e5ca48b24fa821addd11a64d1e672e62a4bb5b56f4ad9116d9ee8a51da2831c9

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 17:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Size

12KB
MD5

190ed4fc7d9bfb3d7e3d4185f349b950
SHA1

52ca77fb5a95ef33442e970975796bf41693ccfe
SHA256

e5ca48b24fa821addd11a64d1e672e62a4bb5b56f4ad9116d9ee8a51da2831c9
SHA512

ae7194b4c51b581509b5b49a658a194484871cd06be3f481c140de5b2ebf1657c569d6c246157da174dbe4d95681cbf27a58acfe5185cacbaec6fa695467fefa
SSDEEP

192:J/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRM6cgNJ:JebFNw4Pk1itKkpAjjJs6B40W6fJ

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2175) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\53wTw1Ft9rFZ5YX.exe"	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\icsxml\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0012\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ScriptResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_1394.inf_amd64_cac08af12caec647\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\megasr.inf_amd64_72258921635be994\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\th-TH\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Com\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\megasas2i.inf_amd64_ed501deb0beeb5cb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\pcmcia.inf_amd64_cb18bba4788e47f7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_netdriver.inf_amd64_2d569d832b41b8df\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\kscaptur.inf_amd64_b95d9f4691816045\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmomrn3.inf_amd64_c2314613ba3f3585\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0021\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\lltdio.inf_amd64_4faf5a37ebdbec2b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmct.inf_amd64_0f3268711a5b2622\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Bthprops\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ntprint.inf_x86_c62e9f8067f98247\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_2176cc45624119a9\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\1394.inf_amd64_a08737ea39f5790b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsreplication.inf_amd64_cadbd20a667cf903\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\he-IL\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\winrm\0407\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\btampm.inf_amd64_445ffdc4132cbc59\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmhzel.inf_amd64_e90a0a4c8e15815d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd6.inf_amd64_28e2bee7229aaf9f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\rhproxy.inf_amd64_7d28259fbc48ab7d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbser.inf_amd64_8de53ed035d71856\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wudfusbcciddriver.inf_amd64_a084e687a06b255f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmagm64.inf_amd64_7f60bc7ff484a292\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmti.inf_amd64_bcde2913bb6ccf3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\rspndr.inf_amd64_4e80c2bb5314f071\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetworkConnectivityStatus\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\XPSViewer\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_ports.inf_amd64_181d494584779290\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\BaseRegistration\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsencryption.inf_amd64_b4b4845819a23338\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_8e9c2368fe308df2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms007.inf_amd64_8bbf44975c626ac5\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsquotamgmt.inf_amd64_5f092e2a496f61af\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnova.inf_amd64_4da8a5889bbd1a21\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsii64.inf_amd64_0f02175b17cd3f66\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netpacer.inf_amd64_7d294c7fa012d315\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@EnrollmentToastIcon.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_65ab9a260dbf7467\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\dc21x4vm.inf_amd64_3294fc34256dbb0e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volsnap.inf_amd64_ce438b6e0c5b1af2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAll\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-256_altform-lightunplated.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\ja-jp\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\StoreLogo.scale-125_contrast-black.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppCS\Assets\EmptyAlbumList.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\15.jpg	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-96_altform-unplated.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MixedRealityPortalAppList.targetsize-24_altform-lightunplated.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNotebookMedTile.scale-150.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailMediumTile.scale-400.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\StoreLogo.scale-200_contrast-black.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\example_icons.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\Mozilla Firefox\defaults\pref\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\LargeTile.scale-200_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\ScreenSketchStoreLogo.scale-100_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailBadge.scale-150.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-48_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalAppList.targetsize-60_altform-unplated_contrast-black.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarMediumTile.scale-400.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxMediumTile.scale-150.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\s_close2x.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\AddressBook2x.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\204.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNotePageMedTile.scale-100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyView.scale-400.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-24_altform-unplated.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\GamesXboxHubMedTile.scale-100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\fil-PH\View3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SplashScreen.scale-125.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Integration\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\Windows Media Player\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppPackageMedTile.scale-100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\ShareProvider_CopyFile24x24.scale-100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\423x173\12.jpg	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-60_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosLargeTile.scale-200.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubLargeTile.scale-100_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubStoreLogo.scale-200.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\sk-sk\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\Xusage.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ClippingTool.targetsize-32.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-256_altform-fullcolor.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\LinkedInboxMediumTile.scale-150.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\apple-touch-icon-114x114-precomposed.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Sunglasses.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNewNoteSmallTile.scale-100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\StoreLogo.scale-125.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-48_altform-unplated.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.18.0_x64__8wekyb3d8bbwe\Assets\AppTiles\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PlaceCard\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-72_altform-unplated_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\151.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeMediumTile.scale-125.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MicrosoftLogo.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_2x.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pl-pl\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\ThirdPartyNotices.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-16_contrast-white.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\WinSxS\x86_microsoft-windows-isoburn_31bf3856ad364e35_10.0.19041.746_none_680d56683fad152b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Assets\HCWhite_Search_TraySearchBox_Glyph_100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.1_none_b1e502c19c2a358b\Square71x71Logo.contrast-white_scale-125.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ttingsextensibility_31bf3856ad364e35_10.0.19041.746_none_06e2dddebda5c3ad\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-cosa-desktop-client_31bf3856ad364e35_10.0.19041.1266_none_51e937c8b7fb1678\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..sh-helper-extension_31bf3856ad364e35_10.0.19041.746_none_976088a560b9aba7\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..nable-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5df8c0ca70db37c7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wsp-fileserver_31bf3856ad364e35_10.0.19041.84_none_30e5e60f38dfec50\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.runtime.serialization.resources_b77a5c561934e089_4.0.15805.0_es-es_15f4f46cee534d3e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\Assets\wide310x150logo.scale-150_contrast-black.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.grouppoli..mpleditor.resources_31bf3856ad364e35_10.0.19041.1_de-de_99d39566e682dab1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_storufs.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_daf3ff6659b586dd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_usbaudio2.inf.resources_31bf3856ad364e35_10.0.19041.1_it-it_1b5f52bedae47e99\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_chargearbitration.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_f5e48e07938a91d8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_cht4vx64.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_478175515845a06e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..smsrouter.resources_31bf3856ad364e35_10.0.19041.1_es-es_12fbaac9d0a92f0a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..ation-mfphotography_31bf3856ad364e35_10.0.19041.264_none_abc4650086efc4e0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ingstack-base-extra_31bf3856ad364e35_10.0.19041.1220_none_93c7462b7887e964\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\INF\UGTHRSVC\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.AppV.AppVClientWmi.Resources\v4.0_10.0.0.0_it_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_c_media.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_07689d00f1e9763b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..rant-heap.resources_31bf3856ad364e35_10.0.19041.1_en-us_c181cfb777f3d08d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-thumbnailcache_31bf3856ad364e35_10.0.19041.1151_none_be3f45bf02b1899b\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-playtomanager_31bf3856ad364e35_10.0.19041.746_none_84b3b6e25b5864ed\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.windows.dsc.dsctimer.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_0ffdcb6686081ac5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-btpanui_31bf3856ad364e35_10.0.19041.746_none_54ddab438a3b7643\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx-perfcounter_dll_b03f5f7f11d50a3a_10.0.19041.1_none_a3125f897c2c87ff\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-cloudfiles-filter_31bf3856ad364e35_10.0.19041.1288_none_15222f9b449cad62\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-directwrite_31bf3856ad364e35_10.0.19041.264_none_b07f10045e5067ea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..b-odbc-provider-rll_31bf3856ad364e35_10.0.19041.1_none_d9ae550fb073a134\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-sud.resources_31bf3856ad364e35_10.0.19041.1_es-es_0b683d9c04e7fce1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx-mscorwks_dll_b03f5f7f11d50a3a_10.0.19200.110_none_08f6f40c8a6c46fd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netmyk64.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_ba79d1f6d6ddc5c4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.web.extensions.design.resources_31bf3856ad364e35_10.0.19041.1_de-de_532d0f809c0e2b72\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Wd518ee0d#\35da45d13c5581cadfd0546af1ffa6e9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\NewInprivateWindowIcon.scale-100.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_mlx4_bus.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_aab5ab0f7e5d38af\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-tpm-tool_31bf3856ad364e35_10.0.19041.1202_none_7d4ea219d613c9d8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-devices-perception_31bf3856ad364e35_10.0.19041.264_none_a3573b07f2fd131a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.build.engine.resources_b03f5f7f11d50a3a_3.5.19041.1_de-de_4ca3c5f42501885c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\INF\.NET CLR Networking 4.0.0.0\0000\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..ktopology.resources_31bf3856ad364e35_10.0.19041.1_it-it_a799c329163ea6ea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..container.resources_31bf3856ad364e35_10.0.19041.1_es-es_6142d98a5cee3959\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-predictionunit_31bf3856ad364e35_10.0.19041.746_none_11630d8270062940\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx4-clrhost_dll_b03f5f7f11d50a3a_4.0.19041.1_none_ec9fb50806f6fa72\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-onecore-tiledatarepository_31bf3856ad364e35_10.0.19041.264_none_ac56521bfe3760e4\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_sensorshidclassdriver.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_6afe2e4e6ae6db91\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..hangehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_6fe1df642ca4a695\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..trolpanel.resources_31bf3856ad364e35_10.0.19041.1_it-it_e55e9d700ef575e1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-w..publicapi.resources_31bf3856ad364e35_10.0.19041.1_de-de_82d656b6c3cfbcbd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-web-app-host.resources_31bf3856ad364e35_10.0.19041.1_lv-lv_c51155dfa7df6fb8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-p..package-managed-api_31bf3856ad364e35_10.0.19041.153_none_692d4d323b980451\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hidserv.inf.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_0afa5adca22d7adb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..o-mmecore-wdm-audio_31bf3856ad364e35_10.0.19041.1_none_003f59aa850fa682\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-e..onitoring.resources_31bf3856ad364e35_10.0.19041.1_de-de_af4964eab4357bf0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f...appxmain.resources_31bf3856ad364e35_10.0.19041.1_it-it_91c1403566d0303c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-network-qos-pacer_31bf3856ad364e35_10.0.19041.546_none_cb01ee53d6697641\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_rhproxy.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_04a6138a18c98833\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\forceStorageCapState.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..rm-libraries-minwin_31bf3856ad364e35_10.0.19041.546_none_7dac31b7cfcccde0\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-d..onverters.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4b11afd0bb957415\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\debugger\images\stepOut.png	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\shell\open	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "LIOLPNPCITEKZMF"	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\DefaultIcon	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\53wTw1Ft9rFZ5YX.exe,0"	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\shell\open\command	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\shell	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\53wTw1Ft9rFZ5YX.exe"	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LIOLPNPCITEKZMF\ = "CRYPTED!"	190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\190ed4fc7d9bfb3d7e3d4185f349b950_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
e4e2026b197ff9e0c46f12ac6ee60a77

SHA1
0a52836f4c0372628197fe836cec29603d119e79

SHA256
5c611f4e0f4b8fdc744dd16149bceaecbdb9d9b8fec6c69bc8c17bf676cd832f

SHA512
cda3ccba8af69efabdf81cb739611b815adb22033200d6449c85638ceef74f84f24e4f39c2f62c23e566e325a4cf8ceb01744c0f73297502d9a1462690702480

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
38504f473e3c4c550dbd4fe9848345bb

SHA1
3d6672f36475f5bf569d7f69134f82a0758c7f38

SHA256
a70d4f19c67319e8449fe1fd74f43ae5fa79a053740fcf36fad43284059f8f50

SHA512
65c72d73e82cf6b13c7dae8f5929bf7c993c79c17fef2adebfc37f0d8cea2960f3577a386ec7130e7b7e4b686127e5c314531bbf7b5f752e8f154ff9a088d2d2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
62f8df1b6f09340450a7078782fd975b

SHA1
47626f39c3ccd6693453b541527f0fa7ec271142

SHA256
e4bc3684a11fd5a9e466547023faf9a1f55d2fbaeee1116d7176639413a2e75e

SHA512
b1eb67dd48a0e2153a9ca2d022f553e44f2d6899068b82f25dd52ad642a5174c421ee56c3ed9e8c87531c7038777c8e630bf6a38fe7fb3fce8766628d544184e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
a11e03e5855f650541c2d643cce9aa12

SHA1
405cf32212710af0d51ef107c3674d1c52432f89

SHA256
ca5d70fd5a2a21a93dd105a8b5d7bb89342043c6483424f90623407317f7144a

SHA512
b65eaf282ff0efc9dd092554d0cd0df0795faaa2644ec6c00e41504d39e01549c3327dd0abd8e84df97b0bda8f8c1edb6c7dc3eaf9d3de17af9a4005258e162e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
d81d03c1d463db4cf02be1ad0c78e1c6

SHA1
0324612f21d70061be30b742d04a74a96987bdc3

SHA256
b969c4c63c696f5f8912cc29fa613cb9e4674248b0bf3258f4e393985e406acf

SHA512
6bc323633ce144da82b7f772b42bf515f314e49aebf11e41b25766e41a3770ddf45ec01da430ef8c7f6fc14e8d3e21aa0508477b1170376d6c521ec510f0a030

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
e37ad3060202db8d2abd13c232ccb528

SHA1
94208158463f94e04bbd9765329870e7d9e57381

SHA256
cae75ac542b1600a1dbafb7c75c8975c249c2f10c2fea611403d0a75a7da8a25

SHA512
57d26377a611978fc54f445fdd9b08100dea7d6bf7cd6b89ecd8bbc725c493ecf7bd160f0e62e7c8b99c48368f1f088fbdc496cbd3a01929a14288990a6d9427

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
8d7f922d6580dcb7bb6e40d7b9a946ef

SHA1
3e34e647806cdb5f2a8cebf74667dc5d8fff536f

SHA256
0d9a9bbb463f758f01dd9d8e288d013f6c4061adb5a709bce9b4fad317b2d96c

SHA512
193a477e31962f11bd8eb15759d7351f3a48d5f25a527471f6d5e504182b163ed304fdf0de79809ec425b407da2b1b2b62afd8b9eb80087a126fb0bc6e741d96

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
90b125018fe42f824a55784ed381f5cb

SHA1
6bfefcf05aeaaef47a6dbc8acd7a8a5126bdd9b7

SHA256
71bf67cbfaa792bcdd054588318d1bd3f64694f02721048c27a46b9c89542ba7

SHA512
4907de3c419ef90b7f05b2d9c1147dc50ed47eeb483d43c038d20ba940e2e1809eff23c0bbfa77e24bee6932c681b21a537679e24c54127fec4e7fb6434205e0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
5af75283be593ce0e0a7d0c0474637c6

SHA1
02b6a4a27bdfc57733577b7f5cef6701d3f70b2a

SHA256
5ed4cc77b25ab4de0638c69a442763b5ee6aafdf1c1b8ccc7b84eaf0aca598a9

SHA512
7d03edb0cbcbe397d533e5c59574e4e517bd6c15f4fa0e5c306299e6dc459acde627fc8185f7baac14519970d7d2dd4ad5668c6de0e67b4662eab1fbb45ad622

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
0d27e0848bddff27befbe342bfe4742b

SHA1
081c1e5d2df189e359b831e42885300fef20a1af

SHA256
d0ea4f23e0fb7e3ee40124b55b2133bdd322bc45871cbb91ee5577a0a02198b2

SHA512
8cf59d36d290c0a9d65b2dd0dd1597b95631178dac04920c48e17e533eeb94b1a57630a2d14c04991e41f86eb2feaa7a2fff47025a7ecfde3606b138c059e69c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
f7e9d692ea3aa6ba17ac9df8615a421b

SHA1
5e4eb73db5209fa373784500186334704fc5c09b

SHA256
8f540cd2187995debaeedd4f075fdd0cfd369beea56569d1a241c34976c1cba8

SHA512
30365151a3be8dae0d59f3320cb7eba87edfc20ec5df52ae7c944c775a3c51270ecb44ed7a7e471048f01569fa87802e0fa209ff95ae6e1faa11fe22b9e0552f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
5faae3344f62bcb476afc5751dc4728b

SHA1
15d13a63a7ee04f889211692b7d45bcba85b70fb

SHA256
266d0c57f5314478270c42c0f805e146af51a95da32d971f4b05c1c62e97d8e9

SHA512
93910fc5fffe96b450a2effa75c0d59f94439aee1770628a30defad917e8482162cd8f7f21b7ec22660d52c5c7dd76f3da18826ae0d235f5571e10f128895eb3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
9f0a677c28a83f0e4dfbb0980bf289d3

SHA1
0e216e72792aaf9e19e8ca6f0b00d9912da43ca8

SHA256
68b3a3543da21f3fa1b0128bb5a7eaeb8cd3029240e9e8c7c88420b40b017c55

SHA512
f8bc913018ebdf4bd8056d7946ac8bca7918d25ce5c9812ea081649b5959a86547ee3da3b3360b9c2faf0f77a2a26ef26dd486fa6ba0546245beaa8e8dfbc87d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
9951bbd454b39c82b2a1644d1a391d9a

SHA1
3edcdb8cff7eeae1f92b1ae4728c62601e9c34fb

SHA256
15670cec2cf9dfec89230223386bb437978c7adad2b288c9f32285bd510ac15a

SHA512
f88ce574c95ab9815a9b9cef70074896ab58c4cb5c0fded7d10bd6217fa833486a2a6721aba378b97d5bca0095bc86a6cf9bdb4206bc6535b36fa80460b9a81e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
c43763a6f1e29f2de6f8e3fccbf23469

SHA1
16dd21bfbe966399680bd7499028b1e04c61d30e

SHA256
26ceca43d92349f4b833657db86910c6442d8ce6c2b09e8ad62927ecbb36648c

SHA512
aad108a8e56798a0ea72bd97e82ed6fdcc9a24903ceb51706f506741001901d05585b9b3c54cc0b2ddc8c3bdf11921ea63d76655e3e18f8a00aa607a16f97adc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
d89fc61ba339fe1f711c8206ea1af502

SHA1
487ff090d48bc33b596b3232004873d5a5ac9c24

SHA256
7339abc3aa3ccb3e1072c085d03871f1738dd4339973614b1ebb5e7e67197a99

SHA512
36c8112a940edc744dd9da4038b14559bf52be6a77b8f86031f8103ae62270ca6aa7c181d13623b7143e7b69c01a2786c38b791fad157b0f376ed96fc28349a5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
8027270c9188dabdb410f27d9bd0f636

SHA1
743df664dc565b5e06b88c368887e5afe6d571a2

SHA256
ddfa32b8f658298d0a9fa74f56ec3301c0cc0ca2d63f09f37764a8501e76602e

SHA512
29419d07fdaeb39f50c95db6b2d968391a495b9ed579dfccca08454d4826a3bf76c1cb15fc10839339b8dd29b4622dd857136d82e0930774e01fe262e80deca8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
d009a8f0c1fb64463823db462e97a63f

SHA1
75c4f2a51d6d5d491bd0a7818ab24f2883fd3e3e

SHA256
da809501a7f74fbbd568968836bed23f69320c24a13f9ad3c9cbe045a9381799

SHA512
83fdc8ccc8bddac9c97831ea13d6dbefa8ae22af7ae1468aaeece1cb57735bc8323e55b7621e4078a619826f3178f87e29f8bd1874c0569d2fbe74e6af5597a9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
40915aeff1e0c68ce14e0952b6f7fdc4

SHA1
57653aee1286147c07bfbbe3a100eaddb8506d59

SHA256
fef8197bde2088f0d9106df3d199d93bb1e2ffee769f5cad86f910151cece1eb

SHA512
9b27f405a0685776cb31d0fc7153b079e4e1e362b8a5a87601b961cd3ffa1639a0a45b23d08c96354998ea362d79d6658db2cae8f3157c5c57aede792776f8b1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
f36e6e0458dee6d12fec0a5ed744a7e6

SHA1
db2d66300fc0f538dbe31d2b6e6ab20ede74d87b

SHA256
a4edbe3de947e7f1ae27160ca7123d22b293e76d41536465a01949028087e342

SHA512
92b0833998a6611ce039fb5b60210ac7de902832458589880ea665387a7707ab395affd90742e2e91ad83747e6cea1541e59498aad74aa3422872761afed6d36

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
b09460d8d6125ee47e11a72e4e42b4f5

SHA1
e5ed409d18b2d1125a00fe940568594675f18a2f

SHA256
bfce3e94621907337d5bbca95d32d29ed96310de1c1f0b18f5fa877b62449019

SHA512
06945dcfdfffabb9ca2dceb4c37d2fe3735eca032505f7bbdd281e30722afe21f9ca88773a677b50bb97738ab5e0346ffa625508c130168eb907797b7ff53cca

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
483c7af95947f76ebe085728c0f4f910

SHA1
71acb5f8a368f02f2674d580250577ff316b892c

SHA256
354f16e2b3d70a0df13224f70fcc33992d0ddb27c83cb98cecb2b276fe3d2f28

SHA512
aff34306f485fc2b6d394c12e2a8ab30a9f9b21689f488da57d3c4fbf03fcccdc0f5aca0bb07123862fa1285843cdfdc25d425a9ade6da85572dc39ce3df1f1c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif

Filesize
19KB

MD5
00e34612e38d7c65afdfa9bd7875734d

SHA1
59b1e2861089b5b9157669a8c034cf7520d016d7

SHA256
acab7603fb730ce82c5bb6f3c1db28c338ee80a70e08571beecf382d557425d0

SHA512
b68fbdc03171c043d06d2ac74af5920f3fc4b217d8802e092195852ad996dbf6132003659fc3c14d4b99726fd3fd31c16586ec38c6aaa22e653a287dae9e93db

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
0b201da34815bc7b83477ae4c5a2d004

SHA1
cb736c3bcd3c747c289f562ca69b3524c40ca40e

SHA256
4de53ed252ea163f2c833f927338b8af6245bb21e6ca38367caf89b06a6dc0c9

SHA512
a2f4b6ea8bb099190446d574f6722007075764af1dea71aab357361d73f808f6facb98791b35494aa103c3de0db2c20d4d92cea858e3d0604fc36b09c574b75b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
fe45403b4141887672f927f5e387eb0e

SHA1
a08e1e0cb8040ee9a5f3c049914c01a8d8837971

SHA256
c06ec10790a09048e78468c76504b2c6177657768acbca263398eef1faa162c5

SHA512
40596c73119053148b7641189a255366eabda8b650a4e419f852d4a9b3a43dcc1589262e0d1e3b9ed125cc8e5b708ae6efad5e5cc09e91bac3f98fd650473da4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
eb45b5595190201a24767d3740d06b24

SHA1
9cf295f7a7e2e6070defbe15863bfe918291dc66

SHA256
c38e6b5f7cb423acb045e598b2efc5114fb335833a7ce0c81cadbd98d382f2e2

SHA512
cc40b759d5a7ed53ffbaa20c7b866e483ca0a5c0a8a02d36ffb363fe48d6668fed6240ef226169e00f689d78ba2f93d0e19be6b43562b7da40b7f1c892811cd0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
44af9585628bc65d6d12d93b2b62a2c9

SHA1
286bce5647e053fac785493a24ea8134f9f1c5b0

SHA256
2a72282cd3166e8f53b92707ba0bd2a3019912a26579473274ce9fd36539ee52

SHA512
b28c85d360aa3222af601e6e8448f3cc5e26e5157e2ddda5dc73cd34cdb37e1fa386a162b887aee8c89a7936d4d8a7fdaca373866ab49d9bb249a4804d3c0025

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
6eccf8c964c9c9fa468eb56a73e5064f

SHA1
fdaa6506dec4df76eed0a8f10194f13a5dea1534

SHA256
fc8d93ae5b41d6db66884f536ac2162f64493a6ddf530d58f8a2a41abc4782ec

SHA512
3838870d963e6a21823329a30163caf99917eb61682197293d4b87c7bd7f4021c05a5190d067be7878b1226f543c9e084023af6f19563b0647948eb656c1849f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
3b7e6c5d7c9774226ccf1a403e7ea618

SHA1
a4539085793de2258c8828c8a2efd42d24539200

SHA256
26c5cd985a2f4d83fe7f7b76a3a93e26bd5acecb4d9b66c7686414d2eceb7a46

SHA512
465012ec06b6d3912fe12e07fbba9581708b6c6926cace5f59985a3ab1140645367bdf84d3da60d6fdbbf5f3cccba6825fb76bebd615b17bc277d1fc92cf9de8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
24607ed9a7bf69c3f614a2fb4b71ab55

SHA1
98ddd0ef5428d748bdbaf8b94044ba6501d4c03c

SHA256
cb6b2046c24d08e0a67dbb632ccb699aecc539abcc702938cb916383743eeb18

SHA512
8dbcc795a5c65cba373adca270ab2f3fc932fe4c5c28d5479a815171ae3939ff548ede8b51e79ed4573d93e177a87c37297fef495bbb69e9fc0a400fbe4773e1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
fc1610af61a7e0aee7c69cd44bad6f84

SHA1
ce08dce263c5f595a345e5d83b588eb0d5720ce7

SHA256
78683117d9b331b293cab1f967c9806d2f0165fb85f4734da241179cf154e1fe

SHA512
96abb92c0b9e86b6849b37a71ff2c333b16507a68641dde3d13cf2c72b310bd72ed87b91d710aa0c349c110707d96941bb0753e5dff8bd91179353eff617f123

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
31b27a30dc624d0e8ba05afde25dd49a

SHA1
8aa28ecc653056382c69e235fe7a00c2e8c873e4

SHA256
4d73d8e43f784d0631c95b20b562b55ab49629c71e29aaf8e2341c4c601dd95c

SHA512
41e89925306853ffaa3e42485fe50d1ce5398f821ae840f66fcf0fc4b3c90b136a8d5c780806797ec33f1d8060504a01bce1420a5e2754cdab6277cd37125353

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
be5f4422a118ad0d58a3c278d6402da0

SHA1
9bc4943edc58ddf0d16e7e3e9127e49c3f55f14b

SHA256
331054f9b031845b608e8a9606b8afd2ca9b039094ff55aac39d39b6a57d4f23

SHA512
5009c1e2cccdb5729a7beb24e80c9aee8cf7aaf6240af80b52fb3a610dc6dfdb6682e76d87bb11591422dd2e4942ac3f6fa96d0850f4072b99f84edf246647d1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
f218265cd490df9c299910b12ec56849

SHA1
438239c8a613a48c67e67f366307a8892974a87e

SHA256
41ac9180a5fdadeeb9a72797fc3fc596f53c74d18b45249215e962834a76ba70

SHA512
10d431e1dbaa0d3b7fcbca7d8315a6133597b90c2018c6a759ec4da0be9eaeea3decf65e32e60b9b246c8edffbfaf963a1444a38c2abdc7b30f78143cbefb7ad

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
8cf02cfdb188880d4a9210b5bd22a908

SHA1
7174251c11a986dcc1a56ee709b9d5f265f3f112

SHA256
eeaa6b271cb2c578080ae35c795954b00d58e4f6548242dc19226b85d8076252

SHA512
96e25799847f27b1f19758633cee397aebb5d54c5c005726ff74cc06913a9d38b05a0d40b98611275ecc49ab818701a6ea831dc689d053db9c6e50bc93d2cca6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
5cdb78cf21cae596d54204c312d7ec09

SHA1
367d2cf2d3a1cea9846ace558baf98929e8dc0fe

SHA256
a88573595c13faa143c39692d0576e17cb1ff25aee2bfd05582a8e504b505d9a

SHA512
53336bd767f10ae6b2840b22bf611e17f3e886544db2bf0fb33d8dec007d225536e0f60655a5d82a6c48f79e7867e9311fb3aea2f1c6ac1db9bc7bc86553161b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
4df5d0885d19b19c69844b98713945f0

SHA1
eed52f92e9490026043023310849be101c06f9a4

SHA256
24ab50a127665662af4382d99a2ae3fb2c4900deca3ef8d5aa8a1e941814d444

SHA512
5cb5c5271d80c6660996f36774ff9235ee87a08ac030758a3bc1a61622a62fa5d067907a63dd8fc2e45e038d7b622948c8c20a0b4f3b27975011d421869bfa05

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
22eb9920e76f897b6ca42bdb64b37b93

SHA1
6fce2a3db1a9f1cfa47cf9346c0ef9dc10e422a9

SHA256
6b089e15b7002dcb42d001b1de7d2af779f6b34d3a831f33fc2b52aa409340d7

SHA512
e7a11bd68856bc64c5c5a86b1d2085b2e7f28482cd2c336220aa298bd2c42adb0418bc174192720a995079e7626357dd0f6d4a1ce41971270fef9158159503ab

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
29d37e739bcb8b02a528aa6e5a7075e6

SHA1
27429d898a90bbf891f9ae4814609ef9d242488e

SHA256
8b4e22aab4e1e9a3c248793d2263aaff3f5780f1d1ce6b9b459e8081d949a645

SHA512
967f7238b6fa54a77ba56a2cce70b7b1f2805a10beafa8fb528eee99b92374b92d6a884780cd6cc3886f4a81145f189bcae758d3b7c471b70aaff2c25016e2f2

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
282B

MD5
69a98ef655778f1cb3764a923acbae80

SHA1
22683321e95c9a631039d15fc49ac5d3e639ac54

SHA256
2ff127d5bc4c7333c8f522aa4b456684eca97c06d452bf7d00b6a99b49b11b0e

SHA512
610fc09f40124e1a74ff303ddd95ad5809679be9e0c381e5d367ecf8e1e137c3da188142de7a2c5fe2b1225e12482245f2b5c417d43d73618108bfb1c32a5ed2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
153B

MD5
dbf3ded6b30bde13588a68f5d2ac717f

SHA1
ba43837d84cd13c80a18f8ed2f59be004acbb029

SHA256
1999691f3e1fafe86d14e0c2cea6ebc299a420e9fe880feb342163a9bdafe839

SHA512
a648ca50e97bbfad75ecc103330449d1cc2986b7cd229bedbf7aad5b78f3ae2cfe8478f6ee66af43da2754fcee4b41a44e7628734137066a76d9511fa7236c23

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
9cf454f1c8ecb39892271f9b12c55a17

SHA1
bd416b5eed6330686fe0c2a3b3c5ff89ad0b6657

SHA256
ceeab1e282173cbcb0596196ce3db4a14d6576a90efc74d52de8bc8ef87289bd

SHA512
a39b579df861ca974617820379c17bd229691085359ecfdbc5f71f2b5525a08c84ac9fc141ca7b0cdd2d3b24b50f459d8a30e782e2e407471e235f41bd0e97fe

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
ba7cf786863d5eba862f98bfb5c5686b

SHA1
996959562cc53c582f6bd8ff7fc8bf45bd5fdc8e

SHA256
44e82e8d12e12b6bcb88dc2a5c0b60a429b010636bb974342eaef21a483ff0d3

SHA512
b287787de7a827ffd999600d59a8bcb46500c8a50e5eca44bc0b4aae2f98777c0b4faa053b53a5902e811a0c85ece813142a7f4ec29b87c67fdff5dab545c8d9

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
b5590c0522ce4ab97eeeb4eecf96e3eb

SHA1
d742d6517553f054195f9e6797ad033ef7f44c56

SHA256
45f17592940fe97f8065eb751835d2eedc7a6d33f77d8a90d3bc04d43da8c5e3

SHA512
83122fcdec73cc9273b3f989a5348002788f42bf71b8375453a51a3583df5d5fdb3f53f13a93b4f60bfe9653dc1f742b919c8cf455d982ebe242b1ea7b88bc43

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
8f7635caef5e40b7807478ed54cfa98b

SHA1
ec16262fcbf25f2bfd27fc2f8dd82f0d36abb28d

SHA256
90a9dc3d0f4d62c546b81ef95c95711096b11105e6f6083c311b42bc945ef439

SHA512
47d64fa04aa15c4d3eaf8cf661a95f3ec9d7c222726ac971a30c669e33d082dc9b188879954a5c57e1e1c0937a4f6d1fc482b93d008ca8108ce85bc3d85e38e4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
fcc0c038ec3b109327f839cf67d6e2f5

SHA1
b597d51fbaf5193d074fdab10380577603322ab2

SHA256
e86ce9d81b7c121a06327f91dd1a76d5aae6045f3b6b2800a36bc6732dc94445

SHA512
5da5b891ced88bad4b33e6c6d265b19015abddddff6570cf67f8463a2812cccc4b783aff8859c63906587045277c9ddf766eb15048afdfc231aab79f13c21288

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
d9418ffe711a9179b0e1acea20441f6b

SHA1
872a45abbd55a7f0e13dd261a2224f4fb9d6eb14

SHA256
046ffdf72e37d8778df5e0ad7ebef87563283d7d9fd3cd3153cf53907a6a3c1a

SHA512
617bcdbf99ca33687eb30baf6ccf77afb86fee855ef1bbefd93acfa7774dd34e7a7989d685f1220a35272757d2af10b17a4fce22efe6b269d42a0c069c1c4218

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
90b4a91d94692cb2a41adf74df2c5198

SHA1
a8c4856cd875113f598ba1ca45c019e1b9ad331d

SHA256
acda954eae59e7a0f7b6d4c459f7460ecc893399ac52df320887e9bb37e1b040

SHA512
6415271bb6d95e907244fd171ab336176fce5bf48c897889d951c17f9615f9da02738cdee6ac1a2f4453afce9c495f21e38a695cee922dc31545eb3d264bf0f3

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
3025aa4dafac2fb918d8e413ff25ddef

SHA1
56152eeea577530498dd507a19c7d769c9fb6216

SHA256
c32c0b54639b519c1d90cfeb45d57c3ffc7a6757040ed8a403273089006cfca4

SHA512
b581d298e04eaacc111e6b9e8da6371e9e56ac43048feb6024c5b7da89bd0b3a3f5b34ca9dc58264143738506df5cd13266949feb27204f84da9f05e9cf2410e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
3b4568dc20cefa26dd0133156c53edcf

SHA1
c975c93d525f515a8fa2e4b9f8fbb0708fd44f7d

SHA256
821aee0fe6f80b54b267d17cf1bc6fd3fdb4ff1515562df7465240756ce41977

SHA512
5b6c0f31498b6006189247814a337bee2a263c5f39062502bd9aed757981a0fbe0e14295e0bfecb248c91cf04d470333d41538a5570123f30298544aab454d3a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
c54d66e6fbfe3edb203b927f52ee5704

SHA1
bc93c5139ca7f726236289b42f0b6716ebc99d74

SHA256
5f3edd6d840e32fe717f54c6795ca8d4c2aed86a9af1c3a251d37997a52368cb

SHA512
e7268ae210b79eef00247fbbf033736bc09f0d240cf2640ccdf3475c53542cd4ba5473109c511db34dd8575d18d8bddccb7ee0d13846f6c9006a09f6df51946e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
bcd432e4e22cc120e7fb40b09fc4cb47

SHA1
3115915d278f065f5c53394609772e5877e75b40

SHA256
25fbab75392b13e596e002c09479b914d35b5cdee5443b72bae826959ae453de

SHA512
3614ce63683699b641e7bdd7d4d88aafd6bb4500a787cefa5820abb2062d1b652244e9b4c1d27e613c11ca64dbf3d3a4e4c3fa3d0cecae69cde4f9b8c359e2a8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
c32ab43539388ccb13a1f5db08327348

SHA1
ad0a477e31c9eaa5392a17b3facaa46b499d9cf2

SHA256
a4d1cc01bd7808d97f2be07fe3169a36c8d29eca6aa00e6acfb167f1b7dd5dac

SHA512
9f0e60c35644564a644f32e11e32ed398986780e16ca98cf8062b10e5ca4d2b03e1c8632f0d3eb69bfbea4571b8836f4f93bdfa86f8d47dedda54fcaac4a5fea

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
abc3e8aa6c26044c609b896ff83bdb35

SHA1
686e00c48e4f6c198bdde393886f0ffe87bd6345

SHA256
5f90d1e920172e08d76d95d94db650e8b282f652366d382558d07efda044a860

SHA512
1b8a21e2d9d566f285c30790b70bdfd46a5db4bff8225ffffad1ec0133634a6f0db22782d765e4236e286c69a83716aa813445d2fddc4b80cb5b718b29d94a39

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
c388645621711bd844596ccde655fb07

SHA1
689e18e23016eed3a90c383a49b557a974d45ff0

SHA256
d013ae87e48ab3a3196629308585b5b6bc0595209dcd1dcb4e2f05b0e763205b

SHA512
9eb2781b9b855736d4b50920a90e7dd59cc1e2b47999296c5f100ac2633fb54539ace5c30f45207f16f0a899fbb48af47e7ba2a1c919cfb966e755135dc60d3b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
2febb74fe5811b7880921c5c4b77a573

SHA1
f91a2218ab856b6fab2cd03dac1b16aace36d0a2

SHA256
5f7fe23ccaadb61664606ebe4487764641bb618ffa69f97ab69ce8c80c50358a

SHA512
1d6556a147e6650f2413d50a14b917c46908d63aa5c8ee0d7c2b37ad9347b2b361c6a81204bde0abc57eb55e0c6b63de87785529358102d7b117b6bbd9b16fc6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
a4eb3d19e9ef4a69e01cbfe863e88d73

SHA1
d39f5f2487c0d9fffd3d09aa25edc514feb6465c

SHA256
a79109e4805d1626bd425fffaf43e74fbf8493358f0c91869bb2bf8096bd32db

SHA512
88e5ea49cd4f00acf62cd5f28eed3a3481154a5d1369f44981a2151e76fe04dbde8d47cc2a202e7e70d31878393eba97702baf5fb64dfa7011766191d7be5b33

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
689bdbb27a34ea07c8aa3ffbba8e78c3

SHA1
63dfb4cf40c0a623507e31bc005e6202dec10e9a

SHA256
85c74405beb5214b542ca8f652ccf88ae8d5194b509e6929b1f4bc61e3dd1dd3

SHA512
9c3a66ca268618887f735906e699d7b8a8067d76ddbd22a4252ab0ce9cdf79ace0b08889d13c76dbd13d7102296416546b26463e22d1c4d90e22814ed2cdcbb2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
07d1cb30a9afefae0ba3fcee42f16d61

SHA1
c923db5ed3672d94e3c562e6f6c8a50b16a80f98

SHA256
15860cc515f8472441a4e35db8e2ef7835cc01bc98192be8e348ca3484e94248

SHA512
e925d68a2ce817b821ff0e39df0633dac1a8acbb8960e8933066b5506b94fa95909a04fd669ad10db21fa3860ffb79fb805e7a0ad0e6670aea94785aa2ea5543

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
334a13f4943e6fa77ff4a3494124eccf

SHA1
40cae387feaacebd8f78191d6f40d77f2bab0e53

SHA256
fa49b31ee39278f664a78b62ab5a0ac8e742b73d9b6b674c9e296cf7a6045679

SHA512
f2a53ad608a0571576c24f39c5bab973f3264ba5e1493d138a3967aecbcf032ad0f22e77ba9966ff21f8b2c27c22c2311acd114a266cdd5bed9175bff63ce53c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
c1ecce5ed0fc5739b8998eab5adf667e

SHA1
33920f7e5eb4a21f792bc347afb92b1d2a74be59

SHA256
23389b70d61202cb5419469c07745b3fdffbba48b2573e7c930c36b4ef61482f

SHA512
24bebd5da66f4065cfad608547459bec5cdd95b24140881389df1fe255166196fc197ae498a7752f95d05b777e7d3fcf11b406a95b99352f2f050ea93dd38e2e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
fd7e7a13ac5e0929403990bed482d19c

SHA1
619d4a7b72b343d1540f1d14a1843b482727f4d1

SHA256
85be627bce9b2fbefdfda53602a8279e1c0819924c3023d141080d701d0829d9

SHA512
dbfaeda8aa9351db4aa4bf518458a2fa3c034fd11088e48997c1b29d6c58c3fc1374cf03a07f6466b6236b0c07d837ce86568add2177003fb3ea0a614f1695a5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
d640c506299f075c11a3e237fea3bdeb

SHA1
1724ce2c0d89eb5c4d5c353839d75285f6b2db86

SHA256
477e16c5795c3f9070fd9993cfb090dd8100a2d7fca5c197e904aec85065bf7e

SHA512
77211133cf4b13164973af3a69e091738dce716a1ad36d4806ff8c21d6d6820cb5e97e40cd1623da1e61eff0f2db782772c153e8684bd213cdc1363879efe30f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
2f2f8b9b36216cb9338c982ca652b156

SHA1
8efea5a097950bd72a4e84f4c923768fbb670c1d

SHA256
bf3213bd0243645f2d936df69cec5f46bba16a025079c325b1d0eb6290fd03d7

SHA512
2b31c2ea9e66027e8ee2d49da76d7fce362e57cb4f3f1a3f48e505727a4555c55735892050828c4c1d4e13237f86acfdfd976142798a8e93c3c60c869ef7abc2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
f267fde11de8e3195c765fb1d86d64f8

SHA1
445b1ba3dc6c364235db951712ff8f737e20d711

SHA256
feebe0e8fa107d1fd63a87ed480d2c3536b7d361c46a37f06f7250412f189a7d

SHA512
fb20c874b95b56fa422016a1680f9417a15adf45ec8ccf62c45222d0cac3ecca2d8c4f980ea6ae3008f52166a8a0ae19a566c2bc1070fc1a028dfdaffd69b9b5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
bcb70734dea1cfe137a6d0fa6179c83d

SHA1
f924a5d997e1877076f9db1c939393eb05fb912f

SHA256
1419e12a50443717319ec78a20ab0f1475854e4f91034529604b9e2b87c6ab5e

SHA512
db83645a2bf856e624bde1e2759573cf485eb50eed0e410e3cc9629648aa208a501f6e7b9299037c98e6e206e214e6353c75a9f40d61e0d98ef9b1d54c323d6a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
f8a94b3ab0a95707f49ae89f39e34475

SHA1
2d46bb0400d022ffc62089da5e0d68a21e2b1bad

SHA256
3b5c9feda902853d0fc772b05731fcb5269cfe2c562373c3a81e5bec1b31773e

SHA512
c4b615a431693497ea3b444c62f8bb5b504fe4599584e7a7ae3e8ccc6ea8c521d67bdd880db42c6ecce8e56e254f8ccf6d53faadec40d45372bdcd0f85ec3a9e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
1e790a7ddd81cada98de8fb3651f7a18

SHA1
b22e68c20de50b360d1c068aa2f2392d4c29108d

SHA256
f88203b621f633e821d8f1c608907053dc5a11dd76e764240e9277d076e258a2

SHA512
26ec11c1a0983f5b140deebe8852f4de788e816e365aac208b2f92f24880aa3f8e7be8462780b895859651da84a31028fc879e9cb3a3b043433cd919c5bd7b67

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
a4b6133bf67eeab441fe79965fb3b906

SHA1
001eadc2e52332981d5f488107b1ad88a316282c

SHA256
252888699ac5b9a0cf6d44f9c79fbbba34a21158df585cc1c174c5dd66f8ecb6

SHA512
519bd928fa4ba8f6351ee463011259a213d45e414388c56d381bbebbf5c238885484e7a1d18ae0a3c6fcb7ed35cafcc93c1ba3d913950e0b07bc581f83c1fac3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
4dcaaad0fee7e2a3f95fa4338e3aff81

SHA1
4ab59af165d370778b1f3b0c2d98e889668d7ba4

SHA256
26892beb77af04d598493dee5a3087adb9af53077cd3828c1bf2171fa71c6a2e

SHA512
68085311d000776ada2c6df1011fa93d4fe8522e39298373950112eb68742ef9a0a101081f718ee17ca66adeff1e4889d068a11e30f1147cf6889361b534d4cf

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
2d7c982a02286d7114ab01f6a7b3849c

SHA1
2f1957f71fc82485b721bb498cb9c507196f42e1

SHA256
3d204e6124db065b1db4970b91031e44164ff79c0f5efba3747ccb27b58075b9

SHA512
c5e21360ce39a91941fb3aced98f668d4c02581f872b6a96e575b2bbaf3bf1b8e9c5e291ce4a2387cc491500b0e687fcb5599de5e41f24b4f97ab18df3460300

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
96e6f2a9faf6dc3c4bf55e22f41f5b4f

SHA1
0ada5b77f8c1e97bb153e48ca88631c028dac77d

SHA256
ec961f97a116eb9ea1771ad1c738fa9a45861e9c7bdf70f9831e8cac60b0d3c7

SHA512
294c2b4d19aeea6d50482d1da02291035b2a0a881ab1233fbabaaa5529731dc0dc4f8854ba24d5c27a21568ec994414c07aa7342902e864c785d7c737e7916f1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
3344a08f8d7ff2740ec4ae52d9f8b94e

SHA1
5bbc908a764a187679bd622e330e5d68145381af

SHA256
148b3b5254133b9aa21394a22cee52ec44183ac060b7d65652caae387332a352

SHA512
98b27ea3f819b4595a0d6824a64f7661f9887efdf5045e77a987cc2198f0874b489d8e7c043b179d4e9773da055d164f6a0c7ef95e7649621285e7caba59be44

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
67c5b91396cc211a5559cd5ed453c339

SHA1
51f0ca52e6336236cd43e538801cd94f40733cee

SHA256
3e9b2e4e836f4c67ce6a7ad9d01b0bfa674dec264fb53ac845286f517cd8e916

SHA512
52bb858f583f2c2c1327bba13cd9edf3320bfcf8517677037897ce25f9654697f4c28bd34334245bf15436b01afc8cf92e845f62b2f90c66c45648ee5921bb22

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
89653409bfe937434e8f7cfde6b6317b

SHA1
6cac00886896ad01e09259f74ff86993fb0c5af7

SHA256
fe624413823a10d29f0307be305553d43887487fb00da16dda53988d2bb68515

SHA512
1fa659b0a4e58148205b85eff8c39d2d66a7991a425bb0ff60180c9e3015d3996f5185322288e540e0e5c113b2d6e9e13c7eccdefff37dcc992d8a5f47b92d29

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
3d18ceaeacc68fd2b1e29cd3cc6deae5

SHA1
840a4be50134bfc9933e001e07a5fd6510975431

SHA256
9fb81d1a5f177f2755cdd77a8ed9baf74a02e4b88df6c2841aebae6da3a825dd

SHA512
c2f2b7f96addb793c835cfba6a18d0683fd103e4b8542901e36586a7bb4bc2258ec230ec87392e0e3236992a4628a718b6097d0d9cad3eaba06dce41a65d45f9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
130ae85490dc6e890f96a6f894054626

SHA1
9e55de6d34c030c30e811c35e43cb92b2a5558e0

SHA256
6124fb910a37b85406ef29357d0eebc19d2334e2f91c2cdf16de885b7dad9b4d

SHA512
fcf0f5a0dace59379d4843927f06da486d4b422f9d63edec8628a18890c805132c5811d35d729b97d115d961699b1b19e23e9ae6e184adc49e286879f9f161de

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
470e03897aa07212b950ad17a222e083

SHA1
fd9dd72c788913238760dbc9a2719a44b8f8f601

SHA256
788f688e556175f7118da0c0f5898e30613c01ea4ac6c84a231e5725097caa01

SHA512
fe70b33e81d85740d991d2a5faffe36b84863514724cb13c67694ca40ff72eaed25f0920233bd7c6d754e7310cdcf95d1eba7ba8503272282009b5e6ce67519e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
07906f0f2e3f0940db63c16b2df3f04b

SHA1
8f0bfe916f9d548f638bc56be56e938118d6bc2a

SHA256
2ac5ed2f9d87f9dcd1c3739909a7a6111d1c8304d7c4970174d58f84cf1ca309

SHA512
0e6c236e8f2263d29bb5e65e6d6f4206da3548d4957e823f931648994b8b3b902e31c5a83530e48a26edd463ab72713081e8306d5118827a3d1f1e0f22729fae

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
056a4632b776aa0421974824b1e2712c

SHA1
3fb9e3f2cc1d214ce3a61e554ba32fa580a596e9

SHA256
53c97bce1cf3cbd7c0828763f4b7e71e6e9aedcb3507c47506fd44a19114db0b

SHA512
bcf19430860b1e19b8cb9f165573e41cedb992155baf7d97a5b1b40b9d036fe48cd4d87492e1a902cc9585c9fa5cc6c809496e7a88ae5867321f43b7ccca23e4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
a7b8b1761d01869e5e98f86241de78dc

SHA1
838216093cb02107da44382fdd949fa2b737f612

SHA256
e766ed8dfea996b64ad44ed4432e765176b6558647fba39884baa431bed0fe8a

SHA512
818a6d4988d7edec8b14ac4cef8ad13be809aa964e50490db0d42a706de31899818bb8dc748170afc5c4e9887a83ad9ac3c2d4421aa0acd1968078c593170c97

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
754e1f90b0a00aeaa55f45dec5c8fe34

SHA1
32d6558ea75ecf3806fdf7e1ab9d6dd1d5f84411

SHA256
a90fa25692e0269a66d056653c6b80c2a54a80bde91be2d9c4322aaf6450ffed

SHA512
e96c84184a56aea40c8036c5c5f7dc2f45870182bb2806164206aae3dcb710116c621f1f5b666e1865bf9a657709baa5f6e8963c90e6d37e1267bdc071caf3a3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
43e47da858e7a226bcfc657389734e04

SHA1
35658d36ff10b023dac1cb7f75e7659c3d100426

SHA256
a55ed21b90446150747290c6862ca5daababf606598146e4fe012512ea6d8167

SHA512
d3289d4e965c9176593651bf9fd872c280dc80a11388c2a1bd5266bed7644c1ece15b90625b3a3b53fa8c9a9d114878742149f59c2421e23c314bdfcf679789f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
8d528be71f07ecd15a7bcc3f6c6d26ac

SHA1
db9a7637e6c466a7de19a73ab6582bf045da633a

SHA256
8b7f0b45c42f10b5fb2e881adfd6d42e75d07f8c4e71ae1365d9cd1f9931579f

SHA512
d8d14f620895439fc91704e7fc412e3db5cfd618d19974e622e5d35cc56c7b97398e7ed09428f7fd1fac711b822d5b1543f989c28281848bb075dfa6b98cb7df

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670753875133298.txt

Filesize
77KB

MD5
dab3c7c129d126418137b0456503e7fa

SHA1
b103a83f1cfa275efd613a27e6e8577a04e6f3d3

SHA256
4ba3d2983dccaa2d1aa490a527edbf5da46698403fc29dbbd99969f9c0458980

SHA512
d441097f5e40f43bf6b8082ffa5875ca7758695978e0aeb67f78d28f749a0c2dd0c89ac3adb49d358fc6c31d71ccca519a64657089353b16559695f1a5ec99c8

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670754411894742.txt

Filesize
47KB

MD5
ed4734045b3b14f460a6ae809f161759

SHA1
a9e50406ab08f02aac1d1e583b7ca1820e7f5235

SHA256
4e6ef8038e74f5e59b7700021b02d2ddf6720b5fd4b2cd92e8d522ea637f440b

SHA512
5a15219ccc1dc947e58ac3f53b7956a4393535f38a185855417b20d3604578033256c938af58d11a7d57cb2deb3974eb2a5b475e0366c28033f7bb6442ab3080

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670762145921862.txt

Filesize
63KB

MD5
d4f00c0f9a999f6a2aa261dc5a7160a6

SHA1
941b39d81846084adca3ca0bfc428323f129a74f

SHA256
fbaa3c8f44d224312d5febe3c584881998e9f6aa0d660d5ce32ad17b67b0a68b

SHA512
7fad18fd35398ba648463ad5329a3fbc8b98ecc8ca4d0beca94ea6d8acf136b784af0cb680b309a48e6ae58a8556c5308fa333eb960dee9e743c33ce9f679c8d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670764757873191.txt

Filesize
74KB

MD5
194464f0205fd1d3ca060b5c86266012

SHA1
a6d40ae595b261c8a19303c8040acd8479cbe17e

SHA256
ac54f1af2f4ac757b90eb29e65eb9965206e44a16e6f922fd2666be8d63cb627

SHA512
44b7f871df64ede5b808e8e3289f787fbc65ebd99cf1056ebeef824f2c9e2ae22343838e60575ede1ded61c7ee009dc0187e8750bea8d42fe415a66c70ac344d

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
b8e76704de424c1b51ed4e531ffca8ce

SHA1
2b4d701771f1577c11bb0f799ea46bc5bb8ebf89

SHA256
a4a74f4253cb2258a76d5ed6ba7b987f8b6928a2af8cf1ae874578bb210228ac

SHA512
9115b9e09d85cf389ec13d5b8cbd879a3a30bb140206862f02dc30294e75ff56f7234f5eae340b0860fcae8b7d6fac152a63644e6468357e9451d325ebbe5d73

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
31c667d5bf0501acfb2899e7aa2f0f70

SHA1
81e146c44b3bfbea8389d01acdcef22a8721cb3d

SHA256
afb52c4fc382b004f11532a54eb747f71988985392c5cef3f4412b6dedc7b21a

SHA512
bba842f0c926efa83a71c7542676ec55211cd78470800778dec05bcc74e315214bcee82ea8837dead4fbfe7fd018b317c1441f5f98b8bd38f0482be70d80244d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
7f10137d94d8c562836cd8b61edf66f5

SHA1
d7a3eabc7603c608ad6c3d212dc0f9624de1146a

SHA256
47af7b7d47458ec58c67c75f19c6a8441c4033d362869d7a8d29a69fd774813a

SHA512
ffb22a9e66381d76943bb418b311a26099d025a2167941f93c9efd74d5b9e8b8ea59cb49f16d4ec97ac7f7a9a834a62b13c9b2a22487d529d16761dd2b501f58

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
4b99a877d43c2c42ddc68568d56c0b09

SHA1
3fd8a6e43a640abebffcf7682db0aa11d026dbf7

SHA256
dc49c22112b3a6db935acf53d00aae7ddbc291bea66298625fa8ef2e5b104e16

SHA512
696f7a0b332e49d92312e60c1a94f32ce0f21faf99e73e5e59f324004c8e4b8eb6ae9529a329b3d755dabd5729d4bf3da40d60aecc838413e366c3d69eb00967

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
f53f1e363bc57142a7f87c109ee99050

SHA1
67bef5b25efd27090a2e9e3eff2e81144d41cf79

SHA256
0e60d5935dd9f07550e05f6c43970cbb1d0bc8e7d6da32f6fd40518eeefa69d0

SHA512
26569f9681cb2a212873ab808884fe1554ff1b37698aa2c682a2e45d6943825ca7b1afbe08532810e8039d5cea91e921a0bae911582b37162189b5d909bc9647

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
6b3c4eb937ef757b33ea87075d2f47c2

SHA1
ff8bc3388c8f3dcc681056f48c574e9fa7cef5b6

SHA256
e8fb2104ec333b65ae6423b0f42118436f6ce583269e0fa29986c6cc08250876

SHA512
f246714ef61187ced6c84c9eae4868d544c399b8157db3f32472056c6024e579adc356945cb86e1d98306893c21ede2c5995ca6e971c56f6869a85e46421832d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
309f989aa845850dd1e99890c05704a5

SHA1
6cdcf2683518e9119bf2b6000d85f2ee1a6b8000

SHA256
1265165239ebb25fdba52ede5df7d98a174a160bbc4112ef287e8da278d1f049

SHA512
2e0133d263477ea69f2336a49e6a8fedde10d2e15a363cefa958afb26ef3e823d617ba7e368882bed8951b550e93cf459398537be1446c81a1187c3d66466674

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
caa26e00d126a0db9631abaef7abfbc5

SHA1
0f9a16da8d1efa554d038a6d578878b457201a42

SHA256
05dfa943edb20f5e1a4381845eef239d736db66d31ba92097047471ec74d7ede

SHA512
27332145d03836efb99888941b499dad50016e7cb5bcc285526970d848ad27fe7de398b53e5787b0ee70a0798d5236e13b4e217febf5d1fb328e9d9a892b0275

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
0ab083ee570a828f344fcc2b5e18a6d5

SHA1
95b09c91b07ac1c648a3092d49f8815432ee99f8

SHA256
c488d43aff60dfe6a4bdfa421e34405024a8712ea4957da80818e3fea8e4f975

SHA512
4e3a5ec15f61e4462c42e4070f240119e0a0ba04cecccf7f97d640d8d403b483b321d454270adc44caa1cdc7d0bed06e975d81822f69ad9ba27c2697f3d00aa0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
ed1353f8ab63188a794c39fd8d9941e3

SHA1
b2a2bf17cf19f519e80195f8ee3670284527f02f

SHA256
30e67ed8c10b253209058426266a7bdd94123ad04181102de79a224e61a48862

SHA512
32c4dea9d3cb1e7dfc5825316bb1ce1fd582838f9433200d43b08941cf562246273e529e69178440ae7efa766ab13d975f43789a3e4ddbd23c9dd415dfdc4da9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
ba336e0745452747581bbf3d4a2438b3

SHA1
58c2a9a4888d8258fede8373212cd0624435b745

SHA256
b952ab91702224b1e7fa060eb26649ff808cca931aefe4b69e89fd186e125782

SHA512
377fb814a2cadb12df284e12e9cae8f159a282539fe9e5fcb30a5dbfc71037fcde32d25e9fa8feef22c9b6e7156a96bc948a24b4936bd54963980b0dd901bd66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
87272acda324b1ff670ccb939c330392

SHA1
6a7c506c22a2d79e212715e51ff8e86efb15083d

SHA256
dd556f56bd04b00388f82690f10d87e939243c0528da741d574cd7152451dfbc

SHA512
737846f9a955dbc4d4fac90300306314af7806ef8155b6ac0537ef974f012029477a9ed7a789559a03b367dc36e80355d2e9982ffa12143cdf9d1e01c46f0cd5

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
817eb55e6b13ced0939d56268036706f

SHA1
d9e52c6af71ed4573af016189d7624f66db4438b

SHA256
fabda69505ec979799a646592b437779de3fb9dd6740c58351b45900291809ee

SHA512
c562aee47bb12afdf7b6bf0b84a463cb5e7c471e3613ac70f1d1036fc835c7c3c0fcc7f7c603edd88d0e83551db26a3120789313f587cc21cc7a04c6a0fec1a8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
edaa4a897ed6f289af966e0b1c6e69fd

SHA1
86f001467d4febede26244b2299c74d36c6ab806

SHA256
1a6a1085d66b30991a65dcba90d69e08de6ffc4d6b89dbd54090b08949301c54

SHA512
a210ead15e51706337ff56906c26d93f4f9248514614c16fbc8ac26355ca30ebcef846933225b732f7cf232dec0c8054e50d776d9a4eb7e9ab2a7e64075caeee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
1d61dcde05b2e5ee9abd4088e3acc111

SHA1
76f03a52d94f06d1438a08e260beb0e41962bf3f

SHA256
a42fb3ef14d2d2117bbb5a2a1c5c6ca0f9dd630991f160ab47827f18e4b44b31

SHA512
a386676bcf3ac65a5da459500336b1fa934bc4559848098e47712b865c0055f0cfe773467b6d05294aa78b3e155e64f56907066feefce131fd1bc909d2c37560

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
3ffda4097d704187ebd10af3ba0072fb

SHA1
5bc667811f126a59a278492c743f6627916a406f

SHA256
bc816e99224a93bf1478844aef2690d86385ab4bccfc2a3363f179bbc674bb52

SHA512
b3527f94b68c50681da942bb8f258fa5c2271fab785542d533bc029db02108f04d01ec7dae1d74d18b37901a4afb8d0f00ee1a928684b07cddc5421f5d7acb32

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
4ac76080c540734ae097789e91863524

SHA1
608a7f77d815264a29aaacca2d807f16910be1d0

SHA256
bcca634198485b1cf3cf8479c7237f4bd8e1dea73431a2eedd91d0f9d3942ddf

SHA512
48fc8ae167b3b1fdef016e248ce3d8051859e11f4743ba975169748f727638f0ecb133d06b029fe834080ac7086ee29db74ca944c6937a61cef325394de12aee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
e4bd1ae20985bbfc106f991f16c2c353

SHA1
edef5864655819dc8bb5a0794b1abe81285c61a7

SHA256
886d38d984ed0fff3dcc5dc75ea8cd27d5c14057eb191567703f0b3c3846aad9

SHA512
f4ff850f619a16140071af969fff61fdb37e53c62516d66fb95949f5c28475aac6c9f51c7dc3a0a358b696f4a6fc34bcd63a0aab0a2171fcb77346e2c8a42e3f

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

Filesize
49B

MD5
a5a992f7b3414999c1be60c59f7f9486

SHA1
1d3ce99ac047cffb3fefb1e31f69cd4e2d9c5c4a

SHA256
c8c744c9b8f6e7d68c9057cab37ff0f7819d9882531cd9b1fab5756bb2934f73

SHA512
3a18a405f9dbc94bd57d799ebbaf409523ccd16b83118e607fe95e46f9f37035102845e40e2c1a66fac4229ebf55947d385e82303ac35107e2a0301ab1ae6a0e

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
343c55e2349e709de4795c210d9c5caf

SHA1
21bb5da9e3868692285cc8981edd66c906934b5e

SHA256
7141c0cbf2ef1f344c3b3d97875b8c900c02c662b2525367b79fd7072bacf91c

SHA512
b797d8d5bc441d07aae1400f2035796e3da5f8346a4f5bd0865c29838082966f4af1efbe925f6efbc25d3d8938c990837e77a3a1668be28e7c52cd991906ed80

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
7a5574706804dac0dc7aa67166045994

SHA1
9fb18504b989c2bb339515893cf7e08ccc4dd30a

SHA256
983ed68703f66cd6ab5a5bff72d2cec5bd11be4bc28d9a00b502d8b6261819f6

SHA512
ef3393f0b1ba943ac1e8bc9b1363aa6748c204239e55fec03a6f4041ed2cc184af06851956975d9fda68eda9bc7d382e9b781700d294dee23acc0695da98b071

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
e5420df1f109a138c64a5ffb2a33d9c6

SHA1
193b513de700a93947aede2f44fcfb6e0ab4a345

SHA256
8c703bff3fe31d1d970f15dee9975d8c161a27124f526b09a587fe4dffa8a903

SHA512
15110726618f1f106ced8cb49e9f08ac640f8b6e646b232675ea28ffd4545e4db8cf53964d807f2b0151081c3b7c3362bfb518ed1d198508f825b4884cc82cb6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
67d9e27295066cf5186091631109e093

SHA1
71764930829d58cbcadbfbd98e6a541acffb13c9

SHA256
dd04f7ef79f895983e0a827225bcb59735405f2d85b3d45d4b26c0f909d492f8

SHA512
29f010d3d6c357e34a325b6c077f08b6a1a038cc55eb1d9e9194ba5069ec3838ead9ee9ebcd5ed05330013864caa94b0796b89591f5fe72e038656434ddb70a0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
0ca278d4d055f825833d5fb7f5ac7cc7

SHA1
ec264a54f94dbde6c64fc3147c1f5c637f296c08

SHA256
17d8cd64484dd95299492bfc927aca1206e93f3af0f104db616640fb0ac744b6

SHA512
fa217dad5d2c4717b7492aceb86668a2e555788baec53f86290ee6642bc1ea568d28f89f3edf8f579deff2e6e5ef222be3df50d81659341b036d1ac1241fd3ae

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
bbcd87bf8532cf85d8f38a3d6f2c08ae

SHA1
2d0cce1080e1f8832a0bc60bb7661f5f8f17be84

SHA256
aad3d2157e0124f7adc96e2599a40c81b8e5e306d8a811b360541ee2c738ea95

SHA512
768f91918d094cd0b905239f7a9fb525ee2377487bc0690ee4e928c3d55fe4533e04a03531ca795705809af242c724a79e98c88dc098cc29d64ceaa055b3987d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
8ff7c188fa6fe8a90ff339feb8c28735

SHA1
355d1c532a1f94a81920fc0cce7cc33706047bf2

SHA256
7ff45aec388ac4b4078b16d48554c555ea0eae9feb990ca5aa09a71ed1d15628

SHA512
084eed51937f053baa19fa54d3997c80e2cbb665896d295133bf5cb9da5a16db5e84be65381df0f8521f048982b6288c76b72790bf15ff238aa7399cefbc6d17

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk.EnCiPhErEd

Filesize
1021B

MD5
8101be4c1f3d611eacedba631b2e75a1

SHA1
3b9c5b62a86621ccf2d6f282dcac61e04f42b910

SHA256
0584a4dedc2f8889073cd369a186abc190be191a8cdd4c3a37ac02bd958a00a1

SHA512
2983a9e239beb5d7d68a1792f9a835c003e505654b4d690fd697e65a002f84523cedde54929032637b3a683a848239932006a135fb9e309e6d89a5bcc0b96ae3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
3d79891df0b249a2f9916bf79a3d760b

SHA1
114c77a3e50197639c8433281636564997d80b58

SHA256
d60719274cd17da0bd2da665aafe7cc703f096a95aca5070bf245711b43ffa8a

SHA512
fc1de60f562b079c5a3e90e2206e80239cf4712a00b5504893bdc5a22ed5922e477bac37d7788e951f340924b909609f994e7893315e87e0969840a5d7838ff2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
cd6549725e2e5d25f4e433a1545a36a2

SHA1
f2c4b833313f561ef0ced801628167df2fcc6a8c

SHA256
d020ee134ad813f3d1ea1646588544b778cfe0ada7c6e2993eb72a2a25acbea3

SHA512
3922ad7a34a69c6d98088462a356b94ee3e86a8cced3de72e9d9a5e851dcac946bf6aa9b96b3a7ee55f2fed24a31a2ae6677f8b84c1c933c51e6a2a99c9ed875

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
4e95d5be077188a82aeb367fdde86c16

SHA1
782d87b9e2d35aa9f35e7cd1257f043a9318da38

SHA256
c21ab5538d8967695af604216b8f8b0b75649141f9355774474803354b011daf

SHA512
52a8171b2c0f5f26e58de0e663bf94b138add6829be035f184949c4aee88b5261cbca77fef6dd983d5645cef4eb9c6c8e718dbb3f47ad170fd4d1bc993f46534

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
2b3254c1f12d0382cf82f6cf0cb18159

SHA1
5d8d27b3fdf4520d451ba78fbccd8843eff61884

SHA256
a5f4b59db334248881cdfa04cc19b236d247bd8896614674c6f5485991c02e95

SHA512
ce23de6beb214200d5c2aa18d8c85657224a38ec8cca77cfbfe313b5db8b91f04a1a63894a0f71583f658abd39decc54b73f2b7a48bcdb994cee7811393b4634

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
f13b7bed3d6a86b8d23c2dc159e8a1db

SHA1
cb9989c2dc34dc62c30db5c44af62adbb37e2b80

SHA256
9fb478716512fe4f14b45127c4d02c781904da69a71d193cb6e4a735255ad1da

SHA512
ec074fd0bd17570f37bb8d7702ab618bf60bf576edb201933403c146f4698ae40849dfb8e22509f54c294bd7bce803a5c3a7c1b8c020f821bb659bcfc5c04369

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
fe580919f25f6eb24bd8b99889f0e61e

SHA1
d2ea6c9dbe96d179db156376d69c946a3ef8c22a

SHA256
cb5421fecdc77044f9342a698d6daad875f0acc28f7a4b4e3e55280d3c80a40d

SHA512
a857e69ac19a79f567a551e4b6108cef23b56801e5f91b77d19aa775a5bef2820bda2f82280aa1bf90c29f1824c1def68a541b6fc5917ff3d0f91b8cd1a4b191

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
3e9b877c883ab54ae4007b75c3b6dd24

SHA1
0278f62ae73c9a9fe5eb23601936e0b1bb554dd4

SHA256
34e2381552f28bc880ffcc929921687dc731bdb698730a3b723d26649f88708c

SHA512
526f1d2f3ed1b613f8dfb74457101a7ebf7af90b52159459cdd469e5ae0ce3775a61cf59e78000f824a83247c19227a7141f9c104b0d985456c6414f54b9f429

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
f73579f35b2efebe510e85d4dfa46a14

SHA1
9014088a2d9885ba5f13b10eec8de70a764faa69

SHA256
8c3542cee0910c0804c62b94105f25740291409c997575aa78ee491192d8084a

SHA512
2c71539c09383407c4091d00305db32110e4af7b7cbe6034e629cff25ae36691367cb34f35da48bc6149c9a2d13e3a208947a1ace3708f9add42a195a0c8034c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
530f04c5d43b23dcc34f5c06c705dce3

SHA1
dc4d5f59729714854d5b9fb89e46f3ac030a7b38

SHA256
934cbe645596debb8a9d0b57751d55f2673826712bb38f700645c6419092b47b

SHA512
3e9416f654c91341c9ce90ad6c445a4bd65c2c14cf4abe2e5ec32a2299ebf2ff41d76ff1b07e068af80910bc00eae1373c1daf5933427f326985bfbbeaa4fc0e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
23636cba55faf90086966a95d403befa

SHA1
f98ae8d153cc49cd3a8e71418ef651622f0fb147

SHA256
65d978be0f21011d789743c98a538cd6d3bfcac95617ded17e23fd8ffd0f44ed

SHA512
571af6faaecdfa8157f1a458d0c4c5e362089da2988ac7b5a1009592de2dbfed2d6713716432217f686a665360780785b47628d77da5c89a9e8efcb71726510b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
04aea53a1cc01aab2c16ba372c0abe97

SHA1
58509d85ac35aa6ebfe102d1395ad30e8252e2cf

SHA256
8741c29b907f05d9e964ebf7377cceb3203e7d712e4d1dfcff71a62825d5d8bd

SHA512
71273e386b6ea9f26d2dd01a614b9e65f90023af5d7a7210b93b0ab8565248320ff86d174ecc2157ed63d18bab40b81fdca69faf295c0923fd315caeb500c8c1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
b708c793f338145176d50251afedb52c

SHA1
25fb26b42aa4e0c40be1d7a3f9fbb8b64b4af81c

SHA256
78acec68bb7dc24704d304f9911303d0808d42a156c935fe7ec4826291b14bb5

SHA512
ab639c9a726916289623522522b654acdca98c330ef7448839273138cb2d0060055ad895005a325eb5005803601cf63fdd9416b89d48d53b63b3f6106fc33334

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
f27df0f8bf261d66224ec479c84a6822

SHA1
7153d66ba85d834b5f55d16ca6a6e8fe00896630

SHA256
0afb56946cfc5e61bdd98ab990783a45005da78f19d6213e5af4c6c2a4f1bf37

SHA512
bd74a6143a0d8a19e9c797f10ac58e32a7b68e8dc118bcfaa738bdd552eb971d57be2c626ca6f91b9d0ee4a6d01e9c4670933f6d7645a36ffb548326a6aeb65a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
ff40358631ef1fe09b0ecbf009a1d4f8

SHA1
f7cf7b9791b5e1b16c5fb97b1c21398c9bf2b34c

SHA256
24f01ebdcdfe081a8b561ac607e576d78a0ac21c737534768f83d650b29f3854

SHA512
13e69b96f68fe6e5cbec4caedc0610e9fbbb5547f5bddd1437ea63214c73c52f57673838e050732c3b5600be26b1db695891410e1b45b2fddc03cbe383f2acde

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
c9c198616ccbfd77bf5761b9f87294db

SHA1
10ca0eac6a9f6c1ec56f9b9ce49149329ed4c813

SHA256
e55b5f8ffe17e4557525549c20ad9fdaeeb4f244914e9d0d678492292a914226

SHA512
720ec0db06eaf82d99d88cdb269867a2aaffcb23a78ecf22460f4d2b44f330ea6bfbf67cb48e12a9d71e3d05d928fba78be4f51ac40d5de480f8dbf2802c5f05

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
3cf143e1bdc2fe2aa6cf5e8a164a15a8

SHA1
01875f7312d99ce32bbc80a4946556121289fde1

SHA256
89594cabd95f81f61b923468b4a9397e16b7cf9bf085d68ac1badc8e2ba681d4

SHA512
89080cbbd9dcfa30ad7be900ab5becada8598127c6b8f4c0c3ac80b19de60ba12374b106c6ceb5e6fe907dc3b558ea9c808adf89a5d8e0aa47d105cea58955a5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
51ce02c8388f07b89a8110a636633a73

SHA1
fce26d582e3756eb65f3174a79f7d94789b8e99b

SHA256
68d01fc74b599dcb016be3ebfeaa57b31dcd3cfa79edfc91a72be1cd3a0d2f45

SHA512
f9c47af34cc479354f2fdf455ce291d9a9ad32bad8d06d2946209eb7925b9fa40caae1d3d65ca51eff324268e8c5d9a91e90a4f84621437c55cc9baab7253030

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
9259d1be20b03fb6ae4e246fb14a1468

SHA1
5a9cd0c8d11a2ede4b5771464d5de6f17d15f8c5

SHA256
8a651e00a33546e8a0fb4284b2279f3d33bd8b10c77983344f95eb31569275da

SHA512
192e290d71d04070cdc6935a300376053c9a197d3ea7d65ae4feced08f6bc478dcdc3b871de1c6f51874eba4baf49d0370d3d9131cab260f7bc54603007e0de3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
5e1ef5a8b92d64d1d086e6833bfb590e

SHA1
47ba5cb1dcf4dfd0087a7fd0a7eae01800b5f1a8

SHA256
c36575be5e9d5110c9aca2a763d2b49bf62ac961e9fda0a44e46b8d3c08c0b78

SHA512
5474787aae75e357f63a14589721e33e04076b729c1ff3f57c78110ffb3436146f2fd8b4f8110cd4c3bbf748f75527b1aee1c198b8784eae8c7585d626910e35

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
ef66eb9ce01a9afbc7db3e4cca7aab6b

SHA1
7e4974d401eff7767570251576ec389fb4f32bc2

SHA256
ff581ca3e72250727aa5d77f6c51f9123257952fff6774f119371252c7dd8af3

SHA512
7b69e4837a733212316eb21b2c44d2a04a1927a41588d76e1f0838789afa49aaa3c0734ca8c363b5530865f659dadde449898acdf043dc5e5c7a2e66f9353dca

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
5534313e88b535d0aa290f9bb3d075e1

SHA1
abbeb3d4fe705ac946d699030b9016e532cf127e

SHA256
f258de0f37c16aa78821ddd6ee496522a518e76dee19245c66f55bc2d0023679

SHA512
571cb69592e7490cb70e351d602b75f4d953a279228bb1719ea05e34b142202b615735f1683bb81fa86b57a4bccf337674edb34730d423a295bc7e69ac8817a8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
64be8e8e962c3ba8ed304e38ec99732c

SHA1
43eeb606a0fe717e38337c78b0dbe807cdc7e96f

SHA256
ab97529a2aa6b0170d2f3f2b013241a5eb05c0bdd63c8397358ec2b2d9f1c596

SHA512
ab3da480a879eb3800c775654a41e24f1d1bef5cfb163264eec441cc8ff0c346a02c6ea7d13cdd127658b0f9186b383a1115df58331845e4354a16a5c0d0a8f6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
3b1c56f731950c2f65d993105f128fe4

SHA1
6ea231910265fc108482e368994c33d600c7be30

SHA256
f364de25433bda073339d9cf49a9c1b913f41e9e8eb99fc2f48eb0fc4d309877

SHA512
cc9f042240dad40529b5003f0ebb4f588e2cad76f4bf8a7fdc62c8184bbab22490493dcd7338c71fa0cbfa94e71e35f578116fd47277b34612c268d1a5254a0e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
2ee7aff3dfd3d601f8abb0f207aa5ed7

SHA1
9f4728e876a7936c3622c77e150f9a2ca1ba6136

SHA256
4df49b91d97b88bd57ac9d83372521918c442e212627c13abf40874c6493a3b9

SHA512
dbdd1fcd51e2621454cf06a3fa9f518b95e0ad0bc2583a27123c555365df7a3e6d9481e89c0c7fb6f41e9a1d18e112d5d7e9745a4442e26be7c4ff9297e30e39

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
bd1c026000959febec334407313d2a5e

SHA1
5e2795f1699a23959bbfd4a8066d0772bf1abf15

SHA256
aaaef1aa524ea143698f869468e6e3c9194a65a80a85d7a55c855300cfc3c037

SHA512
7fa4117d254fd4a0dbcdcffa39b88ca429fab1d00a9c35670c5ccaa9e3cf9caa52f258954f740f2be720f3b54877d444691be0ed8bd46c1688047483bf989313

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.1_none_233543e4fce957ae\Disk Cleanup.lnk

Filesize
1KB

MD5
f11ecdf18cf513dab8a39f821257c04f

SHA1
f2f1e721cb33856a72e108507218899c902cc03d

SHA256
3f20bbcbb52ff29ecab7746169e7b4eb92e77aa7f08cf688a5894821e239cd32

SHA512
a61c6457cd2e74a9ec8d7f9957ce5d2ce38382933377b64cba87e16f4502b18776c96a02841cdc71d6ab06f6d1c6c249b72de26c0b16b51d8777e3d5bac24690

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_10.0.19041.1_none_61cd745a990bcfb3\System Information.lnk

Filesize
1KB

MD5
339a16c937b15260d734593dc24e413b

SHA1
e7751a7b262a165d7fbd9831cb16417c0978757e

SHA256
df9cfa24c128537af5cc5fc5439b2e46637946baf4bd3d13f8c18c5b478f7f52

SHA512
021c43edb82aec3c97e813f2667e75015188b0ffc7d7d643a8c5e6bd8ceb4d7b68d1643d0b77a12188f23012b4a7fda0648fc8e4f1ad6e4311d0614033497f82

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
2322dcf7c4d6ac79580f3c707e1a076b

SHA1
d19c218fbf0a315ee360351bb942a2e5527e7491

SHA256
f1f88f48416e0247f1e8c1af6ee11e4dcf84d15aa6fdfa746d9494dce85b41c2

SHA512
d43e58e0ec2d286ae3d2f1d6ce64fa34f0aea0be8aa470b6e8f5099fb848d5ec67c6a34a40aba4ea3ceaadbe216923a70e4a1b8583fe016ad3a972ff56869466

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
fee09cf8b606a8225e2815db2d73703d

SHA1
0184d6a244fcf03d6a1abcd7c604002d9d9f2fa4

SHA256
e89f0b961c41309758cb503387599aec78bef9a22c41c228924af1f0f6edbd84

SHA512
220c33d33ed0c460409ac4ffee38b74e172347d565da5b20e8c11c4281945bf34dcef7139d1bb00fcfa24f3e5579f3e7b1f1625b0c3012f4cdd3ef3ec5477af5

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\squaretile-sdk.png

Filesize
501B

MD5
405b04be65966192f8a1eadd5ee1dcb3

SHA1
6eb421f3026c1df1d263b138ecf007e4275ff338

SHA256
aa624e0d921509eec08765118aae9f5c4b2a15bb64410315d7e83d3d77e58093

SHA512
407d55057ced50301ce8aad503d801819d761d4aa407c9b772ec4b6d1a83284a8c376c74a07375ef9ac29adb91acfce3f6b8f4b1313ce6ea036a929c6964f8a5

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
55c082e5c753a3be7704ddf066d0e895

SHA1
ced13c44a19f82b143b033378d601f93b1de3388

SHA256
e45f697a81e1cbd46046a50597ba9af08e1d8311647d62a17402cc418b0f63e8

SHA512
8a7dff042cf53601adb5212f9bc6a21e48de61faf38096def0a733188e22b57d0141a7b2885ab426f76c40c73ed92fb0ef80abf0e469c83a7c14166a6830a0eb

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
c4be1ce9dc39fb83fd5a2d617c2a4837

SHA1
eca34cd429eaf350804bce704d19ea61c74fd54a

SHA256
403a36ada7f7579d09670f9b98e7dafec1c2e1beecc5fd26ee6b5fd0b4f2505c

SHA512
3e736e36954c970143a82baa806fa88a36db812d09c08a6ab4d19a78e6d0fd2c42c6b8e59b62f7f4c3fc7806f5b1d9f30e934b404de6465e9280300b034fd64e

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\squaretile-sdk.png

Filesize
501B

MD5
cc732d0bd874a5559714f32366affe1a

SHA1
b1b7b5585059d53f44d8e0dbfc260472ab658c71

SHA256
a836ae986ad1fdf66b57b8f55eac652b146a474835c2c0ee3a6afc945bd60bed

SHA512
3d9324b6ff7f7db2248f609f2364c515e39985e7db154df70926194ea141cc67a8283b8ec91b0c0f71b97476755cd272ab6af1d5b44c37f1b5821c91d18d4890

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
8942106879c6b35753387def312b7e9f

SHA1
90f96f3963795e3e36488a38cd7858dfab007216

SHA256
ddb27543f336281d444973c4ad16440a880058e20fd23507acda58eb04416090

SHA512
ae25c633e6a527938fe08196b4d112ffd510eb483862b6140bb91a9906e42a1e3b82a72e88166e54c6d559a99be324f0b08301bd9f4896eb106d5a5e0beb7d23

Download Submit
C:\vcredist2010_x86.log.html.EnCiPhErEd

Filesize
81KB

MD5
54c55af228894076ae9a95700760ecc9

SHA1
3239b7933f318b3be779a008b29470b36fe0e03c

SHA256
896c229e5e4efdf8ec615924dcc64ceb832c4e3a20e0f3f0180a26f2891f97f9

SHA512
5421e90b292e438a8735dc0a7f24693e4bbcda35f3296cbeb9ab6448c8bb08fe62e7917f52f3bd4aab64287889695f1c117e7bae8a8f21ed7015b5538497f3dc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads