Overview

overview

10

Static

static

3

4ff314143f...ea.exe

windows7-x64

10

4ff314143f...ea.exe

windows10-2004-x64

10

Resubmissions

28/07/2024, 16:33

240728-t2rheswfqd10

26/07/2024, 03:12

240726-dqpaxsshqq10

Analysis

  • max time kernel
    149s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 03:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    4ff314143f6fea359946a81034ec04a4f515998fc23c6937bc5d032b02f01bea.exe
  • Size 72KB
  • Sample240726-dqpaxsshqq
  • SHA256 4ff314143f6fea359946a81034ec04a4f515998fc23c6937bc5d032b02f01bea
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
phobosaspackv2credential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistenceprivilege_escalationransomwarespywarestealer

Malware Config

Extracted

Path

  • C:\info.hta

Ransom Note
  • <!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'> <html> <head> <meta charset='windows-1251'> <title>encrypted</title> <HTA:APPLICATION ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no"> <script language='JScript'> window.moveTo(50, 50); window.resizeTo(screen.width - 100, screen.height - 100); </script> <style type='text/css'> body { font: 15px Tahoma, sans-serif; margin: 10px; line-height: 25px; background: #EDEDED; } img { display:inline-block; } .bold { font-weight: bold; } .mark { background: #D0D0E8; padding: 2px 5px; } .header { text-align: center; font-size: 30px; line-height: 50px; font-weight: bold; margin-bottom:20px; } .info { background: #D0D0E8; border-left: 10px solid #00008B; } .alert { background: #FFE4E4; border-left: 10px solid #FF0000; } .private { border: 1px dashed #000; background: #FFFFEF; } .note { height: auto; padding-bottom: 1px; margin: 15px 0; } .note .title { font-weight: bold; text-indent: 10px; height: 30px; line-height: 30px; padding-top: 10px; } .note .mark { background: #A2A2B5; } .note ul { margin-top: 0; } .note pre { margin-left: 15px; line-height: 13px; font-size: 13px; } .footer { position:fixed; bottom:0; right:0; text-align: right; } </style> </head> <body> <div class='header'> <img src='data:image/png;base64,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'> <div>All your files have been encrypted!</div> </div> <div class='bold'>All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail <span class='mark'>[email protected]</span></div> <div class='bold'>Write this ID in the title of your message <span class='mark'>3F5409ED-3368</span></div> <div class='bold'>In case of no answer in 24 hours write us to this e-mail:<span class='mark'>[email protected]</span></div> <div> You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the tool that will decrypt all your files. </div> <div class='note info'> <div class='title'>Free decryption as guarantee</div> <ul>Before paying you can send us up to 5 files for free decryption. The total size of files must be less than 4Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.) </ul> </div> <div class='note info'> <div class='title'>How to obtain Bitcoins</div> <ul> The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. <br><a href='https://localbitcoins.com/buy_bitcoins'>https://localbitcoins.com/buy_bitcoins</a> <br> Also you can find other places to buy Bitcoins and beginners guide here: <br><a href='http://www.coindesk.com/information/how-can-i-buy-bitcoins/'>http://www.coindesk.com/information/how-can-i-buy-bitcoins/</a> </ul> </div> <div class='note alert'> <div class='title'>Attention!</div> <ul> <li>Do not rename encrypted files.</li> <li>Do not try to decrypt your data using third party software, it may cause permanent data loss.</li> <li>Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.</li> </ul> </div> </body> </html>
Emails
URLs

  • http://www.w3.org/TR/html4/strict.dtd'>

Signatures

  • Phobos

    Phobos ransomware appeared at the beginning of 2019.

    ransomwarephobos
  • Credentials from Password Stores: Credentials from Web Browsers 1 TTPs

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Modifies boot configuration data using bcdedit 1 TTPs 4 IoCs
    ransomwareevasion
  • Renames multiple (303) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Deletes backup catalog 3 TTPs 2 IoCs

    Uses wbadmin.exe to inhibit system recovery.

    ransomware
  • Modifies Windows Firewall 2 TTPs 2 IoCs
    evasion
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

    credential_accessstealer
  • Drops startup file 3 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops desktop.ini file(s) 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Interacts with shadow copies 3 TTPs 2 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

    ransomware
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\4ff314143f6fea359946a81034ec04a4f515998fc23c6937bc5d032b02f01bea.exe
    "C:\Users\Admin\AppData\Local\Temp\4ff314143f6fea359946a81034ec04a4f515998fc23c6937bc5d032b02f01bea.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    • Adds Run key to start application
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Users\Admin\AppData\Local\Temp\DaGvPt.exe
      C:\Users\Admin\AppData\Local\Temp\DaGvPt.exe
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2432
      • C:\Windows\SysWOW64\cmd.exe
        cmd /c ""C:\Users\Admin\AppData\Local\Temp\5f674240.bat" "
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2732
    • C:\Users\Admin\AppData\Local\Temp\4ff314143f6fea359946a81034ec04a4f515998fc23c6937bc5d032b02f01bea.exe
      "C:\Users\Admin\AppData\Local\Temp\4ff314143f6fea359946a81034ec04a4f515998fc23c6937bc5d032b02f01bea.exe"
      2⤵
        PID:2688
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:2464
        • C:\Windows\system32\netsh.exe
          netsh advfirewall set currentprofile state off
          3⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          PID:3048
        • C:\Windows\system32\netsh.exe
          netsh firewall set opmode mode=disable
          3⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          PID:2636
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:1264
        • C:\Windows\system32\vssadmin.exe
          vssadmin delete shadows /all /quiet
          3⤵
          • Interacts with shadow copies
          PID:2904
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic shadowcopy delete
          3⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:2840
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} bootstatuspolicy ignoreallfailures
          3⤵
          • Modifies boot configuration data using bcdedit
          PID:1624
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} recoveryenabled no
          3⤵
          • Modifies boot configuration data using bcdedit
          PID:3056
        • C:\Windows\system32\wbadmin.exe
          wbadmin delete catalog -quiet
          3⤵
          • Deletes backup catalog
          PID:3032
      • C:\Windows\SysWOW64\mshta.exe
        "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\info.hta"
        2⤵
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        PID:2112
      • C:\Windows\SysWOW64\mshta.exe
        "C:\Windows\SysWOW64\mshta.exe" "C:\users\public\desktop\info.hta"
        2⤵
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        PID:1504
      • C:\Windows\SysWOW64\mshta.exe
        "C:\Windows\SysWOW64\mshta.exe" "C:\info.hta"
        2⤵
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        PID:1400
      • C:\Windows\SysWOW64\mshta.exe
        "C:\Windows\SysWOW64\mshta.exe" "F:\info.hta"
        2⤵
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        PID:1984
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:992
        • C:\Windows\system32\vssadmin.exe
          vssadmin delete shadows /all /quiet
          3⤵
          • Interacts with shadow copies
          PID:2440
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic shadowcopy delete
          3⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:2664
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} bootstatuspolicy ignoreallfailures
          3⤵
          • Modifies boot configuration data using bcdedit
          PID:1068
        • C:\Windows\system32\bcdedit.exe
          bcdedit /set {default} recoveryenabled no
          3⤵
          • Modifies boot configuration data using bcdedit
          PID:1544
        • C:\Windows\system32\wbadmin.exe
          wbadmin delete catalog -quiet
          3⤵
          • Deletes backup catalog
          PID:2140
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2276
    • C:\Windows\system32\wbengine.exe
      "C:\Windows\system32\wbengine.exe"
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2004
    • C:\Windows\System32\vdsldr.exe
      C:\Windows\System32\vdsldr.exe -Embedding
      1⤵
        PID:2372
      • C:\Windows\System32\vds.exe
        C:\Windows\System32\vds.exe
        1⤵
          PID:888

        Network

              MITRE ATT&CK Enterprise v15

              Reconnaissance

              Resource Development

              Initial Access

              Execution

              Command and Scripting Interpreter

              1
              T1059

              Windows Management Instrumentation

              1
              T1047

              Persistence

              Boot or Logon Autostart Execution

              1
              T1547

              Registry Run Keys / Startup Folder

              1
              T1547.001

              Create or Modify System Process

              1
              T1543

              Windows Service

              1
              T1543.003

              Event Triggered Execution

              1
              T1546

              Netsh Helper DLL

              1
              T1546.007

              Privilege Escalation

              Boot or Logon Autostart Execution

              1
              T1547

              Registry Run Keys / Startup Folder

              1
              T1547.001

              Create or Modify System Process

              1
              T1543

              Windows Service

              1
              T1543.003

              Event Triggered Execution

              1
              T1546

              Netsh Helper DLL

              1
              T1546.007

              Defense Evasion

              Direct Volume Access

              1
              T1006

              Impair Defenses

              1
              T1562

              Disable or Modify System Firewall

              1
              T1562.004

              Indicator Removal

              3
              T1070

              File Deletion

              3
              T1070.004

              Modify Registry

              2
              T1112

              Credential Access

              Credentials from Password Stores

              2
              T1555

              Credentials from Web Browsers

              1
              T1555.003

              Windows Credential Manager

              1
              T1555.004

              Unsecured Credentials

              1
              T1552

              Credentials In Files

              1
              T1552.001

              Discovery

              Browser Information Discovery

              1
              T1217

              Query Registry

              1
              T1012

              System Information Discovery

              1
              T1082

              System Location Discovery

              1
              T1614

              System Language Discovery

              1
              T1614.001

              Lateral Movement

              Collection

              Data from Local System

              1
              T1005

              Command and Control

              Exfiltration

              Impact

              Inhibit System Recovery

              4
              T1490

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              osetup.dll.id[3F5409ED-3368].[[email protected]].Elbie
              • Path C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll.id[3F5409ED-3368].[[email protected]].Elbie
              • Size 6.3MB
              • SHA256 3a504360a64c8c56a6b7363ba818bced58b171b372c4b83869ffc65072a0638d
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              LogTransport2.exe
              • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.exe
              • Size 272KB
              • SHA256 79095a8a9c81e1d95e90442adcddeae93061fac4611d4c1f768850eaf6787c69
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              OfficeMUISet.XML
              • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML
              • Size 819B
              • SHA256 4f969244f420a506355a2c1e81bdd9841f1263818b9189ac31c5c5e14ea41acc
              • MD5 SHA1 SHA512
              Submit Download

              PublisherMUI.XML
              • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML
              • Size 1KB
              • SHA256 1db92b26f408ddb6f3ac47574cd49cf4dc131efa8090477bf6d0a5feea4bdf1c
              • MD5 SHA1 SHA512
              Submit Download

              PREVIEW.GIF
              • Path C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\PREVIEW.GIF
              • Size 1KB
              • SHA256 0ae208d8333b8d56b0871129f974ea63ad90303e5087fd1092d7cc7a66e85ed6
              • MD5 SHA1 SHA512
              Submit Download

              LAYERS.INF
              • Path C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\LAYERS.INF
              • Size 533B
              • SHA256 153e9423e652627ab50fe46f33f0ee612adefaf54ad06bf70947650cdd32871e
              • MD5 SHA1 SHA512
              Submit Download

              BS00135_.WMF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF
              • Size 1KB
              • SHA256 86d911c492b42593042265fd0e6f48a2cee1f9090238e1d849420feae106ccdd
              • MD5 SHA1 SHA512
              Submit Download

              FD02097_.WMF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF
              • Size 1KB
              • SHA256 dd0a8ab83ad0ac36cb27968e73c3b8c87f5d3080854b214a74b53c152f534036
              • MD5 SHA1 SHA512
              Submit Download

              HH00241_.WMF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF
              • Size 1KB
              • SHA256 255c3a22d46b57e3f291eac23e404ce7b331400041930a0b43eb777bf8ed06fb
              • MD5 SHA1 SHA512
              Submit Download

              HH00636_.WMF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00636_.WMF
              • Size 1KB
              • SHA256 7fbcfcd86bdfa943dbd68f67c3fcba6e7ab86fda2d14d28862c176bf18579fca
              • MD5 SHA1 SHA512
              Submit Download

              IN00351_.WMF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00351_.WMF
              • Size 1KB
              • SHA256 59f4c13183ac051510c1eea1127c45540085a860875b07d4987d64ddbf46acbe
              • MD5 SHA1 SHA512
              Submit Download

              J0152702.WMF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152702.WMF
              • Size 1KB
              • SHA256 83e89195b31736ad0c35ecc6fe7132f35f7195bd8b0b9d49fafbdc5d8353c5b5
              • MD5 SHA1 SHA512
              Submit Download

              WB01745_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01745_.GIF
              • Size 1KB
              • SHA256 6013c9170030c639b5465ea1e72f12c4e045fdb481d07f964c37e5fe44ecb355
              • MD5 SHA1 SHA512
              Submit Download

              Essential.xml
              • Path C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Essential.xml
              • Size 928B
              • SHA256 202115097d1bee389d4d4d81db00117252be97d5691af316941f3843ef7a05f5
              • MD5 SHA1 SHA512
              Submit Download

              Hardcover.xml
              • Path C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Hardcover.xml
              • Size 964B
              • SHA256 788ddb3f7716950d0d204e6cad9fe3cc1dddb6140f615cb1c76bea0541722c20
              • MD5 SHA1 SHA512
              Submit Download

              Module.xml
              • Path C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Module.xml
              • Size 961B
              • SHA256 a0cffb66ffbe1d4701a3aa75ae66af7ca178b45f5c722de3d9021a543129f80a
              • MD5 SHA1 SHA512
              Submit Download

              Pushpin.xml
              • Path C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml
              • Size 962B
              • SHA256 a2a40bb99c6a44d49eeb216549045620e8cb9fb90fb165eff71f846f30264096
              • MD5 SHA1 SHA512
              Submit Download

              Urban.xml
              • Path C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml
              • Size 960B
              • SHA256 3dc463a76fc170607c07b104c3cb531362ce7d6e10c1a34e0c0f370aeae08ce8
              • MD5 SHA1 SHA512
              Submit Download

              BD10264_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10264_.GIF
              • Size 185B
              • SHA256 babd6f664158d665504571b169a1e81ef75470cdca4fdd7d95be6cdb7826136d
              • MD5 SHA1 SHA512
              Submit Download

              BD21333_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF
              • Size 416B
              • SHA256 4cc7e6272db6b1ad7581f76c63c694e926e20698e9b02223d5041a55960463f2
              • MD5 SHA1 SHA512
              Submit Download

              BD21339_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF
              • Size 108B
              • SHA256 77133f431d5e12dd850002c0d3d4e0fecbe3a7a699d604dc8c5eae9976e1d260
              • MD5 SHA1 SHA512
              Submit Download

              BD21434_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF
              • Size 177B
              • SHA256 8d84ef2aa665b1d6e1a15112d9c53eab04b68a09a088de5392ee63d51060db81
              • MD5 SHA1 SHA512
              Submit Download

              BD21505_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF
              • Size 175B
              • SHA256 5514e3463923ca8257bc073bf34413d0426a6b45bf569b5a5b74c7c5298c57a7
              • MD5 SHA1 SHA512
              Submit Download

              J0115836.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115836.GIF
              • Size 173B
              • SHA256 33c35642a71ce7d31f92ebe614045d206968f058cb345c7df4ab397a2655f16d
              • MD5 SHA1 SHA512
              Submit Download

              J0115842.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF
              • Size 176B
              • SHA256 86d2cf5b090f43ee54d8f7c1dcf746a853951191457ff6dac96269a9d24860b9
              • MD5 SHA1 SHA512
              Submit Download

              BD14595_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14595_.GIF
              • Size 471B
              • SHA256 9d2ce1c032646d2a3381b68bc9201e3dcd53b764e83a0d356d67cc4926ece015
              • MD5 SHA1 SHA512
              Submit Download

              BD14768_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14768_.GIF
              • Size 423B
              • SHA256 2f1411c6a9eed5ac2ccf7eb35456b8601e3c96907765746895325407cc307cc4
              • MD5 SHA1 SHA512
              Submit Download

              BD14801_.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14801_.GIF
              • Size 900B
              • SHA256 fa807c957eafe34b850cb453a096df2e5899f0902a837fccd59f9aafa869fb44
              • MD5 SHA1 SHA512
              Submit Download

              J0115875.GIF
              • Path C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115875.GIF
              • Size 467B
              • SHA256 db91bef58cfa8c3ad4587f4d737202a2ea4374deb35305e8e56a4e0b57232a7e
              • MD5 SHA1 SHA512
              Submit Download

              EXCEL_COL.HXT
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_COL.HXT
              • Size 205B
              • SHA256 97779f7cae716a4243ac78cdd8c051cfbefdd111d26740978dd0f4c962c2aa7d
              • MD5 SHA1 SHA512
              Submit Download

              TAB_OFF.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_OFF.GIF
              • Size 341B
              • SHA256 9f3a97071dc41574af5b54e44945fabef8d5da339d179476a78dbd624a60033e
              • MD5 SHA1 SHA512
              Submit Download

              TAB_ON.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_ON.GIF
              • Size 222B
              • SHA256 1207fbf437a6d60bad608c9c4a7397194c4f3768142a32c7e5f3a1415452a992
              • MD5 SHA1 SHA512
              Submit Download

              TAB_OFF.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_OFF.GIF
              • Size 462B
              • SHA256 1093af6901915021573eb2e3bcb49af7f1eb79df351806d325b80f1baedaa185
              • MD5 SHA1 SHA512
              Submit Download

              Main.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Main.gif
              • Size 1KB
              • SHA256 318e9e1df845c4135ab519baf8e2c9e617df90e2b3020741ab5d926bb0d4cc93
              • MD5 SHA1 SHA512
              Submit Download

              INFOPATH_F_COL.HXK
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK
              • Size 114B
              • SHA256 802bbf1167e97e336bc7e1d1574466db744c7021efe0f0ff01ff7e352c44f56b
              • MD5 SHA1 SHA512
              Submit Download

              INFOPATH_K_COL.HXK
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK
              • Size 113B
              • SHA256 951b1c95584b91fd8776e1d26b25d745ad5d508f6337686b9f7131d7c2f7096a
              • MD5 SHA1 SHA512
              Submit Download

              MSOUC_COL.HXC
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_COL.HXC
              • Size 621B
              • SHA256 006f8885e892963b3d4a0b53141f888ef5d0b36770d43b82296bcbf800a89d13
              • MD5 SHA1 SHA512
              Submit Download

              ZPDIR00.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR00.GIF
              • Size 41B
              • SHA256 9e1736c43d19118e6ce4302118af337109491ecc52757dfb949bad6a7940b0c2
              • MD5 SHA1 SHA512
              Submit Download

              MSOSEC.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSOSEC.XML
              • Size 179B
              • SHA256 5e06bfa9ebccfa3d8759270620b6860f0b92be9d69ef7d7802b78ee5b5f07f96
              • MD5 SHA1 SHA512
              Submit Download

              DISTLSTL.ICO
              • Path C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTL.ICO
              • Size 1KB
              • SHA256 a338f849bbccace695e284ab83c0cecc84876fdb292078f1186b31e9b6a07127
              • MD5 SHA1 SHA512
              Submit Download

              DISTLSTS.ICO
              • Path C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTS.ICO
              • Size 2KB
              • SHA256 ea3a2d1ae34d98f545d82a53ff2d1c6e5334ab4a0a4cd902e3fcd0fb697bf32d
              • MD5 SHA1 SHA512
              Submit Download

              DiscussionToolIconImagesMask.bmp
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp
              • Size 1KB
              • SHA256 86a618c687c518ca93f7151a26391ef0e19101986d30f7eeefa420b0574fc5ec
              • MD5 SHA1 SHA512
              Submit Download

              StopIconMask.bmp
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\StopIconMask.bmp
              • Size 2KB
              • SHA256 3bff857daf1c246b3ba79bff08805f403b65b0e2a5cffb40b078a383eb861514
              • MD5 SHA1 SHA512
              Submit Download

              UnreadIconImagesMask.bmp
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp
              • Size 1KB
              • SHA256 90ebb694c6e15523caa8196f148f47d1c9c477a48c49d638354530e0c2b811ba
              • MD5 SHA1 SHA512
              Submit Download

              Earthy.css
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css
              • Size 880B
              • SHA256 c23a5cc2d7277749c47ddcad301aa92fcbbaeab54e552813333c1306c5cf2425
              • MD5 SHA1 SHA512
              Submit Download

              GreenTea.css
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css
              • Size 932B
              • SHA256 cb973b51d6e0730a068671ec24e50257ecac543574a2678214b7009fd6620d9b
              • MD5 SHA1 SHA512
              Submit Download

              VIEW.ICO
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.ICO
              • Size 318B
              • SHA256 b57536fb8401facf2e6aed14ed0f15e42a4f38b1e05eebc1a8be1613909c5165
              • MD5 SHA1 SHA512
              Submit Download

              TAB_OFF.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_OFF.GIF
              • Size 496B
              • SHA256 882993b55cc0c527f0a6059b69b3faf4ef3ccb9cecd3d8847ca0e49a1444debe
              • MD5 SHA1 SHA512
              Submit Download

              TAB_ON.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_ON.GIF
              • Size 1KB
              • SHA256 c55b90509b8cb9bac53fbdddfc93d4e572685c509f1218423c43a5d6013bbd48
              • MD5 SHA1 SHA512
              Submit Download

              TAB_ON.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF
              • Size 267B
              • SHA256 82f9a5d07d2ed70801a407aefc9336fb4582b17a23686cbd30ce31881a289b85
              • MD5 SHA1 SHA512
              Submit Download

              TAB_OFF.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF
              • Size 364B
              • SHA256 47f0149b43961165c5fa224dbd2d1e956cf0a26b86d15ee3e12652c2a6e013ca
              • MD5 SHA1 SHA512
              Submit Download

              SAVE.GIF
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SAVE.GIF
              • Size 615B
              • SHA256 8d77e83b50a81c442acd64cf5a57ee30906256da88e661e87cba51320f2cdda9
              • MD5 SHA1 SHA512
              Submit Download

              bg_Groove.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Groove.gif
              • Size 106B
              • SHA256 34dbd6bf55d0d075d666181d9278b8387482a8b5804e44e1ddaafe6876dadc15
              • MD5 SHA1 SHA512
              Submit Download

              button_right.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right.gif
              • Size 369B
              • SHA256 1270be94b76ac32534581f51fecec7ce90ed9e0f3693f310058fba0c6ca8aaa7
              • MD5 SHA1 SHA512
              Submit Download

              button_right_over.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right_over.gif
              • Size 580B
              • SHA256 b92428daaf38be6775a2b1ce78f5c8ce213b90c6e6fbd95bae56458ab90f7437
              • MD5 SHA1 SHA512
              Submit Download

              rtf_italic.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif
              • Size 852B
              • SHA256 b3b87c3ad568de5a1f07702392e3bfc76f41a47b2fa1d710198406c3c5172697
              • MD5 SHA1 SHA512
              Submit Download

              rtf_alignright.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif
              • Size 847B
              • SHA256 35e1150f8a8236fd8c2be2c6da618b5f5366caabb763b7453201f5c430441aae
              • MD5 SHA1 SHA512
              Submit Download

              rtf_hyperlink.gif
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_hyperlink.gif
              • Size 241B
              • SHA256 f2d7df9f7c7a829d151f2d26f67f11bb6b824fb5ed649c159dd6124c4b4dce60
              • MD5 SHA1 SHA512
              Submit Download

              OnLineBusy.ico
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OnLineBusy.ico
              • Size 3KB
              • SHA256 868d0516a42b8340eba07ffaa00f5928e1d6a7daf2a3c4d96c1b86b80e2e3e81
              • MD5 SHA1 SHA512
              Submit Download

              PersonalContact.ico
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\PersonalContact.ico
              • Size 1KB
              • SHA256 d2a2840f1282913c2678160f13f3204616a9c302ae3b8f47bf17783ef3323aa7
              • MD5 SHA1 SHA512
              Submit Download

              messageboxerror.ico
              • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxerror.ico
              • Size 2KB
              • SHA256 54a918ed71329a2e6af831153825cb69b8cd45938a352d3b0882c92969a353dd
              • MD5 SHA1 SHA512
              Submit Download

              SendtoOneNoteFilter.gpd
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendtoOneNoteFilter.gpd
              • Size 81B
              • SHA256 6778c7c7b6b6c1c273e668169a7652a681da86ad62d03f7c5aa120405069feb2
              • MD5 SHA1 SHA512
              Submit Download

              AMERITECH.NET.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\AMERITECH.NET.XML
              • Size 816B
              • SHA256 0645a4a67dcec462dc9f335bb0564e6e39bf12ea7e40cf8de81418210102c2d1
              • MD5 SHA1 SHA512
              Submit Download

              BTOPENWORLD.COM.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\BTOPENWORLD.COM.XML
              • Size 807B
              • SHA256 cadbea407cb411d2ed1c47c77536b622eb7d53d4fd3ee3b9897d554298683fe3
              • MD5 SHA1 SHA512
              Submit Download

              WANS.NET.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\WANS.NET.XML
              • Size 806B
              • SHA256 f860ea6cfbfe8ddb3862a09c1b443f3273dac1a4757ce9e7a3b34d46f971ff10
              • MD5 SHA1 SHA512
              Submit Download

              YAHOO.CO.UK.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.UK.XML
              • Size 810B
              • SHA256 9b8747ddedfdcb06f34ca5161281e28aafe3bec2e4b21aa731e17bb46dabc6c1
              • MD5 SHA1 SHA512
              Submit Download

              YAHOO.COM.AR.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AR.XML
              • Size 812B
              • SHA256 15dfcf446deb114d465215cf49907aa5efc5fb8531f97607d50148cb4b680288
              • MD5 SHA1 SHA512
              Submit Download

              YAHOO.IT.XML
              • Path C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IT.XML
              • Size 804B
              • SHA256 60107be66c9efe4d6aa0a3864f71d60b3800c8d6400daa36c05609d099b5f891
              • MD5 SHA1 SHA512
              Submit Download

              JUNGLE.HTM
              • Path C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUNGLE.HTM
              • Size 513B
              • SHA256 8ae7498b01f40e9d2a04df8a8a91cc0b180eb9eb64b78129f59a6d6ab547816b
              • MD5 SHA1 SHA512
              Submit Download

              Uninstall.exe
              • Path C:\Program Files\7-Zip\Uninstall.exe
              • Size 31KB
              • SHA256 4fa7abf3016b4fce22b2ef413654a5ef60fd6a75cce4b6e7aeedf3cf46dde806
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              Rio_Gallegos
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Rio_Gallegos
              • Size 549B
              • SHA256 c936ab1da7ef4314182c8edabaeae90f8d51ed45bc48848d35670adf5b470d31
              • MD5 SHA1 SHA512
              Submit Download

              Curacao
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Curacao
              • Size 77B
              • SHA256 075561eff2cd3ad586776fa904f0040282c5f6a261f6a8fd6a0a524d14cd2d2c
              • MD5 SHA1 SHA512
              Submit Download

              Guayaquil
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guayaquil
              • Size 65B
              • SHA256 98ce42deef51d40269d542f5314bef2c7468d401ad5d85168bfab4c0108f75f7
              • MD5 SHA1 SHA512
              Submit Download

              Tijuana
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tijuana
              • Size 1KB
              • SHA256 07a692cc9bc920ef8caed75ba9af60ad2d6b144c83bfde3b91a77b5bcce277a3
              • MD5 SHA1 SHA512
              Submit Download

              Karachi
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Karachi
              • Size 153B
              • SHA256 f1663cceeb67ba35c5a5cbf58b56050ddbe5ec5680ea9e55837b57524f29b876
              • MD5 SHA1 SHA512
              Submit Download

              Omsk
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Omsk
              • Size 589B
              • SHA256 36bce57f9ab26334f370d700cd0a853618cf2051afbe561ba09b0aae5dc371a4
              • MD5 SHA1 SHA512
              Submit Download

              Adelaide
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Adelaide
              • Size 1KB
              • SHA256 e28b98a94e0077340a3aece749f2d400c3f06890cec9447f4c2567bd1e7a5839
              • MD5 SHA1 SHA512
              Submit Download

              GMT+10
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+10
              • Size 27B
              • SHA256 ea49aa9f6f6cf2d53d454e628ba5a339cc000230c4651655d0237711d747f50b
              • MD5 SHA1 SHA512
              Submit Download

              Bougainville
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville
              • Size 85B
              • SHA256 6a3a9301bb8dd782bb5c170bedfa73e9e7c60235e6e1840f14bd14b812127ef2
              • MD5 SHA1 SHA512
              Submit Download

              Enderbury
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury
              • Size 89B
              • SHA256 a0bf83b3948dce6afe987c170a5cd711a3d65fcd5c70e3b7bbfeeb1578544609
              • MD5 SHA1 SHA512
              Submit Download

              PST8PDT
              • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8PDT
              • Size 2KB
              • SHA256 2f329134686a44ee0362fd0c8b5d071e38bade32a5389e31282f64f565e76759
              • MD5 SHA1 SHA512
              Submit Download

              eclipse.inf
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf
              • Size 57B
              • SHA256 65a16cb7861335d5ace3c60718b5052e44660726da4cd13bb745381b235a1785
              • MD5 SHA1 SHA512
              Submit Download

              MANIFEST.MF
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF
              • Size 133B
              • SHA256 57ffc9ca3beb6ee6226c28248ab9c77b2076ef6acffba839cec21fac28a8fd1f
              • MD5 SHA1 SHA512
              Submit Download

              winXPBluTSFrame.png
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluTSFrame.png
              • Size 138B
              • SHA256 486a8212c0d6860840d883981ca52daaad3bf3b2ab5be56cdc47ed9b42daba22
              • MD5 SHA1 SHA512
              Submit Download

              org-netbeans-modules-autoupdate-services.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-services.xml
              • Size 453B
              • SHA256 8d43407158818d7f3e03cc0a6ae6d789e9e393467ba847a998214eb4e292b989
              • MD5 SHA1 SHA512
              Submit Download

              org-netbeans-modules-spi-actions.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-spi-actions.xml
              • Size 437B
              • SHA256 99d48b66d590c07b14f4cd68adac79e92616afcf00503a846b6bf4599bfeabc0
              • MD5 SHA1 SHA512
              Submit Download

              org-openide-util-enumerations.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml
              • Size 431B
              • SHA256 be9ceb4464b22203feffd3700c5570b7d6d44c5d0d357148e1e6d5be5e694376
              • MD5 SHA1 SHA512
              Submit Download

              org-openide-windows.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-windows.xml
              • Size 411B
              • SHA256 5f7bcd85900e62abb00ce739eaad53d80170a4a6152d951b6825110d2fc17965
              • MD5 SHA1 SHA512
              Submit Download

              org-netbeans-modules-spi-actions_zh_CN.jar
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar
              • Size 1KB
              • SHA256 f5ea79165516de2e7e1efb53d016983f5d18c3184413f044a4002f4b751c918b
              • MD5 SHA1 SHA512
              Submit Download

              org-netbeans-spi-quicksearch.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml
              • Size 400B
              • SHA256 7a12e561363385e9dfeeab326368731c030ed4b374e7f5897ac819159d2884c5
              • MD5 SHA1 SHA512
              Submit Download

              org-netbeans-lib-profiler-ui.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml
              • Size 429B
              • SHA256 a6df5cb2b51fa56609c7daf08d28f0e41801b96f9514a9d179992a63afd516b5
              • MD5 SHA1 SHA512
              Submit Download

              com-sun-tools-visualvm-jvmstat.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml
              • Size 473B
              • SHA256 d0d0b1face19fe4a88c6b51f6ced55ae0e00ac548b75809d88089ad431da5d3a
              • MD5 SHA1 SHA512
              Submit Download

              com-sun-tools-visualvm-sa.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml
              • Size 463B
              • SHA256 c94a9a55369ccc4b41a71b9c18b04e1778a0913447ca6b5a630135f7a7ac0c1b
              • MD5 SHA1 SHA512
              Submit Download

              com-sun-tools-visualvm-jmx.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml
              • Size 393B
              • SHA256 77cf0aa8aa6d73f27ad7faa42f7c9a76a689a60d74483f96050dc1cc0adb88c0
              • MD5 SHA1 SHA512
              Submit Download

              com-sun-tools-visualvm-jvmstat.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml
              • Size 405B
              • SHA256 a7ca0125b93e1a5681d5a9c294ec3a4e5680cc58e44fd223d2dac04232b7367c
              • MD5 SHA1 SHA512
              Submit Download

              com-sun-tools-visualvm-threaddump.xml
              • Path C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml
              • Size 414B
              • SHA256 e77bb87374bd3a9b3ccdf932d260091a3ffeb1d1ad9d236b54f0f6797585ebd7
              • MD5 SHA1 SHA512
              Submit Download

              COPYRIGHT
              • Path C:\Program Files\Java\jre7\COPYRIGHT
              • Size 3KB
              • SHA256 46570844fde2506ac28543dcde5bd20877b0bb2522a0cb11671513722ddb842a
              • MD5 SHA1 SHA512
              Submit Download

              management-agent.jar
              • Path C:\Program Files\Java\jre7\lib\management-agent.jar
              • Size 385B
              • SHA256 e743d6195ff2f42282e101f9471874e8df79dc05a69ca20abf22015d48d28c6c
              • MD5 SHA1 SHA512
              Submit Download

              Johannesburg
              • Path C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg
              • Size 105B
              • SHA256 523c41464ee47d61350e15bc091bc970d73ae2d00bfe7a88bc7fe00ae6202c75
              • MD5 SHA1 SHA512
              Submit Download

              Nairobi
              • Path C:\Program Files\Java\jre7\lib\zi\Africa\Nairobi
              • Size 97B
              • SHA256 136dd1a7d0a62859f2077a62b7673c5c712fb750604a15f5f6140ab2c5112327
              • MD5 SHA1 SHA512
              Submit Download

              Tunis
              • Path C:\Program Files\Java\jre7\lib\zi\Africa\Tunis
              • Size 329B
              • SHA256 8474486baa45dc211adc58156a75954f3542dc65326d6e5b157288711ed74e75
              • MD5 SHA1 SHA512
              Submit Download

              San_Luis
              • Path C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis
              • Size 557B
              • SHA256 58bd661ff1a892697366215a8938d1c616cb4523e1ede78b49d155b132430917
              • MD5 SHA1 SHA512
              Submit Download

              Blanc-Sablon
              • Path C:\Program Files\Java\jre7\lib\zi\America\Blanc-Sablon
              • Size 93B
              • SHA256 dbcfcc77f5774ed3333f3963eb84a324fd967de4d62c96631be6af1d6b3fe136
              • MD5 SHA1 SHA512
              Submit Download

              Costa_Rica
              • Path C:\Program Files\Java\jre7\lib\zi\America\Costa_Rica
              • Size 137B
              • SHA256 4a93894f08d98d707cd9a0274f4c9a51bcfa27e701359e12befcc78ffb488817
              • MD5 SHA1 SHA512
              Submit Download

              Matamoros
              • Path C:\Program Files\Java\jre7\lib\zi\America\Matamoros
              • Size 788B
              • SHA256 3e84c247e11701fb5451865acb6262c8495d47c5f397a772a7bc01c9ce9f5b12
              • MD5 SHA1 SHA512
              Submit Download

              Nassau
              • Path C:\Program Files\Java\jre7\lib\zi\America\Nassau
              • Size 1KB
              • SHA256 8b3827b7bae22f976e2a59e9957ba8b3b9cee57a4cf923a4da970a8f3c1e79c5
              • MD5 SHA1 SHA512
              Submit Download

              Noronha
              • Path C:\Program Files\Java\jre7\lib\zi\America\Noronha
              • Size 377B
              • SHA256 43c2ae1019ad57912662c9bd170d8d6986299bad4ec76811e70c98c4a1ffe3b6
              • MD5 SHA1 SHA512
              Submit Download

              Regina
              • Path C:\Program Files\Java\jre7\lib\zi\America\Regina
              • Size 481B
              • SHA256 86fbc959c7ffdeba173fc2baa99a8a93d75ba5d6a83a3e3300bab1b0a46b1d42
              • MD5 SHA1 SHA512
              Submit Download

              Resolute
              • Path C:\Program Files\Java\jre7\lib\zi\America\Resolute
              • Size 1KB
              • SHA256 d6369598c0846422df1f6e1029041784e34d3b6fcc12a3ba0fc1613a0f80530a
              • MD5 SHA1 SHA512
              Submit Download

              Scoresbysund
              • Path C:\Program Files\Java\jre7\lib\zi\America\Scoresbysund
              • Size 1KB
              • SHA256 256fb9c4796b15a7ec4b0d5319e9e493ca4cffda658310420bdfd31e1c59da79
              • MD5 SHA1 SHA512
              Submit Download

              Whitehorse
              • Path C:\Program Files\Java\jre7\lib\zi\America\Whitehorse
              • Size 1KB
              • SHA256 b61465acf0031e6a4cc34a66d568bd1735668abf591a6badb1f5f5bc20bf9919
              • MD5 SHA1 SHA512
              Submit Download

              Amman
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Amman
              • Size 1KB
              • SHA256 693195cf289838146418e1bd05fd1a482c36ff75a77874609d615247285d5b99
              • MD5 SHA1 SHA512
              Submit Download

              Colombo
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Colombo
              • Size 129B
              • SHA256 2c80619d7e7c58257293cda3a878c13e5856f4e06f6f90601276f7b9179c9e07
              • MD5 SHA1 SHA512
              Submit Download

              Dhaka
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Dhaka
              • Size 121B
              • SHA256 d8129de4286dc4fd245c7776b51d76aaa727956e8fc88ff928eb69ff7fc17e0b
              • MD5 SHA1 SHA512
              Submit Download

              Dushanbe
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Dushanbe
              • Size 261B
              • SHA256 2091501cde52f2dd75b74ad947075b6381c5f503af97a66b592b7caebe9e36cf
              • MD5 SHA1 SHA512
              Submit Download

              Jerusalem
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Jerusalem
              • Size 1KB
              • SHA256 c00b114d3e1a4d978c0051e7e8503f7fd30dea142240d6b950164a37cce3edaf
              • MD5 SHA1 SHA512
              Submit Download

              Manila
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Manila
              • Size 125B
              • SHA256 42d699d9e89e439804c0981f96b1a3fa7dbe42c6be1dbca6211c6faa4e0e2463
              • MD5 SHA1 SHA512
              Submit Download

              Novokuznetsk
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Novokuznetsk
              • Size 581B
              • SHA256 88d5d20f83be8b19edd7cf53771fa94c1a67429f7bf9cec90822dc84a3a434a3
              • MD5 SHA1 SHA512
              Submit Download

              Qyzylorda
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Qyzylorda
              • Size 465B
              • SHA256 4c555a3d8b83f80c2e0d0b647769e82148ebe7e27811d0a63277d6f61abafbbc
              • MD5 SHA1 SHA512
              Submit Download

              Seoul
              • Path C:\Program Files\Java\jre7\lib\zi\Asia\Seoul
              • Size 233B
              • SHA256 e43fe96a7f7ec0a38984f78c064638b2daa75e261ab409bbbe2d3e590265ec7b
              • MD5 SHA1 SHA512
              Submit Download

              CST6CDT
              • Path C:\Program Files\Java\jre7\lib\zi\CST6CDT
              • Size 1KB
              • SHA256 fbb4fa31c3fa0c14ccb3fe426e39dcad529b17e379309c0adbe27fcc93feba50
              • MD5 SHA1 SHA512
              Submit Download

              Oslo
              • Path C:\Program Files\Java\jre7\lib\zi\Europe\Oslo
              • Size 1KB
              • SHA256 97d364e2d3d35f030a038c41bbadc42d0c15fa8d79ba569987e19fddb2e80f9a
              • MD5 SHA1 SHA512
              Submit Download

              Vienna
              • Path C:\Program Files\Java\jre7\lib\zi\Europe\Vienna
              • Size 1KB
              • SHA256 655a3ef0465a9f30fddf25f4dde0c19a05c6f9069b83961800c1944165955273
              • MD5 SHA1 SHA512
              Submit Download

              Vilnius
              • Path C:\Program Files\Java\jre7\lib\zi\Europe\Vilnius
              • Size 1KB
              • SHA256 d50e2d8474134908822ade46e27717d1a22aaa2d4ebd66ee14c988ecafc01461
              • MD5 SHA1 SHA512
              Submit Download

              desktop.ini
              • Path C:\Program Files\Microsoft Games\Solitaire\desktop.ini
              • Size 101B
              • SHA256 e08dd9962eedb16e12840ea2a977cc07bc5fa8d96259682edaa080573d525e4c
              • MD5 SHA1 SHA512
              Submit Download

              xul.dll.sig
              • Path C:\Program Files\Mozilla Firefox\xul.dll.sig
              • Size 1KB
              • SHA256 4740d289d0a31bc1fc00e255845b3d8ba7cec2d6d0ee92177d23aa293f9fca3a
              • MD5 SHA1 SHA512
              Submit Download

              ui-bg_diagonals-thick_18_b81900_40x40.png
              • Path C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png
              • Size 201B
              • SHA256 ab3df617aaa3140f04dc53f65b5446f34a6b2bdbb1f7b78db8db4d067ba14db9
              • MD5 SHA1 SHA512
              Submit Download

              status.json
              • Path C:\Program Files\VideoLAN\VLC\lua\http\requests\status.json
              • Size 1KB
              • SHA256 52dbd4365b026555e3382c056240376d3aa319c7e46c1aa7c38caa4883570517
              • MD5 SHA1 SHA512
              Submit Download

              MS.MSOUC.14.1033.hxn
              • Path C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn
              • Size 350B
              • SHA256 9cb5d05f0db60b9e0d1b76af229fd2a705903d6a1278d4b815faa536a60c118d
              • MD5 SHA1 SHA512
              Submit Download

              MS.POWERPNT.DEV.14.1033.hxn
              • Path C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn
              • Size 392B
              • SHA256 3eefc4790b52024832ea4c03c6e7a781f3ef9416866a959b2777fce101ad9d61
              • MD5 SHA1 SHA512
              Submit Download

              MS.WINWORD.14.1033.hxn
              • Path C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn
              • Size 362B
              • SHA256 891c1644d5e29e33e5bb88666853f9531b93a3d6fbbd4a8b01e4e8701f836bea
              • MD5 SHA1 SHA512
              Submit Download

              Help_MValidator.Lck
              • Path C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.Lck
              • Size 4B
              • SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
              • MD5 SHA1 SHA512
              Submit Download

              CiAB0001.000
              • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0001.000
              • Size 240B
              • SHA256 2dfba633817046c7f559ed4b93076048435f7e1a90f14eb8035c04b9ebae2537
              • MD5 SHA1 SHA512
              Submit Download

              Desktop.ini
              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini
              • Size 1KB
              • SHA256 57eb66eb632b72c290761008baf8118400f3a914e5ea4ff8621c3d61d529c89c
              • MD5 SHA1 SHA512
              Submit Download

              Component Services.lnk
              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk
              • Size 1KB
              • SHA256 18df269c236e68e99a2e97691011172e3c2c600448a13dca21118370bc226335
              • MD5 SHA1 SHA512
              Submit Download

              Memory Diagnostics Tool.lnk
              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
              • Size 1KB
              • SHA256 54ad5402b99458324b0e2a71fb21fe7c0e16eccf508b444034a6585aae645053
              • MD5 SHA1 SHA512
              Submit Download

              Remote Assistance.lnk
              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk
              • Size 1KB
              • SHA256 56ef96896db0a2f66b66a8513c0c1f699c5c67f1b23d5e7daab3e679e37d48e3
              • MD5 SHA1 SHA512
              Submit Download

              F90F18257CBB4D84216AC1E1F3BB2C76
              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76
              • Size 252B
              • SHA256 913c6e2c32d99e4baff62cf421a494730cb043924f2c6bf46406573b59c641bd
              • MD5 SHA1 SHA512
              Submit Download

              index
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index
              • Size 24B
              • SHA256 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
              • MD5 SHA1 SHA512
              Submit Download

              CURRENT
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT
              • Size 16B
              • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
              • MD5 SHA1 SHA512
              Submit Download

              LOG
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
              • Size 189B
              • SHA256 06ea118edadd836a02b202c05bc7e47356b57e28c01edf1dad6cc4cf90c662e2
              • MD5 SHA1 SHA512
              Submit Download

              000005.ldb
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000005.ldb
              • Size 141B
              • SHA256 dc2021c180e2d8367d094b4c07d11bd556d64b33d1fe8bf58e208e8da8f5dd55
              • MD5 SHA1 SHA512
              Submit Download

              32.png
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\32.png
              • Size 890B
              • SHA256 d1db33e3ae5c6779e11ecc0ddf3962bf0559582980b5e5a92fd5caf91cb1bff2
              • MD5 SHA1 SHA512
              Submit Download

              64.png
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\64.png
              • Size 1KB
              • SHA256 2555bb5583cd7eecea012833776c74683ce3479d1c1553733366905bc820ea83
              • MD5 SHA1 SHA512
              Submit Download

              64.png
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\64.png
              • Size 1KB
              • SHA256 0abe90866c4fbc89ae5b4512dde9df1c441a2f5923ee3e7932cf34532a6bf773
              • MD5 SHA1 SHA512
              Submit Download

              MANIFEST-000004
              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000004
              • Size 50B
              • SHA256 cc2786e1f9910a9d811400edcddaf7075195f7a16b216dcbefba3bc7c4f2ae51
              • MD5 SHA1 SHA512
              Submit Download

              desktop.ini
              • Path C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\XR0R6AOK\desktop.ini
              • Size 67B
              • SHA256 1be2b3990b410ca4fb38d1f79019c4018cd8820b69618646c81d22dfcbddc802
              • MD5 SHA1 SHA512
              Submit Download

              {61AC8DD4-3D4C-11EF-826E-EEF6AC92610E}.dat
              • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{61AC8DD4-3D4C-11EF-826E-EEF6AC92610E}.dat
              • Size 3KB
              • SHA256 6cf1b57d59e7111bc218dfb01dda93ac0f776715599a1c69f89035bd20c16a10
              • MD5 SHA1 SHA512
              Submit Download

              Bears.htm
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Bears.htm
              • Size 255B
              • SHA256 80bd5cb5a9ca35dcdea1d59b5f1778f4114f6215af38004a02a99a1d37383648
              • MD5 SHA1 SHA512
              Submit Download

              Settings.ini
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Sidebar\Settings.ini
              • Size 84B
              • SHA256 4fea5e6a3ec5f5474a26d858bc77b6d7bd3ab864ea02d988683fdc648602b248
              • MD5 SHA1 SHA512
              Submit Download

              desktop.ini
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini
              • Size 174B
              • SHA256 eaae98aa73fe0b561c8b02607a524fb4853bbe81c6de8c3d8a9b7449366809d4
              • MD5 SHA1 SHA512
              Submit Download

              desktop.ini
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
              • Size 145B
              • SHA256 c38f1294a259a7e943728e76d1a9d2e0992d22f4cebf6de1fb42204e7126d19a
              • MD5 SHA1 SHA512
              Submit Download

              k4[1].rar
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XY2E4O3P\k4[1].rar
              • Size 4B
              • SHA256 b5bb9d8014a0f9b1d61e21e796d78dccdf1352f23cd32812f4850b878ae4944c
              • MD5 SHA1 SHA512
              Submit Download

              social-tracking-protection-facebook-digest256.vlpset
              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yrxx2hps.default-release\safebrowsing\social-tracking-protection-facebook-digest256.vlpset
              • Size 485B
              • SHA256 6c2b87f2b54344778d2eb7f85ae86f2079206f40d185896f7dd3df446533e8a1
              • MD5 SHA1 SHA512
              Submit Download

              17E853B4.exe
              • Path C:\Users\Admin\AppData\Local\Temp\17E853B4.exe
              • Size 4B
              • SHA256 9f2981a7cc4d40a2a409dc895de64253acd819d7c0011c8e80b86fe899464e31
              • MD5 SHA1 SHA512
              Submit Download

              5f674240.bat
              • Path C:\Users\Admin\AppData\Local\Temp\5f674240.bat
              • Size 187B
              • SHA256 d1949765a8dfbace07cef691b9344d256c272bda807d67e3aaf95642a3cea8ec
              • MD5 SHA1 SHA512
              Submit Download

              ASPNETSetup_00001.log
              • Path C:\Users\Admin\AppData\Local\Temp\ASPNETSetup_00001.log
              • Size 2KB
              • SHA256 04893027370077030b48fd90535706dedb3b2d31e4f6ce5bfbcd1c8578017383
              • MD5 SHA1 SHA512
              Submit Download

              SharedDataEvents
              • Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
              • Size 3KB
              • SHA256 e80232b4d18d0bb7e794be263ba937626f383f9917d4b8a737ba893a8f752293
              • MD5 SHA1 SHA512
              Submit Download

              ConfirmSwitch.docx.lnk
              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ConfirmSwitch.docx.lnk
              • Size 2KB
              • SHA256 f3551a0e22b2419de950c0494634af8056cef97bc28f4e7baf17528e5b328f20
              • MD5 SHA1 SHA512
              Submit Download

              SelectUnblock.xlsx.lnk
              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\SelectUnblock.xlsx.lnk
              • Size 555B
              • SHA256 f4b6949da1382fe465cf0c37332dcd8289edd0324d595f715cf258d63d363c3c
              • MD5 SHA1 SHA512
              Submit Download

              TestConvertFrom.docx.lnk
              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\TestConvertFrom.docx.lnk
              • Size 565B
              • SHA256 5635520a268aed816a21b0ba7d3292f3098ff32942e88de607a6ffb111fe2385
              • MD5 SHA1 SHA512
              Submit Download

              times.json
              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yrxx2hps.Admin\times.json
              • Size 47B
              • SHA256 140eda45fe001c0fe47edd7fc509ff1882d46fbcb7c7437d893c1fb83012e433
              • MD5 SHA1 SHA512
              Submit Download

              SiteSecurityServiceState.txt
              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yrxx2hps.default-release\SiteSecurityServiceState.txt
              • Size 264B
              • SHA256 44b8aa4d28701168922acf61435ea4bb442f97b0b14ad7a2510ed68874ee2a72
              • MD5 SHA1 SHA512
              Submit Download

              desktop.ini
              • Path C:\Users\Admin\Downloads\desktop.ini
              • Size 282B
              • SHA256 4afd6e7f6ef862c727cf5780abfde2094eb56e93383b6e9d4cb7fae81dd17cd1
              • MD5 SHA1 SHA512
              Submit Download

              desktop.ini
              • Path C:\Users\Admin\Favorites\Links for United States\desktop.ini
              • Size 224B
              • SHA256 6eb69e26de2a26eda48af77d4cec893aa0cf4748a64cbefcfe11a22c1e680ad9
              • MD5 SHA1 SHA512
              Submit Download

              Narrator.lnk
              • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
              • Size 1KB
              • SHA256 118980fc1bef9a9da8a06e2a864d3f5f5573b37786bac8709746a8ca26a12523
              • MD5 SHA1 SHA512
              Submit Download

              On-Screen Keyboard.lnk
              • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
              • Size 1KB
              • SHA256 fb701ba16878b120e90469d8238b8765f8a157f6aabf76d94fd6aa09b591cf93
              • MD5 SHA1 SHA512
              Submit Download

              Notepad.lnk
              • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk
              • Size 1KB
              • SHA256 5cad8b3db8fbb29e0cabbd785e1e3449ebcd5b04544cde14c93812a93860cc47
              • MD5 SHA1 SHA512
              Submit Download

              Run.lnk
              • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk
              • Size 262B
              • SHA256 ba1d859d62b101dc263d6834aaa81378941736dfab33b15243a4bf3b45691735
              • MD5 SHA1 SHA512
              Submit Download

              Windows Explorer.lnk
              • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk
              • Size 1KB
              • SHA256 9df18e83bfce0d614cee8a1ce8ab9500f4fc8c1b39f41acb9b7caaa317fb55f2
              • MD5 SHA1 SHA512
              Submit Download

              info.hta
              • Path C:\info.hta
              • Size 5KB
              • SHA256 a03b4008537bde69b16bca1f2217aadb2c189b1886681abfe52656da17938c70
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              DaGvPt.exe
              • Path \Users\Admin\AppData\Local\Temp\DaGvPt.exe
              • Size 15KB
              • SHA256 4485df22c627fa0bb899d79aa6ff29bc5be1dbc3caa2b7a490809338d54b7794
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              memory/2164-3182-0x0000000000A50000-0x0000000000A68000-memory.dmp
              Download

              memory/2164-9-0x0000000000970000-0x0000000000979000-memory.dmp
              Download

              memory/2164-10-0x0000000000970000-0x0000000000979000-memory.dmp
              Download

              memory/2164-1-0x0000000000A50000-0x0000000000A68000-memory.dmp
              Download

              memory/2432-55-0x0000000000970000-0x0000000000979000-memory.dmp
              Download

              memory/2432-11-0x0000000000970000-0x0000000000979000-memory.dmp
              Download

              memory/2688-14-0x0000000000A50000-0x0000000000A68000-memory.dmp
              Download