a11675b9954a4b91e5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_pressed.gif

MD5 fa95dd80e2d6044a3dc1af5a43552e81
SHA1 501b32fec68173bec1b2bbfe4475b7939e124b79
SHA256 5db5bf697aac18500471ce3a939f2a42c8bd41ca9c2d54070bc499ff7cc2c87c
SHA512 f06cab50620c046cc47e0c6fa435bf232b1132475d7e17146c9e02ab5f613d11e7084fb2c10093221fd8f9d1526b7327e54d4499fff1ba43ee857b6392ee6e59

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_increaseindent.gif

MD5 893092ea469168c6adebbf217b849123
SHA1 e388c0046bdf99e1dc87d01378f9c515ef760cae
SHA256 54a899767409b79b5d7de1fa5e9757e40d48ddb720333faed4217f9da7c88d0a
SHA512 51b8d142f5e5851d6dc2bf025f16a1f619b2c9703450a94d80736f807acb03eb85acdb196b8cfff34d27d9a8e77b97ac72a42b64c8145a936c6d56e5da12e1d5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\attention.gif

MD5 4939bec7ae7a2c45e278a7346646c531
SHA1 bc669f287a584768e9aefc19a6298e1a136b0a11
SHA256 50c3c5b85cde68567f056809a02d17ac641b232902163e60634aecc28183a9a4
SHA512 5676f3de58e432344cfcc72bc7d881acbe42ae119620a50b12eb70c1bf1d2152e2671a0a1a8331254bf4b1c09ee1b61551efd9e975322b4368ceb91a1fa75063

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_italic.gif

MD5 c2461275faff6bc4fb35dbf9f802170c
SHA1 ae4b85dc2179168c1523784fe65ad0dba98fa5d5
SHA256 3e1271229d201fe57983a8bb25f951e37c4cd553304e34052bcfc33fdde63545
SHA512 106062ff6ec4be5f14ce0252463fa6336730ab2fafdae52f4d9a54f33c7db67a6b9df6eddfc0560a60ddf3a013af35e08079c298e63edb43e8abfe3c4185e816

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosefont.gif

MD5 704aca536bda88e579f23cccea585e1f
SHA1 d8a97f21a59978db8b6b80d91d3e1b45e749e165
SHA256 177ec2036839dcc397c3187766580a1ca5bc2be2a3784e667de6196fe7016ff7
SHA512 cd7d80d774d4354e924200b870b68d1db72fca68d8cbf8809ab142c2c256d0f1bcc729cb444da3eba808c7f38de325ef332dcf67868d14357151989fd7507033

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO

MD5 da5b43b0ced904bcdbe8a2b2fad03b04
SHA1 0e08d3d66565d96b22b7c2d614e19fcf8fa68e05
SHA256 cb8e850ddd64dc016d7559cc627c829d5876d2d2257361b9fc4aa35fe7ec4973
SHA512 829eb7b914dc200627ad14b2efaee8f4819037461f532a9bbccf3c3a0f50804bfff71af284781a6e6016de6d8435bd3596cd11c7972e5271769d571706816bdc

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\BUTTON.GIF

MD5 7b0df406cabfa8edd8ae28c4b31b317b
SHA1 1b231cf46b0cc2f50bee5e578e80ce58d7678871
SHA256 bfbe916153e598ceb387dfb1bb9729129deef2d509c2061be1c8a55a68655898
SHA512 3367ef4ca0533a5b166ab822b8efd3de238519d9e52451dc2bb99ea482446fcef2b59b8552e5908da44052b519e2533f24d0e68ec0f776158507efdad462c03a

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF

MD5 b63b01414840db2384208cdc1d158bf0
SHA1 86f88066fbdfda5d265748428e28508410bf76cd
SHA256 20bf3d89e93ca4da51bd1aa621ac5f0269840420ea57957fd4cf6fba11763232
SHA512 92c98c51af0bb33e2bb0c09673b1c746148dff40900c1907f92e9e1869bcf6d3b50989b37413998c74b40a025692062917ba879e8317ed6c10726d11c6f645a3

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

MD5 b449af848a93c521eee755d2fd10cc8b
SHA1 1e4c768b60cc46da2cb7dd72180ca5eb51f439b0
SHA256 fc0a8ae89209c72f1c7191ca96186e471c2146bf60294753d1538a34b2eed5e3
SHA512 eeba7c61b09d2f2282165121149df09a339f49fd67cc9d6dd2e587441ec0f15e2454b0df85e2db54898ce3b57cd0e98a3e09c56ccaa4c43322451097ff7e6794

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\CALENDAR.GIF

MD5 1112842496476d3e7117eeb2d51e795e
SHA1 92c934a9007bd94d64831aa8c538b987e70c168c
SHA256 4845165121270319946c906b0fd4e577130403a630186033d9db112862abb6cb
SHA512 a3ec51c86364c0cfd559ceb9f35c90d858fe29343733549cd8d04dd4784ed568421d846ec002ab14971bff4d074dae40c352cc993262c16cd0e740d6feb75d41

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

MD5 a66a7432ccb4c595959d331a49716431
SHA1 ba010174359494d332fdb1e70c9155c1e52547dc
SHA256 90ca886c6ca301b6288925f8ef03385f8c55d03d983f8fe0b2ae39dc38f6bd4e
SHA512 10a28bc534be84e52f014b097d410752f3943ad4c9cebb05cf787c9e7ae9cc5bbde4000f37cca6f598a24412f9f9b55105f660322c037d1a6af7b1caf6f7fea8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\DELETE.GIF

MD5 62a49f6f0beb6c4d10be7bdaf6f3b59b
SHA1 61e0890cf66013fadc5414e6a94af3a4eb76ae19
SHA256 ffe1d80587a4d0642d4ab68555b63c30a819acc51530591b2f5bdd6af4967761
SHA512 ce56c421dfb1363daddc2e873a63716913b06bcceaa318bae82d4abd0a8a9317de36ae14d43b0509c8800b84ba102e2973c53ec8b18a54b63010725c5fc63542

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ERROR.GIF

MD5 d75e83b02372d0a03a00d556725bf4ae
SHA1 756184a38984d1877c314d5d27a3e6f0b495ca59
SHA256 e7c634a7972368d11e8b18b204290e3cff9d2b0ff529df35a954ded42f724131
SHA512 4442162db0a0eee727a59e356e36d6dc3ab9a6ae5ea56043c9f1d77bf3a38ffc5525c0f4d4e6258ea2a43cb8de6e73a20f9963001d7ebf5f079f1840bb784be5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\LAUNCH.GIF

MD5 c8fc2326e42975c55c0cdf4d784084d0
SHA1 8ed48288f3fd846596c703dd3b6418cc2be306a6
SHA256 f5ae50c6e43643ee292261cffb90a89d31eb6c995171603a49824ea4ecf152fc
SHA512 242734fe5621eec13c9f6d105650ff83e67bc6ab4b41262c7730dda3a38030fba22e343fd5332d7f1c5e152a73b0a13c3e1dcacedfef3e71186e750383809f9c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignright.gif

MD5 72de6494fe7dfd16bc1a6be6b5c620f5
SHA1 e791a563c9a2d5b9b057df0f0658d700363a62fa
SHA256 f1219e849188398fcf79511eb3e5194af4f8568184165b97921259e454c6df5d
SHA512 935b2e3f53b02ebe07fe09f50db43c74eb536563ee15a8da71d0f383c63d00862be5c2fbffd7349312feb1bbf4ab7de897165556d314005f958de410861cfa8d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignleft.gif

MD5 cc7d20979a22abf7b17bd269c524967f
SHA1 a606c9ed12be855dca21221b544fa41578e5832f
SHA256 b5cfb57d78aca0441bc4d6961e1b331d7d7dcba33cf76e41dbcc82b717a477a1
SHA512 da96680cb2eb8b313e8837cabfb8be49cff93ceff3a75505cf3bc3a753b3c937e18c159ccfc033b7393eeed96ca9d5a8760cd2ddff2d5cce13f9ca46451546d0

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\RTF_BOLD.GIF

MD5 4461784fc32922fe23bbfb4bb700b79c
SHA1 fe43be814048ed49edc7c772900c998526992cbd
SHA256 0c5d5a48f14616e2d8bb81be78e1ef850af4c450736934e36d2034ee9a43a6d4
SHA512 49ed489bae43ba9d7ebcd206098d552ba4fa2fea585d48b986e48d223643c1b70bb11fcf208d48a420902c068c55fd44f629b8a2a391d64c8fad4887b9d54d3d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_bullets.gif

MD5 f55d4cf8ce9282e16bdeb8f904133270
SHA1 f303a582f4a6281420302a981a5084cd9734dc3b
SHA256 2a0480ffbe74f78e07422541805491fa0c89a4a9eb7fd00bb32f1f905fa6e4d7
SHA512 8bc8b323cc5351d1451418c6d9b488a49f5e99b55175730df522b76a74cfa6590374680963365666f6306ac8f88f3a3928852634a6da1fdaebb2554a63c76688

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif

MD5 7dd63c757292c2413910b6235c2d23bc
SHA1 54405ac3a76b309c6da449a4406b591491260d56
SHA256 e8871cd5f7c0e9fd229dba95ceb40ebc04153ce87965d5a2624ce4925f4c7dae
SHA512 10aa753d317728ed80352f286d0662ec2fdab20b68003353f4906c0a8a6462dae12f5b38206c0df7cefdc753b6861fb21a790b4dc764d1bcee05e1a0d5262ad8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_ON.GIF

MD5 d6b39351f809acfe5c535d304b2bb983
SHA1 18f47c62ea2670cde8cd665000ddeb8b0094e326
SHA256 baa43c8ccdc2c8ac086590470b95849b53787f014fddd2f377a92b57ceedbf35
SHA512 6fb61270689e747d8801a19db1438cf04f2a3010094212cc547bfb9bec67b02ff270799e14df16c21bc95f9f825ea3d07cf59618c5f9d76b706648a71babf813

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_OFF.GIF

MD5 9243ae0c6d80a96c7b3ae5ef563c35fc
SHA1 f58f4803503b1d8f107461e595057259c7deaec6
SHA256 58d839a5a099288cd135b9a5729a6c51b6fab93235952ee9f74a3dec92007df7
SHA512 7ab2513b262f11ef90c756b60e9e35102eb210acc0a140b28b9facbcbbcb29090698c8beba0eb5eeda7cccb9902c1d301ff69105766a7c0b616cee1a2cd7ffdc

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\HEADER.GIF

MD5 36af9bbcf18b164dcc096807637a0787
SHA1 af5197067d8616fd441708eb44c2946db4d8d7a6
SHA256 98e035cb455104f61f8d71ae230a3ba88cf33e0dfa14afc6ddf4b088368895a1
SHA512 e73ab1b02f822a9996654617c12dec86d76ed1bddcf4820cc9f0b66559faf31dbc2abe0b4d96f63c6f3d244536a7dd1dec927ff9b9a3aa0dbf38c5a2f3b776db

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\background.gif

MD5 5e77e4ae04767e01031d9d60dfb8ced6
SHA1 eb00e5cb8f0f3eb49c98e2628f1a16c30091faa2
SHA256 332152af670caade92172bc16c523ae9b186cfc2f2570913ad51bfaff99216f0
SHA512 0f2ee88681e4ab59758356a080e54d71b28ae894194892ea2424058c81d04315266a6acafb999bec7cf914c5d31dd86834df704c204a8485a08bdc2999c26fc9

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\background.gif

MD5 dee37f71e233c98fa087e8ad0704584d
SHA1 9b853ba74ea95efdfc9ce7e69dbb1de75ecc9e2e
SHA256 106206331481b75fe40c0ae661155ed01f3ecf76f5bf7c2b8ae5e67642ea3759
SHA512 53d8b75be7d23632307852955e15395af3200a757e98c7d8926153af2c87834dedcea054934678f692bb04976a30e939a1b767427314e32eb3d87267d5aeb97d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_on.gif

MD5 cb828e7c1f780ac04ee99bc7ed876698
SHA1 30c2579fbc67e3a736f9f8e3df06ee6ecae9f305
SHA256 6b85346bf76e2298d1d24c8c018b835f11f38e5c2ea1db9ee8197397a35b9cbb
SHA512 0417be5cf8f84ba95045b315f2f4407268bf732d3d5f7f32cadb81c62f4d58823548a1b71906d5617b8a38587769d6256b9f9121c7e32beece50eec3f7ddba68

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif

MD5 4a5f9012d7309d10702615263b68ab3b
SHA1 de40dae0f518b94aded97bdc989a327c25ccfb81
SHA256 141306bdf348f0c4005086e3280bc616e2b2d1020147a2d17b2cb70b26c2db40
SHA512 77095f615952554f8cf10e80fe52512e79c69e036c5e7f1875a6389ba8f30b40acb02a5d9562ef0ab559aa0e1bd7fee27db66ce789944e99f208dfc3c48fefe5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif

MD5 18c0759943de4fb99506b7857e92369e
SHA1 ad0f7be645b5afa8b8962689b948e602a55d8f64
SHA256 c251a1496ca1da880bca73aabc83df9b41641fe39a893121d49f87f129502ce3
SHA512 c6594aed179e370e8de4ea10e3d4030995f348cc688319f977b93687d1786b636dbb1b4cd65ed838b06515a5b5d233f0e521d6c4f298ec275b196774b33d8ec4

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\HEADER.GIF

MD5 cff14610211eed141c985f6973ab6809
SHA1 4f92a0eaf4359b92a4484376ef9440b84494bdfd
SHA256 74819456051f036711678d0c2113ce7e4d7c4a075494150e3a8d850e78025eec
SHA512 37e6b3c2c41d8f94cbeb16ebdea3096f65ef4d6db02bc16f6f2eeb3e3372dfd5acb5cbcb2d1f6dda1f89c8013b43edd1eb516a2490602fa1e344ddb3942f3878

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\HEADER.GIF

MD5 7311cae0033db63712a18d42e345c156
SHA1 bdfe727915b488962afb06d6df6dc86830243665
SHA256 d23ae574361abcdda8064a57ac0cb3b294b1ef693de3b9eae880ca9f93b159f7
SHA512 5d093d089543632abfb1db77a794b466ceb56c9af739de0694eb1c929477e268f11739970ae171c309da567ea84e5867936d6f68827eca049988e3ec276c65ff

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\background.gif

MD5 f16e7488dd35c3fbfd1c2ef2a880abde
SHA1 ab378f55c689916c450e60ba252379db9d6929fe
SHA256 26ec55d6706706b56d0f4ad7cc60a16304c9ad631735636ef4c28f4be629f5e3
SHA512 0acee711d615c2ac4f2d0d874ea04a307de7ffae68bf7bc33f51f8821be217746d5d085ea02a2679f0101e2badf5dae64898b45944427ed7989053db7830b06c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_OFF.GIF

MD5 c5239517eb2110f7d6746c5522edb0bc
SHA1 aecdc7c910aba7bcafe6405707deeed4fb60cf58
SHA256 72a0fa68fbf3c094728a2a6651dbbb83c6d1df153669ff90fe4c04eabb830b2e
SHA512 9a7ce5c34a8e90e35ea4ca043a0d0210995587003410082854aad1459687a920deecf30df63dc47589a9bc71d22a9d9963f5e0d50e7d529c015c382c8affeed0

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_ON.GIF

MD5 1f295d943e5dd4892cee0fdaadfaaa38
SHA1 c6b6943db6e456b1030cf7002cab9bcf3a0d5a19
SHA256 29df0a0508fdb4834a864832074ef1c5160f966ff327aca79a01f88df1e2ccbf
SHA512 e3203cfb0bd4c28f10868f9ae734f4c81722c03cfdf0d29d4916ecba5aaee582a420a447cdadea09d2426b581a1d57076e99cab679c23f2071cd94f3b58b5c1f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\HEADER.GIF

MD5 499e63a5a6b7ea8bea210649713602bd
SHA1 0e97bc080d6478abd1fc6685b2e7d5dc49f96f00
SHA256 d4eb19293643517c4ef79e01bb9ddff279b570ece4ebecbf957bb257e5788048
SHA512 cf72372acf6f71e1b8628a184bb03bac8d2d112da7369738de73033cc5231700c689f24d3fa118d62e5f525ea1c429a03106ff6d0c3b3bc26829812032b9b137

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_OFF.GIF

MD5 67e70ca6eec192b6092a86080c07590e
SHA1 b8a218a560fd4234ae73f9a37f9b1096288ac936
SHA256 4d79d194a9a3243cefa73f916c2c365fa8251b34ce04d7032351f98e0c828601
SHA512 95b9109e3f8747683b8ec088cb0c8914a97979eb65a2190ffb6f0739f93022eb94e4787568630faa4ac26b4c73ac14e4d4b100f551919397b72933e87c92eac2

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_ON.GIF

MD5 1002c893d8dfc229ff75abf23d1a4366
SHA1 4d8f58b81c3f43539600e979a22bcade013e9ecc
SHA256 0d44425856bde37deef9bb2d80c9e6fe3a7c3d15062aa0d08ac2cbaecfe6f9b4
SHA512 52aea1256314d022120466488b97b7a86b78026328a05ebfe592804f8a110bb439890e6f5364c93e6aa013ab020d7e59409f12be6b81b1126c5652a9a0d913c8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\HEADER.GIF

MD5 9997f2e4edc4d0eff4048e0e51ff2183
SHA1 2be38493972e7563d0c51048f65e7efe5dca3769
SHA256 955c668d080fb64b69335cb0513516e38726fc04f9ff603d6bbb7d68f3083a88
SHA512 bdd2cdd77aa9fdd55c7fd8b3e0535b9384979da9e6af7c65f50f8186e2648b82d45609a8197fd27cc1b66ec15b3dc8944eef010a7037885f6e01ea5a4a6c552d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\BUTTON.GIF

MD5 56c86e4439ca30fc7c08c79b0f5651bc
SHA1 b012e8799a459706ef7ac29182a3838d1ee12c3f
SHA256 83486c0f9ca3b7a1dd0893bdb4a4b3720ec419a11b625a79149abb943fa6b726
SHA512 b0e5aff29c2b5f2fcf99e70dd92eb28ab985bc7345ab7ec38745db064f52ce7e634d5df179e21cabc36bc120b2977a99e296c1886ecb165e9988d940f8aa4a32

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg

MD5 7d38d0f5ed6a8636e3acebfb18a53548
SHA1 a03aa78ad39cc2edec26a0620c7bcb7022ea7198
SHA256 d7f1a0866e855deb2ed63fe8755d49ad190b69d0808c15c174810da7ade78091
SHA512 12c9692f04313bd1c06fe9238c19ee4e5b4c9e255e2f72681218dde093538ac7550f8ff2ced3a1e0c53d3f92ac7f10db75244a6ed3fd711cf90084a668df17e7

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIconsMask.bmp

MD5 74a09501d28e7209026885a6c139ad93
SHA1 b4f08bef3a6ccb8c3771669d351faaa4c03438c3
SHA256 8779b24dd05c8dfe11934e24e05baec13d0e7a0c56f42de2a9afafe9bcaab513
SHA512 abc004173933d64e2ae653461bdd6b06a5e4f622e1e994f2014c66ae5c4425f77f020f1c06b44e79245a67277e2a0ee7eff0f94c848f06a30672b1134b1fe8f2

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_center.gif

MD5 e37b4345184cc09fef87fb1e7cb2bc66
SHA1 cbe21a122f7760d01872d832e0cdd2d3fbedeece
SHA256 ab1615083dc85d2d509dc1fd4401bf9abad1ad053fea32fd28b0bb38117a5885
SHA512 f531810f5fb7743ff2da4016875d0029e4b29e4a87d91c82ac9bb054393e5367bf68186e555faab3ad2f3955b213af47e6a46137ebb6682b4c5997d9ec48a458

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\header.gif

MD5 d3882d5fdc171f009ca26fecc03df960
SHA1 ecdb495f876a91ecfd906cf392fd7a773afd31b7
SHA256 8f38eff7105f32a5e59c90961dc1cd994a766a6fb824e54b110fde51b07b6363
SHA512 d1d2af4dfc47ca3b76eb367c952af7f17601684a83647765f9232a735d94965e7f666a4df55f095da92562fe781f09896b9fc35fa29bf4d81add623e71bc4a07

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\background.gif

MD5 6d175e84f09cdfcec86c8c0807820a1f
SHA1 bdc9ec79381bceca571ff31a84476ea4d7eba24a
SHA256 5c509b191279bbb761841f512066bb788e7214b1e1f0b7e21316527c65deadb4
SHA512 6c0da695e43baec0e3980118d01dd9caf04de48e256beacb74d7bbec074ea2a33558c5436dbdff053c8e2cbc9f7d4f26eb147024f99867c30e06d184fdf8c6cb

memory/2220-20078-0x0000000000910000-0x0000000000B6E000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 07:28

Reported

2024-06-13 07:30

Platform

win10v2004-20240508-en

Max time kernel

53s

Max time network

51s

Command Line

"C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe"

Signatures

BianLian Ransomware

ransomware bianlian_ransomware

Renames multiple (6997) files with added filename extension

ransomware

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-4124900551-4068476067-3491212533-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\3D Objects\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-4124900551-4068476067-3491212533-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Microsoft Office\root\rsod\dcfmui.msi.16.en-us.tree.dat C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\da-dk\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\css\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BREEZE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_ellipses-hover.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fr-CA\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pt-br\PlayStore_icon.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\apple-touch-icon-57x57-precomposed.png C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogo.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\pl-PL\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-fr\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Info2x.png C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MLModels\nexturl.ort C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\next-arrow-disabled.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\de-de\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\bg-BG\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Client.xml C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\ru-ru\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\reduced_mode-2x.png C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\export.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql70.xsl C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\A12_Spinner_int_2x.gif C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BOLDSTRI\BOLDSTRI.ELM C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\nb-no\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\hu-hu\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-sl\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\zh-tw\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\dc-annotations\css\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Certificates_R.aapp C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\nb.pak C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\ODBC\Data Sources\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\WPFT532.CNV C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_sortedby_selected_18.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\plugins\rhp\generic-rhp-app-tool-view.js C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\WATER\WATER.INF C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_anonymoususer_18.svg C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\ja-JP\Look at this instruction.txt C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\ta.pak.DATA C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000049\index.win32.stats.json C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe

"C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe"

C:\Windows\system32\cmd.exe

cmd /c del C:\Users\Admin\AppData\Local\Temp\b09117026afdd58f26c2a469df134f97a168fd881e2b7d4a16c3cc26527b54f6.exe

Network

Files

memory/4364-10-0x0000000000DA0000-0x0000000000FFE000-memory.dmp

C:\$Recycle.Bin\Look at this instruction.txt

MD5 cf2d13105561b0290021ec8c5aefee68
SHA1 f7e3ce92530981c09a848fe3e03b67172d366c15
SHA256 066af97198bbbad84a95b9307425e4b8211706e9afdf93eddb9de108ac6f0c5c
SHA512 79a25f9427da1473e5697f412eed05d8d02a58e1783ee0c19208e9e1a7d935707c47ab4be287989b0949ca3171872d3b733c49522b2db90262307b2b8933e474

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg

MD5 e41765d053ad4ed28dce3cdf5a59f1fc
SHA1 80ca74a2d32ab7d99eab2a2c9969f824f91dfbbd
SHA256 279f2c3ab28e09650f6e6ff53bdbcf1de221721df8adc31d2c6264d028ec9538
SHA512 0955d7a85bf507d3284880e26e3b5b73729ed08cda54a44c1936f83f04d48a4aaafca769dd5f80275a18543387c42bafa87129ab313f33a6d59ce52b93049490

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg

MD5 3445eae12e5cd4ffd8f79d4593e70488
SHA1 45517480978c4942d3d94bb582131d88b77689e5
SHA256 3fb8f39fc0c08a668f89ebbdd4cc59e7e8f585655b0aab1aaae48f508ee9632c
SHA512 cd7a819af4c8b3e313c0c482d99da65f55ef6a8fc1dcc6c82a7cf75a78c4635e8053dd3b8ecf9665810d6c942c3ca2fd70e844a42ae8265cd53223cf5dcba119

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg

MD5 5c01cae61b3b0a254cd54f16145bca03
SHA1 d5983f89ebfae9c6cd5ba335de6c767d86b8ff3c
SHA256 c60063229cd1767d67d54fed57ee43ce829357374a092b435657e251cec83df5
SHA512 7c7c98581c98d96b1bb618f558a8e593a3130be07abb753504198d6958b29585a6d99c83b62983fe8295070a7925f7750c06f5666b584cf81124baac2c864892

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg

MD5 f39ae1bdb334fe6f3fcb6c9765b3b7d7
SHA1 d60b14ea62f64e74eac4c66296543ce5cb8050ca
SHA256 cbd7e46da8596c634ae69ba5e054075b990498712388a668ae72485f7431faa5
SHA512 124423ef9a68b4a371453aa8a21cd90168f75c741329f223399a29fe5e23132bbe929012700990c6f86df27ba4be41fd1de652bd03083d60b6c26e163b193a1d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg

MD5 748ad5852186422b7ab525e8486e3ada
SHA1 3b3af3f7aec43dac9541503adff43103b86f427b
SHA256 e36c233518b729cbc238f6e9d73219749ade9d08ff1999d1f4a2998a65c5123a
SHA512 91e5b96289d8397442bf3a7bff0046d94c83c77e44d08fafd45baf00affb84e94cadcbfe245efbbe8d7475b1ffe4b25ecad62ad37ddbea6e2911fc39936a9b3f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg

MD5 677c2bab4637931e201bb642cc0bc2dd
SHA1 4b93433c9d8472777505928dcbc91804594575da
SHA256 e8ce23a6dae6fbc0004e008768cc6c4bf70a70d9e080067fe0c40d287911f09c
SHA512 48d287557e1be46417260941b482aea1efb61a53285597defb866f22c12598dcea0de0f9e3ec65fe0434404fd359115b0c19ba14585d081b10e0975791b364c4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reject_18.svg

MD5 336ada37b4ce3b2120aaa51b821a5b9d
SHA1 59df2a36d8791ce1cd34c5b0225cb80e820163fd
SHA256 0806ef18dfd5049850335387bb88b4ea002c54c02bc0dc175be2ebe88358f025
SHA512 b0a2a9d12c32dc811984625382219ee1cd9801e3d1d39633d4adede0301de10cc04cdc5891647092ff0de40e3602d89719e4b7e83e241aa129ba99b02a9f6115

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg

MD5 f13a02e37657b7fbf9094344529599b8
SHA1 830acc5adf7074f454032c9450ab7d4f185feb55
SHA256 de196293b2231a2d42b1fd21e76858cf1b05675221130e007973b3bc003fbdb0
SHA512 bab76e1496ab9377a1e6e4fec11cb05f5ff11f8d6d5f08e1661c6f7ce5e7a89fd7a5aea889ae7dd2fc9dad5b7dbe472dfb3e49ea8d7114390235dc9023d5419f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_share_18.svg

MD5 7a6088f2c6c290f52bb548e60d0de0f7
SHA1 2030978669eb64a53ef52454c592f3145cc726fc
SHA256 96e16e0990e92479996c069d26362504b04d9a15c7371970a75b66c6f4637b23
SHA512 1e1c6c797e14e2ae3734256b48ea645f68b7c8d1c32c831caa151b8ccf001b1270ac2ef83af4a8242de5347ee814bad8804ba37046483324e92755174467c573

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_rename_18.svg

MD5 db2474d363c681badea8b19d107b29ae
SHA1 f3ac48589c8a3dd6ceeeb28d6a53e6194633ee30
SHA256 cdc274b96d3e8702e3a4e2ddaae083889b4decfc4cb296c5c627040a759340ef
SHA512 61157db947febb15e7325876a86d84c3b1c5bc864368ed16d79ad8b41d7da828d3323c0c2589e5181ff4351b02716d7f4d6b927a7e991a0d902199b93d738026

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_move_18.svg

MD5 6349c810e6fb31b37c1169660b55ae91
SHA1 3ad9683a3435295f43b238bce9572535f9d84782
SHA256 58ddb7a5eec04d70850488300cdd4f22eb84f87be27b6d4ab6518d587ea3f90a
SHA512 39da24494d06749e18cd4942a6ccf52ec02a9f136648af7f66b079c51326db47dc1c77e0fe3e311ee762843dd3e7ea728d462512bcd327fbb8e0fb41f05218f4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_newfolder-default.svg

MD5 273789659ddb9691d43895e00e73a4a6
SHA1 00790c9ccbeaf5552df62d161ace7ad622b750c3
SHA256 2b4d2a76c0b421be6e9a313eed96cdba3e588fcbf8e1fc8513477d5543f9a20b
SHA512 afdd947d82416a58337c005f2a5c4a6722b0ed15f4f7cd839df033d61a47adace3e43a35725bf4f9b29cf9f81beef66ad64de7ca7a2fe8b3e22749f159bef3ff

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg

MD5 235f14a95f9ba4c2c82216ac6d9c18df
SHA1 8fbe6d74c7f2f2fd0d2ef78a19d3c466b113d673
SHA256 7ec66fd9f54de18bbff674119df53d2849f2be7fc6c0441a962d9bbc5f5c3238
SHA512 3f5ddc0fffc1f15adbef0928c0ff000d11a7f431f48c63d8861ea5b42e8130d2c27e77c793cc0e3d48f31918be71e14f9722037c2d9bc476188cee6cd0dd3b53

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\duplicate.svg

MD5 d4b7eb8cadbedb074766343ec6ca5e41
SHA1 a52c436603e3be44f81042bf3cd4395de651f9af
SHA256 7895a2861c2e398ec50f601ad05b54a1bdca0d6eab4a800f7d06dda2ed8d5b07
SHA512 6576d2ea3cfe33240bc5b22e6edde906f12c02513f242e495f72e6d5adad04a0e9e54f8cddf5ba9a065bf1c614113a4a92a14ff0c3283e7fdb9f4b9b5e2a9919

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_backarrow_default.svg

MD5 9a1e818b6dd89c813ae63bfeff97befb
SHA1 1758cb068d02a35994fe0b8841c12379d3dbcf12
SHA256 22864ddd86f07b7bdda509310aba525b851d8e74f8a1736218617f670db97c08
SHA512 564f6e74e3acd6b84cc0ed63cf59364fc3ede184ef716a3d0a1f7c0dad404f777fbe80b8b3dd737d74117c460f1747916f76494149495aac4a3f82893bbe1fbd

C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690.XSL.bianlian

MD5 7f263ddcc2f75ea286489712b6a69884
SHA1 5e58dce58db80abfa17c917fb273e4cd2057c64b
SHA256 97e0d444b1330f4161a7168efcf11c9ac771bba6a26254eea03b9430766b3114
SHA512 53d60eb3dcea57a61993d78533e97d6902b56183caf5de2aeea9717fa035914cd10ce37e75ef4dfa638fdbd5e42b3c1534ce389cf328b141575339c60973c57a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl.bianlian

MD5 c1805961ff0f048c4d2261976b91bdef
SHA1 1a6005af47ccb9291d8caff3273d8a02daf821b4
SHA256 0df8e7186a3abf9cdac08910362aff912d92213e2731c73f6a18bbf72fbc9993
SHA512 4bbbe793bd41b0690f1e8474e8223cd3e3ec6a883eae9912da53481ba53a8ed57ab793e12f18cc8222a88e9b4a419c0c216a0baddd893bda64b0562d9e842eab

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\msjet.xsl.bianlian

MD5 99cceb2398c2d4a57f076680eea248c4
SHA1 331578a5cfb6c2d45116442e4521408f86d5d850
SHA256 0854127e45678a70434e66d1286913270b25b53e6038ffa12ca388272c2d8b1a
SHA512 8b47300c441ada4a5b99188cdba5696816d299d18a26431819a102fa8c51ea59119ff4eaa6accc15e56b88808cce51caa53f833477772f0bcec49ade8ffeeff4

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql70.xsl.bianlian

MD5 b0f1a72c74e80a118448e7f0b5db3dd7
SHA1 2f5f18992b5ef7f016372de68e94ab25d140e913
SHA256 cc88574bed39e3b5048523642e36c744ffcea09215ce8154793a7a3ffaee18d8
SHA512 e593a1c1058e4dc269852e5d733460fe3b268f97d69b051ed0447a661363ed040fac1095c2bac0e60fd34484a5d4b0498ac6685d5295d18ddda0207403372b84

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Informix.xsl.bianlian

MD5 de227e8ef261e6e14265782f8453e89f
SHA1 33f761238b0616316cb0bff6f8f74d1608e62353
SHA256 923a75c6afbb3e143e4a16bff69db4f1456c89e73a4ed91ff688e1a1b422e4a7
SHA512 cdf19caa727d44687e4c38b9987db99d9f9ba64fa0b53cdcdb44d025c11fc1b2e39df8cd15db8258d1f86338aa662df0eb0ba3b2180f7d830056f2110ffd6d4e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl.bianlian

MD5 110507276681b02ad9d0052c5f756a35
SHA1 1e75fbab79a91e2fb43d683f6a235ac9b068c799
SHA256 86b3332177978f47f819b52ce6ddfbf07364b8ee94e98d889ea2b88d1a7a8b16
SHA512 d07490f10f8d2737e87fb37de7cf3638a078aab18e1618a455cb4f0b545f5fed344a393b3ded3c0fd2887d38d8e1b4ee3bb666d98de425beab77e7ada44c4d58

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Sybase.xsl.bianlian

MD5 2b74450e2908d6c1d942bb5adc9152e5
SHA1 496fc5c3ad2e101e245a85d625010c5f377a4951
SHA256 ead1416f04dc697e0a628682c21d65d0d48f95d8bafb77eb995efe6906c18804
SHA512 178b6c0539e61f6f7d10b75dfa36b6d233ecbe87aa58f293ffc2be2a67c7280b7d492783dedaee5ed71e87d9cf385d957aac9c8f66febc4acfeba7d45aab238a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg

MD5 0eeef07607121f80ec7cc904c8505274
SHA1 7b0ca372bb463d81654305833414236594aeed06
SHA256 c944d4f003acd8145c32f12cf51ac331987cc6353ad0e1f32d0a947759f66102
SHA512 8aafdd4afaffe260f5b97d7dba51fc9e2a365bc1c711b0aa18d8dd68a6a554356c2f0990f3949f02e2dc3f0659938e2fd921dfb2fef674bbda1ae4b482dff2b2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg

MD5 32ca0757f2deeae0ff420e85536d90a4
SHA1 e012ef514dd27f0eafcce7dcde3e1d647b6e8e33
SHA256 4a622cf644d37b249dfcb481af64760a2f06c87364dd36d7b1b45d05b694eaca
SHA512 c2c3a4226d28bdddcceedea80063352cbe9ce4d44611a500d7465cc6703cbcaf4e92fad970b56a4c37da4530d0bac3fd6076d155a7ee99444aa32a7f3cc9f26b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg

MD5 c0e2871998c8e0c7d526206083480c9a
SHA1 1c790ab6abc35138f0a0d490856250df9938bd5f
SHA256 5166069f735b5a59635ce30e49629cf176ae2d779dd0973563fe800023b3acdf
SHA512 982ddff4a529bc18198f689f6a4aa178885e55523584460116fac1c2454b584105d7ab9d31cfdfce0467157a18cd88f333fc9c0c6945ee9414f5ae2359b88073

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg

MD5 ce58f1a970fb80a0eaafa8db57bd69e1
SHA1 f6a0f1622238e91b51f71ef3a63a9f2ed6bd36e4
SHA256 731fd8dfc9361a87eaf8af1a3b05ee99891412c84bc628c2ace09eaef3dbbc04
SHA512 fddb79863be44e3dc4d9b40bde3fd37e54b21977b0350e4318364e13485ff47e0217246697ab6dca073d753a1fc7e36f5f8a0f72ad8ada75d0f10b19ef92fb21

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg

MD5 0e5869cbc382dd46570f7be3b9255429
SHA1 f8abccd8de661a4896c9487a77496d82ed930bff
SHA256 5622eb60dbc78013fc98e3249cdb5dd8b33dabcbc0d21e07f358fbd9bc4a7806
SHA512 2a5b95288fe0d2379121619de91c9e569edc5ecf6128626df3afc334f0ca18cef5acd3fe9e07613dff8f98c06dfc560763e2fbc8a9c61b15c9aa92cdcac4ad27

C:\Users\Admin\AppData\Local\Temp\wct1596.tmp.bianlian

MD5 0353294f28819a47e0db3e25c01f34c6
SHA1 d64d31e8833a2dbf130916a3c65156c2a2b3f8dd
SHA256 95eb88aa932064231e905d3a644d27728846af6e8132c2dac4b17e4ad1c35fd9
SHA512 71edad861180c62634c377eac62657569439b304c51f84237535a62b400dd817701cc9aecbf19498db02f6df903c4666d2be62441a778e28f169862318259630

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg

MD5 36be894f2dc23a811c1ac37c141ddb1c
SHA1 e4b80e92f72df8b48351a1b5f0ff66ac2eead901
SHA256 b3e7b1778f4e8a3319c227e502a68ea9db52dcb4afec21a8314a65bd5d97382f
SHA512 17d3b03d7c3ab338e2752eaa92d2428ed7f3b60c130df115dd786861c0900be8ea74f897130ad12712c9d1548f98a824e2ba8251d57c2538ce6f3b7fa74e543c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\PlayStore_icon.svg.bianlian

MD5 562a85b97bc465b59bd9afd64a370ea2
SHA1 ead96852772f28a64dd040e3453bffe564be0644
SHA256 12190bc24f1d8ef8003839266d9e7c0ccb747899eb0fd3a8cd6e8e45ecb9e663
SHA512 5d48696809175d7987a6c8a7bd349288f898fc51d7049571801229bd088620ec78c14b7473ea793bafb55d5c1cc511914c1ba97123f3fc2b901f0c0c6e743550

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\cs_get.svg.bianlian

MD5 3a546402f45b4e98c2c4cfa9f946983b
SHA1 c74a0976b4246e9b6996edbb6382a3d0ca447d1c
SHA256 e5346d5a5e1068a6fd4e86c38405193a0e1c685933f2d89e7dc066f8c6e86480
SHA512 dcb9742b2258ce94d689118060ee087572d48080fff53676d8e0a6a4f7c66075e990438a221430e51333e6a64dd0ab2ab800793558802379a0c80871d8dcaa06

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\ru-ru\PlayStore_icon.svg

MD5 2b75dd506b0919458dc9adef43dc9850
SHA1 6629b61c458a0119082ec3e835c84e72833164be
SHA256 d418f6542eb67edc77519e49472350fec772463329c34d9046bef8941f3e7ef4
SHA512 0abbb8366f0f97c5256a875624db69c50dd694d984f1fddc4ce45d82617e17274f5c75ae1ecbbfa017888c6bbbcba45f7bc64ed47dc8368895565ab504a30a82

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\es-es\PlayStore_icon.svg

MD5 efef97767fbd6a525c6f01f58d712969
SHA1 820f07ab34f7fc291d10df4583ad8c180da8487c
SHA256 056d1a309a3da70a9b1fd15f80d4d66d8db04ed135b3aa580413efa111392941
SHA512 f74f73d391a94bb7dc543340a686045f79ee5e8b69b1be3a410ceb89b2cb20e0a82c5305a4bc8154e0a916d89268db08b0bdc664b5d6132467151fecc6eb30ef

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\cs-cz\AppStore_icon.svg

MD5 1bc4068b31c2fafa471215acb7229179
SHA1 e942363171b965de25e4a5ef5e31bb7ea99f1464
SHA256 e00b63c0a807958d48b2489a21e6addb017420718204b0a6e22f712e6c8055ec
SHA512 df95a6b2eb9e1214f99159a2fe7da3857969e49904f38cbce022ff9a1fde533fa092efb248e83a67499120f1d2923f4851abf937e0ea2f8e6befd6d96ad82215

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\tr-tr\PlayStore_icon.svg

MD5 c58fb2c4b6e1068f5a9a2a326d4ac066
SHA1 594ff47a1c33bae83072b4c813ad6bba39c670dd
SHA256 a6f1e41271a7295e5afd7c0939e2241b83a7214f0b9f9091b90a49113448b5b7
SHA512 3a7a354a3a7d74cdada0f24160ab31d0cab6d3cbc5fd0b7d9db0a11f871bb5cbf26921fec88b78d65092ab1f1928fcae61eb333bc0527489c6cc02cbdc856e7a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_de_135x40.svg.bianlian

MD5 bfacfc18eafd3cc02bc08a8cdbc44e17
SHA1 d4a61ee8efca2eae943423e43faa953617edd235
SHA256 5386a3c1f652da1bacbede6264ea8dda20ae3114f70559ffd36e39584dc4e0a2
SHA512 041187f75c028d88223b08046a27b36fa2236ade9d1757ee1ef7778590938e5bfb138e38ea5500c7264c0cf4f4bb339293f6386bdbe4c3d39240bae530efcdf7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\fi-fi\PlayStore_icon.svg

MD5 a2c6e8167ea78a36fb1461e6a8a447b7
SHA1 a7303abed1823fac0b21430226b358e3f8361a0c
SHA256 1eb9aa313a36809607bd4fef269886e3fd73b154b3cf9b51bad519f9fa2344c8
SHA512 9ca1756571223b28515d137cbef6581fbd76b7bb604b594e41c66f83199502259ab7611c2cd7da6b5a9aa6b1da145883af035488096c3257fa4ef3af978f8c65

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\fi-fi\AppStore_icon.svg

MD5 f9b99acb168f374d9f65bf28ce31c14d
SHA1 d0b09a087a60b9dd3ef513dc187ae6e1831070bb
SHA256 285908a2b9a6c22f812cc671ad38ce5aba31386cd91d39c739789f0721f1f59a
SHA512 8f82aa9d5f67c06e9255520dbdcf6b2be0d095ab9bca60dc2707e89b5b2c2185417b9882083c1dcc5b12af2a10bd880f82d546a6a5005292ea841f277b7e91e5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\PlayStore_icon.svg

MD5 5104f26ff881545a25a7b7f80ac4638f
SHA1 14eb7781af294e06f092b93dea2725aa765d198e
SHA256 9f2cc730d943ef3a08eca0b2d21bf27981a0e8f16d34758852ee1c9cf36ba02e
SHA512 7db4375b27c8b712f35b4f0af70578165970d107bce59e733170ab3cf245f56cebc842aa6395e289ddb470b7f19d4a022ad2b3a4535f60192eb7705f4fa38cb8

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\nb-no\AppStore_icon.svg

MD5 b37c16d5ac338fab26b639e48e4d0d7a
SHA1 b5ae2aab44cc870e3d3dd8a74d22478941355d97
SHA256 cd0e03f7964e49e67e5ad6ed34f0c44982ecb24f24850e522377bcc70e91a1f5
SHA512 55dd74cfc9b675e14dc6abd0152ae33f8ff587307c20392ef364c6abffde64d4d493ac21fc44b540f7ebd798255fdb8eab069935b5968e495394aac4b73af28a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\nb-no\PlayStore_icon.svg

MD5 654c3cae1561c4907b914bc28e510d4f
SHA1 5024282ebcc558a63dc2714c9877557808255bda
SHA256 e61739a7a2d0a8d31d6cd6a96ad1c98c399e9d05cdf97e105c96d57d457589b0
SHA512 434980bf414d2e91d917fbd6e57732f3b60cf2fd49f631208d0772fc17ef3e74a0e65081796f74a397f47e9b70aad11eba2a21858df96b6b7f7555a4a35eb9d3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\PlayStore_icon.svg

MD5 34a640cc9b030fb76d96823bb53a4604
SHA1 d77b18ba2f62a329d7c1b07241cddd19c955e5cc
SHA256 d3cf6b3a1ad5c5202a20e012f2ac69f41e6d713e67e7fab3a3a8d51471f25429
SHA512 8ddc3eeaca5d42a237d71ef59da8130995c498de70a54831f04e0feef1e62c5b5b420069899d6c83013ce79e200488fe273b53a7de3335e71238193c8d07a9b3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\fr-fr\PlayStore_icon.svg

MD5 6a77b2a73016358ef58cfc516f8ec1af
SHA1 6670175e061cd7b841872b6b3d7f4c18b1cd88bc
SHA256 e48586d5304b62f7db2ee365244745f479a364689f2057b238eb2758079b1445
SHA512 d1eb980902408bde47cbb4d409249c7e2ea411fdbf8170628886afaa99419ce8e64366b1607da7685628117e2323b2a85b72d4c20d9a8357d320197702c491a0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\fr-fr\AppStore_icon.svg

MD5 e423810710d0c6655a8a722ea1cdbd9e
SHA1 c02ab1a6fd18e44cec9053d92e2940010b0188a6
SHA256 8858ff4f41580550e05b954fe3e04eae219ab6773e636b3eb80d86235ab6289e
SHA512 e8aabf4e1e0de20b13087f15008e0be80a4e5202c9c5ba4ddf82cc0351d30b0f95d1275195f370f76461d0aea5d7351d7a4440f52c85b3cacf30402866b91315

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\de-de\PlayStore_icon.svg

MD5 6b4b8b6185cce49d377b5a5144403443
SHA1 bb1cd16625327cd49e446fdb697d060537b60938
SHA256 a0cb9bf4872b6da029b6600bbd69328b55446f8d481721551fa1f03a8061f1a2
SHA512 ed32b3b01f1a7df2129083531b5f84603850771fefc952b6a82655cdc7ff5b38aaa1b1e1e466b8840e54b3ee8321d5ac88f7bf79ebe5feb0f7c893d72b12c02e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pl-pl\PlayStore_icon.svg

MD5 a20d8c48a4d74fc0eef448fd81ee9bcf
SHA1 c8a5fbb2d6302cbe8cabc9c1e9afc610bf865ac2
SHA256 94701714e2df0e33dc650b3e9e2a890ca8d5647b04898f88b171d948e9f8f071
SHA512 9e13568cbbe35975a2453dd39362593a152baf95eefd6d0f6263a63c779fd0530565b329986302c99101ae1adf797864e7d75274bdc417a8f4beefff38aa6e60

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\da-dk\PlayStore_icon.svg

MD5 c02399ddaea36572a77d8f1a03a2d13e
SHA1 d6c7d81086bb2a2c2dcc3b66aa060464cb92f0f8
SHA256 35250ea2e70d05b866995b89df0835d20b6ba09a1aba8eacfc9c671125a53a71
SHA512 f4d5c9845f060807bd2356a8ade618d836fbbd436fa355a8150f65ac99ee20501425708afcfea49e1cb0e47b096fba85e0b3ced8e8e60fb92baf1f7d15384c2e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\da-dk\AppStore_icon.svg

MD5 3395d7920bb92593d7ba591b4caae7af
SHA1 0c72b5f921e350e537e528990f77058fa4c806a5
SHA256 c6a35bb9d7b247d9aefa49862d65e51d851f802801c56bde1a636cc87e3d6633
SHA512 a5001889cc14e87a11ff43b646be502d68e1be620189457f13f949737effc338165c6566b75bffa78bdd4cd3a18e2973a1fd871805b25b0eb808715a0a06865f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pl-pl\AppStore_icon.svg

MD5 f0624820cfe9471e435ce613c0953600
SHA1 cee741e41e524a09577089ada83e0945b829ea55
SHA256 752015570136bd9c879be2914019d68aff21cb196825c1ab3214f9fa84417a76
SHA512 39d94bfd81554cc335030f7650570d47d8fb9e1b67f1bcbe1e430886df2209719047f192fc1b58243995129e6284568e88b73386a7525278a088ce2c8401e8d9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\sv-se\PlayStore_icon.svg

MD5 6239831157f3ff6948b73013a0dfb73b
SHA1 16e776b3c4d0bf449fe15b3f5ecacbb77c3adfef
SHA256 f1cf66d055aa6920e58b4f9a4f581a4ad8a35c917c688a0cc24434b2cce09aad
SHA512 c498807c892517b34d8c8ec49ae235431cc06bc24f81ebf915b41c3b850732b947d0a8ffe85be785979a7da99f28c638d41f5ebef7803b995fab5ab9fbc524bb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\it-it\PlayStore_icon.svg

MD5 63c96325d0f23c1ba28c62bd9c5a516e
SHA1 f7f9105ffb348118411ad518d11bb7e7877b7f5c
SHA256 29572358236ffdc1fe7297b44f2dae8c69df57f35da7c4a30080fb3f7b4da4bb
SHA512 777e9a2b07a426a8873e7900bad10dd1fd98c6d3542aced03df67571ea2acb0f501c4ee2656a6bdadd4a44b6cae5bd06407d8e43c4183caf54abab5ff68745a7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\ko-kr\PlayStore_icon.svg

MD5 09ec58677f5dc5966b8e71ef19f4c8ad
SHA1 433b59f139d9229c1de5c302f3be0aabeeb34735
SHA256 e4439d00effac8039e5773011da2943e8f3093a0a86e6b803f87fd4bd8910084
SHA512 bcc8620bf71461742ed667f6edf6cddf05d7eb685cc1622ac41fc939a62c43bdbf566d2ab576647b2dad4e212f07f96624264da5336508f6cc1c3249a4296062

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\es-es\AppStore_icon.svg

MD5 fab6a579b7d5adaab5defb7974eca679
SHA1 d3c4170a0527dea561f304af1c06a4412a0c833b
SHA256 fe12d5706eef55ecb7b59d183ac8166d9a44d0debefcbc79e07ebfc4e2d1ef9b
SHA512 f08bd14c9dd932ec35b54af4454a910dd8842a74538c171754b1fbfe65c82b39719a36be6b73c0c5f16bc7a165ba644a0e7e1228c3d9600555ddb099df42c541

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\tr-tr\AppStore_icon.svg

MD5 00981b2c427efc3cdb586ffe9c3f6cf6
SHA1 a687a4bed4e7a46832a6e4ffb0c6891dfff53ee3
SHA256 3f31169c130c3484088805f28be2c1ab7862a9407b70f44e00753a462484dc97
SHA512 9996ced41494fd4c67e5590825fbfdc4c84358c70067853c150bf25fcba78a1819913ba56a26e0a2414591f1923dcabd125922d02c63837456935fa8d3106a61

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pt-br\PlayStore_icon.svg

MD5 4f0806b19c7f68b378530da830dfac2a
SHA1 5d2d655b522815de7307693ca0d03f7b122c3c3f
SHA256 7e4ccd0071de6f6503702b8c502b7817488d272de9b5bb17c834da2a1a46d5f2
SHA512 702c1a05bd034e6dbdea42ed63c8983294178efba8b123aea8a7b675153737f2444f46c85122f51b155c7c337b3f4311f077c6221f1f5516677c79230487bc36

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\ru-ru\AppStore_icon.svg

MD5 04f1cc3ca881afbe0523e411c215486e
SHA1 f6bcfeb4f3c942f0d9f9bcb4f28d54b72fce9a5f
SHA256 b05ba15f89d3da0749de9abd95142132d2bad94fe3b7bee98fd50966adb6e2cf
SHA512 feb6dea82fd6e6f393060da7eb780cbc672c904ca02cfd8782743bf12f046a780766e72e55a4c6b061e5ddb49c973052ef74c9a443c46111e76a5cd1bb8250b0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\AppStore_icon.svg

MD5 138adca592de8f6c659cc624d04ac73b
SHA1 286ba1079ff2c20e0e72493fd85b865811c1c53f
SHA256 62444ea1d5ec6394c21b46b8a7a45c802eea2ada8da3d7324d0c5d813008629f
SHA512 9c6e678a976d48371b68c3d26f103711947dd84581c415f274a1e2441a6124159e64077bcf062aa397b8c8013c7d9d889cb211e72c4e056ea5cc343c68f994b6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-tw\AppStore_icon.svg

MD5 2f53811addd82505da9fb5bd694fb69a
SHA1 cc0f616133b4156b9fd93eb7a138d246d01b771f
SHA256 f16c723fc75af734fa4f2f3d61b78248fb57ca97f7f2f576a80cec8bd8860398
SHA512 642151874486e844549beaf8e374572db36715a62cd9a959e7e6ca4740e3276a0b570da7a5ec75534b44a9bc651241eeed5f79834727356e6eefe62d63c2c116

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\it-it\AppStore_icon.svg

MD5 4ba6a6114cd3da759521c2e193b74e72
SHA1 b902f0a58c799e67138244e352f2a293bff93966
SHA256 d97d2c041f9f3b77b5fb26201e005788c7b2c828333f5b2487392d5cb59a83c5
SHA512 f74525a728ce045e36c79d8c01d4fb574ac3a436a454c4626f516876de6cb289bbf57f55a0f681d76b03cac32e8574a55c99592f081b077039ffce9d79c1047c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\sv-se\AppStore_icon.svg

MD5 f58ae576a956365351dcb96c61783332
SHA1 9da1b0bc43a0ab7c2da0cd2f6efde463f43895cb
SHA256 c5e935ab48516c0c18337dbe9087b4d84b91b8aa093f4f5a0ac17f4ffb14245d
SHA512 acdd03a99669bb2d6d43534df88953aa0442273f6ab7a8ac14ecc58a42485635b505c8dd90249ed05e5383bf2a8343c3c7f766697f285063bafb1cb248da97f9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\ja-jp\AppStore_icon.svg

MD5 99f47ac250d33c19acd412b60f683161
SHA1 40c8685119c38eaeb0b70aebcd83de614b87f654
SHA256 d53b03c2d1eaf5c4da6b631468cae89e42b4472e4767e55ad56b35fbf16b3331
SHA512 4cc52817e9978a78ba6ae6af051f4f45f4b05dd63cef6cdf044c2b48d2f45e2b8c0ab60baf3063891a83b5cebbfb935fff732a88b666e2a49e868ed01acda1d1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\ko-kr\AppStore_icon.svg

MD5 5de1d4e98642054278d0102e3b1cb858
SHA1 e27ff38231c257d225c2f764a5059a24ccb262af
SHA256 2b22cc9eb09c7589ad52a3ab9247e8823d5d2bb9ceee4f0ee7ec7bb180924805
SHA512 95e73374b9cd1044be443ae2d20ded9d601088776cc3c8fa3d401908357805c5c7098b955213c1fff79250d057f900ec1ace88b28e16d36a4607a92f0d1206d4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pt-br\AppStore_icon.svg

MD5 39e85d6cb2cf3e7e80f430f0271198ce
SHA1 2fab780b0a029c8daaa1d21170f503e2f9fd5b08
SHA256 0e93936e7a8246a3f6a4cb23f6cff19cfeb1b592dd0dc5557559d0d334b52305
SHA512 b1694a0061a02c8ed204fd69b78d12627c871a6debc53439dc0d1ee6e250bc09732d6636d8f3faf487d4c4100dcd74765e0f2cca7dc88fa4067b6fb7e1df6baa

C:\$Recycle.Bin\S-1-5-21-4124900551-4068476067-3491212533-1000\desktop.ini

MD5 826c83f2d48781992644729da8252c37
SHA1 0266ff7306eefcb98e510b9534810c38b17ec921
SHA256 4c0fa2dcaf3d57287052ef1acdfdaeed1cafda1f2e481c266630a147efb8d9c2
SHA512 71b1db2c54165da884634a57266eb9906af6d2a42a8d55f3a1654e06a45153cd061a0387729e3d54dc2034588d9a4fd53d6f267131c78aaa2b057080f0fc8850

C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo

MD5 61e7b6c0e814291597625a0bd72704ab
SHA1 892e86e94d9dd24b1fa86ec3c66ad622f0575961
SHA256 abf5474903b3a3d92dc2fdc920b311b4687caba8c0cb76d04e2cc3c5e0b7c283
SHA512 21550adc8e3ad5906c73ba720e9359d7f95ca5fae753d06bca1a2de0f06007c8cf650f984e8d16f85343d62b437b58316fd925c3892b23c494b64fa12847be86

C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi

MD5 97aca2c1d4a7503a309f8bd8d37dbd0a
SHA1 20be6e93b851c7c5c0597039b9e83084110cdaca
SHA256 cd399179d2925b420b58b453b936b70b813203f00ad8f83cae65adc85eae71f3
SHA512 54d6b7c7bcd5284a5dcb7585e1fc2ffdffa934d1a9b4774c80d99b63678c2a6f34f7c883d2956fa21e9bd532b23887333dd93683c9f06e2d24903c1bcd6fdf24

C:\ProgramData\Package Cache\{79043ED0-7ED1-4227-A5E5-04C5594D21F7}v48.108.8828\dotnet-runtime-6.0.27-win-x64.msi

MD5 2c260adbef4959a7967261922667d84c
SHA1 f7bcfe680305220e6db2caf7c92f64b7f52c8859
SHA256 47434d826ebf8f97246ae53cf28cc84fc62001b2f4aebe2e05b773432a13148c
SHA512 c37b3cb27104254a047ae0945fe5e7904c0dce4200477a38824b5e8765d8734e80b334868073880f2dcb1df97546c942a829a1c32ee2ea1e000264f85c3491e5

memory/4364-13095-0x0000000000DA0000-0x0000000000FFE000-memory.dmp

C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms

MD5 f398365f93a6348cd36f2bb089d3e861
SHA1 6d505548c9fcb0a389bcc2ef0a287c002f8f67a9
SHA256 7b854f75163a31dd20c313383906030d484ca14c5f0039f51c0cbb89726034ae
SHA512 c42cf22555a6fdb77142e7e4303f1ff7cf96775b1e80fa6707486eb5238ed9c6d3f7f5515a734fe01f6a1688ae164491dd278393ee07f7ec4b3094f9319de5dc

C:\Program Files\Microsoft Office\root\Office16\1033\ONENOTE_F_COL.HXK

MD5 7ca403a6daae1c3bcef1cf37dc52bc9d
SHA1 c5e6277531fbed5ef3a3d2dd3d18f7f3c2c7a7ce
SHA256 86c92995249b854369743c3f66b9f6c725a055548829c2674feaf86d94a09d21
SHA512 584bb212a393a0002cfe13983ac75dbc6ce04bab141d0998e627084af19c8aca4583a4bcde91f2cb78c9b502deccf5e234f2e88f348e8908977f0f721095ae85

C:\Program Files\Microsoft Office\root\Office16\1033\ONENOTE_K_COL.HXK

MD5 f814e236211d756d69a3785816a433b8
SHA1 a8b2a2c272793626b948e0e9a38bf56fad2e0d75
SHA256 3b6e881c39bcfb7d75fc40d633d499e8ff2b39e5a8ce50e789124791e53f619f
SHA512 4f6001c1edb9a9a76c5aa79fae062daeaf801d972f475e4b3d418b56d87c0301fcc934800028a99caca91ce90dbce2802c5ba548f70ef7f010f2b12a9cb3cd80

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\asm.md

MD5 5421cac64fc5dbe507af07fb4e446ef3
SHA1 7c6ce3bbd236697a78d7298849ff7b06746c8690
SHA256 39cc57ab50371053c36302781e398671619184594a4073e17ef215e9c46e5f77
SHA512 cb32ef7c761f48638e24d384cf5d1e407563658d1bf6d4e5fc2dba5cfeafbf0b35b41d6e79099e59009c5a47aedf63213422cb933f01c4d91c421d162744f957

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\colorimaging.md

MD5 615f242328e3b97b86e48ef3ef4c02c5
SHA1 daffbe33a096eefe135ea6d8cd25204fc79c1abc
SHA256 88b93759576969c297e3c57afbf3678b264653092796cdeeefc2a1b5632f4fde
SHA512 449f3d184af3e9f696ec694d06e62e35f042bffa10216c478cee4d3482616f5d086390b0f2b2fd77e982592c7b736a588172d7fc44713e5de2eca870ea81d1cf

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\ecc.md

MD5 8cd326a8370a363ae9ab633a42287d1c
SHA1 340f2e481f9fad62565bcb2ecfb5aa506ea8041a
SHA256 819a6b4c3adc3b8b5ec185f86b288d1704d20a9a1ff0898d10d58217628d00b3
SHA512 104979f6b9189a5ba134b0f76784ed72fe80c9ca2641720f410f8632a22f26eb8dc0bee842ff58bed5ed114f35b6403f034011ee87e8e948f52bca7db99f5bf6

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\cryptix.md

MD5 a37fb227d2e7af99f92e55d67ba6296f
SHA1 a6c8cd611fc9d54ca2c4a5c2949dc51dbbabd724
SHA256 8e3d1bb6508941886b91ae1858276b6be8df5c9c18f840afbfef357010706400
SHA512 5b228d1b5599a14daa7aeab2f70b2898746f2cfebc87b1a26085a1301eebc007c5eeba1d9d5d69722dafc68607a7faae7538c99cffdb92942bf573511bcc1bf8

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\dynalink.md

MD5 a5da69b71014c6471b4338e021be733a
SHA1 24b775b9edeaddbe973b68ec0f6a8ccd3c3b03ae
SHA256 187285357408e54499f8256aa2fea9eb9639319e78a70c5d7a022f02ce167a37
SHA512 2e875704689f4c1477ddf00d252c36eabafe0de14230069d4e6ce67c40a2580cb1e417dff3715eb9616da0bc8a14619bec31c479f984ba4ad5534245d09b1ba6

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\dom.md

MD5 1f103f41d8959a9a9005554e7bd05e4f
SHA1 3af257b8e9536aba37a93590e4ae9957f4d97708
SHA256 499deafeb5d2159bb63e19c18ff81547c2ce3d75c2f6301ededfd590a2898326
SHA512 c2852e19e1f624a61f4aae2e5a426689d927ed508eb24cb91cd2563aae2ef8bef8da6d8961cd69e29c51d3db1db8ca4b6ec75aa92b51ccc699c9469c25b45b09

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\giflib.md

MD5 315e754719f0572a76c45b0a4f65beeb
SHA1 c39f549ad7fb9cba23c00e842e48e3afcd63fc3b
SHA256 a71b038b9e79de8d788d0a7402f6c2b6fd47532ced2121f2cbb7b54ecd19443d
SHA512 7832ce51aa0ab937f0af39502c326e2dee143341515da3ae0c7ee0a76f2c4fa74e8508896231896a70743697eb34835fa3b74040e28d54bd1823447b84bad383

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\icu.md

MD5 c5c4c307e130b2dc5902943f92224294
SHA1 34a82856e10cadddcf3f105ca7dcdadfe235a163
SHA256 40b3fc66a637daa5626b7e3bce30f6ea2b70c33248b66c8cafb3aa77ac4d627d
SHA512 d7c6e6e33c368768dc57a0ed26d9ee3715b0c9092605b2efe0721a1cc3b0aa86a2e0d2d811f0eaa97d0527646ff3e9a494578fe3106ec6d7d8ac8d1f8483b1ff

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\jcup.md

MD5 a76fec52709e6c357126b9b2d0396d57
SHA1 f7ed262e5c41f4b1408841d2e75ba43c029b8124
SHA256 59c08104837ff10aa9452bdfb79b2ab334f5db7a711c194b14f5564c5d07865a
SHA512 661aa99218f0d45a053df0a7908274c680f8c6eaa002b19b559082de65ab83ab78a2347f986e8b8c5160c38966b5ce33348b3f22a10f0165c193a7b7dc1ea4e2

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\joni.md

MD5 2cbf02c088c5481919f302bb8602844f
SHA1 2c2351543b84322db4b576641907e0bd1553d4c8
SHA256 92fbe0513cf0271405c604bcf905d7921c3b2a2a792311016c0f42ca279899c2
SHA512 ea706990bb056096b9bb76c8e74e36766a4a351ae9795bfcbda1b03ad42a7c5a6da0cd984c5953ffbd24761b4b62678624b2fbb1830c33bd84aa64b2f04cbde9

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\jopt-simple.md

MD5 4b5d191a479eceac5f1b3e08073d184a
SHA1 b16f35b8eb3ee4d82fa555d2ca3ca6d3d8188e8b
SHA256 395c19fbe0105d5b7147c86d93472fee73c39a8f6f8bea18d021ad79a48db53e
SHA512 0d0b8713c2ef6675e04d228fca70a22a704953fa709092bc9216f20d2526977c330b999564f39ef2c9ddc68b0bdbd5197885bdcafa75456d716ea164bba3d65f

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\jpeg.md

MD5 59e9ebcb21bfdcc7bd9da3415badbd00
SHA1 767676dfb68d798cf82627c93e15bff7edbf31c8
SHA256 9ee83bb0f7bdb87f75388669d4ecb3af865ca37120676b3c0b0ea0cfe088b8f1
SHA512 57692e1e09196e9158b3488794eec673b099e93aec8d93e81655b1089bf1eda8cfdddd27a5cb1995ef0bba32346177bb64ac0877865d40f54ce89e0015564bc5

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\mesa3d.md

MD5 73ef4c04c3853ae0de816907fee99890
SHA1 b113987cfa6eafc10324e6dad1c028e769dfa942
SHA256 fcadae2fea68209bb96b98d9e0fa6b09a552374e32f68ff16c1e952c173c4a3a
SHA512 d07b01015dd95da49f164a5167cb79bb131633cae45886f008ea3691c210beacdde76cbec557a8a9e867680d68947f220e234d97e06d0e95b6633d7004703501

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\lcms.md

MD5 a7b7a02323e544a8793d10ae41bfb847
SHA1 7fa18a4cb2adfb15774a28271d3dd7461a0f3a37
SHA256 3bb0e62590aeb592af8424d324989e3b62ea7114addca51fad41bc7414551c8d
SHA512 62a4fa00c79cd48aa8171e34fb698bc1f064a0b8a8906394ea62b8fc9fdfc8d5d4b4e3c9fdb5105ba0b05ae6f4d7f5dc60365d0446683d60e7f14b7ce1069f7a

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\pkcs11cryptotoken.md

MD5 4cec31f102b6bf2719584d5eb34d0ffb
SHA1 e7081c284b42335b7de7fa78b5e96f3b3eebae78
SHA256 30de8f09351dc81803295a0ccf46ea48593eed791f390a440f4563ff2e8f1660
SHA512 bdf067e6f53ce49bcd05a30b1377799896dea82e6b36145d6b4e43ae841ff378c34a7568c681476946dfde549c0a0389bc52e955787d1b666d692ee170720ae3

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\relaxngcc.md

MD5 b2c28159ef39f2dfd33e4517694f2cf0
SHA1 58450dc09fe2e67f0e4d5bf68b04d579cc6529fd
SHA256 b552d3a1717da9dcf8e26b1863b4ba08e2392ad8b14a039db1a99f4efdee2d35
SHA512 4a1a79d0fd3a880909d86b833a86279939e42744e3680356ec03bf95cce9779787b781f4048ac8be1a442c08078d5a3119ea65da8e88aed71f519505452f5860

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\relaxngdatatype.md

MD5 db0baf7d8bb52e0af858c9ee4b33f815
SHA1 77f894b995916c80feaf0f85f41bc155675fcf82
SHA256 8aecef7e1883d613d6863e3713994c26a4880c05071e4473bee02b590ff314fc
SHA512 1695569fc25a8175912002112c4b00f5d97a4c411a820b18372ae9ff1092e833ec319ec858e5a64f2cbaf6955b2dceeac2baa6026dcfebf52eae50a969a8630c

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\relaxngom.md

MD5 f8f1783dde88d55cd325d828c7177e7d
SHA1 02a14d0aec4ec81cea02d61d8d5a595ad88cfb66
SHA256 94fcfead939e83f53158ea4b832168119efcc6bb1fa5fef5c78f888a90ecf198
SHA512 1994b29fa7608fa417568fc6a4fbbb4473da4cb66b182bf1e981ad2d33d86fe4b09e5127d05826ee0fa573b26ec329e2e625ce128aec6fefdd094d8ca7993c8b

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\santuario.md

MD5 4097ccb4809f06b589b189c1f7a2f976
SHA1 0f593884574e9e8860d968bb0f83a6fc94fc718f
SHA256 3267d4dd46ae4c70de9a6b5e945b9deae977804a96bed2cf5942987ddab4ffef
SHA512 e27d8f62e30d74309e44b616e3b603a8182c5fe6e3cc09195bc3714e18b4b0885e1b691b1a6f9021e93e84aa02df48732fe3d78b9664b15e5cae0ff6a1e48b1f

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\thaidict.md

MD5 3034a30cd3899b7dbe3230c265aa8bd7
SHA1 231ea39482e7a75cb913def2edc72852cda29742
SHA256 ed51d24aa7b8aab666960563f7cc3651c2a42d0e3c4120e29565e67b2ccdc405
SHA512 f6696d0b8c65a909c6219e1ddd72d67facfd93d0b8f3997d6db72d56aa387e10187bd20cc98e0c0c81a9b67b9d0b6399a1d3612bc8497ac50f329c367d47f7e7

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\xalan.md

MD5 13d04226900c41664344946746065384
SHA1 c4fb32f0baf748ea0513dc3e7d31b42402315047
SHA256 368c7e6841b3e344a40f302f60c8e094712a339312a16a2e50528b8d897ce275
SHA512 2d42fddc6d4a14aad9d4293514f25a326c3b8049201c5791cc31cf7805d2b9450e91359aa25f0fd0de7a8c9ef4510b7c4f91621fb21e78792995980695f17bde

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\xerces.md

MD5 1cee71c34136f1196bc47ebebbe50143
SHA1 f5c39d7630ba41e96d02ef28a0d2179fb9d08f15
SHA256 80bce107688e2b8befb5ce5efcdc1e1e5a485923b59a4a6991a3d8bdcce82b8c
SHA512 91012bff8d3ec046a0801598555b22d6aebce034cfcb0d9dad6600d82e5c82e432dff2caef11ec32647a27bfa9518c02d0f065491bbb87d48681235e746bda2a

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\xmlresolver.md

MD5 c279660acae46e15a3b338fcc94fb03a
SHA1 aad6788e06a14b57613552ccd043c6cdb7e27cc2
SHA256 0092d30c9f9e6200315bb0bae8c9e96a56bc995d84ad7db4aad509ef52376e83
SHA512 6e79da684a5bd5fb79b2a28af044e2303f7f8d8ba60a32f2226af410d478696076fc23b61493c3c350693575008dc1bb40f41db2bd6fe2a3eb2cf35bef152141

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\zlib.md

MD5 b65b413d41fb0cdd6e7db6d25cc30cef
SHA1 0939a4420ec0d101dae8e57351b2cde9f70a3e8c
SHA256 1f442ff4d9e496726534b3850c272316d15b2ec96233949466b053b66e69818f
SHA512 3d05afea3a34a9fcfce946c2f2adc1a907430a4d49b2e430530bc6f6e5d61ca32952bc15ec95a51c92eafcee963afbee11546491aa705cb5e012b6e05ee412da

C:\Program Files\Java\jdk-1.8\jre\legal\javafx\directshow.md

MD5 b8e1901e2ab5066f5fb5a0bdb2573522
SHA1 8a3467792f92d496978ab8ba77324ed38be3db2f
SHA256 c8bfc459d0208166ec4a000f2864d9b6442337f2a1225a93857f812b1039b3c7
SHA512 e9218e935d78a15d31d827dfdfa8b0db6ef4f020ec534a439540b9394cf512b14c432394ca57ea2b7cccb508b3894d1e0f29cc091819eabad31119d10ae7ef2f

C:\Program Files\Java\jdk-1.8\jre\legal\javafx\glib.md

MD5 d9940e792cda98ca799c6fb90aa9c78f
SHA1 8ca358c3c24c9a1f2c34d85192853f46ae1f11d8
SHA256 cdd660f3bdc5e0bf39411d7360b7b061cd2ee0dc18c2a5750aee8e04d7699e4d
SHA512 fea93427a10d60a30fcdbe8596806e2bd6fae4f64d3e42b73f735d430f7ce698bee906122e9f98eaa1e0fe0b0cef8da32e72a99445d5dfb3ecf35817e18bc7ff

C:\Program Files\Java\jdk-1.8\jre\legal\javafx\gstreamer.md

MD5 c945a188824ec33ad3f7d7f843b598bd
SHA1 fd812a6a6db581aa52c5d1ab51b7475a7ef81dc1
SHA256 c9f48660070d9760acd9bfa284f5c783bae5ef7e0fe64128a7c256e0761602a1
SHA512 362cafa0f5efb5b77e384b28ddb0698d6fa845f16171b283cb16a03827b28a240c7a6375d9ab794b5d409deb86c2af7cd3839b30502a0d5ee4105f8cac8f3b6d

C:\Program Files\Java\jdk-1.8\jre\legal\javafx\jpeg_fx.md

MD5 8f5782d2febe63a4ba80fa7280de9e54
SHA1 17941ab147d42227cee0bf056cc352cc8cf5af17
SHA256 e735c3e999bc4446617294f21f310366ee5685e6fc4601f8047ffb7198dfd7c8
SHA512 85b8e67dc3fd82694d1d6a15da8be4299db20a54e8bee531bc1053946fa5233e765b7c717afa5edfbb5f193dc06d20e749a01f2f15a51fa89e2d2825f6b9b048

C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_MoveNoDrop32x32.gif.bianlian

MD5 8b2e70c106ea5c43a3a06363952897a9
SHA1 00efaf34e7c2baf58cc47d08b939a3146b8d8d84
SHA256 a41a76e10db41c6df829d95566c54e131047639d1cd639a8a7a34ea27a2e8ea3
SHA512 6e4d1adf7a897bacea472b3e55a5d1e796f32c001a2c17fcc076ef1c0c569c34dd06670ad86db843b651feced292621227026ecc862642cdd53967c5a875f048

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\rhp_world_icon_hover_2x.png

MD5 051cd79c1b5ff07b977045ff4bcb2561
SHA1 5cf2b5c02896382cb6bb913eb33e46de86d2cf40
SHA256 0e9245bd5ecc845f78a73bce43646968d91ee89a640b6b25c638794d0928655e
SHA512 e4a062a6e78e00dd92d76e0674fac003e8c0079747f4d8e327030bd9a27a1c3e18820e2404e7cfe042b1d86836e07c90f100cfb64392098328516a10d06de562

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\rhp_world_icon_hover.png

MD5 eac696614497fdff9e1a5e9a9c9e5ee6
SHA1 6ed41bed07f80973328dfeab158b5a4ab124ae6b
SHA256 36482c609c0928956db7aee30bfd26c031b62d7bc42185d03525b2207dc7d9fd
SHA512 c822aa187d29db70d832d1ea23b0d61d2dfb18bafd1ab11fdb9da46bdc51739a41abb2d9ba1cbfbf63cf225b1923aba122563ad920231f15d0d6deff72bec1a5

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\bcel.md

MD5 89f51d4b26ac8a5eb973018752c12710
SHA1 3b15446d28e30c3b7c183cf66596bd885279ee3a
SHA256 71b9c374d2ddece310cb780e426e87c2b9070f26f069893fe3d593fd0f6f84d1
SHA512 daf2df97d719f4b2574c279947a2043f6e5d24c83814c7cb1ab850bbac1be7a617fce361517111ed52e70aaf204e906dd288e9d250e86ada278148033930a835

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\cldr.md

MD5 c63e56d37d69fd59a2fb24f7ba84eb10
SHA1 eb85e9b9fe745ca241b1a5848519ef2882e49b96
SHA256 1f7bd10776c2f72a902cf47597269f924093de97f21221de6d218d4f0b1e7fc5
SHA512 f0477cc2f412716abaebfa1d9324dddf8d5c6314a1e9006ef057cb0c9ab56dd905d3f810ca90ca83653cf0fb26383ba2ff0ac6782c92442ca55bcd5e1c90562c

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\pkcs11wrapper.md

MD5 1666910cee24daa19ab33abbae7da750
SHA1 07e0da57fa4f0da71c988ca4f733c1d82a7fb6fb
SHA256 548456646bd65fc85c54fbbc74b505265fa2b27081f4fcb98fa192289d2e5777
SHA512 45db31743155f4e8f8911043ec2875f5fe8f6801f6e2c55723041dfc34a9fce8049cdb56a973b2596a23d65a0ae4c3ce6b7ca5bd0429d5ac8f8c3ea13dfaf29d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

MD5 9cafdf88a3e129275611bab35094ae04
SHA1 3e44cd65d3cb7f76c4dc888ff6c7bdf09611d7c6
SHA256 5965c7e6567f458008913877dd95f76de9a295ddc38fbcc7dda22059418ecbb5
SHA512 113a1384a29d3d8b1f432459e208d9daace7bafdd82f0a50d8bb3d2e85b4cdb094c2cb66715b68461b8f88ebb5d664e31dc629720ad12ee299fa7afeb0d4beb8

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

MD5 0efa291d18773929507c5878bf781fd2
SHA1 5a47f11a883b5419f157d6d470fdb4a0ad4f61cd
SHA256 901e1d97dbd35abadb3a1b5380fc5e127c4da4162c61d69af938c86e02df642e
SHA512 e73d53964de461cd502878168bd5132da2e2ed8894ffc3b6d82b7e65fbcdfac6b2da0822542859809c35412ec61aac82e8f62227adcf383750d42e02b1b536c4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\css\main-selector.css

MD5 3fc2bc68046dce3c728eed43ddc35ae0
SHA1 0e93091c6b310f4913b00b978407baf822b791bc
SHA256 3060730272cf795c0f168407d7c1847c3f0ceb571ffbb79fc312b5726c1161f0
SHA512 ac2c1b0590fd464e7e1ce1e65f1bba1ad8787276f54bebd42d76b5b396b5d3d86b96cfdb15b45049d293c37a68b7f251fd32b2639a6dc0f732088c17934d0871

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.bianlian

MD5 00fa41f1601bd64bb4b3b374f0628ee6
SHA1 f3e444ae0fea002f080fd56a5e429324b55cc978
SHA256 e1be502e550479316e5831ad745f28cfe3698301a3aefbd1942e815a911036a3
SHA512 a99d344f2dd50e20492a2e3063af7c3aef79c3a3af49ce40e5c224de9d6b1c750053679185ae16fa9e1a246d6ed8f060b24aa84661940b5ffc14ed80b791de5d

C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_HK.properties

MD5 893f3d3db5114538b941a84b808be3e6
SHA1 8894868a1c5598f5fd8f1dc91105e284bacc0d72
SHA256 667354b8e8a6e0550cdb4228105f607f70cf1609a6d99f1806f01dc6609f8165
SHA512 3b7efb455d13584ca2700c276438d41747742d41afaf680e3f02bb76b3052bb91abdce687d71196444718f2cfca3100db818afcceb2e231f764f4a1f479a0cc3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\adobe_spinner.gif

MD5 b793ad525c383f8d5f9b12e604328eff
SHA1 2d9d466e35cbfb633084f2b5ba61f74af0cae7ca
SHA256 4be940e0efb5a4c3102c4feeb5341d366acc568362b67432f437dea54bec4026
SHA512 cdfe82c49c250cc8f0dda54e8c512341ff1f3c79f24a2cab9cd17c1d5a7110e0f7eb2556c3e4f71a23f8ae5da161d0e46e40763d77b695ed281247949aeb5762

C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md

MD5 e7a1261aac806eb7143b8c68246e8580
SHA1 78fe803f86e55ea4842e1ebcbe6e512392760a45
SHA256 6210e9322c737967bb827875b9099af55976ad6c952882b89479563cd71aabf0
SHA512 d9187f2647cbad7a50437ef669ddd30cdcc9653410deb76dcfc4fbfb3a842b7222178a44fefca6b25f66b0b6160dc3abcfc849921b179b35460d4c4d3fc6c9ac

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\ind_prog.gif

MD5 9e6fe4ed6807d856218930bd6da31412
SHA1 dc8dbbcf19fb5d999bd68657ac318017bb593f51
SHA256 bfc918895c124f5072ec7cd8a093e63f9c2b9bb463e9cd56da1e58641546e41d
SHA512 0c38d974ea35c3aac315b4eebcee77e06b20292f8af227c3cf1c73a4f565a2d6bac4f1988c78c15793750a0686e0a6b565f5a698022d974d962ba15c91257306

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\illustrations.png

MD5 7cbe24f934e0d08a19093df2f69693b1
SHA1 76a4b1818323752dcebf32452a4997b4b88d8799
SHA256 c938b0d03b31bbce03e32dd2611de62f8dc4ad74f112e833732345718019c575
SHA512 82cc31fe1bb7d2fa51a6732fb93d9ba81fb16c6a5cbe7e3b598dd2ef9606ece66a111106a4d9b8b844ac3219a7a89ee9d919751cacf42df8d72435e1f92bc022

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\logo_retina.png

MD5 35d7e32594b2b13c8f0a741c89caacc3
SHA1 8d378cdce0e1c45b2d31bd6d2bca86223cff844b
SHA256 97cc0262d2cdfeebb2831f97a9d38c39a706bc745af054722a73d99eaae17ad8
SHA512 41837d3fe635d886fecf17340ecc30cfd21a4b31032d7846f4747a5267688466cb9f44fdaecb199c606875dfdd2e3d5535bad829cd3b29e418c5f2432ef05e8c

C:\Program Files\Java\jdk-1.8\legal\javafx\libxslt.md

MD5 90793e5add9bc40550b0cc70b0270e0d
SHA1 d609fb26ba4debb900bb29cd7181166cda62ee04
SHA256 1df32bac3ca5fb43a442d6f08ecc1d4bbc7b03f0c180e7ee341727f7bd549853
SHA512 6a49c41c034c637e44e1e9c9e0663325be4660e15a4c03ce35802ada3d82d3485dc9def940b0d604bda135876ef91e8e3e09e355372e9d5b51671bbc8b1f68a1

C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md

MD5 ee36452263cd38cb6b50d4cc42b1ef51
SHA1 86999f5a3fe0a9795ef08216554521853823a3f8
SHA256 2533490ed376c4e974a04fcd85af81d1b104e530d49753811ac0d67b9747432a
SHA512 8f203e8055fbf48ef6561faafb9840abcbd1defa6b7fb6a1e6a60b569abfb3508525f47ede03d46a5f75671e88a7cfbfe2f05d7b0d5ef269b2647ca89296836b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons.png

MD5 0cf94470330a1fc1d8d754762352306a
SHA1 0a42eaf692f3507d96a9d61b07154dff4bd838a3
SHA256 7aabf59555ff3e89c69381e90475425e3b032a2b3b336f38bd0a6fed888132ab
SHA512 d4c0f3126a33e503d5a27dce6c39627179d2927ab6603eb53d78aebafb65424bd354cd4a82ce3371758d809a73d06183e3f504bc2d3121c9cf88f63f4f2738a3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ui-strings.js

MD5 68f8b9867105cdc1778e3dd84b7fa672
SHA1 88217837ffa12f08bd3cfa8ab3959bae1b26e381
SHA256 dc37b22547189f909bdd2017f27805aaba1dcd597bf689e9d9bf15356dea74f2
SHA512 ac45a1438d5b593e710dd2e5f526248993400a9beb963c012c03d996723998a8693b2cbef0dd6c89b786f0a27a07babd24bd87902350902163527b9f13700f21

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\unicode.md

MD5 099cfe2b7d8f196fff5dc19520b57881
SHA1 a2d322f7a48451fe82fdb555b2bc4564ce3eae49
SHA256 c2ad38578318e5f6abd8d5da652f232ac030466b0d123ad49d54b49491fe9e2c
SHA512 c4c128caf441e5d7541399cbf0cea1cfe58fcf9898db8acd583ae74a680545e04da82e2a87448aee6fe6809678677fa2cde29407ed2ebb4f5c843d1e3e823396

C:\Program Files\Java\jdk-1.8\jre\legal\jdk\freebxml.md

MD5 e1eee0db238e2ee32223d3104bba0191
SHA1 99266560edf0b6f64e55f5f287311b65404f2a7c
SHA256 c27fd39b405bbfc0c81bbdbc2eba304ac5ab83ae00e506c8700b800b4ef1340e
SHA512 a69d0b70a9d0ec5042bf95cede524253d1188919a6f867c124ec85aa7c9f78c00852dfe2ef500388cd54f0218ac2eb2964dd463ec9e621f4bddbdbc11ed467e2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js

MD5 f2aafca2389cfce7890707a67ee08981
SHA1 6223eda7eb3f66edc8c51202cc0a77c37593926c
SHA256 9f06ffd8637158cf04b6f6aba760fbc1795ba70e6b5b06899e3b3d0d0577e475
SHA512 84c7baeef2f8ba1f7ba77d09f02ee07b8779c64ea814434e5e6d436a30d8520e06e7f4c7f0f0e073054899c11c5fb1d780f6c023b9f23f3584ad6941d57b5324

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

MD5 3eb323935c81a69c6268645dad5099f0
SHA1 20884bb007cc1b4d19e3f2559e101a251fe50be5
SHA256 2ca5a19f9f2a4c4bc3ebca412d972753146d84a783b285f5b2629b51f54bb8bf
SHA512 121f363ae654ee2e8faf3f392db0e92c175c54739795e27997d295d21260448f8d638891207a2c0f41966e1bd5955dec8ec8e8382f999435863f684b8850d708

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png

MD5 b974bf03d263be3ba2815a3b0fabc8ac
SHA1 08a151c03303b4ed172f6b344a480d9f9d345341
SHA256 f61974ed7344cdc58e93fb323fd0157e3a0926c3ba13e7889720d63ab77c05ca
SHA512 352d45c3bab8486aa50a088ef622281bd8d2823e043ec04f2151695c4e96bd06cf071527d5272404a9e3f7f0040ea9765f6f7b1ee50364d1f261fc59ae287ff5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\css\main-selector.css

MD5 69cb8dfdbd7da6acd866983ea7463149
SHA1 5f6881c1c0dd5346404acff7a97b47ea5c21254c
SHA256 b0c0d587b27c3229a8c6e296a20fbf07911e4a29eb16f7a6c444392f6883dd4a
SHA512 4960fcdd0fd074315bc94255ae41cf8db815e5e7d01106a31a8cb6f90b5a2e323c51ce5ddb7ff5a508055f2ee7a1b7d5c0668fc80432b8f4734c0741559f0a46

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\ui-strings.js

MD5 8e1149c5c8e1525275c1c8d71d21f0d3
SHA1 cbed33f704ee373ad416f321428604935588e364
SHA256 17630fe140373fecd841490d43b2791053253c8d829f7419ae7616ec6b94387a
SHA512 c70674a695f4463bec5cf7b2439433ea4238382da3eec1681d456b47399403c59a515d1ae2f2d0a1e0df105d69cf379f4d5e38c106640bb8646f007d2e286e5b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

MD5 91f1ff6612657ac0d07f40ddc16caac2
SHA1 fdaaaa702b9aff39a1edab45d618811758ccd7c4
SHA256 74048a440c2f0c76980dfa9c81cbef1a7b658b8ddbe521efed7aaf535d8f0b22
SHA512 f093f8a035a2a91c64bf837cc8476d44948fd6a1e96e27eba77ec614ec80b7d5d48917fed4a6cb770343d4d2833a158e3db5ac56ad16c2f51da876c820659e94

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png

MD5 3a685b168c24fbf703bd32244b92a6b3
SHA1 522fb01c5966ef1e9342ccf4ed2b09062f5b55fe
SHA256 14854028b95e33b0da5995e57fb02b2dca0ca521fa5455a293b58c81eda9d15b
SHA512 f7ef7447224834b79dfbc665b98ae982a3c7020b3723400863eb8df493d32af5930c6238d88d1d6582135ef9f058f51b48936359845462ddb5168ea72ff68cd4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.bianlian

MD5 aa959e5658bc36d1c8d2300811896a09
SHA1 e9c81b983132f01c8f610032bf944007172aa622
SHA256 f3e50e0882775dd4f58a1e036a2af8c757396adb569ee2bb4365ed36ce74522f
SHA512 3f6d51b0ca48538a7d92b40dde2b1a2629f7656710c4f10e40d0e5d152cea0516d8be584e66fe88ef55bb55055a8e2656e5ad3869a1c24872c3cacfe9824334d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons.png

MD5 a3d77f169837599d428ff090dcda02e6
SHA1 cd6c1c8d682e7769d8782f5ffba65be38012d873
SHA256 bad696d4c6883ab75db297cee57f7d5ffaaf011c42aff06f398bef23c253e470
SHA512 c5b7b50cb39c768b6a5d15733a5a5dd24bb7dfe7fc0de01db647ece7176ebd6a7742269798f172993135d9f4f4180558850d80c755271c8870ecb79507a9ed39

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

MD5 609fbc35a118a9d2e3488f3a60f2da99
SHA1 36349c8fbb7189a5022a88e436b83472ec980adb
SHA256 705de4d93849fcda9330a5c80c88538eca3cbaa286718560cfdd15504560a3ed
SHA512 16ad5d193fbd646650b150b956c08d014122c5f315f418a76d5bd009ead1557af4784804697d63aa665ec265281850d7f3081689043d3cc27948cc76fbcb450e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\css\main-selector.css

MD5 a589371e776ca21a3b01f7ce8d6ec5b0
SHA1 9167fe23226f5012098d2df9f30d73b151b84048
SHA256 4e58d17f7f6849afbdf389abb9dcdae66b67bffd6b8983edb45f7f8113a8203a
SHA512 cf1dea7a2767d62814510f300f6a9d0d6fcdab3fe8144fcfb52e6085eb4620b03643f01cd79ad99d2e2708d350ee0cfa304f15b8c42c4b2cecba4ea4f2d60c47

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\icons.png

MD5 922f78018ce071f0a19ef393bb982bd0
SHA1 5df4a03e5c46b18ad447918c21336b2286b1e8c5
SHA256 6b04bb3e9d6450d74d37cc056ee8e419e576d1f721dab832e2dfe37976e70987
SHA512 4945c36b33b332f9e038e923a4d674606d3e8667b771758c5cce1440eba0739fe52a8cc6e5b8556e3e1d6abdd3ea42e0416c1de79069a9756f62b18d5635ab88

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js

MD5 93a59b32205c29f37bf6eb264454a363
SHA1 ecf0ae5d7be9bf8da4f30c5bea672d4d05283f91
SHA256 6030d0288883a4a224d9e20a44bd7ab8da9dbffff5b23290db3c0ac35082708a
SHA512 cb3439214d4e0cc3fe130ea6c2c93c43b2766ae6e9cd3c7f6d59992dfe72c53c4feefbfc9651d8f8c2474184734b029770c4aa21575a1dc4b72f6055e6f3c5be

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js

MD5 827e19aae3408703126d4d9efcb38e87
SHA1 03b98ebc0c31fe804467253856648fe84c3c5fd3
SHA256 b2c217f5f1416f51b4448a8a268d5d4de33450d6c3c167ed09eeff8e9ba0acd2
SHA512 cb69e4f7c0eb69009a4980b5d404ffbaf09dd3aa20a2653417c7dd398da222616a95b85d24cb6f4d3b817ac218a9ff3d22c3bd5913bea9c2bb5fe12df50d4dcf

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

MD5 f2155770a45916b8669241798c0b0cbb
SHA1 a94baf1a3940d99e0c5218456feef91ac5526a34
SHA256 0999c7d76d28e7cc6338eab70bae8b2e4b2b9380df70a0a23e024bbfab85d0b8
SHA512 802fc7fb65b0d117f4e6e73e87f8954f9104e21abae9e97113bf27e42440498b7927adfdf01d576ede152f73ecc3eb22d77278c4db7f1d2cbe3cdf19c56e213d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js

MD5 eb41f3f38de2c53b3c3db7543f58fac2
SHA1 90979bfb4257e4c5c72fa2fe8415fbc7b7ff424f
SHA256 719d8754050dcc466cc54953a14253ba73220f84a9e1611eb0b1094b6ec473a9
SHA512 4a484b08bf33cc76d7b582831c5baee47d0e979f6fc12c06b42945fb35c947718ca11d54335e1c1017c9b9aff6715ea5276de8fec87531d4a7e893fa55fcd7f0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js

MD5 460486fb53c1f8a4fcbb34eebc26a96f
SHA1 c9a73951f8e29a5ad8505dfb9363b8a5294d2366
SHA256 a5f4bf07465673f716395c3084a044c04aa5303c5952c67f9f3d0fbd2293d039
SHA512 3591d7010729ba0951964cd75ad82353340b5aa0b6d56966a7f33207a9500c0ceffbed3c3d24ab1a5411572a9cfcf5d1d7e4ecf1d73616dc3adf90fda5d36ce8

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

MD5 8924e9ba8ee7e6f04fccea1c3ffd9873
SHA1 fb4e6dbdaeb3b111e984492a5c8bc3c3389f84c8
SHA256 c57503bd8257eb14687d2c09914e9289eb74c1369aa7a3504082ac16ebc89bc7
SHA512 b6826f0c64a971870b738f9b0bc9fd9d34e4376ba150fbf9e2fb8c482229dce78e990e37aebfc2d85e5368e4cca3763334b83b17d2a081e58b130a3c75f77cfa

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

MD5 c7e8ae07e7dc6f33c4c01d3d2862bb29
SHA1 c5974033390768aa46fade4f4e09201021592a81
SHA256 0df027553b13e8dc0cbe57de9f828894596ffc341d6f9726802083fed8373c9a
SHA512 5d8a37395f4398a97a62b4ee47caa740b6361a6717dafd8ae1c3374103c722b7140cfa41436e79014fd64887e52006c028c9b9f2a63aa038350db85012dc5ec6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png

MD5 ee5e1a102b19d44e26b7b3a981c1d1d6
SHA1 1b2c47081378020b6a26daaebef3c218b7301f62
SHA256 9de581dedf51dfd3eee5e4ffa2a8986de6e53576020f3663239859ed390a0927
SHA512 d3e027fe10f72d27a0b8cefcc53e49c27b17a55b04cb74b6e82355890f7b7ef67e886fb8ba0fa85e09188e332a9cdf282906ef243d67515e02fc0e44a13a19d3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons_retina.png

MD5 c9758e31c6da35fae5e77c45cb9c493c
SHA1 cfdb0585e74f48402f5ee61debc857579229c17c
SHA256 5a1ced3692d666c5ce7bc7b2ee37cd59e54cc3ab27dc099edc2a3f774ef86f88
SHA512 6ba522f36255c928490e6302e1030330e7cb232541e39d50d67f0c4d8e6a25b38fdc0dbaaa6d3461f3b78952dd28e817f9ea4496e7f5681b4d05cc1581d9428f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js.bianlian

MD5 35dddebd389d031732182d6aaa368aeb
SHA1 89c5d6780a60eefc85d2a437c109ad0b2858f839
SHA256 757121f9b584e8c8bf037087575d9ebae6ffd91bfd447fa311d13fdb5deba9fd
SHA512 e6f21cb2fcef4bd30bc531f535082dc595a4230e2d2c9c85e5927d96558d5e0a9e4b0cdc760346ba69ba6c06afa61df8835fbd239949ec758699c2fe6449896f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js

MD5 a76e7df69513b5f708d2130baa41459d
SHA1 7b6d8dd4ac629fb225131e340f6bdb4f25f534ec
SHA256 78b5ab64083c5e72f6d8b4275d3c33ad1dcf72cfa0cff0133d61b7272719ed21
SHA512 a815b71c7b6695c4af4774cfcb8c56d38c244f94a08c5e9fc40c79abd100734d28e62addae0d7c24d5fa4e45d7b7d5b27989d5f4427033253f5c13fe5e44fa18

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js

MD5 ef0c1a98c7df0f73482cbd4304552f26
SHA1 7c3891c238fdd339dabb116096b72d459a340c17
SHA256 c6aee137b227285a64885121835450f31b2013f0bdb04a22533b77c0f8ddd666
SHA512 904c163b07e69d2c76da25e037be48e331642730a77316d3f92299c5868f647ec02aaec74739df2617e5879e9c7d38311ce04f2818efc51f0c10c6ef20805a81

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js

MD5 3c6f91865e40463574c43a5328f4e181
SHA1 d3d55b490ab9b8c59cc17ed6672c2b65878fc1d8
SHA256 fc090fa4d2c2197c2dc2a549162eb60dbaadf22f6e9da41cac6cfd6a0fcb40bc
SHA512 358bf1f519ce9b9612903a7bcefef9d023d99e5e01ab73d7b39f5760410c7a6ee36811998f7bfc36b21a94805052560dd0fd229e7f118c22696f3417472c762f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\bun.png

MD5 484ebf7133833969b3c9a11fdd84cb64
SHA1 8e5c77fe01f86225e408a77d5ecad21adffbfc92
SHA256 938b1de2bdb4448a5c41017e419d74174a80417d9162ed4318d4e8d74f9f10c5
SHA512 579cec34a46dce1123063af58e2089394117e6ca6681cd38cc18db5871fa3d3ef76ca1843187e470ef3f143c2db4ac00524b2e7f16f0f7c5426d5171146d8186

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview.png

MD5 45dc65f75a7f8162c0fa48d18f99485e
SHA1 a76db377108f3f76cbbb6c82e6c3f5249b553df5
SHA256 d768286884b11004333901f7ad6dcdfdb87b7f633000e237270dc90bda082568
SHA512 c7026d34d82a78b26a1707fa37cb8508bbb404e1d6780e7eebf20e8c09d48f7cfe7521156c6917ab48e5425d38b9b433ae5ff1b48877a5c289569344b705e043

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png

MD5 9ab554371cec11c7002b6376b270cd50
SHA1 1a45fd33be0d79b787bb18fb6977f4240e78e2f4
SHA256 a1f666a23517c22024f93a5ce239c016a73419933f4dec06a3c52ae4551a28ba
SHA512 42798881f085877289af12f84d06a380055a1b471d74ce2399f3ce9560af9781529ef6971d9c3a7509916dfbeae6fba4f2446af0215781baf4251f0a32b25c35

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview2x.png

MD5 1836454d21fae34147049b1147a458ab
SHA1 49aa998475fea5d7c4094a7d86f58715a18e8daf
SHA256 a2bb797f4c9f3a1f05fb333d424644684982c775a4f61b712a77c73f4c222a0e
SHA512 c68578a2e8a5a4efe90e0af79a4d1641c05e3328eb713260752c04cdd01420f113739300b4408f0811f7a96db405a700abbd96d4d70e938f953d25c63e927641

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png

MD5 7b72cb74408fa00fc129159f1f5e752b
SHA1 3d9d54c45215663cd47db7342551bcc01f619c73
SHA256 c1a746b9966e52fe022c6531b7069aed7e9601b507632848fa5597bfeb730298
SHA512 c106f7b284582eb3a378766de60f547b9698d3963cdd0a701332229cf4fcc3d71896e76cfc093445a94edee9234facae112412203a9b75d7941e074be9e9223a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\nub.png

MD5 c56f5efca68e589a45453b2cf5ff1aa5
SHA1 6bb7249eb63862942de51195d2de7cc979ff3f91
SHA256 06786cc5d33ecc72d1fae7233bf72458de3e9dd4392b24805e724140dd7368f0
SHA512 dcd65a37d6d1ffe9987d630463f052a638d806fcec1ef9cb9385ef59143211a16d8f868976cedafbfc49a97c691ba24aa6b220dfce07fc165510257442d1b50d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons.png

MD5 bc8a5b6a77c9e932a5d985972ce7faca
SHA1 ab053a3fc564cf48b2f342eed658ea7ebbd75f10
SHA256 eb6b6136bb89e5feba98a9b8ca81d5f13dd8158be8ce82b630d08e78742972b9
SHA512 2ee88088a0be4c0bbfb06a2dcec5976740e041c72f865387fef775f4ee7dfc9e343ec1bdab0c86ac3dba7574fb65d2481282036b3081e02d6606f7156d9d77bc

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png

MD5 96f4daedac21476fad2c02c6a0aac733
SHA1 398f850653d281815c5303c57e494316bfb5e7d5
SHA256 362cf9f0e91a474948bc365906ab2f8bd854721e3338fa181aa0f71631d8f172
SHA512 176a173f802cbdbbb92dc32d3bc688e4b14967e3ff8427c37557db248a647a22969225e79f020c48b15cec25d78690e62d68a5552dc080f0bc186f8a2ecb3b67

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js

MD5 20630a7b7dd8be0aa2aab5f9b8c490e9
SHA1 be246a28748a12eb09d565c9566a827966186253
SHA256 4f8058be3bcf4220bf865b5db526c225688ffd3436975e4c106d8e495fa74879
SHA512 5c48bbad2f272017803e4dac0176682f7f0283cdd28a25bd4e12444a463731cde17b6e09532e69e63f5d3cfb4fd921ee6a14d55809244a6870d9903070a87d11

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sl-sl\ui-strings.js

MD5 99befdc0c3e76bcdc05e7792a5e9a4a5
SHA1 f0263a8f9e2b880719f0b32f6ed44a1ce37fecd2
SHA256 eae7db04cb48998be46dba441e7f58d8a765aab9b0173b501a31ec40c24de082
SHA512 b9b721f29075b3cd2befe670cb397c8737c9a9784fb9a7a30ddc44cdc292416388dc671eb72fa99c6bbfddd2da04b7fc45d224e25fd2c28f4a993c724aae3fe8

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

MD5 7a96d72718fece5ed2421d85984bdb4e
SHA1 91831ce7d87a4040fa349b4388c7c678f0f1ff0a
SHA256 b5ead02d37a388cf1241b9cf51caf62ac2536421a2856c789f7081ad9a52bd86
SHA512 e31897cf0bfa59a101b2a4931efbeca2744d55c667beb92de77483e6c4fb778376b0f3a1bc2286c4b144c1befe2d00ee32411985ad695bb01aaf9294ae704b8f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js

MD5 4e8bf8c027f34541e7bd3749d3a57e61
SHA1 74a455cd987415c62c866e285776feb6a7480f35
SHA256 e3a34e850cbc3eaf97a0f978142046def53a1d17a1dccad9a5a91efbe869fa02
SHA512 025a0c31d1ca97090b5a1f960bcaa427e22700d12bdfc010f780c86ff05f310ae6ee91e924b89c213f2a13abe62d5480efe22e708241a7cc8ad07f7f0bf9db0b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\css\main-selector.css

MD5 dd6631c265194f1432a3d3e24d4ed60d
SHA1 3ed71f7d8f9d28168579c5f2ea40b9fc0426257d
SHA256 bdf68ce34db17b6fe1c598e7e033e507eb03a1520f66bb35cf1fe75e1bf6ae75
SHA512 f07386f33bde2f095878101ce0436204eb962c4b728a06c65286169617aeb5113032fad9134265ec566b93b1c20c105b6587ab089818b5a6c5b967835dad06c4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js

MD5 da20e9e29e8a0f8438af886a56b8fee3
SHA1 2bf204ac5d286753719dd7ea2d1a0e1a80aedf06
SHA256 a29eeaaa769f61d1f857282830374d7b94c3b13467e926b94b2c69f93021ad63
SHA512 15b2a800953530d4f8f554f64cf55a898121adbf52e74ae67b5fae99928f32449b9577f9e8a3b61b9ea8392ea8ba110672e7f2b09c63e0aa2e80e251698739f5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

MD5 6bbd6b60726615ff2e264306c79e4f3e
SHA1 851b82c1b5c2f761aa17e727c07bf55ff99923b1
SHA256 1f463f0aac66dc7de43bbca8456f2b38b83288abe08f16e10e187a6122691884
SHA512 060879179b672697761b237a8bd2cfa994422535e760ed25b6d5a62006204caea4ef3920901c5f0fad9ac9e443b1e0a6b32df3ef875ee7606896960d85b6eabc

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

MD5 e3aca0d984738be79631c38cd26f0c6c
SHA1 988b84a33b2a18755bc3a44129296a31df1c92dc
SHA256 7aa9a169bc245591db9fa55cbccf27aac38720388c8efb374a90511cce5f3f14
SHA512 9d2fafd8c7ad6e56f3c173bb270580c01f890468499a6121ab2d134d2ff10513c06f09d1926f36b43e728768a48c7ea174e861cd1b12418a309f4e617535a8ab

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js

MD5 37acbed1d52a0503965733e0a3e7f942
SHA1 a09a5fec9c032a612583a6700048e8c07e68f6f6
SHA256 ba3761165021e4f9e7fdb79f6a79c89d4ea44dd77ef6549ca11882c83d3de12b
SHA512 8bc193158cc6d9e44dc5abd7a90943c815888d1cd55503d6cad32801cff9586b407b058d6ffde2c527ecc196dee244af0bf97c1fe13c8df9c557e90379b6fa86

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js

MD5 dadb3e01b2069a981c1c609ebec24ea8
SHA1 607b145099736d2d84db4d9df1929086dae144df
SHA256 8c069ce12765b0a42d57c7c0e548dfdea4268c987206a5900ea4a1bf95fe95af
SHA512 5ec1399dc98dc1059a7c4e90af7fac9ac9a3bfb01f285602616cb14a1eb7a089fb24c62d1a28b8db31b4e9b1526f1953806bb5735c52c05e4140189c1cacf346

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

MD5 c127217dbb60190f9efa8de9d39baf01
SHA1 e0b9b55a4f3b38ff7852708187495b054b3fffe8
SHA256 b7d1e588d81697f55a96a344fc2680a6f995f2a969ca2eccf3b346e90ab3662e
SHA512 aca605bb4a8917975c74df32fd19692f1b77b100b590b1aa9932f79a54537e7fdc841bd8127fe22f4392a205ed8404706421eea2e725caa590d9abec4d432b4a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\en-il\ui-strings.js

MD5 f018f28d992d45c1357f10ba8b8bb245
SHA1 9a84cfa39beb431b154d133b1bb3c74131dadcf6
SHA256 7eb6f96bda93f577eba18f9ec9fe897904f45e5fc7f642f81c3ce223390cc28f
SHA512 5c4ae72d07bbf205b49143d22a9f585ed01fc14412c7cac1efbb249b257568ce643ef024c76165ae4be147f9ba44136e6bf2a2d7b18138a445e4722c54323832

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js

MD5 866074698609a55499bdc33bac4c45c5
SHA1 a7bc82c75f443d6cd21df7da89fde6c69708dabd
SHA256 c56ce0fdad025ebc88d57c01c2a59aa70d2a836e4f115533d306b0d06a8c4d63
SHA512 54a38de985c830d8aecf12fa4393e363ada76eec34e7d862314763ea0b08bff855d13b8b1ee32adf3a27a7343572a803976134d8597b0f5427ec492daa5cee5d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\en-il\ui-strings.js

MD5 616c6b9cbd371a29e66e50a21f02b5cc
SHA1 f64562c5f9318c2473c8876c6e4fb36f9a7b7cf9
SHA256 ccc3f158d807d6b31040b6e20e872e3c891388e51272dd21df407c190223ab4e
SHA512 98fc3ea9cd8eb34d8eea9d0f20e34a6fe1bba8485b6c8e0992dcf94982e58f39c2d1005939d56c1ad9879e6566e809dfb0959cbb91aa3120d5acfbeaf09d5ffd

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js

MD5 d1806b7f02689e4e062413bc22adcd85
SHA1 ccd21b08949607b3a600b63f09ebfc20acaf27aa
SHA256 d9d376e3cd0e0142eb1bb7d319e4b4b01c29ffc4003fb24c5905cd28e3830dad
SHA512 9dd9bb705dd8fa482c8a0fca7550075b4900e7c12f4b9c58c3518b099e2c64ef3024947dae8f158a334a4e021087f884e047bf466f9cadfbb08e8de4ee95e942

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js

MD5 00c8ceebbc3e563322f1c82d9ef38975
SHA1 5e48b211bb1d0bd39042f2138ad155ec02389ee7
SHA256 e0a0c32cff6b3617b2cd6111129de8a94c9baa9ea61103bcd564d63ee4303ee7
SHA512 0236ea977d6272bdf10894ddaebb6617baa9552f48be365ba33d54fed31c10b237ddd42bb8c36c04aef904cccd06dcef42760301520973f930bd8a0b85b903ec

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js

MD5 f2fe6b5cb6d033737d0220bd8fcbb68c
SHA1 73f6c847cd787817681523f8902c4ec19f18c616
SHA256 5d5c8a77afc9356488f50ec72c14b9709212f2537f1af794375aea87ef2116f8
SHA512 240e2a12738f4bb06a7d276c9b59ec628cf05ea23cd994e69d66674c97389e51cb44b0e2ada996d2f5c2baed04564f34f0509af5cbb78ff2373a396f93723cca

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\ar-ae\ui-strings.js

MD5 ac2ffd5ef76667275a76db77aa8242c2
SHA1 74fa26f03125393e14d7a7bd831ed296e4419313
SHA256 3d75bd4513a833f0fa51fbcc1cc1b30a5c3d1dba2aac2fcaec32b6599e1b5cbe
SHA512 4aa00de18222c720ac6898439d84a655e06b6e2bb1f2defd4d7aa20891c6c56a2e9dc5835fb38e7060d95bceaf5ec84327b7c29d4d391adf70030a5775f80209

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\stable.identity_helper.exe.manifest

MD5 c6547d938e0ea1528928badcc280f97f
SHA1 f02e2f1cadeb8604948937dddd81be9622060024
SHA256 797c8493a7ca685fbad8cc141425ed962318deb333e4602a341d7b14ff5bf451
SHA512 067306aab7d87acf02ce917379af8690f45057507a0f3fc57dc49dad4320f7dfd19f8e4eb6ea9c363ca5d3d42c7b6e5e0f8209518f535887358e4d7eeefc72eb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-ae\ui-strings.js

MD5 4bcee1a581b00d794c6ac1da6855b6d2
SHA1 7e8315a239a2b42f1f83bed3cfef50cc79f44f4e
SHA256 5c4e14c266d224ed94f511b205dea5ed5021aaa3e0ec7a1ce6b14b1d63c73608
SHA512 41bcb5c11834dcd39be49c38683c74338be497c64c4cda800ac20a95b8832d9295655a2819fe15c27c5b7bcf4ee3911bf89bda09e85b67fa57d3726d1540fd97

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js

MD5 58142153fe1eff620d44cefca7238ff9
SHA1 c6b924c328403374fd10ec039caed9c474ed3dcb
SHA256 a99db6c49ff0f097b4c7f58201bdc714bf6f75869fe0bb9dc4b03501883a8894
SHA512 3a0a186ad25bf59a3c707da0149debbdae0ed8a7f0c81fde441802e4cb0c067451d7f979903b513f0f2640b64795999c2b9250758a3b0e7b657e40ded2858043

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small2x.png

MD5 84b8f82db0fd4a604554d53aec5c4212
SHA1 2696405d65c642be86dad3ad143ac781255903ce
SHA256 4ae40c481fa2247360285868ccb49c1d78ad81f7406f2728c539cc0c055c5b8d
SHA512 29e170d1f1bb3b977d69ed4a263630b8e059e865b18af92b50a4592e55d6e2a09450eac46753fc0dde5eea1ecde57e54d656431803fc1e046514c63b7bd907fd

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-il\ui-strings.js.bianlian

MD5 24b7b99db37e4d069e74e53a9b39824d
SHA1 53bfcfac85055722883960f336ef94837f220430
SHA256 0c46fdeec33bfdc4c422ffb9548b0ad40803f3b930bd50812385df8860150b4d
SHA512 72a503e389e4810e5c0abd4b996c927ebbe901b990cdb699a9234bb6168c7b0022a75e3cc9d3cad01fe8da68c08a2c5ea7506ead4664837f7ce71c604eba3105

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js

MD5 dfc7dd914632f8e8f71cd18c8ce98ade
SHA1 4310dbbb2d53873727dc25d7b1d7c503a61b3516
SHA256 5fe212a2cb0abd68ada2ece90db794e04a9635b29995937303a60dd8a899d869
SHA512 7ed0804d0d07943553b58e7a83d293acd6e80dc0b4fec5409f5762c2278a6bcdf3d3c7e84905e9265a97000d780a8761422591350b9874061c2af75a57bf7aed

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js

MD5 c769beb9c11ab7d63cb21e1868178a11
SHA1 17e24a4cb4cbcecf345d9c5735cd72e357dffcd5
SHA256 1abba825745a673a2c71f4d20487a48ab01e544e7378bf1baf629c26bb8cd3e4
SHA512 8b06ee3b8a4251476386422d1d6cbe3da7afe11d9a919c22ecdad808752d44c21ee0bd1bdf78853e5fe0befcea43712a0a3e20e956dbe2e2b0d87d4ee8908007

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js

MD5 55855b9b1993c13de1d8e545833f5c12
SHA1 89bdc8061b038075b10f623a4adadc9fd2e26662
SHA256 eaefdff8732bb5472a877cb112dcea9a5a0cdce65f9446fda0b4daaef0afe044
SHA512 ab60deb1e6d4c453416249922afc93e5db347b9922af7b997d5b5493a70dbc4a5624d954219813d4a50346e6a41e9f92bbef08a2a90e5722f8b40fdd69d48bd0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js

MD5 f32b233db8b05f001ed356954bd5f29c
SHA1 d482732c37e39731e1b159aea66d17ad14cac8b1
SHA256 2ce24c457c4cf30dec92a09b51cd786f629f92532645561d440af23fec0b46a7
SHA512 2824f280258529ec61b1c7a4c0144d2afd9c2ca0c4bc2cdfb49ff2d1e7a0a30be02fbb0b1c14c8e2daa9575f8571ecc6124f11445b9026e480fe975f4c6a0da0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js

MD5 c713d15e23b58a6a1dca943823094fde
SHA1 fb1af81b1e33cea8b38c9f6cc0e955edbfafe009
SHA256 6da087da22e39a9d7738647be5d281e22b59a2c50d7eef814d6c3cd9e79cc9fd
SHA512 d8f4f2cd5b3b9e9844752c9e3857548efa770e11652c22bb12de4960fa54557535f380d08b91a8af7069114a8d14a33e7a2a84246611b542e555aa1423cf03fd

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\sat_logo_2x.png

MD5 427479d957e4d5b9587823b5b5af9cb9
SHA1 65b24e39f0e87dd1ac9073db2a08dcc4fce3ac76
SHA256 5050332fa906e5422278f4aa472beac9bb464e8fb4c0c6f87128bdea5531ae53
SHA512 ae38061cbb20eeaf71fe6228c54a0bae75041476d4a153619ac298a9257f6e737fea8101c0f766e4cf5eb2f08ef69f5ae22f66ea62e25a4b0759bcac59bc68e7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\sat_logo.png

MD5 fd49c9c197ebdff023f8a99d02297a83
SHA1 45c532473341cb6dc0575d29e2513617d54abee5
SHA256 99454ac947d67af47148fc3c27cb74e711e54e50ca4e96d645c4f517328599f1
SHA512 842f4cda9cb28ec052e47cc1320cf070aa3a5fa35c9cb3ee80d7748138ffee25403f3b514626a4172193a511b597b2533436e87a8d56e4debd4e498aa3b79024

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js.bianlian

MD5 529bc2153a55dcaf4b478b272ff6cb15
SHA1 cc53d8b180fdf416a12d72d2ecc7223b6e170430
SHA256 857e7c1ebecfa93d4173b9190de1c01f183df1fcbd104e01ddd7e66373c85c55
SHA512 4ece0d623eea2c9c4a50c05594ee4c961bbcaa8d383bc713ade38f6524fa54c20299d01a31cba665e95e6aa7987b28c2d48144fa734f4560310d99e335fe825f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\en-ae\ui-strings.js

MD5 a0b924a3cb621e2087c7cfa64bab438d
SHA1 fbca2d57bec0e66746383eeec3b04b9ed9a3341d
SHA256 3bd1f833a6f1dfc8cf50e50df839ea5cddf87205f8f8b85fa03c56acc0b82760
SHA512 dc74f71b1768d41568d0fe0bf0e7194603f34a56b966ca1f1b06172cdee5cdd9b2b1020cd41f5d5b9a829c96a03cc28a46aa38cafa65eaf4271f5a0d11929deb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\en-il\ui-strings.js

MD5 fe8d3163a3027bd5b2a9415375f16bdd
SHA1 95c50812e1cd01de3e602b72fab5cb2d7cccd1ed
SHA256 bf2db00ea8f10dbf644b0a0a4ff2b89c9391c5726d10bdb40b0d66e90ade1393
SHA512 33edea968f01df3c7562412430a84558bf55c7fbc3fcac9dbcd818378122d4288cde461d0cbd6f85868a888e57541b0d3dfa84026edcd0e5d308fe9329656b74

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\root\ui-strings.js

MD5 81fe9be995d8846ca0cb6a42a4dc04e7
SHA1 67f7f011e32c55bd73c835f659a2f137f7b28dfb
SHA256 1ff5897fe4286054997fab2eecd7b07f5a7537ddbfc77299dac826b29aa4be28
SHA512 ea662b52f1eb286da55e91e320cc1a29cd462c74703982da78b3736bf7cf1d323769a53b4ad5f815cc1c6f5c1bc42489cc94df33c0b909f102556a31237f5ea9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js

MD5 22d63c27261d764345c6a378eaed3ff6
SHA1 dc69edd2db267f6f8f57aa439b981705eada03e7
SHA256 c942322d125ceb996e9e70bdf61643a124fa7e76c06ebebb45b1f8c5c893d7ae
SHA512 8547255f5352f525db0aab2056dd2e6830ff79546ce82e7043e195752c6996ef8dae0852491a8b920924a470c7bfa2b60a76ef0b940baf453660cdb5c28a3e9f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js.bianlian

MD5 bf60f94cc64d66a7ba51715d94cf44e4
SHA1 1a5be1815838bd5bcb16ac690f0af824e54b9813
SHA256 bd52396c2be746d0d48245663691a0d71951b576da9105043d26516f3a1d7968
SHA512 32bde535e91f89aee696cd31d3bef9ed2714aa089e8eba433a5da23fd004cc1af837fb90ca70bb8c0bd4cc5a567c8d0fd87321f2df15f568e7381eadec9ce206

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\vk_swiftshader_icd.json.DATA

MD5 0f8ca4214ad4a7d82ddb4164db98a07b
SHA1 acfd50d95c594773bc51ef4e31f87c1b5d260abc
SHA256 33ec66a6e9d6b6023cbded6a4cc85e78bda90bd050c07549345203f9360bbb72
SHA512 91193c669526465b42bc7ee0e2609ec089a334936a6cd672d1e9709741b8347e0aeb6aa6b52fb8adb4392915130e313255906a329ce655e0c9b965137959c82c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js

MD5 5d6e05d155d71a8ed71446f9aef1a04b
SHA1 290b5ee9279d14953b678972b654e6426243b5bf
SHA256 d7b3bebfc2b28a74064650d9b245e9a15295a63176d9eaada4f85bf2385fee86
SHA512 e6769e171e1c2fe782805243e34e0513c9782f63a54e06a2d8c62ebf5f88050371b9bf99a94cc4130828de4a1ece2d2185cc0c9207bcdbaddce33bee11d5292c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-ae\ui-strings.js.bianlian

MD5 165b2db3b47b86b2cfd4ba7cf49fccd5
SHA1 379420d117a2d7b0a2e06daf10463313702cf855
SHA256 48bdb8ceb5161f8c99af845a796afd97dee73db59cf68b27cea060e1b0b8111d
SHA512 f25532ab9b2095cd4ace9517d4ea31cad7cae36858ca60b3dcda14a6dabe6f5901566ff1c03795b7970d4211870b582546dd8f0d39daa67a55958b33929f31c6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-gb\ui-strings.js

MD5 2ec5e14f437afd9e45e11837fb1751b6
SHA1 7f9e130e58b6e57014a87ed6ca8e9dce99a72e6a
SHA256 67eec010728a1b72210cd8ded792b7ba8bd8a1625d88be17048aa7ed97fb3a17
SHA512 2e249519a9e2999cd7fecfd0ce7ce8de6e679042cc79e49d3c82e4eeca08010187aae0cf41cd22cec562f01ec8a9f2c7a56cfa425f2c0c2cf00787af737fb2d5

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Internal.msix.DATA

MD5 25d1f17faea4302258a2107ca39bbdb5
SHA1 13d02de6b86db66b4892e27f6e75ffe9446895db
SHA256 92e9d899af3cf39ad6dca86e36aaf79504ccb11e5cb1f1adec197fb794610dc9
SHA512 8a3f46aedee153bae34c766417440dfb94328d9f6735222aae4aca7d101c83216b22bdce70929c29030854ca8fad0d7c8ecf5d79613c4479f60bce092b2b20ae

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\external_extensions.json.DATA

MD5 0c7ace27b46a4c49f33b0b52ce0f11ab
SHA1 b3af3990f1442a5cf8117d5e99fd876140d59e73
SHA256 416ac35183ce5f1328223fb4346f3ba0abc7d67b491e75185d8b511ed2180339
SHA512 8f4749bbcf18f8021459f276d2f49e0edc546617629cbad19d228cca7bf3cab990109808dee46f6facf9e4395bca91c700f5dab0e4cc8242030c5b062c048e62

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js

MD5 37d87a75d874b9f7562d0169a91f5757
SHA1 6c4e99a682711cac600ab606aa6262816950aa00
SHA256 b0d1d78364fa4343ba893f3c2117a8c7852e62e36dfc17d6cd5408dfde116a76
SHA512 c3c0919d2ccf655074cf3aebcaab45e688c1db3a868a0f343a51142f7340902cc6b8191582a859efba01e7167bdb164ea7f6fb63963478b9773de5b86aa788cf

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js

MD5 b0f5bbf29b4fe3ea909ecddb49ecf872
SHA1 af11fb4ceea788b73615efe67d35f6661fc55fb9
SHA256 8da69dabcbb1facb46780258d0968435df866e0c5838f404c49bd6f4fc4d980d
SHA512 c42b19b68c7c407a66f62beae87b040d650e7aaabe56de55abcb840e2680cc07dbc26c4a4c021dc24c4dc8ce35cfeed70254eb46be6ac709c61f2847947c752b

memory/4364-23685-0x0000000000DA0000-0x0000000000FFE000-memory.dmp

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-13 07:28

Reported

2024-06-13 07:31

Platform

win7-20240221-en

Max time kernel

120s

Max time network

121s

Command Line

"C:\Users\Admin\AppData\Local\Temp\out.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\out.exe

"C:\Users\Admin\AppData\Local\Temp\out.exe"

Network

N/A

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-06-13 07:28

Reported

2024-06-13 07:31

Platform

win10v2004-20240508-en

Max time kernel

51s

Max time network

51s

Command Line

"C:\Users\Admin\AppData\Local\Temp\out.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\out.exe

"C:\Users\Admin\AppData\Local\Temp\out.exe"

Network

Files

N/A