922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2024 04:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Size

12KB
MD5

0dfd45af14c6abff59e905ade61a4b75
SHA1

6ad311da73780d44b3a9010743729dfd3bbbc24f
SHA256

922fc59597bf515d542b5f928fceb674d3aba5c071d8408ce008c9eb56b3c411
SHA512

6815237299cfc8b36a8e6c1f1652a59ffa2a55b8d4cf83a00ab3372f910ee73738607b08cc7b2c88ece3857d1ae074d641ab492d0dd3f51f29c0688cdbf09781
SSDEEP

192:x/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRM3W8r:xebFNw4Pk1itKkpAjjJs6B40W3W8r

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2182) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

Drops startup file 1 IoCs

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\UVF4G43eJVcNx5Z.exe"	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\rhproxy.inf_amd64_7d28259fbc48ab7d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Dism\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\BaseRegistration\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\Engines\SR\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MMAgent\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_LogResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sbp2.inf_amd64_1d08bca921956372\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttte.inf_amd64_f017e7b18ec67a97\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\audioendpoint.inf_amd64_4fc4a632c1490033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmminij.inf_amd64_a85c8e1fe15a9532\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\uaspstor.inf_amd64_63788a81c4c628c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms014.inf_amd64_faec3fc366f8e1fa\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sisraid4.inf_amd64_65ab84e9830f6f4b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\XPSViewer\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_display.inf_amd64_c7457a37d16eaadf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmoptn.inf_amd64_583bd0f3892e01df\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netwew00.inf_amd64_325c0bd6349ed81c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\oobe\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\amdi2c.inf_amd64_d7ae71f8eb52c084\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\pt-PT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech_OneCore\Common\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgen.inf_amd64_977aa23dfab87f15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcxhv6.inf_amd64_f1a7a2fbd6554d60\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\halextpl080.inf_amd64_15251233835ef753\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl001.inf_amd64_e09ac82d497a19c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmhaeu.inf_amd64_e0c209c891e162a4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\slmgr\0407\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAll\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\XPSViewer\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tpm.inf_amd64_154e6da862a6dc30\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidbthle.inf_amd64_bfb3ee8e5a97c3be\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mbtr8897w81x64.inf_amd64_0d8225e7d2696ece\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_1793a485b491b199\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvf63a.inf_amd64_a090e6cfaf18cb5c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\termkbd.inf_amd64_a0634dcf2da1127e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\001f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Registration\MSFT_FileDirectoryConfiguration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_hfp.inf_amd64_9effd93a75bc489e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\Licenses\OEM\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cht4vx64.inf_amd64_b03448ba0b72ec47\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sisraid2.inf_amd64_845e008c32615283\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\sv-SE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_multiportserial.inf_amd64_e92b6921fca885d5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms005.inf_amd64_add71423ba73e797\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vca.inf_amd64_6bbc643de0df118d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wfcvsc.inf_amd64_dfe08f401a2eedbc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\BaseRegistration\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd2.inf_amd64_76ccb77f33c66c43\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\net8192se64.inf_amd64_167684f9283b4eca\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvwwanmp.inf_amd64_f9e30429669d7fff\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\WorldClockMedTile.contrast-black_scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-96_altform-unplated.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-140.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteMediumTile.scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-black\MedTile.scale-100.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_MoveDrop32x32.gif	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedWideTile.scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalAppList.scale-125_contrast-black.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\font\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\zh-cn\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\uk-ua\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\bcel.md	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\spu\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\LargeTile.scale-125.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\tool-search.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-400_contrast-black.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-white_targetsize-48.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\fonts\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\Images\Ratings\Yelp7.scale-125.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-30_altform-unplated_contrast-white.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-96.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.50.6001.0_x64__8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.50.6001.0_x64__8wekyb3d8bbwe\Assets\Square150x150Logo.scale-100.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\1.jpg	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageBadgeLogo.scale-200_contrast-white.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-256_altform-unplated.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-24.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.YourPhone_2019.430.2026.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\fr-fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderLogoExtensions.targetsize-24.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\eu-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\TinyTile.scale-200_contrast-black.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailMediumTile.scale-125.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\SkypeWideTile.scale-200_contrast-white.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-100.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\StoreLogo.scale-125.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNotePageWideTile.scale-125.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Scientific.targetsize-16_contrast-white.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-96_contrast-black.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\eu-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\Windows NT\TableTextService\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionSmallTile.scale-100.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Date.targetsize-32_contrast-white.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AlarmsSplashScreen.contrast-white_scale-100.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailWideTile.scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-140.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\Retail\NinjaCatOnDragon.scale-125.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\BadgeLogo.scale-125_contrast-white.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\StoreAppList.targetsize-32_altform-lightunplated.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\ThirdPartyNotices.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubSplashWideTile.scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\RTL\contrast-black\MedTile.scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-24_altform-lightunplated.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\WinSxS\amd64_microsoft-windows-blb-cli-main_31bf3856ad364e35_10.0.19041.1202_none_c0150a0a443c0ffc\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ndlers-storagesense_31bf3856ad364e35_10.0.19041.153_none_e3c8b7cdbdbae916\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wpd-legacywmdmapi_31bf3856ad364e35_10.0.19041.746_none_37a3dc0fce79d2f3\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-ime-korean-skfpad_31bf3856ad364e35_10.0.19041.1_none_0ccf1e0f30584e1c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..er.appxmain.ratings_31bf3856ad364e35_10.0.19041.1_none_ff46bbc9afee54c5\RatingStars31.contrast-black_scale-200.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-sxs_31bf3856ad364e35_10.0.19041.746_none_30274b64fe158ec9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Tpm.Commands.Resources\v4.0_10.0.0.0_it_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-lz32_31bf3856ad364e35_10.0.19041.1_none_48808abec8c68810\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\functionIcon.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-wmvxencd_31bf3856ad364e35_10.0.19041.867_none_31c92e1acdb9e150\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-b..erservice.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_da451be2a8ad22bf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netwns64.inf.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_219c0dd29beaf3f7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-filehistory-core-cpl_31bf3856ad364e35_10.0.19041.1_none_6919d7dad8677a27\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..-tool-exe.resources_31bf3856ad364e35_10.0.19041.1_it-it_ffcd88d4bad6c08b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ast-black.searchapp_31bf3856ad364e35_10.0.19041.1_none_e479c512c8bfeb66\AppListIcon.targetsize-256_altform-unplated.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-directshow-mpeg2_31bf3856ad364e35_10.0.19041.329_none_9e75b8da3562504b\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..ork-setup-servicing_31bf3856ad364e35_10.0.19041.546_none_6441d3d76cf5046e\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-a..on-logger.resources_31bf3856ad364e35_10.0.19041.1_de-de_b0ed2ab90d19254e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft.packagema..owershell.resources_31bf3856ad364e35_10.0.19041.1_es-es_3ad24e76a715e8df\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Wd518ee0d#\c379c3f4f210c165aea500d0f8f667ca\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.1_none_03928ee4a9e5894c\RequestedDownloadsCloudIcon.scale-400.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-icm-base_31bf3856ad364e35_10.0.19041.746_none_0b15df731c934005\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-m..rds-datacontrol-dll_31bf3856ad364e35_10.0.19041.746_none_ac586c52c902d7f3\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_windows-applicationmodel_31bf3856ad364e35_10.0.19041.746_none_0a53970e320b5e16\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-n..iagnosticsframework_31bf3856ad364e35_10.0.19041.746_none_c4a8b76973fa3dbc\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-n.._service_runtimeapi_31bf3856ad364e35_10.0.19041.746_none_73e2f45df40bb696\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dcom-adm_31bf3856ad364e35_10.0.19041.1_none_6fcae78410fb3c81\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-g..k-service.resources_31bf3856ad364e35_10.0.19041.1_es-es_32fb17138a041fdc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_11.0.19041.1_ja-jp_ab15c263acf06c6d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mup.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_c515a22d33b666ce\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-r..intmapper.resources_31bf3856ad364e35_10.0.19041.1_en-us_a089d76598edf0e6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..l-keyboard-00020419_31bf3856ad364e35_10.0.19041.1_none_f15086db1ad07a4b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..appvprogrammability_31bf3856ad364e35_10.0.19041.1_none_a20067fa4dc5cdde\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_theme-dark.png	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.core.resources_b77a5c561934e089_4.0.15805.0_it-it_604c4503ded16659\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-xbox-gameoverlay.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_87c1b1ffd88fee0d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Services.Resources\3.5.0.0_fr_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.S356e1ba0#\d0d5ef42c0e8cf225d6f02493cafd965\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_10.0.19041.1_none_c7d420561bb7f221\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..tup-ie-ieui-windows_31bf3856ad364e35_10.0.19041.1052_none_ff653a7f07c2eb65\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ates-english-update_31bf3856ad364e35_10.0.19041.1_none_7589dc4fe9ce57c8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-l..fessional.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_232bd52deaa7e42c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wcmsvc.resources_31bf3856ad364e35_10.0.19041.1_en-us_aca374f1c343dd01\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..chinese-tip_profile_31bf3856ad364e35_10.0.19041.1_none_94801dd34c67fdc9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..anifests-multimedia_31bf3856ad364e35_10.0.19041.746_none_41c9c37e24436d0a\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-netplwiz-exe.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_568e6f6ca7566d51\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-update-upshared_31bf3856ad364e35_10.0.19041.84_none_85259eff919b7c9e\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.19041.1_et-ee_2e542ad48c77431e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-modernexecserver_31bf3856ad364e35_10.0.19041.1_none_8a2c8aea2c307df6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-printing-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_63fdb7d65c16ebef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..-schannel.resources_31bf3856ad364e35_10.0.19041.1_es-es_9cdd310ed86790f8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-font-truetype-consolas_31bf3856ad364e35_10.0.19041.1_none_1fe0609844af8bce\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-iis-w3svc.resources_31bf3856ad364e35_10.0.19041.1_es-es_25f50fe8c669ef2b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-r..component.resources_31bf3856ad364e35_10.0.19041.1_es-es_a40335c23f3626bc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-simcfgd_31bf3856ad364e35_10.0.19041.1_none_3ac1d15d510a3030\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.management.automation.resources_31bf3856ad364e35_10.0.19041.1_es-es_ea7b2c820d089f60\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_10.0.19041.1_en-us_9b69330b34021c65\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..randprintui-asyncui_31bf3856ad364e35_10.0.19041.1_none_31d25f9f9183abc8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_fad1fa0072ef4a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..l-service.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_2e52ad85dcd1bc34\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dskquota.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_5978949af1f237eb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..center-controlpanel_31bf3856ad364e35_10.0.19041.1_none_fd707215a322bc86\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-d..xthandler.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_34654cad8cd18e50\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

Modifies registry class 10 IoCs

Processes:

0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\UVF4G43eJVcNx5Z.exe"	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.DrWeb	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\UVF4G43eJVcNx5Z.exe,0"	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\shell\open	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\DefaultIcon	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\shell\open\command	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\shell	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.DrWeb\ = "TRDYXRSTSKKVKGM"	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TRDYXRSTSKKVKGM\ = "CRYPTED!"	0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0dfd45af14c6abff59e905ade61a4b75_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:1404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
7b6cac388064fb021c0894ffe9511558

SHA1
c6433aa44606794f52d831c4324a428da7c9bbd0

SHA256
73d33cd0e43dbff25412a81d6637727bdea9d867c3d4107cc013b77e5013bb21

SHA512
77aba55c020e6f66b0f89ceac4f5e05d2557a60f9e30a235b4330b0dd2eef54fa1a472233ed334cb5f024522522cabc3b745c83da0aba5dd1e7a04062ec4c010

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
63a91d70fd250415ceb82308140eabdd

SHA1
e69acee379a74b985182185f6dd88ae21431718f

SHA256
e64dfc60ecc49c3fdf05fe1e2fbd69db83c514167e5a0fc09fa265a0e6754168

SHA512
ee85f64d18d93bcf001e512f33f556b06c51b6fb293e68d8c908aed92fcc6cb6f806da2e9470ddcdfd8d7d138eb7419c58cd3b4e50aee82c1b6dee03d9b68c72

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
f4d89cbe6bb1998df74e6d4f508ab5b4

SHA1
c5f582a829f907be88fe04703b559dfa9ab24466

SHA256
73db2127b8d1652502d367e464ad0f990178814a2f97fce67bea45e410dc9d1e

SHA512
eae63ce06922cf3097837f03e9938c0dce86599303fc670cd45bf8a8b800dd92a29cf8ca7c9ada5374192b9f6e792b0367e6f4fb061862db53fed62ccf090b4b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
69d864c5185db3678baf5d9ecd17f119

SHA1
a41dcb625c1e971c5625ed10bc9b885366587ac7

SHA256
9385611d7fb7cbbd0d32ea89834bf976fdb65d96e2f62d0a4ba7d53a241dd6d8

SHA512
44541a0cd114b6d2d4bfedb3a65add15db49adbecea685e536ae6f4659e2aec3bb69cf287258d28c2613b9298f567d007b85dfbf1505e67535632e11825b93a7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
e0c557e12203a5d607354a20a63f2f4d

SHA1
ddcbf1328fc237ca4ce9a8ec00bbfd59365a84ec

SHA256
009ec85567de28f89fc1eebd74224cd272b07cc390333119f91072b989a9fd31

SHA512
4150e8b4c441b5c7729a0e6bebd9b0d71b4015f5d158c105c82b615eea8564a9b62604dcb8352191360b6bf55ad11bfa82d2bf92d8a335d902e31ef468e19dc7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
5e69ac6f793e6db0f2ff985b5bb19cab

SHA1
200862708507fdfe38224173882fe414dfe30a85

SHA256
1ba52df891ab9cae7644fca765e2e450c1e66c9b9e409ffd30627795c74107c9

SHA512
7fe101b4f4ae46d7265f1da06e3132aeaa242b287653499d2d0cfbe7c71526f9e97fd666f4439920dca83641cecb7e217e0f40508c8ffd0dbd0b635057033fd9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
84f667c809afc62f110c2629ac84b98f

SHA1
3b922d421ce1fa0cdb1f10a5425f61b6d670b126

SHA256
6be1a3ce50c0591866c56042c00f4c8118c9cec13c210c1123ed3b5fa098f863

SHA512
84991604be871b9a4650ddeddfad8b924b8a7bf508d6e1a4a6a135129a4f97cc7cd2f9dc3153554c79cf04f2a7f9d913b59c05dfa796f1c507ee724f51bd907a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
ba9ff602769beeb62a6d7e1ad60ac3cc

SHA1
ff01d90d227987a75bed00b4121780fa50715fb3

SHA256
ad886f689d13c9e1a1675b85313c237450d83fdfeef6c605c57614a627ef85cb

SHA512
d7f6e62573ac35ed81b0d2f2f861023d4cf46c2d10e8dd7728d54beb886a18700926e40d1df07b2eccf7c8581c02325348becb2988f5fa7e0e35ad97eb264358

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
af4a64598b2e8218ecbcb18ba704d384

SHA1
c9caa99cc4dd3df90fc7776369f34e963d40d66c

SHA256
b47714c73c62a8f08350dc2b3e7c575ce4d34173e32cf0787aa788f92d7cd0ab

SHA512
cb5c7e42c66dbad4ca329d409abcb443609ce3d777f44821550de877ee59b726c0e8e496a32020dffdc10ebbfcce467803987a8f2facaf920e7bd05af563dbcb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
259ebe5b61d9b86fa6318fa9700fafdc

SHA1
e304c1a3d027fae3e813ba5686c3d658dd5693ed

SHA256
5cf47f3a4db54b7acbe6a8e656bf13e2574f81d0a88c636ec5c6ac1038dd9b2b

SHA512
dc57ecb7dd6fd674714af1e523101c412686f3b3f85e50ed24b89e89a22e9c1c9807330e14c914dfdd8981d6a94a7a460fbccecfd27ef81451a2e54dd923456a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
075cbae2e7f86e2ea6df050fb59f71f5

SHA1
1cd3cad295c34b429af2b871ef26df017f02bade

SHA256
b3ca5b126d0d4eaee41e5331124e5919a974bad1df365b9e0c46d6dafcfb079d

SHA512
f4c9345ce2f6bd199b0f7e94cdb8963d4e436ce7d14eb5f80dbe90093d23fdcb7719fbaa7ad3fe36555750e63eb62dbfd5748546f3feb84ef64d4a470425e64f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
3c5dfef7ba72f11a486b3931ad1ad04c

SHA1
2d6498a4ebf112729ab9d0a1223b46f9ff33c45f

SHA256
305b2df5d471185ad9f054661485570a63c8b16a887556ff7b56612c41d81531

SHA512
a8252bbf136e8e5c25bcf71f9b45241ed7dcdcd4b9b60e90f2de3abb5dae1147b56a2968e5b5bd8e202cb6aff30245fce085cdaecece22db5802ca56b3ef86c9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
2383358234c94d8d6e105bfc7813dea3

SHA1
3815994b5b6953af1313dc3fb45ea90fc6be8ec4

SHA256
a655a7bc865659f886b3026d4dd650f8fcab917ca6b63d2cfd90dcc1363c2da3

SHA512
7463aaa92642df5cb69c734916f9cf5faffbb1bd2dfe41b45224cc4b9c5d3f45887c018ea905804871e919fef859d27748b653c78be9f3cf29bc55f16cf89a3a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
1ee4b7b66c3e2d9949e7984d13241ecf

SHA1
5b5d77f44e2838ce518c95f28cfe1f4045613e48

SHA256
2eaef68c981385af4cb3cd238ac1eaa4ce677561aa640c861ca28f4ea3122198

SHA512
d1ed422048dc78c965f1ff2ea83121d8df2c36ac21c87dcd53edc2dd84022b18d917a9dc38a4b85f3ed3e084a4c7390c72fd1191e74fec1fb419d88ed6cb6de9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
43113f01362756983722f71f6cf3edc8

SHA1
73665edfb80ebfd3b773cecff172262babe9ba0d

SHA256
eb6d1ad2cb8d1daab76459fbcd3bf452ffd353014358f69edd4a649ac6eb651a

SHA512
0e0f7bc83783d93c6e7f8ec0fa24333b6fde41ff2cc2c08a44c897cb4d52c5ec9ef66ea826e60fc8c575800f6aaf2c074a302c2d757afbaed7ae32cb53c9a70c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
5dce40905b98c7b4f06265ba30f34058

SHA1
e4e021b9e0e80dac408587ac5d5922453d8aa0f7

SHA256
a99ed597c543a468c2d2d56379c2f598567c5cd97b47aeed7a55a6c6c24b6fff

SHA512
7e049ba6ca1e264221fd86e536431cb6321d75b5d6bb27d08b0aab25d741c2a432b632f7fd3955836ad3f6fb4ee9b039dfa7f61f47005bc87dd91398721b13b6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
292b65a5f8cb5d9231c3016a397e84b9

SHA1
f0d2004746729f7dfc4fe0ebbe798e5d59d15450

SHA256
f61c4dfc92c7e9c4c6c331fd9db6f7631f3ee479e82fb2aa627fbed3ab225585

SHA512
347609e5e04c39399241afe13c4ad8f8e27cf332d8d1052991bfbf9bcbc34da962f48a17307126f802aaecc612fd1930c7761309a54e438742822182bd96ec16

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
1d94976bfee85448b9e38d38f63520db

SHA1
105bb34e4d8b132afd271a29f973e5767786e8ab

SHA256
f904b2c1bb43632db887d00f15a52e4cc57cd4ebf5f9058bba35cf3e319da060

SHA512
706238e17d9283cbd6ba3f0dadf6b01b572cb30dd74bdaef8f47ed8d71373ae5a6be0862958a3672988e16e252cf02940ee09cdcb51906ada3dcb1cfd2f9f11d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
6c813b3e20a90a64664dbf5521b75c09

SHA1
a83ddf0815ab1140f89f350bd57c76e7a91e2ff8

SHA256
52375e673f80de2264d727572fc8e874e9457d22c0b4c73d3b0db3361fd49bb6

SHA512
a2ccabb24237ad0a89d26f1cde940cbbc3f22f46d8aaa9e05f0667a572668faf8db4bee9df677170c579ba31795503f12c07f7ae09e4c13392512b9360d65034

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
bf873c15d395a70f4cab5abf04d89a63

SHA1
f36ad4bbaf335e441a1426188ba1387db65f1626

SHA256
d48ceb8967f3ddeedbb6dc2d18e8c08d050bd23aa704f9ae4a76e08c113ae870

SHA512
7d5d37b71da485806bb9c95380e7737c7d141af1ef25535c6e3e5c4b6d0cb91d0d97c4ef4467ee50ac30a67f512d3448392f6a233ff7523e7825c4d856630e79

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
9ea1670bd07c32cacc99d165190b1306

SHA1
760df82387b38bec4e6b8211b0a72e5069a0dfd4

SHA256
5f97bfdaa5ba467590e57f8662c74f40a01e480da4dfdbd44b769464cbde0b80

SHA512
085b8dab0fd65f23febfea4e5505d7f5b849bf247098933f6eb30178bf6c7c1651f48e8f38b7ffad114adabeae2fac97971f2b79e46a1554cd6d485e74f50d02

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
c33e1035bd6055f61f22798af3237a22

SHA1
41f5788be884909c9e8361f2076f1c2a400206bd

SHA256
531128b450625e8f7a556085d90034337af305861c24c6d5b6128d62e4f9c21e

SHA512
b81c12b7ad952a26cc6887248bc888cdce52f27e04919c3e7daaf2b4266fe8328d7f436e09987682f93c1ecf74c851c52645d3f6468e7896fed156aecd86a547

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
07b99f441206b10406f8cbeecc67f05c

SHA1
291d5f7e9734558855a6d5108c17ebfc506c3b9f

SHA256
061a6d4d3bb22aeb2844f2b6fa7cd74f7db14cd3a27aa40ecc3394ffac2789a1

SHA512
c7b69266e0324dfdf666b1b9d58f27cd088c2a1eb761e5b85ba9a46256a3ad07ce7ac8f595ab4ec03821afc7eee14eeceb02286c948632a421dc80623b772cab

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
f801ea535d24f27f69340467548b186f

SHA1
ce879e6c1915e4e66659e060703ef033753d18b1

SHA256
e0933227bac63a9867ce55ade649f685701e18350de1fba9bead6a545bbfc5dc

SHA512
e1f2c3b58d356a0ea83cce7acb08576ea4b028c05c4e8ec475557206dda85dccaf3c845fee6d6954188a6b56cc88ad861ef5ba743bd33496c681212c03cb8cea

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
0e8c594620edd87e38feef9090f1fa45

SHA1
a22ca5c31600e99d85954d022dfb8a2b1565b5e0

SHA256
390dff3d8c97323646fa559f78390b7f08a228d4232a74150db1b2838beafcd5

SHA512
fe06579a5759ff0d0f0a61491431b0338e265446bea3ab081717560502815f9164148758c772834f7b32969821ef16892a3cd44ffe187ee0217e8566dd15206f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
4ceeabb50de0f99472eccc683d189cee

SHA1
90ee04416f8c6f92d93a3caffac50821d7120642

SHA256
7e267e5903c7c64855bdb5868d09a55c025d0ad53058cb0f45d02e253da80e4c

SHA512
9d245f657877a5411a8a2ccca5429dfb414b73fd4fe230c2b0d4348bf0231768a09cd6a70f22e82f44287acf388e7349a43ab2d044770a1fa45fdd490750708a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
ea46870d7ae130f59aaaff895e35b698

SHA1
9432916504625784c5ebc1918e57c90db2e338c5

SHA256
22b150923d41f06e66e3e5b84424871d019117a7b9c008de5dd19a93648bd305

SHA512
967ed71fd09edcb97837a22ea9297aa2893d766f6bccdeae7c68e5fc87d4359782c9eac71771433f8c5515130c875aa64d9d56fbc4711048aff522faece813f9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
d56168adc97fbda7e3a97893f7db4ad5

SHA1
32641a58882acf7da5453e30e78e67ad88091a59

SHA256
ed5dbb32757ed04810e517b985757e303f968658a124f32d60601bf1858dab54

SHA512
da1b839fc0dad055a879b036f6b5110d8d70a8c4fbe23396b1f76fcfeb7b1cebfd9082690714c7805cdfa150d873563d04843713642208887d149866bbf55ce6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
0d6bdecf9574f86923d13ef2cf4be955

SHA1
408834f0eda6b666fb9a22cb731bc420c8b20216

SHA256
ea97c08e23d9db2ba306082791e4b55434f0169384aec7055adbe4e6fc165c02

SHA512
f20c2fc33939cdb2de067ff813d6354550e7308f3ad365cfc7ac994768f45bc25193ae9612ef9e70887b52c94c445c942c74365d2f6c503b10b8ca3ef37b0829

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
1caa26523637a10c88b706e43653dfcc

SHA1
31e8a4629aec0819c2ec9d8f5bca4bad23fd4132

SHA256
084f1031c105a01edb4f5b02b9720378417ec0b7f3d21f7900656df60985c754

SHA512
5bffdd7eae8e3bbd6263bb51f7892139e6b6bb82d752f7ae81d25dbd91de33d99572fe2cc0115fb4e1355c8a83addc172024cc01edbae7bd6b1bdc3eb0c5d0c9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
1e232d27230c451d0262cbffa0ab5093

SHA1
a840d58699f05af2594f914506956e7a035eb908

SHA256
1ba77e587eff26ff2f3c2381b600ea1e184ed1554ed520beb749b0fa25226b62

SHA512
35044625af75eee7db233a37247b13ca0abc292e78eb59d4c4e4e705167daff981c1673e72e2d77f677097ed2926901002b83fbe8747f974f21dcc88242ac525

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
1d67278d559d04576236cc08096f84b8

SHA1
c265cdbae052e458373252593b3085380fb1755c

SHA256
c43519ad18c96977160dee03d68c0a64ba5f511cb43c61b62440016c9ae70a91

SHA512
6cacb658eaa863c19a703dfebb0a3aed5d3fa9c3c889161c5dd6f2f6bde2eec3fcb97a1f36414e3102815c6e82f0bf5fdfc04ed4a323f1b929c590094d62debb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
274b8f49b3b019ae5256199ea988785b

SHA1
f44a4bfa84b3b446d87535a990bfcffde1a96f71

SHA256
dd05732b5ec8e93db6940eae85d364abe59f7aa9f33d4c31c422c8402e5ba7a6

SHA512
6dcdfa2aee25c100534386fdb6324856f35a7e53ba4ea0613e1d866b9343d22907ff98931ee027d7a968e5b0ce366a6b06dd56a53bb8639b7b43bf5e7fae06a5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
ba65476ff8d0704166bc9e6a8ad8c654

SHA1
38597c955a1980a6a2b97addedc8c213edcb5f4a

SHA256
dbc2f368209b366fdf5c3eb61ea7fa796374ddf0db2f4480b4cf4f0b1a6585f4

SHA512
a0cbc7d058a8758ca785f9e75a5de6934c7bbc207394ea693e0756ab88c709a6f3a22faaabf2b289f9d3fd60ff59fc325b4720546a05df99c63650e2ac6612a8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
3dbccefa073e4517400f1104e844a3ff

SHA1
1d32edabf98f2f32ab4002d2aad6b7e05ac7edd2

SHA256
d4c68cdc372c23cbaae4a3eed7e8af57592aa47a29ef66dd57d1d71f979adfff

SHA512
a81b71c17fd5de11049ae8d0ba0404451d9fc9d4a4b337ef53cac464c23089f8e04100b62f73ed26bb6b8adfdc95f4c60b562e149de100546166006c9411ecf3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
d70383ffe782a2be654c8f38beb08105

SHA1
27ceef84eecd2b56f31a5345c1ccc8618e90f9ec

SHA256
f35bc96d4429742537886e25b1fc083d98c6639e60a21857464ab5cc5181a2dd

SHA512
c0cc0d38479836c185567ff1b21be4c7fcf3349068b59f7ba1470ddec276dab29b2a7f34a891d87d4ffa0123ec898c777514f6b7a4f9aaff9021b63b08bed30c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
10f10272cbf2db51ab31f7963701da39

SHA1
63ed50741809cf2461a2f8fc6fca4f2e128f482d

SHA256
871fd3d8743edbf2f8ab0d2ec0ab390eb40b7fdb3a4f10164debb23e378e9c0a

SHA512
9cadb69d2dacbb9302525c0acef96dfdaab70059d2eca704386f1cf699996b9b545aa2c44986a1e72972169c6be3d21a873a46f47d3203029d7d69e70240f6ab

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
53b7b1cb292c94b1bef280f3c745c65b

SHA1
cba93b15fd3b3f1e7c1cccf49c0a7dba3bdacfc9

SHA256
eae3576c08f4e61f91a9950fb54dd5c973bc91e32e441488d4849bcf671034c7

SHA512
8317669fbbc7e53dd377474bd499da026a05a78269200901b15f26b85e83600d14dc36d991d17ae5d65bc3d684f53a73f2579ee92df4a496722ef8f4ea5a5aa8

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
369B

MD5
f06157607e9f35e84c72b244e23f40d0

SHA1
aaf3649f545258c3decd10023e8a4079c9ebaabd

SHA256
965e4effecb101010753ce545aad427a9a18312b14294269b742c4fa188c7e28

SHA512
d67e9f949f16b034ac9290f2e4b44eeda13a0331c5c8e3921f80af0df6d496d7dadc12572aac9aa7496788d834df420e9d371850a5a958b4b812209d72bb20e8

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
e35f7bacfcaf282228dc13e5b9526ebb

SHA1
c934bc30a9fa6465d081faa7ee51417ace0b426e

SHA256
c702c319e84aa07a688f0e2955a8295e4174493f6d724e82cbbfe8411676afcc

SHA512
347f39cafbe490feab892a18e11e900da873b6af80273432edc6cec4d4365de5ee0c55957ecbe69a4eec4990038ec95b2b99a94a5cca17ef9de92e0206e17970

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
120e49140fcfa5b7388ed6ff80279a7f

SHA1
2495f9d43f418b758312d272f4e1a81c6fe8c92a

SHA256
958ce03fa452f761ca09735cda3f80c4a37706072030cbc22d64205feec98ddf

SHA512
c06a5af68f9c3913d0b1c4e0c68e27bac751beb9f88f825c7cb5a9d53017c958109de8b84fa333bcc8b49b62b6f25c60da4dc8e0df69ac3470818f61ab3379a4

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
33e6b9014272d76da9fcaba06868b8b2

SHA1
e20650f171b5dad66074593d05c58f12ed1e5b9e

SHA256
3014ba52df90925c3dee415fbdccfcda513c287dc8a77c038e2679e51c88b393

SHA512
f9eca63e05d67f15c7ed80b73dc2896f27ac20e3ca82b47e6ea7c04b41675faa7d66cfe52207a82f3120e5576a7227c583ea37fb2ad6f763cb3b795014d35583

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
ef2120a312d391777425110bd79a76fa

SHA1
004bf4a6facff334487bc3fb6477776e6ca5ea6b

SHA256
cfba9aa5ef1b52a532d85412e5fc40be8f71105a2d7747fc066a6cb02675e81c

SHA512
540f9c9737cd18b7d0b4ee93eff88707a983a24c39885e2d2414659430b94528999c5120a9198b372688e971c9604abf2483f0d07dad4e14401571b8596525e1

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
e4c695005ba848a905b1c29c03d6479e

SHA1
9bd4b61b3ddb5717570f0e22a6a48190dcfe8476

SHA256
40f44e1102823c6555c3e26fd4e75cfbe874c7a606b0a4655fcc992495d223d0

SHA512
70a21734f41d9d9f3aba020fbfec0b42f2d031b03c55d852fd5217304deee3003a4e2f40893af1b1f7f3e4f1ba58596f182ca428f240e0146e7361ed1f9cb59b

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
8e7f47b7a0ddb76a8030d9162b5bc7a8

SHA1
d0ed0d65df3c4f90e2c895622d4b6e8d7000fa8b

SHA256
37e206c5c929719f5cef777c17cebb1293e54f09b638286e7f1e3ed329b8acf8

SHA512
0fca23299fe8ded77bcf46e3dbaf75116f56bd032c90d73489967fec1dc9377154e06a73137138b216f53bf243fb0d52bdde1006a103d3fae3caa8bbded7d6ab

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
45d1b70eebbcc3bd760ed1d6c2c8982a

SHA1
16638a477219b8b76cc3f8b729a281d18bcd44cd

SHA256
aeaa947c38b1766d563becb687af184b1fee0cb3676f257bb64e8462ea3517c6

SHA512
e15ad23ebb803dd94ed5024bca53a6ca65ac0f2a0503d78a3ca7df43304d9f6c3b1c7d5325faf54f970cdf1dfff0617639c52ca6f92729a3a475f56583647c04

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
18494d89d3b75a29b43dc7b85c19d04f

SHA1
7b179f822c7c2a44e59eaea7aab11d0b3dc59599

SHA256
bd5cab137ae7078728cb5e72fd041e72a12767de83d6103b29dd02f5627ffc0a

SHA512
295e06ce9265e1a55b707f4ebe697c9e4480c7253f016208c3de834c672f828c25978bf418198836340ebdbf669eee980a02fc3c1d613e3c573883124525dcb3

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
56cd405349d67b1ba358aa4a8e785c18

SHA1
da68b1252f64123a6819a75af9c0ba8df2cdee88

SHA256
3b0e0e1bc41a5289fce66f2bda5e34fd4e768e5e24eeddab4c32930202af93d2

SHA512
54cba75d90e40d667ad66f74398c6721e7773da49c15c3dab1ea8b4b85505518c9b226a19dae08bb5683f142d6d0e9697cd2f90dc48752e28bc0707a3733a1ac

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
e52a7ac614918cd96d0dd86774f9c02a

SHA1
02706d95c927676f4a937f594e26c31932b48fb1

SHA256
2cd92c2c38a4e8c8a59b147f1a327d83bc21690747cb6f782c80059079cb3613

SHA512
a188a74a87ae6c7be0b37f9359750b2fbb32f0ecd29e8652954c8295a34aa77f443534889b59c5f7bf46aab9bce2dd6acdb795c9e5d640df901c4575697e851c

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
cb9a73268cb48f9a3113655baf8ad09d

SHA1
cc52496f529cd8b0034d8aace7b3a39f3c7cb938

SHA256
3efc22a49a107406f2a3236c67c9540600c468667f84fa170c963e2be0783ed6

SHA512
5a30486d3705c971416e7e4299bab0ca2bc748f89ba48621c320b612ee32a0353837cf09f9d2cb2793f573609ae5e464f35709f3130ebdb57300f78d2fb251c8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
6eb0da65eaea58ed17b3288d30551698

SHA1
032d27e4b0ab61c93d24b6d2b8226bc5eb81d5c6

SHA256
1dcc4208f7607bb8a37bc7bada74fe09b4fdc23233e4d8a059bb537d91c81c22

SHA512
66d34890317d64805131132c4ee824e12faf4f593a9845c32ea0941f31461c80a8b5ab5f9cb17654448628b382830f2f65a1afe75c2d70fa7aeb60bfc1cb97bb

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
c4721d4f4cca14ead31332c2092ebdf3

SHA1
5df1240f7ba95e661628e7ec7bf0122609883469

SHA256
557502371855e78e511a684b55d44e85bcbcf354058c670a2e0a9bb9af6ee163

SHA512
5604a349b73f027bf9e8ce24f3910d6b3d1abb9f77f02ef0df85b519428fd275007134937d7074f8becdbdbd3c94b67770f8020ed1e69049cf2d17dca5389b6f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
0baaa06e2133c295eda044d17530f705

SHA1
4b90e5e2fde932089b92d9a44a5e7ee3ecf3de00

SHA256
9804935e6788b6bbd3eb6225c6ea6fb394894aac3a2694b545394f1719832f4a

SHA512
1e23373cce095509404408f37670a068f3118c7f7f92829aa618785d0475a7546af0feb8b37708226a7d28752db7d2557574564a31f46977f60224e1fdcd333c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
07645567724194f40ce07196c44dade1

SHA1
ce6dcdd9e4ae6229941d370f77e7a31fe3027fd1

SHA256
538aca2bd800d3ee5dea043ac2aaf76f2d7e0cd5b5920c1db14db5a03ff0fcf1

SHA512
d713f10ae9706f997e1bd2fe02e4e1b268a24e8e60f32304b8eb22158d04e3d649e82f19bbcbebbee35451d4f60c031902f098c7e8c48c468ea6847101737944

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
b2bceca22583fef3df6bf3a07acedb92

SHA1
e3cf22b1d076e4233ab83c67aa917e3f25e82ee6

SHA256
34723eb05c3e1c5557acabf505ed79e97a95eaa1a621e71809806060d935d15d

SHA512
6581552c24a13329693d6ea0c0d2d9869892630465b7d5b1b9a9f97e76b5475d001ff243b52e9d0d2c8a6fea7fb261cbdd88c764de632352e10197e0c5da1006

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
5e9daddf6cc052edc3a3ba004d1e84c9

SHA1
9f4d2ffe9eacae25df0d4f57560cf3949a4d1481

SHA256
750fb7ccc5ff445fbac507dfb195669c848e8986a3e2a214bd6de489fafcfc85

SHA512
8be4bfa661717d1fc3fe71c7a3025302b64d681b5725241400e9e7ba014ef0dabb32e8292b760ba228703b7550d11c5baa645b99b34d516db10d4b4aba489496

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
4d545fce15ab856d721db545ccc0fe3d

SHA1
24232d357051fa13aee33c57f598bc2ee6391f0d

SHA256
0c52275f91e211f7f85d9cad6ae1bfe3fd492b1cc57cda4ee48bf52a565b4082

SHA512
4beec42a2fcda406386a0108c4d5ee7cbbb7d94d97dcc7a41ceca99a375fda66417749f40328ced304eefa69c52bd3f0aab53a860fef8784c881224239cf7a64

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
43d291a3af8feaaa56cadf16ecf13832

SHA1
98c350cad351aeab1dafc790eaaf677aff5fc64a

SHA256
e525ad0f104395572cb05a5fcc6ca282d4f93ee8bec08219d65f65f2c563e56a

SHA512
553cf82083cb73d4534677e885f58fdee6b93153fe545fc8d91a256f293a93acd9698a70a631a12c1b44fc262e22e5b830426a47b43278fd0ad5b7ff89f644c7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
b19b19e352c9f73da1807a4bfedaf9be

SHA1
68269edcccb76e7c3969bcb9f85ff678720f908c

SHA256
19c4df1442c51c6b4231036f555aa42c3095410134dcf82ae66a2167470281aa

SHA512
fb6cc408047684fe98e2b09d83b742ed7c5ad13d14313f923cb500f16cb11c04ebde538bc5f416026688d045a263cc9da00bbb79a26ba07534500ba55683c81d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
5e7d707773a6b9199e4162b5e4a3a0f4

SHA1
8b4def3e4a84ebf049ffd4dab3ec35ea4c07a897

SHA256
e8efaf9b0c5aa6bedb7eadf4aa08c927a66e4765cb7eb28d497d14368cabb2f3

SHA512
fcc276450c3254a8afab13b3007c47e37792c12ac551631740eca84550fd6f48670b1fe5364fcf892d638c13c97c3a5faaa9751ae54c56b8fd6f0e779c5f4197

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
043eceb2f8a9c91d0b38fc29a7204b99

SHA1
6b9777b6c0edc7683672fcfe6506f9d99cb73f27

SHA256
836369bb10958ae2fa11397bba38f5efe4c18017c190152fbf79d0fb4e0d9588

SHA512
ff5ee8c2d0fe9a72327a44332cf565ca1c0a7c258fa9bfd9e28e6ae9c3712415fe5e927a947c2b7e32f11c44f83e1836896325773f8051e7e2a9f2bd80f2abe2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
028be4188b35ad5d2c0a972bc0403e04

SHA1
7e9663d80802660e6a6f7c15ed12297914f2e874

SHA256
fcc3224ae2a4a5d88213f0a61f1aa1c99a4a54819ee711f1bf57dc235b61dcd2

SHA512
32b72b4be494071427a407517eb364826d4a860da498d567ddb89c5cd1b586b048ac244539c75064c72fd71a21177ae034ae576f0552449977be396808a07f90

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
b851d0e72b16cc17ac6f349cb47d1a44

SHA1
a6f36a950365004e1ad5a4f2f40b4c1b667e8571

SHA256
7f509c6688d73207856014f34ce4377776d5be3e9ade9a966017f63c1856b00e

SHA512
900118be585a54d61048c65c60267eb78b4032f33b9a55b28d1f377898bb3ee95de8448542b21276cfb97c2d169035991d36de9ed2541625a6e3fd9b391e893f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
fc5021c43c3e5ffca8cd3cd7f805c299

SHA1
424a725b60c24034974bcc842595b232668acc87

SHA256
19a90fb76217ca1ee89de3a3acf0a877b1d27d2d460aec178f87259d55c67d1e

SHA512
fd1b9c7c7d4dadda269bcd1ab1bd7502d5d204d151ea23cebbcec717187bcb6707ba760a6a01211896aad5ce565b08b4af608003fbf975c9af20c128c65dc54a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
807c235b3457ce7e497b2db538e14108

SHA1
8cb17c3c92e6da76224438578f824eecbbeb767e

SHA256
dc279fdac000e01dfe64d184cb36435f4d121b19a17158758e5cdae74dc5f072

SHA512
817f4cd6acee6b1706f6188bc411e389d3b7ae7c6475d47841e1b6ba17b3e8bf91372acf4eb44eee1da5c0daaed6d78c35219bd4ca3141ae42f417ef851cc293

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
ec4f6bdd19ede15cd97de183e6a4ceba

SHA1
5d2a280b76b942bc7d94269179ea104a929374fc

SHA256
06bd3012e063f54bbd6c8a37686d1c54cefdfe6949f9640beb981679aaf3c940

SHA512
d40bd9d0c7a3251c022adf39cf6583768d74aa50bff175a629f0f1a1b1526f8dc73832bc7287f59ccb57943397921cdc2f1e0daf36b65d2d0894a165e19424f9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
03ef019d0d229784ac010fa4ebef1455

SHA1
76108e1741646f0c9c3bee8c012ef5b32180ef30

SHA256
a20e4e1211ff0379b045bd631b5cc3dad23cb093097b9e47d37c0345cd4f0831

SHA512
4367f73d79f2dad8826512cc5a8eb08101f8adf1934a4cb47cc0111190293f9e648464f1ed2cddbf885b5f287be37c01e4ba34dd0bec28f194115af37cc234c8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
e27c4f53743b5dbdbae29112e0e10ed7

SHA1
981c274ae0468db95730f1f779e22026847bde9e

SHA256
538b1ee8c48b0d639ba1a73ab3fa2280ae583444774c489d3ce09a44acab0277

SHA512
20cd8b10aee741ad72f1089eba7494690afc6b66e607cceb1291a152ec9141e211902eaf4f54e16ef181f3d9ebe390bee34d42ed56d34e9b18ba230d7772d06d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
8b7582e5b7e5c2debecb24ffa5965b39

SHA1
f49068bb9cd56d725bf03ee1e6fbeef65c27d4e2

SHA256
b7ab4842f74d2c3dc8d40799de9dc7be5b21acc7eb30c1c059561a6be6769e33

SHA512
75e4256983715f4a4a1009ccc036149e12aab50ec06fabec8b7c2ea80522bb810ba176b0bfc4a7d0f90e739f1bd7898e6cb47966881850f99bcd55e1eb1ab6b8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
abb790adc220346e30a27f4a879f8f8d

SHA1
659733fc4f59b9ed94e0a0aeaa9e43438921b4de

SHA256
ef756d3b9f2f8762940a401cd9adeb042b1c1ac94d1f4ae0f8f608fef213124d

SHA512
5299b796f5313106d516a8ed5f7ce0713cb7eca6460f55e8e400cdc187eb20dfdd4afa80f2300528280bc91cd049d13d561e532b8783460bd8249a628121f19a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
242f64e5ba4a74b93bcd4c34cf1f5f69

SHA1
6ce296673999214302e9363fb0dc568c55fe157b

SHA256
b188ea4b645b58667ae38f42169042bfe7bc89f56050558e2dacf6208dc7b28f

SHA512
666c27bd39b3770be56d93dd3d449188dda307c6688d8d2c775ce2a22c0a266a89be0c396aea62ffd7f7729b6630707b460c7886609dd0468d63e8e696a6286a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
580d11da53a2ae9d53999b76a52fd5a3

SHA1
07de49968c523ec17eb530d46c84540b0e940d3e

SHA256
b3939be644a46aa9764dd502da28320a3392c2a839b0db7f6416a06016b3fcd1

SHA512
a2040c50119f57049523e4498e8c318ac0948fcb0f7334b69976b208f090579a8ef6bd3fab177d1a3dc907abfd877487ae7790f9d0f27240ff94224dead1eac2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
ab63cd1485758ded18a57b0d0d814297

SHA1
9a440822d29c7329c34bfcb64e03f11730e0017c

SHA256
97395478a22e9bf913c80407129018916a3dd503f61e3f7b97b7677b6f7904a1

SHA512
976e0f60508dbbd5827d9226d1c45a90356b3540367a2a0b9ca9b6b9ae7616cdd66f477405a3d08fa6a47b7692913b0cb95f335a181c469bb3b085c05cf29bf3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
6f70db42b963f92df57baa8aa94bfbf3

SHA1
f951c8df36d08fbb50158b974437d232fbe8d1d5

SHA256
723ce73359c5229d0777672fcebb006884efbeb905096510f358ac33480075e8

SHA512
34b0ae0e518fbd07d8b2457bcefdedfc4030b306c5fc6fdde0e655ca4ded03cc5b42a2384b3a81194c9edfb1303c01dd1c8b9ba982ac342e2fc8cfcf7202fb45

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
b615337df46d5085d6c3b9960db0353e

SHA1
300c5e92e2bc7cff4ca2fc2d8abd945ca9644cb2

SHA256
5653c9fab8b7a625a8a050a29791299ca15aede2ef2bd75a135d28a75aba5bc3

SHA512
6aa0d2dcc064728f6396435506477cfd7dce63db7a2eba59b3bdc7fb044d82690d10c30f3d4c9c1bfdef04e1173ebb2db3d9490c9d7c38cdc12b8146fc83540b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
f91937083af63dec58f0b73f9dd7ef70

SHA1
394e14e1954ec00430c66079a0776943eaf5814f

SHA256
d5c42d396bb2b914af2556b23d8d474e1935635b400578d57f13ed2c47f73a3d

SHA512
b51ca5f5020bc45a6b44185461855fd10b0cb450a0699310a6ba2f0c1786d3990fb1b36f99e0ee9b854dc4081d7871049d087d495ece1a2996a963e4550f9294

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
949f024c125af5bd8fb9f9b44168c990

SHA1
35b10826d42668a1d4808fef7e7cca7cb0048806

SHA256
d0ce16e7924f8f0c3615add0d17c93eba426c35af5eeb15267e1fbaba8a58208

SHA512
f7d07729593bb855f5d2b6c9498fbfe66f1559482b1ce288a3f6de19d0d2a72e3e4edf4a9bc6053afb692c8c5a5643041ef587b3f2cca8b78507b55000e925c1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
c866df274562cae842284f46aaa19d57

SHA1
d3df66d6ce4dfa7cbda673c0f45498fe7faa073a

SHA256
8042205207342f7d0953b20473b487ac1f184484cb7d444fba8d3db4232b11c4

SHA512
8e5027c0a0f09cab4c5dee6c1f2a101d6f523ce864ff5be1ffad909c931711baabb38ffef9cc624d3169e71e5fe2d44234b706710480d853e40aa9ab4252e89a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
121e62fafceabe02764c481a8f5ab339

SHA1
84e84693ef8f1b7a5f1dcde44ae25ecedc6023fb

SHA256
0d23eff592df994d59d64512dcd3e270ec2876fc59eabcb23a2fae676cdba415

SHA512
f67e36a3b04e82d146eb2a377325ffdf2511a800aa71e4f1e7e853fdb7fcae743b9d62a26f68d11d317df58db427afb3b2464f85df4ce119df8cc1acfb4eabf0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
778db3253194b37066fc9596b8c64062

SHA1
5158ae1b2773cffbea591cbb986eecffa8248a3d

SHA256
df520608d74b7c481f87143459d54efe464240b2401da2f502e0ebb65355c752

SHA512
327f0e8af46a5c68a3829c9a141b916c9add56ddcc011921440c6f7ed7652c685209ee28c4a1a479812bf7045e8080b69ddf3714dff51afa85c566d1e7401015

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
ef5fb0eba7b4ee88c8fc7d603515c8ea

SHA1
54f35abe54ba13be31c453e186d18a427da7c899

SHA256
34e480ce30960f1f50cec01252afc3de1b87db6b290e70db7f51491b26d4dd8a

SHA512
eac26d00dcae8f1f89884df10a85e9faae83e17b0c811c4039ecc76188bcc146ba08e1c18f699f2356950d1e489817ef60d393ecc562d873605a990b2e0e7d82

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
745b7fe01094bec055b889a88522d69a

SHA1
5afa8dbdb96b50f2cec889090cd36a05828e0677

SHA256
9cd351bc8897863b868e5a35d9927a2e88395f0840f94c2f8b12049c268a64e3

SHA512
ea5ba5dd4807d0f9ae063c0ccb2a43309da8c73e4d52f1faba5ea7feec7e980ed5d28a635bf9ba9b571006332be9f7ade9ce967d3b0949645d66612bb1859ae9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
53996a8ce5acba6c26f78407e27ab2af

SHA1
6a81c5148e47596bce04c4ecd1c3c316a84af4d5

SHA256
dce1859efcef47f0439c3b85e2b7bfab0e24f9937a694381c48634be6c5d2c98

SHA512
b2ffd8c243bcebcb4891f74f9ee5b7fa71580abd7783185f1f51e8da45ac55aa4a730b499ff22ae1b8011f2b1c33afc269e146f5d9cf0f8dfe07cca871057e17

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
42B

MD5
ac154d8a3b1315e61e5905fc6fcf547d

SHA1
a50f49738881b22bf11638420bba2b73b2c2368c

SHA256
07fb57b9dd876615fed4efcd8a0f138e69c935e952b87ff2f4115125e06a88ad

SHA512
8a31afa3dc49ff3979c1c2b5b46aa56e4dd2edea918d520c4f414839e6d9bb852430de0c18962480e17b3748bcf7f2c7b0d2f593d70e33be11366fc099acfe0a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670753934464432.txt

Filesize
77KB

MD5
a91d1e9c4154e3463543c444e40015ba

SHA1
e45ab7e75ab2255efea0fe5a11b5f82b415489b0

SHA256
c64111874cf5f16cf088af41333b8cdc3ee9a9e417820b49a16eeeb606a6c23b

SHA512
5b08475cc670b80208c2339b2dcb831a56eab1e48335d2ff0f4d7588fda3975cf6f3f4287485bb9391b7b2df31ea1522880e675ebdbc1443364e4f301f333c57

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670754465012829.txt

Filesize
47KB

MD5
b01ca3818e128497741ea03fd9bf75ff

SHA1
665e9453fc5e0c2de2e985e260080ad8380e0ad8

SHA256
52fce5d61d6bfb6e144dda268e74006263b46ef29ca938812a9a360e030c2870

SHA512
8cda566ea956098d48e11b35b2aa0b4a2d2a6f4dea9b08d14e763a0aa103fcf68c352393a601fc659c0ad29484ea2fada28879f0d61450bba3fd92332ecec888

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670761786506230.txt

Filesize
63KB

MD5
10553a6a6d4b023c9a1817737adfc884

SHA1
c737722186bc81a554398bcc90926a0edcd9923e

SHA256
dbc8fa0990f11600a564a9588103a0802ecb791fc566191ce8b67693a0ffb210

SHA512
be6563a3bab07fb9addaf0eae9e511c9951ebdf26f10626965e05114d0936dcf87b5ecbd7f9149dacc8a21427eba25cb11ac65becdc0b93136e5892ca4fca860

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670764368086779.txt

Filesize
74KB

MD5
9c48a1c87730b4fec40c9b622de3842f

SHA1
e6d1055f8c774572c00c9978e6047e8989b9695f

SHA256
78503508e63345e919ad08742f8fe3a002ceb924f5cc159a0c7ecba739074fc9

SHA512
b3b259dfe7da1599e2aad0a562234fcc9c098125ee36305d9feae07d7e4d3ebfdba860ca72367a573bd46bec8faf419b19d7b5fb2bc3c23bd7da34069fa0195b

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
2c530c64d77ce29c1480184e9b51967e

SHA1
f582eaf47f6daaafc51ae70eb71d5819b498e05c

SHA256
8b4f3736de395d2b1c72d9953c05cca0a341ce9710ba3b044141bdd08407b372

SHA512
060cec4d1e07b70120207533c6d34507b5c3424bf6592d3d84f6cd1f235bb0b65ac00e401f9980f0449ada936028f87356d832447705e0fbffbcd0fb9019952c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
63ca30610678a1d8211b63fe60833956

SHA1
89facbe6839c13000b91cd03e186ab572fd69df8

SHA256
4ed573b3f445e14a913633a7f1d5ae67def769187747d346580bf248d053a65c

SHA512
0bd5b55cb6e377a588f8db0c31de8a77702d129d4ccc0460678b888a88357254eeda3ae230d44fd4bb35c94adcd2f85a951ab8f12e03a4fefb2d452f53e052e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
6f9811d170898bbadbfc8b40da09a6d0

SHA1
e157fb813b7b72ee3591266a1d53f02735de4dc0

SHA256
58c479f548aa24696964225857da34ca8d409aa96760bd5ef9a1ff53f0951d60

SHA512
20547237f960cefa293dc903ecbab0ca0fca24cda3a57a876a00e1698eac4bad61704bd010ccbfc885b0d766e301dae5655838ff5c4bddd313b5a0a1e0a5834f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
4ecf64230190af3e9c06cb7fd649ce6a

SHA1
f238b356f1eeb5ca081ea326c46800f0d5c73b47

SHA256
5ba01a91b227a1349027e9c9af218e76beaa0c19a300b0acfecf1f5020e5da5d

SHA512
9723ec76b60c724ec17a7b7f66205bb00abf36372f6b2f50f85c05ff0647af45f283389ebdd95405751db63dabc5c0506b5d253253666528669595e600057bed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
5b4fe41b29be7b04ef8ae925c9ac6028

SHA1
cd158f20e72623b568620861b8edab9e0891509a

SHA256
7b9aecd4b236f1e20db34d64ee6ff14bcc5d2e64a185d0bf155a0f83b44a13d9

SHA512
ae116f084f5203e22df07fd2942cf49cd5d5d4746eb24e1f2ac3e00a7e50dd2691b5ab9f22e67b77080a01c9c5e2f75fb73cee04b234aed2db40fdd605a2de3d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
6938c949a35625693ab85e418607ed05

SHA1
d29049a3719ae791deb0111c5a8a14ee1a34f97b

SHA256
09bdb98484770725f18dac7e3561179af3cf337846d90ef2f925479baa7cf087

SHA512
79825f4289107141b9fabbe18771562f8113fc68dc6a152f7e60d92ea136a0fdc177146ab1e397be2e5091831ce93fe3fb70d6bd9af40f8e0f69caca30017db1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
a3941790f16fa2feff5eae649e4f0be0

SHA1
8504f2e49edc860497b532f97edb2b345dfbfcdf

SHA256
21969866ce61a314b88028dbc54127b012077b0eba5abe3433e2c03d3f8e08de

SHA512
2289ebd2f5f94b3c8c9020060505867b80dd900ddf278967740aafb25c8a0898b4157315f94e564872929d7ef5a627a51b3af3780b7100b3ed5c0a8eb9076abf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
d621fe645e857a8c7937a86870bc3803

SHA1
259e847bc112965c62d9ee6b37ceccc07a5d31d3

SHA256
d972e6084526dbd742b49e1ee8243202210705e6dd1641a87f634fe220b5fe97

SHA512
84bdea72b92366305466cc44d64fdfc7da9a89a441ccf3f5c2eeab348185ad98bfde5d51f719cb045f957c5a9fd4c1062174b0632f8eea6c98c762dd9d0bddd2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
5aec2e632c0fa40bd0d9868d84bd65da

SHA1
7022eece02bb94193b429962e3568341bf986beb

SHA256
4a88e970ba513dfcdbc17d5f76e6d832d9ed4774941c0fec3f6dbed7981d2346

SHA512
72b9aceffd41cbbd1086f3c7c3be4df86b7b627a394cda261d8b3fd2226ff988f84663bac1ee7d5d18563368f88b467850b4eebe55c6cf4bcba31b3afca70040

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
4a4610961cf7054371846ddf9b698acb

SHA1
08abab0cdc925f15276b34f9057b2b4374d75e91

SHA256
145ceb87c2822254de51686dc10cd6ce518c8a7fd55f91ff52b55a2c7d261ff2

SHA512
fa8184e2045b3d6c3256d8b2a15dc20db8f3bf84a9c2afc99a1f80185cce88f92a6844fe5e927d1b70c47890e3cb9324114d562d6296ef15b92674ea2f1fd639

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
24221ff193a96e67b0490200700b1cd8

SHA1
e77cc1837ae99cf81f05954a36deceb3933d0e7b

SHA256
8bb94a1038d36af4cf65ef6a5ad67073adaf42b04e1010e1216a3f15b644d3f1

SHA512
389332024a651339d2004bfaf830d4c0152f0e6cc3ee856402b0aeb3616e2aafb32446263db013cd5c4237d9770a2509b88d3c44852a3abd934960834e221385

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
2efad0814d060cc57e7d7a03593d8823

SHA1
338b5b72293f2c6443f990d15b2b1d92470defa7

SHA256
68892b57f32c7ccb80abd47e6e3d0a8d49e218f6b25755d3469ccf8a9ff61d4f

SHA512
407c378ef20fc4c804ffe8d154f4d0ca710f75598ee071400f5f76f8481214cf9935deb10c3018e5b7c9c1746c796a1715f080cf3272fa68e41807f28e50ec7d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
dda41d2092ac8a180be4056793940be2

SHA1
0430766dc4ac9d423822c9a89e8d162c83a77452

SHA256
c4a07cbef162e51ea7bfc13aba0935b28f1c3be891284efcee4e733b455fc015

SHA512
247997497b6eb694f9facc78432b1e3b33b5b2c86799e191e8440b4a38e00067eda3cf866208f209af213766f5db34d4770ea1834d71714c7de4e8a27d48de3e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
fc8627e001777509a38eee77f13e8fc2

SHA1
eb6c9f9f07235841584e9c346d6576c61b1263bd

SHA256
4d2bce0df9a137a5b261d9e0cdb27895c7f55642ac3e970ff54a3d2968d98087

SHA512
13edab65a6b1d89e90ab14b2219112e8603d1c80ef23b7a040308c0c71f83ac421919b25a3af60836ce2bbe5666eccc1bd1169787c84f144ac79f21a72942dc0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
45285d9821eb4ad4093dae9644b1633d

SHA1
0f34a3b50ca8e9aa1f973560edb73259e717274e

SHA256
d566a21d70bc53b0f6700d438eb82669f92fe787d98bc6c705e0f2d40a6d3659

SHA512
b52eb375f62ada9a9b43c2ee5e1a39f6d217217cf03e68bfafddc4c26ba51dde957560e810589521791fa995b3d26765174adadbb67e55863f02791e50edd786

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
b91d73904bdf49006efcc77f0971cb99

SHA1
ca53c3372c5a56e68a00f92fdcb3f90bcffb7ea8

SHA256
c9048b5d26d1621d233f7795ae7c7f7247783e72517cac3bd052174848e22450

SHA512
7e4d494d4d6fabb2c98ea71df2ee6ccac0dfb6ee0aa1656456eacceea3f8967ced8803199d5ef2a76d300fca5bee616e387c5af12d73136f7178745d6b31a5fa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
6cf7c54d826672507b99cff168aafdea

SHA1
f40210bff0e80cb04698db8ac839165369beb990

SHA256
646f7a9939bfe9fdcf450555e417ebe1922b3f04f49cd81c33ff483d3463fa88

SHA512
dd38cfd549657c77b5e08db40ea8aef779e2aa61b830b4960ecb0ec5b537b4e99a272b3200914a67d1e303858cf05296a2d34ea178905165d57c93f7c1be5e65

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
823e2bc44febb5d62036a4237551830a

SHA1
93a5af1f1f91db1378863be13959521644a01635

SHA256
603d48fc9626f8f697027263de449a09b179cb722d9548432c53093918595c76

SHA512
ac0be7acafb7d9c1d9911ad67894e9c45b009cd10ee76310fd4d076cbdda7b35cf2a3c1c2b5e866d877df90f3792acf6b6808076ba6130bc5d6a4afdf8b817f7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
afb8d984f7e88b031e3ef2f90ebe4551

SHA1
121b2d08b40be1ba80a68c24163c01a235245889

SHA256
e64ec4b3b384efcc2a246f92a3f5dfb01602f55574ed48dae013eace9b772493

SHA512
edcfe941084260f82bfad9ab73d6338db892cc7dc6c571f61b4361fd9288849f0dec5f48f5c63733bfbd35687f109aec81bdc7f49717d0f2a5f17892a5b68841

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

Filesize
65B

MD5
24bfcbd49097e329fd9efe09dd67869b

SHA1
e15d6cdb9519c5a8c021f1553716536bbfb409cb

SHA256
1c859827051acd3eefef668e6c57d93d7a9c8764f5d413e03ce963d0e79543c7

SHA512
3d76dcc65c8beab222331e750b47f095396a1d9e69022a741cd5050c48e64baab35030baeff872c4d84211e3b020b4eadc3b6254aafca7fdd2f406ca7e894ffd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

Filesize
65B

MD5
4089c14771b117cb8016b6e2160b1423

SHA1
b9110dfd0ff76400e9f327a218b4a152ba530e23

SHA256
5aa7b11c44f3ad1f9e9a81635f5db1153b34519c6bb8e211750933ffa8d546f1

SHA512
92c245f490339550666c43e92dd77774d211a6568bd671cd0cdef52363aab7ab846f325e2b093663dfadf36cc24240456e5cc3c67c15cb192af02b97f96aa689

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
cf324e8701f39e753dcdff8246091887

SHA1
bc7e429bddfcfc56f7e807361160ad545029df30

SHA256
95edbaaaf3673faa654a75d207def6167057174ca2a604e5960f7e100d480c31

SHA512
2cce12d7ae3c6883eafe96b0212430369fc5f8095a022ae2f7ae90589204c91c669ad9525ca89eda22baddbd2f05bf7cf79088554dd2a2ce4f31e082112bfbc3

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

Filesize
49B

MD5
892119ba838d0c39ab8c2e1fa7a79e0d

SHA1
d55cbaecce82ba33007b0455d0163bb487d583f4

SHA256
299e993395568348c0078da40f251f39e99ca16bae2aa7fcafa02ca4038d95f0

SHA512
dcc8c774b183824f7015039d5edd7f92b4ab39a723d51b4f175e8855525a113c5b4be87f83c6fa311702406fd585ba3d6d95efe7892542b5ad5e57d5158aa228

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
3d37662b73dbb81a8553b538df46f375

SHA1
c40ddf88f79f3c1b1043d11bf8625766870e7bf3

SHA256
a5ce23212351505e956e27a69e78b2719a5d0ee065f9a37ef90b09931e94a276

SHA512
739346a35a70522d822e3c83811c1a66c44f53e4718cd2f644024cb4664c6a89ecb7bf889d851a049e094c21caa2754ea6fbbabc4c39ad232e7ef906116661fe

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
ea48e98e6efeb2deaaf28cbea6703a7e

SHA1
3f127a046e48e6890a079c284511f4295d56b97d

SHA256
02cf96f24354c99e0c0dd2e4c6891293046a9aab7bc75960af3cf9349da0fa1b

SHA512
386abab5c4314576074026fccbd95c25af37ecea7d4ed86319398dc73028a5bb57daece36e2db95f043656ece3c5fc64464fccf27167715336124b0a4c32a417

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
84013d31a3c77098baf3e1b52b6c9d3a

SHA1
c1ac11813f3d2184f27bbd0bb68dc7da89c26073

SHA256
75dedc7295c2cb5dc1365d16e5279e0de39287e50e936194122e5bd95c22c47d

SHA512
16f469192fc86b4ecdf2e1d4984000f4b72b4a9c46719a86518d3e013513f3df5d60b149a627a9a7d022c23e23574b90e9557cc97174a513ab27a950cfa69690

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
6f1f2a21d84dcbc6d44c864cccf25a85

SHA1
72430322423f7f4e6767142e97936b7776006f03

SHA256
b8808fcbbd84fa4b60c3a726fb260cb030c7b640491e13d69dd1c96c5018e2fc

SHA512
af4f42533e23982cec8cfc03da21235bea56e67a9a368db141548ac1b3a2f086c4334260fce704735150eb39d3bdcb34779fcbe9dc6bfc2650c154af9b313d4f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
8f53b373d244b2389dd0b26d0abdf150

SHA1
044644ad9f92fb86364946514e2616fcc26f5501

SHA256
412053c27ee89589a4476da267df14e6424eb09cc9d2580d968d807478e82b18

SHA512
b6e8a288de317c5ee00819164db7c459bcb6d0ddb2dfd7f022de6055f624e614faa1821ba3b8b9bec19cb9e602d39fb4e9b806a958a625a31236b49b25ab455a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
798df3dc48a374f89a3e210dafb32748

SHA1
93b0f974b9ee2e0900e2631a1dea7609cffd1030

SHA256
9f4139d120f30b48eaf64415186635bf10bde1ed7080d2fa56becd8529e82be6

SHA512
d4909a208ed2b81ec0b9851cba1373a9b55f4d34a1f8a9a7010657009d8aec5f656b2f97c1ec650f5c45911890e87d222a97e41baf6a546bedf9fad5ae6c508f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
f410ba30c317c4765946e2991e05d6f9

SHA1
515cfa5859a1484784d0094041ee99f7ae0b0d6f

SHA256
2dd9946fe1512ef3de85290b5f2a16b04945278863b8bfa4e9ac158b7d679d2d

SHA512
f4c178c73b05ce34fb7336ed823c9fac4fe7987e34716dbed0767e4d339f728552433c7b192bfd25f199def4323b6db8a83f10be0a678b387fe8c2e401cbb5fb

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
0a814af8951a5030777c2dc7c4f22879

SHA1
50513a4832ca1a664415a080ee6e8aeed6f5ff93

SHA256
b39f3be9947b0f28de85abc4399b86bfb5a70bd5513a63bb14bfc6a0b9a3a6c3

SHA512
8dd1a15a45dccc5e79a4beceb65f22bc77b64ffc367173202a5c978e1ee33bb74b2631d54135b851797b23f0dc992ee2b1a9c9d783cc1363e9fe687fd39828e7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
84d712140920a66c63bb64925e920cbd

SHA1
d7172c1e01aeeeb6a06af0f1633b200112dc77c9

SHA256
5a8274cb326f0e3ffdfb8f0ae4b298feda8888cf2424865efc136925fba25c7b

SHA512
5c061cf0d4dfe3263031ce2d37d250965ddef7efb5f683f71c6854dfc90845f7c2fd2135ef605cdd6b128d93efdf71635631d3c86e7e4032ea3e24184afe54d5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
66e5798fc41bc4fef38adcff3133d728

SHA1
57cdb6f5819a06ad7b2b5c7e5957b559b6977fb4

SHA256
3e1d66b7a9f7e3a5224a00ffb537f6a4d34f4b5d718586464399a6f907ac3ea3

SHA512
2fdcf54e661ca1ef24272a966a9fbfdabc2fb6e463649870c2619ea65f7bc4f5c64eacd5c36266e17e86f3ef2dabe724bffed1057ab46cb96839046c90c599f7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
57713334682ac6b9259a76895c6d03f1

SHA1
d1014d7d6bf742894758fdde9d9455efb0e8bdfe

SHA256
26058cd8785706854fc39fc64342f1540b4cd7b19bc3986bd4f2a04a61eb72b3

SHA512
eb6f471833308a40132a3a8783a99f1d2097c00335eff7c1477a0d28426f51d519a8f8b2618756b7a13e9e9bff079d46c323a5943690bfb201da7126eefbf53e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
9a74579b69e36858a6eb8609074ecc51

SHA1
6fd998841e26986d08810fa422b88e707012bfe3

SHA256
9b487d6e838082027ba80d89eeead28702e1008faf27197d4d5ed54d734dc8df

SHA512
f0836188b827f203219412e596fe35c9450a4229979210c7c068fd9acf3483af42cacacb367cf414aa3f9eb5cd48e2568114587945aa049862e1dbbd7fcd70d9

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
235ce01b930228d80076906596e55120

SHA1
5bb6504f211dd3ee977c63d42eb70ad330afeaca

SHA256
45b0f1a21e77137e9e5c22ad99f5846992f6b92e56736b16b5c403993d14564f

SHA512
ef20e6c369332e0be90f76483f038e6aa424cb51c7248250a7c2f75d5772dcb508b7f007a802928f72d1fd8eba27c0812b907807783d0bb27c7a9c2de5bc3569

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
93fa18a12a16e784209e3db1166cdf0f

SHA1
7d42eaa5308891c563a3ba05eb2ee345226455c5

SHA256
3cfe4a587f26ea32db6dac64a2f4af29e974e53dc1b70c30e52d09604cc67367

SHA512
f54fb11c06103a07e7e08e0ee2b8a91ddcbc342bdd278ecd37db9df20957500b70c2fc756854e30ec95da6a4d28d28d7cb116b509c26c9c3303f95ded8ea3378

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
10437f4e53cb25d87e54189df52edab2

SHA1
ac95fac94d16aae2b11b131ce220d6d0be349f20

SHA256
3369951b5b6ddf9b106093494aaa9042f04dc5080ff2fd9a46f20f8f4bf14c4a

SHA512
4e2c813c5fc87ab2d3a28064d47127450a42722b5796ba16f4e9bf5c8a8f248b5dce9f630364dd97deead64da63a29b28bc5d7411e3b0080a888d8a97a6b32de

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
5a87d2b26ad247b4b9ee2f7bf59902cc

SHA1
6a4647445782ae95a3ca308501858bb72329f8cf

SHA256
998f00d08edc279982768dea941868444560b0eae941ef8e8b7b9de3c3002b0e

SHA512
4d2852b9d18a3c63a9799f8226c9cb2335f22f6885bdbccb0ac5e6f2089aa7a03d12efbad7d67a82e438b2ae0e7e6f5123b8e96c10de70eaa789800f377dfd7e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
dbdf945380fe0759f4bf318849b36674

SHA1
8b4874a6314f34b87cb21fa1b81947cb454b53d0

SHA256
4e9ec9b83c608a11d2df4c1c27be3c4d0646015c1ecffe99d6244beeb2ccc313

SHA512
cbe6555d2dd284a20d7a2413af25f2ab0317cfc92c4eb19dae32f377fc26c34a21ab5f9328d5f0737e5075fcd5ff491cb272e9900c4a34791de2819e4412728b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
36d34ba3682d7bd3829fb3008dfe8d81

SHA1
07a469ed5ec6b5516290c1919f52c5d9e123bbca

SHA256
49f6c407bd6c3bb6f382246261dcd76e3c6eae9767dddcb0c652b107b89279d9

SHA512
7a51b779863d75a302548e72da1bc2660f2c53b4495fc39f76366fe17172dab1a492a5621777501bff7411e7440c824d23876bbdc24124ff2b6dba8ed52fe811

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
68743d279e8095736bfc8c7ce2e844fd

SHA1
6f542144a549d32d63782b2a098272bccc86b315

SHA256
04f584d51e8197b4a00ffda7dce8b8fa7d0c04e9138f6c6b8bf0253c265108f1

SHA512
54adca1e0893fbfa83ff9d888f470fcbca7804b9076adec47ed7e9bff9f62f94d246eeaf8b47f3d02b7f8c0931d0a095e4802d89ceaccc9c482b5db603ca65ab

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
d9fb80bb6819a451495c61972c9ad472

SHA1
7fdbf01fe8c46f72e9bc037ab3191d17978acc86

SHA256
4b300af3efb344e89b76d61c9edcbd704f47f9a2fc8b0b2d0cac679cbf79f5a8

SHA512
6126137ea949f02f6a226fcae7c8dded8b62f61892e7d8cb252d753a9bbebe7ce4618fc58052572445615060480c2f150c2c4cb9dce998ead1e2f0917fb0dc08

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
25c322f1938d72b84e475f9c91060988

SHA1
663e252f5146594ae136592633fe1f0f86ca50cd

SHA256
cdd9b884569f4859e6551c9ce28c973bafc9dfbc454868419692aa7c88d81ab4

SHA512
317ed6556b77e3bcdb64de4ed00e47b7511d21d8c575fa027be19d6875e1249b11586ef4ee277394d9b823492f267f7010ccb42c6f5b91176d3785924cfa0409

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
189436e90104a66849e97c3dfe2c21f3

SHA1
ccbd95c4b462695432145546ae4d8925c60d3a5c

SHA256
b15da955a725fd33d880a6a041c0e4b5e7ae48a9b0e5ef2fbd09cdeae4eea1c5

SHA512
7c2467d0fdb69f8921fc3d35a8913e965390aeb0d12ec773f32c85af1bb7894ae407dce9ed2be1fa734e8da56d9a6e2ce384c573479498a66342ac98f9aff5d5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
628e101430f76fa070b042887a42a191

SHA1
b39af59c52456e8d4ccdf76294e91f858649722d

SHA256
de18fc0e54f41f025d44a033cdd04e5555d2f279cccab378bbccebb1f9ba7bff

SHA512
c94af39e61746982dc425c545d711fbec27bf15909837b057918be4e4ae342d65b7724097a51c8def3478b61346d6ab207684488b22c10ccf90a60fbc9af9e1e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
05362a97a3ae332acc39897f4d03ed4f

SHA1
23f142b1b5f9807a29607b823eb52ae4e612762f

SHA256
90ef6d80c30e58d8a648c2ffba0ab77dcd0146bd656260ec54f648d7d5fea243

SHA512
05ec49d7e730f50fa1e26995c72c381b69bb33009cdffa7ed5fc1285f3641fad2eacadb011ac921870d66e73fc8d5ae5843bfed34578199af49d4c0074cc652f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
a62922630d49adf413b12955a11b64e8

SHA1
5d23467a2ad8062b71862cd01927fa99f085da50

SHA256
aebc9c37dbe2b02f0eb3a4a59f0c6dbb8458cf866f197f9063c78eb1bbf88907

SHA512
fd62c2ea9affcfb6c4c5d7f88510a0a4401d19b19671a453e1b897b0f860e979c381f175dd7549deed12fd1b603412e8ccfc342965863042c216dceea66c6f3f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
ebb65179cd59fd7f9a33c721a04b1c95

SHA1
9894b2badf6032fe75dc6c9bc1488dd3d32ea57e

SHA256
7a092e3d83448ae182641f9d345f8fcb5a579a8fc4dd94181b6950c9ca10e642

SHA512
ceb26742e5d14ae45a1366f9e5b12c714150ffdcd4ad5b8e8fdee8e11b3728337b0f88dea3e19f3d6476faf61461c0695d0382b5b158bd58e0435a37cefe60d9

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
deae4ae984f2a5ba900f4bcf25d02500

SHA1
c5ac471deecee27e6402e6214486f436462cfa0d

SHA256
99337df32afad9538f9f87d67bef6c966737d663d287331d58aa453d9bd5a798

SHA512
af9668bdb751f0aede74d5172a0f759b0d666a97e11ba4390cb15d3b757fa618386513fb579f0c45c5f278af490f2c8e19e95dd88a77f06d4f4b68578b113769

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
e7f2d94ed49bb90832c6146b9fa0a481

SHA1
4aa23a79b610bddf5b807cce7f6762c0cb4e86a0

SHA256
ad56bf0052fb05012cb7e40ba00900aafcc21b0327896df3eb9e0eb6d1b44827

SHA512
d29d865e6e98b7f7e6c6cc76c7ec90859955d517f722e91cc6f903bce68f952d93562b7b2a9ce0cad6afd29e31f2b299d327d397e0a1f41b3d446314df335490

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
44175fcda657a9e334cf11f9a427a34c

SHA1
6d180bf7021edf47e7cbd43d9bb795143431ae1a

SHA256
537a00ece99a803e5cb77f29f84376ce055a1f4cdf29021f9f067976ee490c58

SHA512
c91b4f32f85f5698213474c321cf1c0351566c6c3ee00be1af733c1508cb4f183ed44e17d2edc5f1210dd25831cfd75c21414aabacb856d9cef7d4afae8190da

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
a3f0994cf22fed378418eba376bceb89

SHA1
2c259f9484f54a0c36c55d6e3955349e019c1bcc

SHA256
b2a35907e6b99e059046662c9d2f4f5ecc141b38cef09b445845c5ff3d33bbde

SHA512
da149df3b85b7d18739e791ce4d7219de53df2bd5c059b74263493d856a178b985f09480ab6abb6822e30d3c0b2cc1bc2b0f448406d3523d85f91ed1f004d477

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
8cc63ceb0798dc13acbafe35fb3f4b98

SHA1
05725fabeac983cfd4670221acde6a0a675a8c50

SHA256
57a9eca0778aed2e75752ccfd68907d90e4446a70cbace443985864d857dd2e8

SHA512
3d61ad3082d3494211277036935f07ef82aad97f3c55704a7b697cdb43ea7f123b1d385898147d5795ee85c8ec684a1f00690da7bcb470cca43cae6a89ad61eb

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
14b63debfd6edc1e21914a3e3954b95e

SHA1
96795eab928ecaf4931d4b909e7ab8da2b4db7b5

SHA256
d8fcd01f4c64031a3b0d8069a7aa4294e46638edad8d8ed42ca5a76d7e62577c

SHA512
d0665c8d7569240846adfdd3a7e758dcd0114b207c48a71f8d0f831300f1d508a3307809ccc3a5de1f7fed3a219b289a9a6442444e3566ef03c56b6d57c20999

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
5a1756c56da79324343564f586a5181e

SHA1
c70146e76c1737b3f01b9991a333bb98193557fb

SHA256
bf01f1bd0d56f3ffafec5e9afecbf11f53e1fb73dcf8ce1b6c0c29e868e9cb28

SHA512
a3bfba6ffa00d23473e44f2229fd3e2f8caf1ea126f911b98aeaf6e199dfb758410d3eb3d807ecfafc89f4b7e32cd939ce11bdeaecb58d3d525d7d0117503cdf

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
730eff1a343bad8e677060ee5b66f168

SHA1
3d748f632ff2347cda32a12799dbc1534be29414

SHA256
e5bc01ed9050990640bf5da11b81c9477e8f0ad7a2ca2533b133cb46d2915dea

SHA512
6a6957e9cc47c992d03d596c2dc03cb8635e870623b709ba6edba884e18ae9f4ff8b453dc079acb284c88429f9ac20cf0e75e5cdb22e1297d4c242143bf8b147

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
cbe22fd3ba83811e473634ad97fa5621

SHA1
24c36a4bd75504b043181b079cd2def8672eae4b

SHA256
2308ba0fe7892346a98194e6de94ad55d3283b0b0bee230d9631c7b29870eef4

SHA512
67e87ff82b716a21d5e4cbd4b12955aa7e7aebcfbbbfb4e4f5a66c6361e24de754a2bb7db53c4889db0da816149b10415838b37bfbca3c8c409a63d2b3af859f

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
7842e0ee39695e9e13521ffd6b9db3fd

SHA1
6193bf334d23f1d43928c97678feabc9aac11f8d

SHA256
1a0e7dbfef9fcffe3a7d9e711a3e9c87509fb78feb63cf2eeb2d4b946bc05afa

SHA512
5d0abccb35ef6113df9320ba7691894609e35a64a941e1f979dc63939ff336681a21a0f3aeb9da6c7d248ffd4ffec8bc5dbe8524835ed2225af1d87e710a7abf

Download Submit