52f01a2e8797ea96fd305aa5c4167c80843db8e3f8b718fe6c4b686d7c9d8c5d

Analysis

max time kernel
95s
max time network
117s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07-10-2024 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Size

12KB
MD5

1b00466fda879c94d956c0c1c59ec790
SHA1

5774b50124cec293307e939ce08eb22d7ffad72e
SHA256

52f01a2e8797ea96fd305aa5c4167c80843db8e3f8b718fe6c4b686d7c9d8c5d
SHA512

244c02ef9345ccde7b5a7f296b36f2c51edf336b0a273d8fd03db49c466417b4d27d7f5670567407985850302d745533ce3e008b122dfeef5740a7e27d534ecd
SSDEEP

192:J/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMNIxqH6:JebFNw4Pk1itKkpAjjJs6B40WNI46

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2165) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2OM66SBQ1gMU3f5.exe"	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

Drops file in System32 directory 21 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\MailContactsCalendarSync\LiveDomainList.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.ppt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@EnrollmentToastIcon.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.doc	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance_Alert.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsCodecsRaw.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@AppHelpToast.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@WirelessDisplayToast.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance_Error.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@AudioToastIcon.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@VpnToastIcon.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Bthprops\@BthpropsNotificationLogo.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DefaultAccountTile.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.xls	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-36_altform-unplated_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SmallTile.scale-150_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\CalculatorSplashScreen.contrast-white_scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\core_icons.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\VoiceRecorderSmallTile.contrast-white_scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\Assets\Store\AppIcon.targetsize-24_altform-lightunplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarMediumTile.scale-400.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-GoogleCloudCache.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageSmallTile.scale-400.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\LargeTile.scale-100_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-40.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupLargeTile.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\ScreenSketchAppService\ReadMe.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_neutral_split.scale-100_kzf8qxf38zg5c\Assets\Images\SkypeAppList.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailBadge.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AlarmsMedTile.contrast-black_scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\423x173\3.jpg	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\TinyTile.scale-100_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-256_altform-unplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\AppIcon.scale-200_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\search_emptystate.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSplashLogo.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\iheart-radio.scale-100_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-40_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-20_altform-unplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-256.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SplashScreen.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-16_altform-unplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\node_modules\reactxp-experimental-navigation\NavigationExperimental\assets\[email protected]	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AXIS\THMBNAIL.PNG	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\LargeTile.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\OrientationControlInnerCircle.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons_retina.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubWideTile.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\forms_distributed.gif	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-white\MedTile.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.scale-125_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-white\SmallTile.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\files_icons2x.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\LargeTile.scale-400.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-36.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\MedTile.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailLargeTile.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\CalculatorLargeTile.contrast-white_scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\LargeTile.scale-125_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-30_altform-unplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedMedTile.scale-100_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-Yahoo-Dark.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\InsiderHubWideTile.scale-100_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\SmallTile.scale-200_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\README.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\7734_20x20x32.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubWideTile.scale-200_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\asm.md	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MixedRealityPortalAppList.targetsize-36_altform-lightunplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsWideTile.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\Glyph_0xe7d0.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\tl.gif	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedMedTile.scale-100_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraLargeTile.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailLargeTile.scale-400.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsSmallTile.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_it-it_9f248a35f7c12459\404-5.htm	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\i_table_options.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-r..t-office-protectors_31bf3856ad364e35_10.0.19041.1_none_c3bc3dbd94da3c61\MsoIrmProtector.xls	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\views\OEMRegistration.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.Search\Images\logo.contrast-black_scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\i_error.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Alarm05.wav	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.1_none_03928ee4a9e5894c\RequestedDownloadsCloudIcon.contrast-black_scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\i_f12_context_chartselection_clear.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\oobeprovisioningentry-main.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\InputApp\Assets\StoreLogo.scale-150.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.1_none_ceba36fd1b479c4c\AppListIcon.targetsize-24.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shellcommon-core_31bf3856ad364e35_10.0.19041.1_none_91b1f58702057373\DefaultSystemNotification.contrast-black_scale-400.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\debugger\Breakpoints\images\addEventTracepoint.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.1_none_4a388618f6365227\NarratorUWPSquare44x44Logo.targetsize-60_altform-unplated_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.84_none_24f8aafdaceaf0b5\Splashscreen.scale-125_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.1_none_b1e502c19c2a358b\Square44x44Logo.targetsize-48_altform-unplated.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\togglePrettyPrint.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.423_none_72535ca9b59a9515\NarratorUWPSquare150x150Logo.scale-200_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-t..honyinteractiveuser_31bf3856ad364e35_10.0.19041.264_none_a61d15efb6291d40\Ignore.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.173_none_6486f23c2831aaf3\InputApp\InputApp\Assets\StoreLogo.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Assets\WideLogo.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.Shell\Images\TabletMode.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1202_none_8f7e37524c3e1a13\TileSmall.contrast-white_scale-150.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_b4fc93ef208f3edb\501.htm	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_it-it_9f248a35f7c12459\403-3.htm	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..termanagementsnapin_31bf3856ad364e35_10.0.19041.1_none_01072daf15b480b0\Computer Management.lnk	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..ll-preloc.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_a673a811fe1122c1\default.help.txt	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..talcontrolssettings_31bf3856ad364e35_10.0.19041.964_none_d1ce1ea46e50a943\MicrosoftFamily.scale-150_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ast-black.searchapp_31bf3856ad364e35_10.0.19041.1_none_e479c512c8bfeb66\WideTile.scale-400.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..in.assets.searchapp_31bf3856ad364e35_10.0.19041.1_none_501fda1ac26a3cf4\SplashScreen.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\i_bypassServiceWorkers.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_de-de_fa3317ce4cfa58b0\dnserror.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare71x71.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.ShellCommon\Images\SIMLockToast.scale-400_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPSquare44x44Logo.scale-150_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\nextTab.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.844_none_d9eb415c5b9dbe4e\Square44x44Logo.targetsize-48_altform-unplated_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.1266_none_fb76f6fb7e78a373\InputApp\InputApp\Assets\StoreLogo.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPSquare44x44Logo.targetsize-72_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..okerplugin.appxmain_31bf3856ad364e35_10.0.19041.1_none_11b2da2074e7d6e4\PasswordExpiry.contrast-white_scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-speech-userexperience_31bf3856ad364e35_10.0.19041.1_none_d1fafd8eeb2a2637\Speech Off.wav	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.117_none_e0d32848ac56114e\oobe-bookend-cortanain-outro.gif	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.SystemToast.Calling\Images\YourPhoneCallingToast.scale-125_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..erymanager.appxmain_31bf3856ad364e35_10.0.19041.1_none_61ab84439fac4697\StoreLogo.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1_none_d0af17ec366548f3\TileSmall.contrast-white_scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\fr-FR\assets\ErrorPages\startfresh.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\oobe-footer-template.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-fileexplorer.appxmain_31bf3856ad364e35_10.0.19041.546_none_476476bb5c3a0bbc\SquareTile310x150.scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_b4fc93ef208f3edb\500-16.htm	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\NewWindowIcon.scale-125_contrast-black.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Alarm08.wav	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.ShellCommon\Images\WiFiNetworkManagerToast.scale-200.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ecapp.appxmain_31bf3856ad364e35_10.0.19041.1_none_b30156e32b833fb0\Splashscreen.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-lockapp.appxmain_31bf3856ad364e35_10.0.19041.1_none_9d61200c734f61dd\SplashScreen.contrast-white_scale-100.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\i_chartzoom_in_disabled.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Assets\PeopleLogo.targetsize-30_altform-unplated_contrast-white.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Windows Minimize.wav	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\breakWorker.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.117_none_e0d32848ac56114e\common-toggle-template.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.117_none_e0d32848ac56114e\oobedevicepairing-main.html	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\i_filtering_options.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.1_none_4a388618f6365227\NarratorUWPSquare44x44Logo.targetsize-96.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.173_none_6486f23c2831aaf3\InputApp\Assets\SplashScreen.scale-125.png	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\shell\open	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2OM66SBQ1gMU3f5.exe"	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.gold	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2OM66SBQ1gMU3f5.exe,0"	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\shell\open\command	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\DefaultIcon	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\shell	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.gold\ = "KIPNJWJYXJVVHHW"	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\KIPNJWJYXJVVHHW\ = "CRYPTED!"	1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1b00466fda879c94d956c0c1c59ec790_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2748

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
52489e23dd21dc07a69b8dcb89a9b6c7

SHA1
6c8575485d61b6d39e83cba35a2ad5abfedfde0c

SHA256
5460287a4d66ba5a764547de643df72faa82cfad4a4e50aa7f2b5dd3e1099b91

SHA512
1caabd04ad061a0e4a1d6972169b1d177f3c0606356724be9c90a983f07ce894d6f2a2543e8c8943b342631bf80423f4ae55a3a4d6ac2d0c08e30507844ce843

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
4bd478de548b81da2cf76ab330c1859a

SHA1
251356844e46d54b72168cf4bf61ce6180f24277

SHA256
d44be246aa962919034f1679b2ec0f0f82116c0bff22a9066f36b0d293c7aca4

SHA512
d6b972b9bd5ce9453deb0b45fc0c3ba679f4fbb966ceccdb012940e7c8c24b3ebcc900649037412240d2b0b121a82e3942ff36db45fc11fa126e9879f7047503

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
909d91b987d8bc68a23359d70d1dbab4

SHA1
d9bbeebdf5f1a459a1bbb89597a1e43e4b9454d1

SHA256
d6edee80a5299d06f735b93eda6088634776918b4000bf7782ed0eddd233d87b

SHA512
7c6292ef2e6445a1f84731cc99261fb923b5c87afaa9dbec07d8a3ade16a46ad64fca37428dc10910f46d96ce2ae86cf5e27386bf0a7cc3ef9718bed60366d55

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
1ab8a023af6abc6973d3fd348993974e

SHA1
1eb66a9eb81f5db46a75c03a56205a2ce2a7e4a0

SHA256
9552b714ed87c5ca05b7f30d369c3e50e302a5ec11ce159bf4a564557843d9d6

SHA512
9124ce33e792bb6d2eb5b05b6853e30845fa3356810fd27b96456410049467650bae6ef3f7122aebdb75f2b6c00f68d1bd19d4f8e1ce295413172ab1df9fa8d0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
af753b1303fb78abaf1c93aef8b34b19

SHA1
345e545b7a6ce67bdb8706704cd3aa5db174b328

SHA256
b762cfae5fcb0944c6cb53dc126f0daae5353e51f740add24ee122d0d6dbfc41

SHA512
afb72d7c1e8d5a857a99e362dd0f7e022cecfc8199f0f7930d7c773ebadfc30027ef5d8d08f1d59bc227fdce0e9b92b84ea3d773ce8dac31777f4bdfb23ec771

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
c65566465b86b3071028adfbc716f13f

SHA1
189cfe2e34a0b9949d8540f802846ca4f7ff591f

SHA256
7d65f3d21e03789d76f2f961aeecc03920969343126860be882ce93e18db1cd9

SHA512
38aef6ecaa254bfd8fc34d9f347575cd0e1f3d6bd9966dc2b24a1a48dc9313c613caa65b1ff6e5c71789668f755b56ed9e6abaab433cf9356e698f979f0b9a3f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
a1f1c4dbf644e221d323245d0b7a9d61

SHA1
feef889f4526a46bc51a726ad41ef3ada7a193d6

SHA256
6b25547720a1d5595181dadec5d60a527df52bcffceaab8f588676fcc767f7fa

SHA512
a5cfd8b2218e5f3c0469654fb767bcc5cc039ca5aa076c7f4f59add3d8ccec5f85ea2feb09209d7449800eea45f2402e91ef4d1c25b11fc18848487291fdf1a8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
b2d2565e74f0631500287a593540aadd

SHA1
f575ddd94344e6c2e639c50a7393228e74cd7eab

SHA256
f14b2bcb2a0edc5662d33ebd2f2d1cfcf17c8dbd4701acc73e72380b5ab6287c

SHA512
22f41aa50287dc89706a7c5ba0a6500f3ad7d1ce3428a1691313082cc47e62ab6dace68f85f014db1d49d67c76202852417841a3883710ed828f4ffb135d91d8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
4ef3cfba4a4f045fc172b2f6c424e923

SHA1
8cf4970d566505a3606458a995f86d239ca1ad0d

SHA256
c6ffb3825d5f1e8bdae1d96c0ef1128ab96cfe26255c30a8b2a94757bdbee8f7

SHA512
f4e734526fdaf6074fccfa227e7c83a47cc8f3577f6c727c0a76c6c05f12675cc66137aa4b1668d63c7114f0b692a5c3e5fe78dc1dd6d5277d0feaf9f6eedaf8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
0acb18aa3ce91ae0f189954301c95cdb

SHA1
a6e2e35472e1e193815df93f9f05a0ce003b3720

SHA256
b5f31aab639bac9a97ae370aae8449fae69033de33878ddb401e1049c56ca8ef

SHA512
45fed336d41e9a3385137dbef19e3dfe0b51aa2455ab4241905a426c96085b310fa50d6cbf21973e44d6978ee799e0c028756c8257207b21a8da0beafaa525dd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
cb7ef4645264b0c6807efddb737e36ac

SHA1
2940c0b020d46bcd69f8050b4ac2066cdabccb87

SHA256
076da3f589dd11d4a7639df049bc300ffd14d54be421c92801e551f958d4086b

SHA512
80df1a91b8c0da16670217d269e847a9dfc0d36acb8932d735aa0edeb7ebc111ec86bac67e08d1a1a3171bbba40d5676438b698df6e6c7f3b3b789669f4bb7a9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
0bb53965b90fff7f2cdd5c392e324c1c

SHA1
79ad9d27d5076a5dc9f19c4d2ddc3598334ae94b

SHA256
3a289b2cfc28f5278724f65e584bff9aff16539f0ca125f965bcd2f09e244699

SHA512
46a667af1c9dbecb1a1d48b2eb2211cc688a93b559503c3c1879311d848c50965ebe97381354ea2997070fc6e33cdf7148ba566eb3b787e7d47be44b1f2be4f9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
076cb14c3727c7903d4c011d73b0977a

SHA1
f714c971435df6af8ae16be5d5918ea6a1fa8513

SHA256
2b309ecbaa2d8a8a96500a2bc0968e5c3a8d3a0c8ea8556f8a7d152ddd356a0e

SHA512
965781329b956722656ff4539f64daaddc3682384646e395497ead1d90acb22dfb4b60d79849dc6b07ad18a9e6a2e28bf5ee537f95edef25d852d62f34b14f45

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
b08a6adc3f9e6eb53c6476dd3d95f20a

SHA1
b94788aeed293cfef20e0dfe0ebc24389835c1b7

SHA256
5d99e3a7ce733310131d330db8543634bb009b53c011746ce4bcd1a008dfa1e8

SHA512
4fb113b7b4c7bf7555438ef2ea991f77ffdaf57413aeb0ca59ccb4e4a33676126fb08f7984043a2453302b57e0da101326c7337344c4ef8a04c97af078c2d155

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
2d236d3b2e17c0ef608d8c789d2157bd

SHA1
532e224a0350a3acd624b76b2e6521636f6f05db

SHA256
015172fcbc0438688ffa356ff7b5e3e28d32208f5c54ede0852731724756e623

SHA512
fb4efad9347d36794bcd960c548311f26195bde468c6c931294b4e9ba2623364bfc15daf11bf52b4076555ec77743855ef5de4dd1ea75453af0879500ccd77a3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
a0079d43186d340db044bf83bf3ecf1d

SHA1
d97a3826d45ee79badb193e5787d3c7b797d3635

SHA256
e93bd0be32b7b2a79ad4280e8f61013507fad9974cbe1cea4989bafe01e24b7d

SHA512
dd5007ea57956ba6698c06b582d93840422402ad979c89264b3d81c53367ec243ab23517604ebe5866a17b94e9131ba261fa95b9a11fa027144725c485511f85

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
e04b325710b0262114544f4fb97eb826

SHA1
a6018cbb57f02f2cbe851e057c545259b8e8f014

SHA256
c2179cd4462f15857d7609b964486293240dea89ac79beda8a3b02d4d7f3fac0

SHA512
181e607a727fba466dcf7d783681e8eecaeb026ed3fc0b6948ad2a1e3a63364db6f7a4000081aa6e0da5f05c992ad57653720574e94924c55c5be6959258c29f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
4826ba8d594f69d07dde042bec9aa91d

SHA1
ffcd3c39dc5fe3888c3e741566a0e56fbfa0e4be

SHA256
18130ad7e8e835510f3905daf4ee432462e0bfe9ae6bc3cc6da38e68b999706c

SHA512
9b0e52db89af14bd2ff3b0e7214f6b988e2ff9c4c31a1724fe39c53925b06a225904ce2760c1a532aea0d8b3c2f297914badb0b8f509dd104a3e9b19cccd3201

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
df1da18c09354e0eb5f34db07ba96a92

SHA1
20a17d95780cb51829d89e3adc53bd338b4b1b82

SHA256
4f189586408770a1b1fd1d923b00518a39aa6c3e5ab486d95a9fb0e0a9de4aa8

SHA512
ae97e1fb3c03511d8b22dd1bd36ab01463f9999315d9d3af045d59e9940daa670ef6d2b613e5a59e9984e41bca8891de29c22dc6a047ece27f349f6619794310

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
08d0e3e279272ff7480fadc8f0395731

SHA1
561aeb3a2628c0cd170746e69f0beabfab8deac9

SHA256
ff2190bdffe983a9c84943f098bae2ae300ab223f66ca2d95b2157b5dabf2550

SHA512
f861ad8d42e60b9e276a63dc411a7726e9da1d16b7d286e2e90ff99cf5d9bb1bea7ea0d3219f1d8f38da0e8a672816e16c34f38d95d18fa1857d39463cafa7d8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
8ed3406398968095983d3f4a46381220

SHA1
ae18c60d6258908ba5862c06c95499648dde0f00

SHA256
cf88816bd4d8cdadd6390725daa27c702697b018f02b4243fccf6b684b0005bf

SHA512
7c96b077340dd3ec8f03e599cb857c84829c752112b1131df574fdffc36b400791408f241c84299c2b28f4e237767011cba21f14feb07345f53c461fd089901f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
74cf8ab97644b6459a072676349971b7

SHA1
1b11aa7469b2500229da7186a2c9896eac05f0d6

SHA256
4a8874e0673483e8a710493f80d9ed4091044b73073045df2d9a754dd9456153

SHA512
c5ce2401efa0c41f7621af1e334721e72cc0af2dc8891d6ba1594c3e5daf4c3a2a793a4e5edddaba71d7cc8116eff16636a4cfe174e6aa4435663345a9a6abf0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif

Filesize
19KB

MD5
c802b515870be64a5f4d491a79f0961f

SHA1
53d9da6d069bbe130d2c60132a4de761d69b01aa

SHA256
12fbdc726c3f9961104895ef0cac90fe4cd8de7dbece871f5d4da64b7509f658

SHA512
2ea8b4704b90b2aa371ac85eee583490f1a2f15c383bd4a93b6adc0f18b050bcf1a05699c23672b23a35e9ee3c02b0f1fcaaad04dd258ec519ca07ae6196e2bb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
db2e34c60f93ce38d50194ed0a898164

SHA1
fcb9ae61e1bb03c53f0da35f95c1d96b6b54e85c

SHA256
e0b6b7df6e714f65e4cdd58e85e2f4df1082b89e8ff30eb1a56f1a6e2cacfb02

SHA512
a72b8c6317ffefc13f34c151076ef9328277fd771e027cda18ef7d143bba6f61e0cca175badaa03fc308398e9edd893c9571d56e8be404081274f4edae683b89

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
41da8487f402c16be9ebf9d18db79a70

SHA1
f66e80d0d3a929224244c1f2b18cb72ba72e35ed

SHA256
eacbe66e1114fb1ef0506a5d9b8a6c8982e9f1d614b9e652626e1120e5616c3c

SHA512
61d2cf178159ca469ec51a0b8763ca39fbd9932e07b62bc3f3bd28a270b3ba210c2a4a41ab927fee1705c0c51380f02559137ac34222d74bb07d648184a92349

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
200e4b20011b7f13ff334599da071492

SHA1
75ebed7e2916dd7756a61d8b69b9632c969a78c9

SHA256
fb19530ada5b32f0c2382c26ca4b9347e388706062d1d25abca51fd6fdd1fa6a

SHA512
94d09faae237deb193bf1c8dfba7720de4318d4324a5d1497db4c68d1000b231ec4f0214dc3364a4a06c985a56cf5381972c488f6f8e5a1ff6bd9da340d20c4f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
d31a35204046b0ab99a88c352acd2ba0

SHA1
b76d69d521038aede9db29228646ac5340f60a25

SHA256
c73bff4262bc791cfdd0669c1e5ec513eef8ee31eec67ee8b7c39cd8b523a4c7

SHA512
c55922324c770fca5a5ef39a6a238f28425df8e434747be8b796e3174a892713b8b28c6ffdbc317123fd08d3275d2b507cb679badc680d6d8e1d9673e9f3964a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
739fb74d170bf5e1fb9cd3960561dc12

SHA1
1e2ed9a3b4e1ef2116654d9378478c31c6304901

SHA256
d8fefd4449be36d26d728695ca4f2c0b54cbf30f02bf7288afe64a65cb8cdac6

SHA512
d480dddb3d3c99071f11c70841b38a0777fd2dc2b24980e3eb7399795d440184201596382d2462e33954fe33936f69122c216477594deb5977d3ab2e5fd524bb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
2ca38cda234ec38e0c33d0f6ec53e723

SHA1
1cf3b67f64ac3c0d1346c5bb0fb71222100e40c0

SHA256
75dbfa8dd368cd912ba543745c5ab2b8e1ad20146196b3fd9d58faeeefbe6378

SHA512
41fd2a7134fa4d52d45f721422dadde18f47711745c7e383b9c3484664e31638560a5b77eb178ffbb9cca70588a40569fa2d7d08506aaa1ff096ae520b43cbf7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
a878d0df4e47d33be8283c1db3033eb6

SHA1
f18bdeb0ac49c66239f29b79ca8d8354464702ca

SHA256
e1b2efac570dcfbcd24571fd2245cf18c95b9a14668a7e8bedea840f1e81af90

SHA512
03ea3b71b281e02557ea9167032ec1ee3bd81dacc3ab04904973de253d331fb7bff2772a919852564b84721a4f85d3e62f52e94e64263906bb9950897346ed3b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
227cce1fdeff8763710d6c9b9bb98c59

SHA1
f33cb765fc1c45f6a50b8038f2e234e232c53f71

SHA256
e549984a659d496d7ff54a39c55782fb078c7b77cd7c0edd9a52aee24beb481f

SHA512
775d367dddd28a9f02f0c839c438bf70294dd0e5d322a71f7c25d2725ca9c2af14b182efb0877b503ce0afa83cac6917d09077504c1285b0ba6fadfb6b060f45

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
0e90cbd3d4775a6372fe471cddc85ea0

SHA1
48d1099aa66215503c455a3369f009667a7879eb

SHA256
1b8a48708b6fe9dff21b798e1f39df785cb3e276de25b7ae50cffdc93897882d

SHA512
25468b747fafe26101d0561d5459688371dcb0e43c9513a25f937b06917cc4ea95a6b8588024bdd726737616b647529e5c6ba4474852566b69f4cbfbeac22a96

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
81e25b24dcbfeb5e0ac85d862e6f238a

SHA1
9351cec1b187241de97f4de7f293e31c343d13fa

SHA256
85beefa0426fc2b85055d18debf2ab4d25d10077934379d9ccd9f9f082d3a496

SHA512
140348422305f888b6e76fe2f3cf94d1fa3a4c71796f140cff940ce14590a74556d32dc2fb983581c5cfc4592fc5ed79e9d55de0e2d91df791552669241fc54c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
29db5a1c58d570bd09d7ec061712bc3b

SHA1
7ece029b0eb7a997b2cad6800056d5274e6f3987

SHA256
8841603eb5143c0588f41aa6b7247c52ffc7902bf061e1179d70aee152ecb63a

SHA512
a4d36ee6284b3edb32806ab309dd44cabaefefb23d8384159a8f3a8cbe444a921ba1d3746f0002b6c7c9c75eb84cde448ec007feadbea553bbc8b93178acc50d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
a5af60688f3a6ee37e5b81f053bef1be

SHA1
393ce0a41e8950a50101de4622b5683360fd3a74

SHA256
f7f88f2de1817040fd5461d346042746aaea69053d63762410259d6bc4303263

SHA512
8db16bfa5dc8cb98c13e526d7e53bb07233200e316fc05c64a4885850730f2227bde98c66fe7e1ae02137335b2c31263d9c2f138d465c499df1ae3bb244b361b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
2caf3046e5d16c53c18cc2fb1f2f2580

SHA1
7716923f4b6fe1576672e8d184dbd12b1d45c968

SHA256
42542aac0c16463d68b1a923b9448ef2bb432f275857c3aa5a60bf9bacdab0d2

SHA512
a2b350bec3dcde978c00814e3a42f9d3e3f6bc11da927b35d3734e929b0a34298ec1f61fcbe1421659f8a3771182cb93f60498bc568c5f8481f4c94e6fddbc13

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
4f877cb43f7ecdd6d1730abe338b7466

SHA1
d7cef676f6dcbb875f204062872ee48e40fa6d83

SHA256
615724b55c1c4eb5d10e5c24910096eed854160140d700ad4df81c7d30042290

SHA512
a3f72ef4500e5fdc1df5da8c019a6bf9e04e80aade78ebaf6b56eb229c373085c495b4bb16dc7f3ddcac94367c92e06bdb05b6ee76e90a2385b9cbb1991b1499

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
0fc0df474f658fde07bfd39db88e0f7e

SHA1
d5723e23c0715f8790d749af475611398bffaa7d

SHA256
e22cc188a3389831ea89abd36f79d788b3a985b5ce739210c0aa4b204a737bcd

SHA512
66d7118df09edb52bda4bbec1ee5c43260f4ca335858441da07ffd11c3945e268f341cec2c0e3b7255fe3e5fee0bd69051b47f1702e418c83c7877c68d8b99bd

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
9f469ef98805e30dae5d2771ba0e007c

SHA1
71b632e7fcc81687e7b103376ccd4174d5ec5437

SHA256
2a5bd8653b0ffb4de5709ddc8587940aac0b74bfc69bcefbb943c68d7499faaf

SHA512
b0257aac5e9fface628eea672f9658cba61f3fae2a8e0c480d0ee527f042f9c6ddf0c083b486094e0d92333f43d9fde685de66aa7406d747d1d86d22052ce26c

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
153B

MD5
33e39028ee59373486d265e7ff1e0a2b

SHA1
40831b17941c19d8a60c9e34defae33547b26fdd

SHA256
733fcaef5c61be956be52596e713a7a08ac00769aace3c0ee759afc68dd9d8ca

SHA512
28bdaa59527b1d1b57d37bc7631cb4bb3449bdbb3cb1b6b4d5faf5eb7bb355cf5892af6ebe8171f5ed0b1077c1be4c162e5788fe0a69c1b70a8210a2467104bb

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
31f30e3e8dd554d2716a105ebf0314a1

SHA1
0c0a14a7844df8e7dce97ddf27505eeccdb28e90

SHA256
2a80e5da3a9c0e8de4dfffd60915d270cce8205e20f35b95e3bf0da218c05e12

SHA512
542467f00508bef364d952ce362859e02f6ba6f86867c6b23641e96642d6fe4bef432a96b697f70647d6f445fe764f2a3ff33d40a5a51dfada9de82c4aa9761b

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
cf19a1478b8faa0ebdbf1ee338bea04f

SHA1
d90475d829cd78b00bd5b393cf2b5e3307f3bced

SHA256
a5c369359c7802db4da13f52c4dd8fda202c4b9d020c2b188e54253a6674e195

SHA512
492fb483fcf286c50b7a6878377254bb21b21b69bf27bff507765f8f0f1c9a090028c49a3fd65d8471d9221ded168314745f44dcac802631d6e736677429117c

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
9d931bfc08eb8ce6669d232d853c7450

SHA1
1459e1eac02d72dc4d5451e60c8045ee28d012b8

SHA256
39907db660dca121171a0adf50fc555650b04848630e6214d9401338afe3a0f2

SHA512
51b100165a05f6e7021a5ced7a8924cba999acb9df9b1176bcca53c632bd1c13dcdfdd3f85528c60fe3f0c325b9489c4c164cf72a2b0a9f734fbdee902b7b135

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
ffd9118a3d7a03d95119fb5e667179b8

SHA1
38b6e7c3087d2f2d8452be18b7dfdd2cc769dfb4

SHA256
4be29c493b9ab9c4bbd69512b1ebe8a24af3ad6d19c92e3b17ac3db3f71370c5

SHA512
285d0d03a03f8cf696586c731fb4ec106c0ebbae7a21072bdea059add2165c86e399e7a178f81b4f9dfe1d6665d6fa92ca1ffefd9bee86b9855b6208a72bf537

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
ccc77ef49fb252d8f1d4d147ab9a9ac8

SHA1
d36e4ae86b360521c5458a40661b1568c44ea362

SHA256
ce35b74e282f1df9193035cd87380e48b723e805cf3361198c869903706bd989

SHA512
75121cbcadcaa5d257db0c4ff031af55199eab9edf9eb43f83837beb5e5eaef80734ee853675ca900c1ed6be173a9a9636c57d92c1df61a01416f80e3fa12dce

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
2e3d5eb879c906ecf0a97bcd23e7818c

SHA1
35438ecb01457c3e132ba2ce55c043d902aed691

SHA256
a7f8a55ba2c20903eb94f5134fb2e535fe8e01fd02823154f4b6cdefcaf464e9

SHA512
390c5ff4ee9da4d87c60b454709361573ebcffabb93946fb7f6f367fef51b3ada47ca43da0da825613154a796112d615bed7dfa21d184fca663fbaa6e22f0543

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
857d424f76881a2b19067c59af82d12b

SHA1
a95b9fed1b66a59ac9bc07be64ca7f1b8043a223

SHA256
722723a0812349371dda82ea9b109a6fdab9a7551b163f55b3cc070d0cfce804

SHA512
83f6141860b791d13fdfe91e22b9ba238dc60dcad8e76278bc6b6e231ddaf260cff484385e23969c4f3f580753c4311b1ecc9513dd9a41bc9dfab5ad65214372

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
d64746601cddf9e49a8b21c65be20d88

SHA1
1b392f9cf39464135b900f38c7849d1913aad4a1

SHA256
2bfee87af0298442d53e2a5ca98bed4b2cf7558f69ed17b0c82c44fa293139f5

SHA512
abf216ea283b8831b327f6666adc6be4a420ed1c9378843b765d0b6e1c4ca8c0b54eaf7f0d2533bce45bbffab3a476fcc4985e7fb4bb0841d978754916392002

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
a920fddbc52e3ebc5f80f618a765ed28

SHA1
c024a68aba57b50b9b4a7d6c1413c4e5ff05575f

SHA256
ab27e52b49fd49b4221fb26d95703974bbb07583e24904dd0592449678b5cc12

SHA512
110c319788943db11e26d3f3b8c7cd25d1cfcac046f0ac5da44dc94f092e461eda794b36f887d44079ce30f81436b8ba8b60a1b61b996435ca4a7edb57009b8f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
b66d8f2828bb1c2b0b8cb5c414752126

SHA1
96c185099e30a54ce8cf29bfed108f2ec93e048c

SHA256
e1e2041114e7c574bdfa5899ec9b6aa408ddaedff0a27cf9260b65235afb8e18

SHA512
86fd37ebc7cba04183fed62ed0fbb668fe503c2ef8a8ccaaea76ec55644317a69ce6ca182e8e33c2c871bfa6aaa326fcef1c706e2119400beaf7cf50af481a60

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
93582bf3d0531b791c55b869c9c9e9ae

SHA1
09a911ec71ee0fc60fec5017d772dbf1f4938140

SHA256
7972583bf06dacd3c67e1e29e0862b31286da79dfbcb5fc2b2861dc228d199fb

SHA512
5ec2cd871893903c53a664673293c35f901907f6067c4bed6417bcba6322b43c1df035a4b159c7dd3d9caa3353edea8f388933750c837311f8057e9cc9d04f57

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
9b3ee81a2a5a6089a56e103c98480c05

SHA1
640595783155de58f2f615dfd3aa7c6996209a4c

SHA256
95cd9970992d7a12bca6c932ab2da456369e6fa91f30ceca56b61965a74b3047

SHA512
671a388a3b6035ee502db4cdbe395e8f8749f402df5143a6ed2df0a703b96655e2d951eee58ccb43c8089ac9863c87437bd58f92cb2b12ef55ed1a4d4b0bcc66

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
df530de5cc197f9fe8a33ec30f49a793

SHA1
85e5bed85d56d5f7a8d8c0007a9aa4617313d74a

SHA256
c5a77b6c5e1db55a646f58853b11808418ef5a75a6b69c79667becfdd1beece2

SHA512
88bd1df0b1a97ed91e0a6a09c8c2d10f544697ba4c9280f348bad35dad6e886ac0896e5f9ad8e4f93d98e8d69e0e11622552ff9e2e8f4427d888a61184e88073

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
73d7be57ebc665cfd81b9abcaec63ab2

SHA1
d1e0728513da38bd2fcae19bb808f1ed70fe3233

SHA256
c659caa32bdcf01f37f368790000d28859e38c1849890c9e2109929d04ed5f02

SHA512
258dcc31acfcb735250520427576e99a290610722609377506bf3b8d34e25353dbfd7b904195d778f9db0d484d27df5103dd7f13345b17e8196cf7677b3c27e8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
495d039ee409111a4c07048d6b4debbf

SHA1
b3d3ca137148f94af4a349e6c2ffb8392e7bc0ff

SHA256
fb0df4989a881bf245b835fd83aff19bd5e3b1c4228e50b0f8e4babdaa4bb222

SHA512
0a48e8b2fd6fec297a3f862d89ecb8e2160df7ce0eae6d9518a4898f07968122e0fbc9888c1a5a4bdf310007cb920531a185ed12cb05028aad770c94d94c9a05

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
7ca3f27d58599ce3c801852f66b09207

SHA1
7cc77c81d6c2b7c1e42de14695b8815154f11feb

SHA256
a1836e4c800a34ac3a5063ceaa4d4e73bd2bf2a9321a885df5ebe4749a0bd439

SHA512
48bb3aef28dd75643e3837f9c0927f6dcbc8af5f9aa1c4f893febb873c983d30352a24bbc3c3187b9cb3ba72f25c840a9ea9e9a41612c05f1086d646aeb1bf25

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
b53f20361d54da9fd820df860185f92f

SHA1
8c012222adac8f904f7d3337e343bdbd24bbd4c2

SHA256
2fd3465276ae777a3a4702e47781e45b2346bf66b8cefcb946c897ed6e7ce3f8

SHA512
37ff5c8346a3a85830d221e805b9d127479292b69c22bd3731ae52e8d0ebec402ca096e7c65778c91f03caf4e9c8c22051780d991e404d4d17ef3960e05242c6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
dc2d8e43d7738bcefc31ce9c8c0edb9a

SHA1
a1683339e91f82eed92ef8a4f0b806f1bbf61f73

SHA256
7d524c4e4e6716ffb8809d63e25678c50b66bd614e53cffe1d2f6e8c6a9e8030

SHA512
009c228ff533b7f01dc8fda8005835ee07051aceaae94063b4a73f9dffa7f7e49857ed24ddd40518dc32be029e9196891da4f385ed76dd1c9c137ff93e5a9363

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
5fd84380440a9f7931843c1176d770d6

SHA1
5edb02bcbd186df180914ccdc9636101b3f7877d

SHA256
ec773b90efa7ba28917a9cf1c53ad62e5df79a286305d079d9a5997090ab14a0

SHA512
29938e9637289a2a42e7ef2d364222e0cc0721a7a0b4dd990c95d5b35a889bf05b5006b175c8f9227b8ac3e0affc160cdb2fe13babb2888319d71277524b7f5a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
a952f0002f0e71950b046734ae39db0d

SHA1
b1cc843a2d8087a52c69d5f994e3b9762197d9aa

SHA256
1c9c655630ea3a96d7db13c67cbcc1ae76a492de959e51a965020fde20076284

SHA512
f788c5e900a81140c710d18ab1d2b8f0b7a4725a1199408c69e99ba43d59ba11043bec721e200854e534f3add46bf888daa3c5dd6f3f7ede0f0a3f59a860793a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
e0674d83538f4401a8237467f627fc73

SHA1
b1fb6a2d74cdb2f7dfa5ae1e1305ade76fa3df91

SHA256
d39b4ef5eecdf6f1115d1dd3746c50587b3c732632864a1051721ef563288204

SHA512
12343a72d255cd1e5c37ee8f8a97e392e64ee093dd1b7232ad877b3778aa99494252e4040260ab2099c794c99165fdbb2a036fe89e2c89fe8c2de1758101e05e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
8107a47358455eee2417262f1c5b4bfc

SHA1
56c9d0db9cb157090c79e9660cd1643d5fa25050

SHA256
0605cb4536e8c5d314c63d578a37b17d6417a738153be2ab041d67551b6692ce

SHA512
ea66a76b2a00a849d17266526c29d6b4a83a033493c169ac617f31d4e8c5c3b926d42500ae39a2e225b7919c246a961f707f3a1c1910253f24cff14aed6bcc8c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
caa95fd8b26ce0711b2fd4a48bed8619

SHA1
5acce0f889394069e6cd22fdce28b77fa14aa1e6

SHA256
d5031c990d48600d949fc927ffa1e2a0fe1bbaf968c6a3a354fa0a85566ab20a

SHA512
a10b9d67c772adaffeca113a2ae50b1544c0af9ae842c41a0f69395abf9826f6e877e8afb20b36ded39084f66c30f30e481817f96d30cef10f4609d8d3bd15ca

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
16edf58c349d1d0f0ee569947692b99f

SHA1
362be8dd50a5d045360e7f2c5838d6f8eb4d5ae6

SHA256
4ffcade4c31bea03b79b523d5d0b40f79366eb26d51e8b57990a232c4a7069ea

SHA512
41fce321d38b69b34a39fb0ad16670d306dc4d97bf77bcb36347e84d28275799ec4f0ce91d3cb91f7d13f50ad3346cf755e4423aee4c3a0fbae5d5fb5e37d2b6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
85dcd022a819cb7dcd55ddada26b07d2

SHA1
88cbdf43bd8d8edcf919676ec84ee41bfec053f2

SHA256
c063bfdf45ac950c54a703092c1be4bcdd14daf330d73fa76d1b633d093bd931

SHA512
54c893cdaaaad3e2e96d2a2c9d98900e55b2ec94619e5d5bedf397f8eb112a09d35faa9d0aae7c48410b4a353305e5eafc9d738d89db8dbfd2301796296b9dc8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
50a1de221d7b046650a623facb6133f6

SHA1
5627199805b553989b0ce6d6ef9c5f29a89eac3c

SHA256
9a4d6d7e642e31b83355d2a8bfd0d358bc0bcfedaff31f989b52614209552543

SHA512
598b76cf10712bad89a4b339ede66ce94cb096d6b9d1f6e7c2d4e4fdad83e909ccbab8580bf14c50ad917cf49f5dba4689b38dedbccb4073cca8291083cd74d1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
5fb71e92ce0c47992ada27f3c73b0346

SHA1
d847dcf0c47e11ff8d206e1bae67d4d9febb0239

SHA256
20222146148789cb786ccc5619e33a235e8df4641e592ba2077b3b11b8653612

SHA512
64844d5925c028786931b3229d41987091561506e9d93dc0864972d5c1d9f3cd5f124a818dfdb659b40ba68059afa6c8f6aa5d5d350d2664fd17ccafbb675406

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
1d2aff026b44be1c9305011c1f77a68e

SHA1
fe5ea91951bbec63f53d52a565a49a9de9edcb69

SHA256
3b8c1d9d3227a4413b470138aed19192596a7549f13ce7587b33f8af8278d101

SHA512
5c58c04f48df87dfd1822077b34d165f9ca24fa5c983a1300e853f62245be27bbcbba3bf904518c913da29220980663b84bf91ffe9851ed11101e3782e6f3e29

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
e0bef5e1877ff57854fda608a154fca5

SHA1
13959620dfd89a44bbbe5e55e56c7741184169ca

SHA256
d48d1897bb77483b382f83efc6058c28693e6e53e67867dd6d252d44ef103d1c

SHA512
1f71985ae1242790f207a30adec77446f5d5304d3fe3809e91327274e8a71c84fd1b97dc9b6fd0b3d5305e09a4813a867e7c20a94efe71e761f862dd468b912d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
d177239826525bb2e8ee564570d176dc

SHA1
e5405ab6c123d74ef89f0f98f70e0ff643e1ac12

SHA256
d5e1749166b2c320288fb54dda3367a86f335fd6a50ff3b1bdd231a42019ccfd

SHA512
9362e8dc28719fc6b23687e18ff792cd8acc6d3a277950dac4f65b6c83c2f72aa5f42ad9972073edbbec82bd9c8dd93c8a2733023676990c218ee787446520e0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
a69af9e8834b8100cf787a024fb290a6

SHA1
dd700bb41e7db600e5c44015557cc9db0e811ce6

SHA256
e33d7f39779e5212cddede3b905868795e31240331f664189087a11c75521167

SHA512
538faed5085f3ad5a32d971f43b9ae6b4d73a54615e8011756202bb8148d1e8b00afb9f5fc0015dc338879b5e4b2512a97bb0ec99b735e48b7c7a5f1ee541f11

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
bc6e56a36a119085db36ffc8b62b8b71

SHA1
c5e4ad07ccf8927924274b5a72aaec3be700138b

SHA256
c74f7914f3940c5cfb7ea7e56f2dcdf5083be3bcfbe75818d931b6e591ed1f91

SHA512
84746d0ecbb28af0fa8cc0574f6026a7cb69ff4d4a9d187f54a29361a80991dc2bd31d97b1db04698244c3d1fa31c42721ed1ae131b103214b876d3c2afb0c2c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
42ad1af3d668a7f9cd3077b5b66f3104

SHA1
2512cf16904e2c8335240a6a7f777c90266cf7e5

SHA256
d92b0690b7295e73650282bd34a655f8f79cdbbf5afba53a31a54aada39c7208

SHA512
e60834b6bbce86a418654021c57c1ffc30816c15eabe8d339189c8be3a36e02eb22898e7fb7d64502e00060cf278ade67f35bfae9b3d628256b13c7dc831f008

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
d9f404df0619e71ac1fe32dbf9694b2d

SHA1
5ed48eb67f5345e8ea5169d882b020b59871274e

SHA256
5318e4d1700f8f95c2eb6b370b364bffbccb0497d010023868c279c281f79614

SHA512
346fcbc42e61206e6187625a0c06cf8d82145bb851c8178d6b9b0ede51258dbd068a8bed86ebe432a0c35d3fb489a7eee7c7bc5a5149ae86f4dc5ae090003f8f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
9747f0d19793c34b73d795009901981b

SHA1
e2d6502f080562627878b7dd087d8d090ebfd88a

SHA256
d0d96ccbb6467e478cb43a0a256163cc60cfb83acd4c5a8d811ba6421457aaa4

SHA512
bbd552ddb8516c769e7e793067781eb4ae7e637a4b6d8a3537600d1bba6d8eb8f71d83e3213ba9db5c15ca251d49abe8f48a5c0f17a50272d920d81b16dcdeb2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
48644f1da89fc81a6bd64b6b2307116c

SHA1
0d5f645b073e5647cb775ae857c10eb7b81a1ecd

SHA256
79d45f93a5ce3d891e9f488c4a4338fa49b302e622d21b8170a7dbb0c65d7763

SHA512
3e103b675b7f5d02093e505adc5739f602c7d5a5951628171f8dfdb7cd8dd08a7226ea94b2b19d981d3c0fae312749ed737a5a8d04d2f024e391789cd8702de2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
1963f441b7fb93beb954c94eb41013bf

SHA1
50fb460e3eac03f9dfeaa78deddd0b815a20a8dd

SHA256
6505b778494525717bb0680406dfb613f7e21dbd7a2ea1517b3109299ff2a801

SHA512
4572f57ac0b1e0416ceadd17dda3d0f8267c4bf89108e0eaa5ba8eb1bc252feb09b40cadc8a05a51d7dbdb5b66b468430bd2a11260e9f36b531e480a5fac0f32

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
d553aee9642720214ab726c9843333ad

SHA1
e8fe93a5fd42d3efed3060309265982f10ed7aab

SHA256
8175f6e6c3bf7e39ef975daa5620351317ad6a1ba05928b097d96e8f11c5f4f6

SHA512
ad30567cdcf50edf10f8136ccffbd2cb2b0aa20c960df98c60e8b0e3593fe54e9267731960a716de249b6912e51ebc492c76c61ba13736a2bee8a0ee232e9263

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
9de46e20af93301c007f1aa843e5a980

SHA1
ba1a484783146d3d72aa8f5a7a1dcb9c3c669810

SHA256
be1389762db0c0db7127e933fee5dae094c2cec9c95306771290b1f8cd1dd052

SHA512
a306f3afdf32f22755a11992360bfcd1e079d1bd66ef6c1fba7a97380d8019d7be6baf5ce453d76b5b9b183521606606a2c80b3439b47c174297f5c16b9cafdd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
2382e85ec993d68a82e0ac727572f5ba

SHA1
a7385b9451f5a3a9d8a61dfc9b588e3b6ab3d791

SHA256
7b24f44ee32bb2b2a58c226a5d976ee549f68aad16430389c839dd7b58033d4e

SHA512
210cec24b2a277692aeb867ee50680488e75d0cb8a8e0d7b225cb1411e3b7f8adf6746a4ecf55515913b26bd7f14a1a4ea86f289c751db4dc0257af434d9a0b4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
e471cf35afb2639af99c318bdd36ff57

SHA1
a80695cf1b829cc44956326e9dc214e5e2e3522c

SHA256
02d32f4217f837f2a0d9cca63db42e5ce8b882f0eb248ab22159b722aeed25e3

SHA512
ab12ba6496e23d7c40352fd367ed4d661e18227f19cac17a311634fb35b576d7ff61f4643486aecdc32a724a58915f831ca9de58a1262a110e0cd601cf298539

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
d889710e3718662daaa1554b0b08ba24

SHA1
28598c5bb7edb74d439f08ec5909d216b965b0ac

SHA256
17e4ea794b3114043a7f5ffb2cb1cd6753fd0e4296e96deefb3c97172a422654

SHA512
48ad0dd5c9190055c8451f912e40a666cf9e70d2fcd331bd3e1717a377a3893ba943323952bb6143b7ec73c02b6be849d9a0da588c868f9183ba9c739cde7878

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
a550c4592a681de0217e0b55f0de2487

SHA1
fd97ddbafda2e5855db85309bacf09950a4e9548

SHA256
c288ecd89640d1aaed1ce23f03b437aef4d84576279cf8ee936bdf5ba450c161

SHA512
6d11a53c191e4d5e801712dcbbb4fbe722603550d99987ee3c289912b7346995c84e0758520f88ae2750c42f5818f2f23abb13a2257aacf9b493d23dd18828bb

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670753904038769.txt

Filesize
77KB

MD5
6a3c39d96345d2a50891360e2b99580d

SHA1
248f2427dd53774564391d7e8bfa9686e4310dd4

SHA256
08ac476c1fe42471059f413b4624930c15657d328ad411eb72ff06fa7dc5a73a

SHA512
9b0d8c1f2e9f299042aeba45be6a4e35547d9f497e110cc3fa22b53694add631c3882aa7787240a4ea833f6872a513f3ebd6b00d14566ea6788bd0a6dc441f99

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670754799667567.txt

Filesize
62KB

MD5
c504c00ba74b68dddddad9248438226a

SHA1
63e95b8e4c7db834c5bdf9eaf10208fc7a7f3f23

SHA256
4f2b85a24539d5f570b4f68adabdfbf4756d7e53a55fa2b420216267def3b763

SHA512
c48fa6fc9dcfca5e8cdd33c7a9e9b2ff9c6df26e0cfc1ca5fbd8cabe903d4740130d63731983e51683cc8618d3d1325249e4ff19a2f339b46367ef9816af2f1b

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670761839928108.txt

Filesize
63KB

MD5
711d3b65b34a7ff47764f440d818203f

SHA1
a73907abcbb9feff07eb4c0a11c4c7c857a2c352

SHA256
1f8ec97a5e16dace1459fdf1386a951ed5322fc1aa0adfd3f80bb1c73105ec6b

SHA512
560689c89f9606974610f7139117b910625d20a53ed0a23dc2069a8d730fd09cd67add2d33d5a1b67ec11e698474af96613dbe2d3dfaf48cd5527b351d4fd58d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133670764416908406.txt

Filesize
74KB

MD5
63f73e4395093b513eb5ce0d16c351e7

SHA1
d9d9279b53e1b62d59cd38ee9b696234a4457270

SHA256
b82260e56efa7d25ed8ce211ebb00209ad7c2a91fe577a3f66b71aae9fd2d973

SHA512
2fdadd360671e3a53399e3aff65511b7b7b21667716e95eeb0a7539b7ecc3359b6b20ec054730739e624691ec2fe77b95b314ea2ae55277ffc0856e80bc1296a

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
46f4167f304fa1dc82b406d388494519

SHA1
a52c5b12a409b6cc86d42517901042eefed6dbed

SHA256
bd6387b6155f97727d67a338d136d010497e6222a8373944f3ac585a004f02c0

SHA512
5cf13ac3feec788b55932f1c3d480fcc3acfdfde89992dc9c16bf72c7a00b462c2ba2845dd1d3c456d3ab74f4d06ce0c0ec71bddd6335a3de088bac61ec50e27

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
9d288cca0f385a2b00bb62142e9cc9fd

SHA1
aa62a4f321db20948beb0f7115c2f8e1901765f1

SHA256
c06d368cee7b026853a434f63f176c89c5c634f19434bed823f69a1d58d555e8

SHA512
5ff0b30363ae21ab2c2b63b1d3647bc0421f54366a6b2ca5c00d44c26c374a057d7ce0a3ec4b81cc60dae5133cd786059419b315b5cb39b4ad00fc5bf4792159

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
ed3fac456cee619f72114a158de87768

SHA1
7038a013adfd7ca6ccfdf67015c6475d0e2b021c

SHA256
c60716866550fc745ef3994cfa0296775c73bcf3d1ee906b9db5b0cb592945e5

SHA512
3f710cc97e6fc598db05b83d2c4672bbe6b47a4d52583322cb4b716c3429fc2c353e7dccc9526908346954c51b5181cc271846df7a9641cc7406be594878d80a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
37f498676c6a5830cd2a7a6b874e3388

SHA1
534c0fd855646e28762d441a2b076d74588e4b31

SHA256
e166e07923b560cf12a18ada4884c601be22d6ac50b45562ddec8c49aef1ecf9

SHA512
c582a4f9817af8557c0b872496c4a6f0d75eb81f27e87fca60ff386509d4739184137afc7d734db0aa0903d62996a1462d191ac49e45c899cfae6ace056613ee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
e4843a44f83e0026e204d74d10bb2bdd

SHA1
d59b3e643020a73cee73db5ecd42a8ebdc5d7509

SHA256
6ce47d3e94002e3b7ba76d726ad40b01266cd58e36f189f354da881d3f243e0e

SHA512
15dafcf3b6a6739482d6c0b74c76b5988f04c868cc2b751434ea371022e08c1fb4a0cbf59f8fbca4e5747b6659158e9fc8066eeb58ee8fe11a3c9891695ebe7f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
3b522aff0453d2fce672a6714c1c0440

SHA1
ad07a9893f8dc2c761292ad41215ae447f19b212

SHA256
400e23e961ea4571c1fbd51bc517a3e8246bc602c68c2e1fe1bc0058868c5fc3

SHA512
9fe24ecfb7112951d0e12298d5941e00ad163c91fb02da12306aacf1bc19ea17661c12ecb4e2bfd2f7398518df234b1825c2ae709c31adacf37e8f739276df16

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
fefc40f1eae2150d9d4c31e045d33ac7

SHA1
dd6534dc22c2a00b2cd30c91c7f2d5910979259b

SHA256
dea2b053d069259fa1c902e81d874a1328f0b71a3eca3cdff1e918e5e230e732

SHA512
a409a73e48150acb8058eee72746c6152a9a1deae21453d59b5c804001f86f46ccf29f62506b475ae842cc86b6055831ef4d23fa4a85086de76570f32ed8699b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
5f9836e0e1cbb7c23ff76aebea3e269c

SHA1
f1d2dbf6838456850b468a8e57660919fcdbfee9

SHA256
f9a32a55c5181914c886640c3fca288d73b6de9af8b2ed87787c78c8fbce5b40

SHA512
f4357f87a2e8429e5edca1e90d6e90b2ce49aff6bb5214473a9a6161c043b8d56ca7f9fae87fbb36537f5e0f0106ca6111c839b66ad4af9eb5dcb24f669f20af

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
62b85af76fe5be5b10e91254aa10ce44

SHA1
5d9715e9cd8af42fd9dde33ac71603daef1bec1a

SHA256
7cb808507fc5c57d70d9e16877b0ef8a6a225c74f12d12e7a7f28f61300c9a84

SHA512
a6c4db88d651941f0dccfcb0584ed57f9213ba791f5e12a33bc4a32353418bae96a927aa2930fd2c1712725f1a0039baec430021bd3ca23ea1addfb291710349

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
9fbeca767fdd21e3446427450ff7543e

SHA1
39c7ea4fa7b28ecc79978e31f7913f4a06749f09

SHA256
4b0b1050baaf025a9c8a7538ccee06dcc5664ab2c41b70ce70ae7652f5ebd28f

SHA512
37ed79ef26637d36625c155c94b0bb4d3fc551be19fa76cc2744916665fcad35bc228f5e2ff87687c547544667db7476a4e16392a9f707f1412d33b1f1aa3d37

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
de61c7cb19551430f96b44a68dcb84c8

SHA1
8d2f830eec41fc384427f912717cd8d0b1b19696

SHA256
a7561377f6aba8245ae67cc2a4053d0915d3b3fddf3ff793e93e04f75c5ce115

SHA512
e296c4bd1ea4b45960fa60fc3014421ca11f0b468af0ac39ed76d0de922027a14b5cc669a41727ec0de1757d6cac04f9708902917b0fe0d6c0c03a554475b676

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
da239758272b0f80ebeb3b711a9e7894

SHA1
922fdcf9f1b6065e19f01ab0bdcd3d8b50fdbcf3

SHA256
a991608fb951c406b306c588b36ef2471807a1583188ae5cf4cecaa7291c0538

SHA512
20946e08e2e2bea2c215b50fcbfa2c16908657271a2eb28c6044555b58c02de0f1df6cf9cc3a1d379f6abe85b718cec99fea517ecf3d952312dd54a102f98ef4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
e697db535aee210f23f71ccfa0649534

SHA1
ded0891af9e3d696006390a635665a7384298f6a

SHA256
86533c5f7809f221f002bd6171015a67aab500ee3d59ee1c028d37218e139ee0

SHA512
4e1233f32ff8cbca15ba4a935c63e46cfdebf25b3c4679c7c2c77c390896cdb10ec28b741ed23f112ea5bb0017fe1f9d16da864bb19069f0567459c4b28e9c35

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
ee39cf40a04af9283f9ecfa4191f9adb

SHA1
9f95040a2abd658ad2137f7d14d4cb2a61298e6b

SHA256
78cafe4f1b133e2b928e83068776cf53e0adefa48f60db37057f34f404b2a32c

SHA512
f9edd5fa42d40ab3998bc6f890de4b4c97dd11214a56ed917e8ed8b8403b2a3488eb05ec64d455f36bb40996ee6923bafc25a4828da3832b759009f118e3ca28

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
96d73302a943ad552023bee603f6993f

SHA1
7e6ee05199971d1ff1e2b9852337f062aad41464

SHA256
ae0eb8574f1812f88bdb4f605c59a468c10ac02a99e3b8a6211e6d963eed5370

SHA512
e2ba059072c261f830f373f9be8d557e7f8d26fa239080a5693af8bf0a76a94191f11dab7e1537d862bccb98862bbeb1a4a713631352d94c5aad7b0a658232ad

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
663329b16b807ebbc7a72ab2702996c5

SHA1
26614c1eae2d1e8513e7c138b508425856a6b15c

SHA256
74d01838656f6a234cd262732311d1cdc8da0c00eef03fcbade77ffae24f6e9a

SHA512
7ddc3d212130c174ee37ecf76bf79a81bff1aa7c6b85115f7e8b7059ef49a9e4a5e0a653aec3765e06ff33b7dc097e0a59b0e7ce4701b3503c87816d8b09e977

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
e8c9dc262317caf74d77151464140fac

SHA1
f6e47a12b5b361ce1c428e9ca3d3d4e739fe905f

SHA256
24bb19fa05725e7f3b5da29a25d246cf67a3a4daf186783c9ac150cba7a02ac0

SHA512
e0d730ac32e33805326966b19d52d91c441c83dfaf91ea574d850c3692c4c9ed49b5ada60cc1b5700a0a63c475737f2eecad373edfaff249d601c150362cc025

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
cb956b9ccf3f2e9c34af448cd19a2b1d

SHA1
47f296582b54f9c1560722d1341e669a5fd83d0e

SHA256
5dbe40703936ee75c90befc94640f92f3e045f2795d1e045c17fa77219a3c00b

SHA512
c262cdfca5a865a3bc62124a5950faafaf701afe242774da50273c208412281d1da8b768221626e1374cdd36ea5054f19d855bdf05885c95337ab29084de2ec2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
7f0fd4e0e3c5752c434e15c28e14f22e

SHA1
7bd9b675b31d7b4927299d6bcd006e2130cb8b6a

SHA256
e446efd92ba653d579ce44fd4e2ab1287df4aff9cb71a30177d8253d28ee2fd0

SHA512
c8c63e3f0c6a55fedd47c3ae90e654c0b6c3decae106eedbe42f13306a3e27c9c882bcc5f0b4c42a0f56b977f058edb4737e251c50b94c019c55b1c42ad9a386

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
da80c4fcc9dbd6abbf5abbe017100f53

SHA1
5305a732e5221482f13fac928c00b9ba811486e4

SHA256
732aa2031d3948f1d04ced5241e8188932c15268f5428f24035dfcc9d1c7d202

SHA512
67d715344d0b2fb26ab586023b067731d6757b2ddd5a945c3af4939c43122cf842d24abddfbf658cea4f247bb59129d3955e9d5964709856cf6630badda09183

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
2ef97d6f27f181f2d4749350aeb4e62d

SHA1
aff1bf960ec358396f1adaf6f62c8fc9b5e29a5d

SHA256
664443edfef28eb1588e9146314cde6aa9b3ef12ac927e63fb609cbe1c4b30a1

SHA512
05de2898c44793bf125dba510de3a6183d3122b5134ec1de4465cdb375a4c4ffe073e8fecf5bbebde3f01ca62156ab8b8cfb895f8911339c43ae51dc8d79d3ce

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
bbeed99a47f6e06a26567b08a8e03f36

SHA1
a057f6add5baf07450614e7f1e9445a4b6d2b3e4

SHA256
1069f6d47d800f2a04b820a17194cbb5ccb89063317b500495f939612754772a

SHA512
d62162ec980a3f2161ff385dff1fd695e35fde4cf5ab4a1ebd25e7119eb7dc6a7f09f83f80dba184b1744d58bf7a4982ffe6355fc24c48f044741718719f9518

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
56deeb003d42fe352ef855683c2581fe

SHA1
3efcc4ec687a80dce824ddafca9116e61f9b8105

SHA256
fa8a056c43f9c299995c6d6f47b39d3dbb8ee4be2c9c6a7ff2e43c2e20c9597a

SHA512
44082ad30cc91929e964ccbc90f2678fe2c52482742cc04bea78f4155227492f1914acc1f9693b36ff29a262dfc887342a1e55c87e2ea87dccfda1f09dc01e8e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
1c5d70db71c8a7f6d5ed524ba1864c93

SHA1
d15c26f825e262cfd505297af238b261b1e44cae

SHA256
b06c927fb093d8fb5c06cff6bc63f4f3a7182a94c10250faf0c77edd7d667e04

SHA512
1fb35509f29156cb97d32e90fef71cb9afa4c42ea59a1f6c98b0e9ea3abbcb17152d698dbdf3ceaa29c035a25f67770beed25555981ecf0264d63791e31701cf

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
5987549ea5cc4db9f6c75182ec2f5e43

SHA1
ebf31f9b983f157a080409e0bb7b6b7013543b7c

SHA256
85b73d95500d3b467381998d63918d4a6879fc100b4182c5d329282cb8d8eae0

SHA512
388afce8da0a4e3b7ce8de9ee01e519aec91cdb4671ceaf156c6c2c87f12aa541fe025283e3e54fd22c6409808fb8df41f3c3a254a6ae6071098032de36bc927

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
c86ea9d7cf9a4e0aea9243a44db16e87

SHA1
608e14bc5f04d7fcda4ade2862900a01d103f7e0

SHA256
84157fc909f160ec9df1c9ac1c8a69a9825d72dd4d83a327eccd659e0dee1558

SHA512
383f4ab448b0700707af8eef63a3813d994f9060e644c85b54c2c6197d887ecf59b81a176c8645f6f2c3053513ca9a1006ea3166dabe75cc572810c76511ee5c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
c1af94c226374315b48b7ec5afb329f3

SHA1
3750fb531f18753edf38a7f478648a86e7f8ad7d

SHA256
32ae36b4f4c997cdee49ce03865e363b260ebb64775859a5eec84aea7eac5471

SHA512
60da2e1b159d3918f3da6084e86bab0be8bc30cb129f08dcd9f97f20a6030731d567e2a765833f71a31e497ffb4967f027d8519b41684d9702644b30a7844da8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
762309deb9e45b3592d198748ebfdc90

SHA1
e3b5602ee64f7ae19dd093b839661973645e1e04

SHA256
87f5bc3adfc940226fc44926d712f072ca0add2d907b99d2aa333e4b18804302

SHA512
e482bb74a1a504d44d2384b2f948d68a36d266c0b98ff70d369e09265ee9ed15bc516b3faa99a109a2e1174bfe6bac93a8e87edf9d95d343fea8d967597d163f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
fff757cea4c7b7a56fab271e3c73b1b0

SHA1
bfa2e01efd9d04afa9873f3dd3e8f86c62eea864

SHA256
e887f9174c6f028718d365750fe27360c28ca90a09f069797853ecdb6be154ea

SHA512
74ba27bebe580c75a1bcdc0ff83698a7c3ccb8d396665dfc651e22b520fdeee7b906913341eb6e347cbe1157003bed07b3e405fac9ec23c82bd6ab5362dd2b58

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
c98eb02b749216d165dfcbebafa08d34

SHA1
68ec1b7e6696a46c73ccdda1a7709dd8fa67d199

SHA256
214b23d6ffbb6e124c8fbb03ebda4e8c959dcd517367402127852e7da0b6c332

SHA512
c4ddb92e3e365c1d79c8e5203424f122ceb0303a8d2dc04e7d7220062e6bfd3afdf0b6ef8b15a7a25aebb8d2c3f68195f91892c74c5101339125ecb328ed10a3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
e10bf13b7235904d9074a45161e37d83

SHA1
5ffb4d9387d5437021c7dee39e4829b70c6d1e88

SHA256
9a8e48efad0c13310bf545cdc3a3392946383d528715b5f7af728fd22fd489b6

SHA512
b0c4fe72c46e6c3532f6a2ebd884e01b733b6d5029562d4b436ed9a57326d5b151ab40fe4f91e24c7a7384c22758c2e40e8d41df2e9a95fa6bd916567991ec77

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
dbbf1803928f59a49d3e7c844e45559b

SHA1
8d687e9815d6028a396d92407ad41ec54d0082bc

SHA256
34abb6c3bfc178b2bf39ac87ab6a9ab1ca2d46360c1fa4ac9fabfabe3dace703

SHA512
70cbeb2a075e7930ab422c07cb0beb2374552ff05d93689e60522a5065d3d938a5c69e05add7d0d7ca0b77c04a95ac3e645a96d34b7dc2f04442973a6da3faa3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
47abb8b5a97b69a85ca5fe897bf3c9e0

SHA1
2cf9691deef9a0350f74cbd5a82eb570f60bb3b5

SHA256
3f3357ded0df3e75a07644117600b19a8955e65e3bc6d2519c5d13b316ecc70d

SHA512
df4209150e4fc9c3069da8b0015f75a869ccc2c8361cc124156edc5e84d3371b6abc64ea82b169964fc024b744dba4a0a8b649bd552b9b01492f224fcce63301

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
dc934036a752f9716c15191265452927

SHA1
6c7353059589a9b23db40a665ac0355790d3ec8e

SHA256
7713e1b4616814388a2593e6a9e5ba08415794e17b0c01aabe1aa629d9030ac4

SHA512
b3ea0bc763e42b08fa666e7e477ecd555855b9f8ac96912248747259a077268fd9bb134e3702df53a7023d797e4401354fa40d3cb94ddfaab6af232bf3d79c37

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
d02bb6ada85fc0b6fcd1b03802b6c38b

SHA1
8067390664e54f41fc8bf294b801423ac91a10ff

SHA256
93b25d7240f36b9f16f014c6e96e64d47c5facbd0a592526fa4aaf79c0f582b7

SHA512
1a13d2500c130838f843c76c666624b39045df644f58e6fd1ffa5d2e7bbc2c8607f29157a092df861bd225ab58066df929462f651f7828706a912d8c9965fc6b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
b6dc6ff236dd43e2c58a7aa8bc788c10

SHA1
737f54650271d4ade578278660b11abf72f7eb89

SHA256
14bf91d425bba5d21548706665625de5b9a74272b38c32d2100c10ad064e2141

SHA512
b71b0e7b84ca32349096c5c4e5ee1aa42579fbf93c25d3a0b8c0cd16e7d1201411ab66a3289d73c16ed15ab1ba69a33b0a82551c16a020e0ff21a804dea5b5c4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
6fd0687d283eca78197015405094916e

SHA1
00a0b7d76764c1698f9ce2ebbe3a0dfdc99592f5

SHA256
6b4efa59add1944ff1aec52dacfcb4a480a02b62d368243b418923457ce74b8e

SHA512
be930530174efa64554c317d6781863424740ed9ce19a7bc95562e012cfceca166708ff7ca4be48f87f70467644ed76a7d5bcfc79afb090a4e0aa03e2dcc21ee

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
80247684ea12a863b125a5f3f2a502cc

SHA1
cd9d68e32139b433b18d0ee6295afdebcd121120

SHA256
274a523b40026390c8c144ca00a30cd8410a6179ab349e09509e29ab69954f83

SHA512
3f0fcf888b2ff9b2aa8917bc9b40574c5b682f0c7340999197bc5f084340fde03929670ece4b45b2c0b2272b7bf271fcff68ea5d3ddc0d945fb502fb52e2b48d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
6f58d6c81228a9d3875e16312da359f6

SHA1
802841ce1b63a064ca67df18b6337ab16e289a4e

SHA256
ca5144321c29ed2077283ffa641e972542fb9d14e5a8ed3ce843ac7457fabeac

SHA512
06a2171cb73a766f4bd92272dd84405a2561b07fec021b2c2f2d7e3f1eb64326763ea607616bec24b3a69188f85511b6e8887a2d792a9fa1a054ac751ec4269c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
c8db12eafb60586271b6cd2bf212e9d7

SHA1
d2301ea247bd90d35e59e03d8f36a5270216510d

SHA256
45d373ff515a980120d7360ff2dae4255f10d9fa53eb4495022b7567c3a21919

SHA512
7960f1a8bf966bfbe0d5ab63c0a9d0c6c51a1f229b5470b43fc30b8e6fb42dffb0e5dd1651c76666fab936f0b380ff6850278e2687dbf1615dddae7d4f3e40d1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
abb9444922d9e39dcdcbf6e96051001f

SHA1
0b6f744a8015300fc8a1b07f108cea1418049e1d

SHA256
f524aaf8f8caada1e39c7f293bf06e89e919c5935baa4f99075eb0ea7393f96b

SHA512
cd2a5f549fe9561fa9bc1afa46fc4cd47340c5ebd08c3697f73de6473555390fc5f0e34b5fe591927bf5e555cb8a1af91a732d206467741310d1d35befb80cff

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
1999df41dd41a349032bddff7a7b69f3

SHA1
5098d7f3dac0490237fce9dfa4845273df549464

SHA256
4f44d2e3177331369b8d16795875230b325db118dc825f70243e44058f574bdb

SHA512
557f078374c5106fb27cff91418c73660f29298d5f3f9490a489695388b4e1e8c20c70e94ad2ddeffb75ad4083334fd9189930e564ce0e4c7cdb9d991395a718

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
4a5c06de0fe3e70edc984de0533a9f97

SHA1
27f27c4fb726bc216ede925f7c094cf0b7f25c71

SHA256
50ad0570a61cf5af4c18f29a1144f03e5c5dc43eadd1cf29ef1ccb5a95e6b20d

SHA512
e5dcaf03b09bbd97dd9fc80536813075da91536852adae0a415b95aa29b716ebad2d428f711f060209d170c16fb1057248c57d654ed2747a67e92621be2f7bf1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
4f4bc890b396fbd6b2412027adc2fe8b

SHA1
f07ee60e150473b75079c3cbc4fa0ba2b582bc3e

SHA256
7b828d781556c6159030701af67fa5d5abd8d0fa1f6199975d4c81ac4cb3beae

SHA512
d414df862d2ca5349ab66e2b232e7f3bc4bee46c851d215858a03ffe46da050e732ca045951ba30e1e015b8132c2ad36b4fa4d1af242692dc09c841944f57f7f

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.19041.1_none_233543e4fce957ae\Disk Cleanup.lnk

Filesize
1KB

MD5
01462f76bc2c9861329ef37d279baa6e

SHA1
a3de353b0f9684ec9ecc6b7f25d87546dfe4afe2

SHA256
7856473373861fd18cf060078163d0b51ca6614fe72cb490727bc3bf1e50cc66

SHA512
61f4dd5931f19a5b2b2485be065239e9f0b0f0d08b06bfe1e14b3a2512ee4473ca9fee2affeaa77248b06dfe410bb2432b60fdd6649579edfbc5d9e2fa888759

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_10.0.19041.1_none_61cd745a990bcfb3\System Information.lnk

Filesize
1KB

MD5
ff6d3f244ef98fc43315c348b6cee600

SHA1
ca2a7772acbca7c90068782681342b0d25804495

SHA256
7e68ea79d364d5ea83f249f8c7f55c768a20099a073349689477aa9773c3a05f

SHA512
f15f99ee2b9c02d9eded701696573f938e084555c9f27acc7231d78b6f8d64c16278218c62e3b0aeedf7eba4cde28e5f4d39b42c753a3c3df022ed475f9b3e9e

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.746_none_7a0308f7ffc334d5\Performance Monitor.lnk

Filesize
1KB

MD5
88b9a8f45baf8768fb1b875aadf43155

SHA1
c7e8a7f16757ff4f7b9b9af62e92e87ec128dc66

SHA256
75ec00cd9f7bff4f118f66d96d3b3314e3bc91f71e6129a79271e4f2fcf48727

SHA512
d0b2b29ec454162394bbdb75f711cd8f51e457cd6b3587c94d455e1542291449b4686b16986e670c1266d43d558024301d205bda558302511c5e5410018c3017

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.746_none_7a0308f7ffc334d5\Resource Monitor.lnk

Filesize
1KB

MD5
a670cb07e196a39aa7c933c917a73350

SHA1
1b2061624cd163f385f671cac16dfa4f002a3dbb

SHA256
e33b42009460c8a38ae20cd9f203bf5c95d31ffadda9a2ad43cc0628924a41f3

SHA512
d63ece5d161ae7b324d5207d00e6f8479ccf083f3e5101113c6e74c7d3047fce94b99814cde962a2970732fd4499b198303fda98e33a56a7d79763a1468e1e7d

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
55ca7cdc06f0f068e3c060f447602365

SHA1
05fc0cd8c8b1b8e4754d7e54cbb893122b8c36f9

SHA256
7f91dca3785450bceb41a10ddb968b78717d7d0170b5bffa76655049e62a9abd

SHA512
bbf3bd365dc05d698b10bd8e337378bd4fac199dfbf335454c3763898b2231760e029a7ddcbcba6c3d4fc06545a9874015aa6ca5cc73fcc0f39f0ba5269d80c7

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
120cb34431ca56bca29bd73173afe5d6

SHA1
870f119828e340c186cbc35ad29b8a4130f10f6e

SHA256
63c2533b48d947708b28bb696d88a9c5ce3756dd18a8f8526aa083e7836bded3

SHA512
1a05de9238e930992eb85b2f35a8c825961214814c6dc0190271060c5130ec6d74a3c94c00fc918202b04adb7458573cce8bb31ce8738cbf285c85835664efac

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\squaretile-sdk.png

Filesize
501B

MD5
d52b9ff7f391018919ce2b3cbbd8bc69

SHA1
c0eef5b6c9b0ae070ddf2e4b8d54a12a86c66fdf

SHA256
6b8616dfd910d2654fe66e544c696b391716317725db6f7b4b6f1c16cdde619d

SHA512
46d0d20c69472f2b94648d11523d9d8269ea7f12af753476fc1b84ad140cb74f4e35bf26b6abf61dbbee089f03a219684c15aacae176b1cf651f2a997a94bb20

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
55c082e5c753a3be7704ddf066d0e895

SHA1
ced13c44a19f82b143b033378d601f93b1de3388

SHA256
e45f697a81e1cbd46046a50597ba9af08e1d8311647d62a17402cc418b0f63e8

SHA512
8a7dff042cf53601adb5212f9bc6a21e48de61faf38096def0a733188e22b57d0141a7b2885ab426f76c40c73ed92fb0ef80abf0e469c83a7c14166a6830a0eb

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
c4be1ce9dc39fb83fd5a2d617c2a4837

SHA1
eca34cd429eaf350804bce704d19ea61c74fd54a

SHA256
403a36ada7f7579d09670f9b98e7dafec1c2e1beecc5fd26ee6b5fd0b4f2505c

SHA512
3e736e36954c970143a82baa806fa88a36db812d09c08a6ab4d19a78e6d0fd2c42c6b8e59b62f7f4c3fc7806f5b1d9f30e934b404de6465e9280300b034fd64e

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\squaretile-sdk.png

Filesize
501B

MD5
cc732d0bd874a5559714f32366affe1a

SHA1
b1b7b5585059d53f44d8e0dbfc260472ab658c71

SHA256
a836ae986ad1fdf66b57b8f55eac652b146a474835c2c0ee3a6afc945bd60bed

SHA512
3d9324b6ff7f7db2248f609f2364c515e39985e7db154df70926194ea141cc67a8283b8ec91b0c0f71b97476755cd272ab6af1d5b44c37f1b5821c91d18d4890

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-wordpad_31bf3856ad364e35_10.0.19041.1_none_e3ab86b70c430b3c\Wordpad.lnk

Filesize
1KB

MD5
265af51f771aa1d07f99a514396a1569

SHA1
39e376c3343dff0a948b650258e881ab246fe4ca

SHA256
4bce8b5efbe6ab79c273fbe4b8d9a3a3af6cf689c655edb6167eee33f74eb2e4

SHA512
f366f1fa30dcac4cf2485aa93bcb94c32bdb7e3f82e58790a32355874844b52bbd540ab3539b467b42da210d0fc44645b6c966d5682d4f007e31e149d8d6f139

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
0ecbd0b580bb05a766f0339c46241b4b

SHA1
5900cf3dbc49bc8aeaa1e316024b443741bfd917

SHA256
c6a9c7929a05fd7ab6eec0822c33eb45050e5ec183374f6eceb089da08e3664b

SHA512
305b5791ce53a712473be6957f46a86b19c48162609a214df22d35c6fef4b62b6323290d6e652c44942e312d6c67e4b0f10569cf2fe2eb90b0681b9418b3578e

Download Submit
C:\vcredist2010_x86.log.html

Filesize
81KB

MD5
ddc54c50ba3a18182b1de5980f6a29cd

SHA1
4f01deb918eccaccda63bd33771c194596bdb3f5

SHA256
49ceec2a52d1ea5bb022d52c82310ea5d2b14ba95f329c153503af1c25bf6841

SHA512
555d611134be1c8f697f50ae3582e90103d235d4b55c0ffb2124905ed843ea802a0be2c48ad115303392e909fbbc6939d5ac40bc5cd6626ef7978033481a2a6e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads