080e0da4d871aa45c98c302f389c098e7947e0af4b30d2de74b1d36629d22f12

Analysis

max time kernel
94s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-10-2024 23:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Size

12KB
MD5

271300dba0e4bd10d482807a9b1de572
SHA1

4a088f08f68910c787d6c433e1ac299aea07e64d
SHA256

080e0da4d871aa45c98c302f389c098e7947e0af4b30d2de74b1d36629d22f12
SHA512

30b04eedb390b14ac4191f7b7d466f545ed8691d2ed7fd88af832a6cbd17f69b29b8926658d9c0c08d08ccf08eb3d8260b305ff515b0faed6b54e3a0acc4a9fd
SSDEEP

192:e/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMCW:eebFNw4Pk1itKkpAjjI2YpdmCW

Score

9^/10

discovery ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2177) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

Drops startup file 1 IoCs

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in System32 directory 64 IoCs

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\c_netservice.inf_amd64_9ab9cf10857f7349\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netax88179_178a.inf_amd64_b6748bc8bb8ccf4d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\Volume\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AssignedAccess\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\acpi.inf_amd64_605a5cafbbd86f6a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtexas.inf_amd64_ed0ab85128ed7a01\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Examples\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmaiwa.inf_amd64_7cfab61cbab23e11\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\umpass.inf_amd64_3daa9a904daf9501\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmetri.inf_amd64_50397e28bbcd6514\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbncm.inf_amd64_9957a38c3d2283ed\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\winrm\040C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bthpan.inf_amd64_b06c3bc32f7db374\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmvv.inf_amd64_26dc960cc4c84207\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvmic_heartbeat.inf_amd64_ad33c2d1c7a3023e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_processor.inf_amd64_4431cc603de6e020\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_memory.inf_amd64_6fa9664593233d6e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\International\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_amd64_28c103304ddff3c0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetworkConnectivityStatus\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ScriptResource\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TLS\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_df49c4daa6251397\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\storufs.inf_amd64_a7a5b507fa22251e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\zh-TW\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms004.inf_amd64_c28ee88ec1bd4178\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ks.inf_amd64_9fac168e1cbea90c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ntprint4.inf_amd64_0958c7cad3cd6075\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tsprint.inf_amd64_6066bc96a5f28b44\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netwsw00.inf_amd64_24d55504ae3587aa\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InputMethod\JPN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\001b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_modem.inf_amd64_8cddb75e34142905\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\BaseRegistration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\gameport.inf_amd64_edfd5301fe3972d5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmatm2k.inf_amd64_de71647ec29a6bc2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_1793a485b491b199\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\WindowsOptionalFeatureSet\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Bthprops\@BthpropsNotificationLogo.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vstxraid.inf_amd64_300cb04282659e6d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ScriptResource\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netathrx.inf_amd64_220db23f5419ea8d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0021\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\iastorav.inf_amd64_87f761c07c99d5e7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-GB\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetQos\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
File created	C:\Program Files\Microsoft Office\root\Office16\FPA_w1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\423x173\46.jpg	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-96_contrast-high.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\SplashScreen.scale-100_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\javafx\jpeg_fx.md	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\VoiceRecorderWideTile.contrast-black_scale-200.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\StartScreen\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\EmptyView.scale-150.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Images\Ratings\Yelp7.scale-100.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\XboxApp.Telemetry\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\SmallTile.scale-125.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalMedTile.scale-125_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_CatEye.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-48_altform-unplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.50.6001.0_x64__8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-40_altform-lightunplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-256_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MixedRealityPortalAppList.targetsize-96_altform-unplated_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MedTile.scale-400_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\WorldClockWideTile.contrast-white_scale-100.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\sv-se\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\LTR\contrast-black\LargeTile.scale-100.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedLargeTile.scale-200_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-16.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedWideTile.scale-100_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-400_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-96_altform-unplated_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\d3d9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\x86\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_scale-100.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-48_altform-unplated_contrast-white_devicefamily-colorfulunplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\10.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\osf\businessbarclose_16x16x32.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\tr-tr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\182.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-30_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-60_altform-unplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\ru-ru\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\Tolerance.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_2020.1906.55.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\FileExtension.targetsize-20.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\es-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GamesXboxHubLargeTile.scale-200.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxGamingOverlay_2.34.28001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GameBar_MedTile.scale-125.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageWideTile.scale-400_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\he-il\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x86\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNotebookMedTile.scale-100.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNotePageWideTile.scale-100.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxLargeTile.scale-150.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-32_altform-lightunplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-72_contrast-white.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-20_altform-lightunplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\WinSxS\amd64_microsoft-windows-r..eelevated.resources_31bf3856ad364e35_10.0.19041.1_en-us_47b2ef00764d8c40\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..gureexpandedstorage_31bf3856ad364e35_10.0.19041.746_none_7a6de5f5d8410d5b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..truetype-couriernew_31bf3856ad364e35_10.0.19041.1_none_8c345a944c987d6f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..l-keyboard-0001045d_31bf3856ad364e35_10.0.19041.1_none_56eef219e79cc448\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-b..-configuration-data_31bf3856ad364e35_10.0.19041.1_none_c2b22947f3ad87c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\EventViewer\e7dd774251db1abf49179f2d4e109684\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_netr7364.inf_31bf3856ad364e35_10.0.19041.1_none_3a1a08d4c9ee2584\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-g...scrptadm.resources_31bf3856ad364e35_10.0.19041.1_es-es_c0514a19d8674e86\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_mdmetech.inf_31bf3856ad364e35_10.0.19041.1_none_7078ab56027910a2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.1_none_b1e502c19c2a358b\Square150x150Logo.contrast-white_scale-400.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_10.0.19041.1_none_1131bb871e4fd455\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-font-fms.resources_31bf3856ad364e35_10.0.19041.1_th-th_429bcf7adf7ba023\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..d-library.resources_31bf3856ad364e35_10.0.19041.1_es-es_9cc0962a57a1967e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..iagnostic.resources_31bf3856ad364e35_10.0.19041.1_en-us_7aeb3150f66984d9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..e.desktop.searchapp_31bf3856ad364e35_10.0.19041.1_none_43fe9f4e368e081f\7.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-e..ifiedwritefilter-ux_31bf3856ad364e35_10.0.19041.1_none_9fbebf8222c20a6d\ResetDriveSquare44x44Logo.scale-125_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..xecserver.resources_31bf3856ad364e35_10.0.19041.1_en-us_cc7def7e14ad13f3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-sxs.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4a450e5e1824d217\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_halextpl080.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_520ba48589e57f27\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..ompat-adm.resources_31bf3856ad364e35_10.0.19041.1_de-de_c87bff8ffb336d7d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wmiv2-mdmappprov-dll_31bf3856ad364e35_10.0.19041.1_none_0b3247004afee6ee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-onecore-l..layserver.resources_31bf3856ad364e35_10.0.19041.1_es-es_14701a2d22bfe971\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..questtool.resources_31bf3856ad364e35_10.0.19041.1_en-us_6a05254c1216c07c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-snippingtool-app_31bf3856ad364e35_10.0.19041.746_none_77bd4cfbe87238a7\Snipping Tool.lnk	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-virtualcameramanager_31bf3856ad364e35_10.0.19041.1_none_acaa5950a20d0f68\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-defender-events.resources_31bf3856ad364e35_10.0.19041.1_en-us_98e51453743b2af6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-system-launcher.resources_31bf3856ad364e35_10.0.19041.789_en-us_f5c64a436213efa2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-t..mework-uimanagerdll_31bf3856ad364e35_10.0.19041.746_none_8f0f28c0c1cc1db3\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_fdwnet_31bf3856ad364e35_10.0.19041.746_none_1921f7f1d2e0ffa8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..e-runtime.resources_31bf3856ad364e35_10.0.19041.1_es-es_0ab3fc25950f613e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-credwiz_31bf3856ad364e35_10.0.19041.1_none_55cbbe2f0b32a503\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-bitsdiagnostic_31bf3856ad364e35_10.0.19041.1_none_023d0df5c3f06a00\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..rformance.resources_31bf3856ad364e35_10.0.19041.1_en-us_50fc38b2da301716\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..omerfeedbackmanager_31bf3856ad364e35_10.0.19041.844_none_ba2b07b5ed02761a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-com-dtc-oraclesupport_31bf3856ad364e35_10.0.19041.1_none_47429c6f4f6ba844\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..tprovision-joinutil_31bf3856ad364e35_10.0.19041.1151_none_e9f3583235551cae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-tapiservice.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_df49bdfd73ff1fe6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..c-service.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fca62a6997cfe312\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_multipoint-wmsmanager.resources_31bf3856ad364e35_10.0.19041.1_es-es_b4bf1b713d506059\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.746_none_0b4ed891dd9ccbc8\square150x150logo.scale-125_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-srh.resources_31bf3856ad364e35_10.0.19041.1_it-it_b84488df74bb7a40\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-docking.virtualinput_31bf3856ad364e35_10.0.19041.746_none_2c0c715916f96491\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-m..-components-jet2x3x_31bf3856ad364e35_10.0.19041.207_none_69a6135860c08a45\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..anager-unenrollhook_31bf3856ad364e35_10.0.19041.423_none_ac87408bccfd2ef2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..ationcore.resources_31bf3856ad364e35_10.0.19041.1_en-us_c072fc43c852c692\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx-uninstallsqlstate_sql_b03f5f7f11d50a3a_10.0.19041.1_none_1c0bfc40a47d8d2b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\it-IT\assets\ErrorPages\pdferrorunknownerror.html	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.1_none_ceba36fd1b479c4c\AppListIcon.targetsize-80_altform-unplated.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_umpass.inf.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ae54359bda2091d1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..n-comrepl.resources_31bf3856ad364e35_10.0.19041.1_es-es_3029ed8f79d12e1d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wcn-config-registrar_31bf3856ad364e35_10.0.19041.1_none_e30dc15461474d20\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..-accountscontrolexp_31bf3856ad364e35_10.0.19041.746_none_d7852e961461a368\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-certutil_31bf3856ad364e35_10.0.19041.746_none_937e52b9922bd791\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx35linq-vb_compiler_orcas_31bf3856ad364e35_10.0.19041.1_none_4bf3621a8ebe2ee3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_2426cc56d654beaa\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.84_none_24f8aafdaceaf0b5\wide310x150logo.scale-150_contrast-black.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.xml.linq.resources_b77a5c561934e089_4.0.15805.0_es-es_75baa724eec1790d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-application..haringsvc-ntservice_31bf3856ad364e35_10.0.19041.84_none_c43e71af69351575\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.19041.1_nb-no_e4c225e2c387ab8c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\debugger\images\functionIcon.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-rasbase_31bf3856ad364e35_10.0.19041.1_none_c3d1756519cccb94\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-uiribbon.resources_31bf3856ad364e35_10.0.19041.1_es-es_833d1f0989b9be39\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.173_none_6486f23c2831aaf3\ScreenClipping\ScreenClipping\Assets\SplashScreen.scale-200.png	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wmpnss-ux.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_a56e8fe881c9012e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

Modifies registry class 10 IoCs

Processes:

271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "LVFSQWMQKONJWPJ"	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\ = "CRYPTED!"	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\shell	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\DefaultIcon	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\vf2armlQ0yGe8NP.exe,0"	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\shell\open\command	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\shell\open	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LVFSQWMQKONJWPJ\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\vf2armlQ0yGe8NP.exe"	271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\271300dba0e4bd10d482807a9b1de572_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
124e42b7c50f09defcbf550678ac395d

SHA1
8402b4ed532998483b8209e6f6e9f8a443802db9

SHA256
0b0b1ffdadd57e9a3670ca450e4a926e6cf846f716a1847fcbd8c2c547d69f7e

SHA512
b8f364270e89b5acaf3e4c4b756953407b082162c0c30fd193a7a052993c23303a03724b659ce0975b97dbe37b2bed76e8884e72620ed3acefc02fcf76dd3bd7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
74bdd02a91c77509891bd76cdf55fe78

SHA1
043e8e4b05f123015cd2804f1f6c28ec4674a650

SHA256
398d8b2ccf4e84a8006496d942d988cf64c3bf4a9a7e4478fe3cc4999f642f35

SHA512
c0d158b655971485aba2cf9437f13b93b2f8ec489f4ec7f5c39f26b722efc3300b3f59491d38467014e69a699fb1d1d4e64f7ded3fd714dd65228acd63dea7fa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
ef90267a80eebd5c8c74384d8b9d45eb

SHA1
d55e9c57209f2742dad9f938b218ea23b50db2dd

SHA256
81d36e5a18861fb562225c5222d228606498a747bf0477b1ba30b5b689334494

SHA512
98dde5a0062af809d529e4fb6530bf76baaea62fdaafd04d596b2cb9e2c09cf1d5d5c2b02674dc7cb7a09791c55b805b15b8a1a0f9333ee540361f35e99a2ab2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
03273ea3847b1cc1aa9acff21cf29311

SHA1
20c6c62b82940394b8ad58ad544069c85305a670

SHA256
c00f392bfd9f2ced96fb60d9a6f10d7da78aa194a494e3e652bb30756fd34082

SHA512
01bae18c08a34b185ebf5824aac32940bb341d5cf3670deb4c52c3031ac59d1ba1b803e79dd2758facb7695c58435fbf2c81ce69c61918546051b6e75b87376e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
58ab8bde69ebe5d98af1689054bbbf7f

SHA1
9d60f2bdc28144ee6192145b80c6c6fdc68dd1cf

SHA256
438a65f123363e8f635e0bde4ab06a8c25a02db03e3acaf696699b6e7cd39c67

SHA512
f1a3b8ff45306666989c1ccd7fbeabe6671ed1f33d83800abce940460c1992dc5ef38b0c65f9353e6e875c7a39066118362ebbbb92a11fdf6ad0199e49362952

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
1be5c70fe2b4c3b98e30cf4ca7ffeff4

SHA1
cd95cac94330d56e0868f212485fe9594b3072af

SHA256
a7f5503a95e41996154c6c18d3bb7a677d27f55c5c34a6b7a358e35a6742c66a

SHA512
fbc0976370434a201592b35f24179a7e60a8395df027c4520ab86e74e7f265678845cafa5ea65009cf7bdde8f05ccd3c1de686bbbc948d173a1d0cc7766f4d28

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
4625fcd0f7a680619da5d3b66a9a0e81

SHA1
9d509f644eb888299878d18550f07267875781b8

SHA256
0fc11209d040448efbb5c56f08c7cfba495dd706d7d62f401178b74bb081afc0

SHA512
8caa26863e5b84aa53d02665c369c0088cc987ae9b99fd0f031d3f94796fedd2fe70365a357090d8d029bed9e8866f01b2693bfe792a4d0dfa8d213e68debbeb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
43131afd36cf222a0f35ee26a533bec3

SHA1
b4fd977d66fadf68ed3cfe1dfea49e5209919bae

SHA256
e86b3f93b9ecda67e8f144dd189c3eefde0034024420c1f83f5568c5d595853e

SHA512
f695f139e2442f863cab4dfa4aba5cb1d2cceadeb2b479f5870325706a5d85301328e1ad151d612fd795f988ab83f33f775da5e2568ee76f45e1e38a7a05d21d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
1c1ac31359dd73276f6830f46a0b2161

SHA1
c16410d8142fc229817b45825637bf215a372551

SHA256
8389632bfd2d99025b76156a7d12c2d0651c5a4ae32e2140b6c17366a8182f0e

SHA512
ffc358d614767d1b7654600e697e5b7a62d69b2b60920c697289566618edb80ebee42a0dce43d62477e2811d993de10bb4a4915e246843d5226d1b5b1acf8b15

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
1d01c29abe82b4b09a4ee59c212f4d49

SHA1
5370c08b90ff1f783d34e0c3274a384cd61735d4

SHA256
d10d54594367f4ab4a57d3c9025981877ef8682da86f428ad28d015aa5959160

SHA512
c398255e58166eb918371aa45f02386e2008247f9790be7527529bc0a4f6ad16ad201902198e2c56627e9bd65aa1c7916fa8593add646b5b963c0d89a20ca563

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
13329d6e0f419db23662a36c89906ee9

SHA1
6e2ad5cf808f3239d2d24207a01829f6b31efd5a

SHA256
6f46a620cf40b4bf8f0ea2bd2592a363094d309bd82ea89f419171139a2615d7

SHA512
cb2867f3dd65b40f17e31dd6349d12c27225248be8469244b7b9fc017045c784b2971dd44abbc5303ce79d385e4cffa787731e5559c721a0b53d48724b8fc290

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
1fa8c57d39e25b880a6ff0318daef804

SHA1
d2fdf324ffee3f0910e247e5b378e2cb482ebb0e

SHA256
9e7eb7edb3b1c6fbd4d91530118e63a4d5c41480b819f6a18a9333c5da32bf8f

SHA512
91b5e5978737ed5b30f92ed8fb42476a15ad99c4b49671ecad5a17eac3ae3a4520be457f8ae76ac2757bf4ce8e5beb136197a9e6608a4f31ee39e94b6c3497cb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
d2ce7e1b75fd6e8d4b16948eca96627b

SHA1
5d2a068092cd8893063346b25e59b2290af17136

SHA256
7fa5c79b9b7c6035feef524fdbcbdd4023152c9e6ad10be9b3ad74c1f37bb3db

SHA512
b4549d016f21b86af7195317c7a0d393ecf729096b562ba3a3dcb95a934c4577ed3c5345b054cdab72474b9eb3b1b10b08c72b9150ac68a750c130c26cf83333

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
20331d86c3c3c2ee93cc02a815195f1b

SHA1
7ed11b0ea1fa62ccfca4f21882a49b91f51a2d19

SHA256
8df3ca354acead417eb9cf4c86f1b06a8381fcd5e71f4cb67d9f1d24ba8cdfe5

SHA512
ae81a14e70521d26ae75d4f7e479e14fef92c4460e09d51027e5f71daefb91743f3850f7546004498be87871b61e42896c8576e4ffac510d5b0a34b19e901a76

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
a7b459eeb80b95491e4b7c4d65bb4def

SHA1
46c769894864930e4438b7f309d78492952ea1cf

SHA256
42b4f2b683cb35aeb9f02f3cb5f35779f115f2d9e1f664002d1770fbe4cce271

SHA512
edb8d5a279928eea853ad8c4bb118d3513e3412687490511b4327fcff2be261f490fe506335ec46ecd974c25d5f937603b4f0196c09f99ced707400ecf9c3ed7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
02683c15e2c610148f4e7dae72894f87

SHA1
6b54b92fe460cdfc7881fb74aa423fdcced8fe8c

SHA256
1a51e441cc12ff3cd178cac92507d4deea0b2cb749a9b50cca7d254b97884835

SHA512
50a3045c1b425663f55bd38c66a4240d11ada2503db607b4c64001ed4af5ed16c3abebb0bf57008334de6258d43663f1c9898547e54fc48345f760825ed5be67

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
630c4b39dd4b2763142b96c5ef008eee

SHA1
e93b919c62598d96bf78244373cd1a14dd32d037

SHA256
e0d43fea98442a12f180d0f322b45a59872ad176f04821a3e8a5fb6e94318674

SHA512
58c8645c56d699aae94e753fd7d693ff7d9693bc3857f524b6b95fcb60168fba2ec3db279263dd424ff919b7bb2b2e6a67fec59ca647bb2d8be28be2d6fd4b38

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
8ef1e2783937fb2781d4de66bd064f78

SHA1
81dc532e82f3c03513602ad31f4d9970cc6c1d09

SHA256
1b0c8565b0bd302129bf2fe10d447745538535a50f67f603576c9f7ea9ccbdc5

SHA512
20d0ceb46d9cc215c05549c0afe543be0e1d35d74ecade6841293208ea0e62e6dd3b9e72adc7b81fb043b0535a2b9151efa7f1f6561801c81461f27342978e85

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
d36e6ffe1d0480eb99a7436f31166120

SHA1
fad00a8e78cf2dd322d689df44d56fb4f8b210fe

SHA256
c5d931760e98c91e9d9071b15ceadfb06f61b796d25faf0c03b10e96527eb714

SHA512
852bdbbb72e4037d56fe48779bfda85960c25841c74fbcd7357c35c0961f81ce102359bb3cc4542f0db36e40bee62aa4d885338dd75f2281c6200fbb39f970a9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
4e622b9cf997f9b68a0d270f63a0b400

SHA1
765195619e117838369e2a5f732cc29c485bc00a

SHA256
30bdd08b84963ef7df46453d6a671c5ed91744c3ac891b752bcee66ce97e4ec0

SHA512
4ba58fb28e232f2735212ec881d943861967b95fb87270b7b01885a0f6b5449b0215c6f23cd04cac4756ef461ba21e8b90a89531b8a7cc562d2ddb6dd33d12a6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
f6f6e0b061e8fea96f421bdff0044fa9

SHA1
f473cef88ff8dba69c110343764dbc329a40cc63

SHA256
75c03dc11b192ae6e17e867765062812214b3ddfa3a1118652fd2d748e062884

SHA512
4714a5b42cbc81c7805b196d7b77cebc71c42c9c4aff196e5026fd2e8a1a2e1efeae8db92f9c92cb8c2461d669c5dcd45ce5481e614d1da2b080b304c348d84f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
53be130d09591509b4b3ad3392cc80a3

SHA1
ab46f4b7e3f3775803e1b9a2fee5d9223e2a29f9

SHA256
5f9845faf53be7160bde9f6db5468d73f029b83e3a8f781bcc38aca7ae073bc2

SHA512
673b23d81856381bab39459456b1219e7103a047bd1cb3dd2acc198a8b54ea61b8efa324068e0d2e5ac45fbdceecd9788a8a88172a8d69400df87f5deecab46a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
d94e87aca5478cd902cea285390ee683

SHA1
64f9dc4b82c67f869677f4c948ec3e8f9c1ff0cc

SHA256
af4a48e9c005ecc2479b2a5c4706407e6c207db952fc59f3971405fe03d58e7f

SHA512
e6e6d8ed3b89f6dcf19ec38194835c3477fecc8ec743a5086a3d334bb10b66b272cb7bf2329dc75fde3abd0c1511509ed18f9ae8c90c839168046e63b1016312

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
7d8b4172f71f206bab324b7e4b54487f

SHA1
41e3ef97d51eca1d1cc68afb04904be53b13ef77

SHA256
775577091e3e09ccd3115816939cbc97523f5e2a613e9e62a87b7a17a023e459

SHA512
550cabb444abf81e4a6b11dd71ad66d12c5fddb698ab880a98c9b36655bbe8afa2eee797c11831a76bae2123fbf735f283d6472104e7787085959669271431fb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
8527aee891ddfbfb19a9fca7d9fa76d0

SHA1
10206a470a8d42dcd7898fc596143d089f18e639

SHA256
87a3328e407267e058fc8ab8bcc543cfddac94aa11c2e2b3d1c55d596b4598ad

SHA512
fd6404216fab718209968770bd6c5859fd06ac70d67c7dae8ac9151c6123f4423ac032ecb14626d5f952342eef0a7644e16996ef6f6a7fb1130300c09ab305e9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
1848152ec2c3d1b18d2fe706e83a7323

SHA1
195c0deb67f8e1992de740df7a8a80e0db4e57fb

SHA256
f7c8126c135e765ddbe188c0053174e727bb9ae9a69835f518bd0661f1e8bdbe

SHA512
1c19f3d9845eef7039c7bb4e10f3806bf34ebf1b856798cec59223b0617d297e9766c27807a391e50f522d47759fee18fee047d069b5a7ce6192dc5134153950

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
32dd436a5fde0323b1aac30816204eaa

SHA1
88560d2453eec34b96ed1e84f9028fdcbe2e13db

SHA256
e6b889a40fe37d2d1679bc60de945cae03fb0408673f78aba9099003a3023466

SHA512
97faefbacf8251c9437ca0a8ea6d08a26e6dcc3c58fb0102ed23011f6b23de6ea64a98c71e6d6d9bb16447c756c86056edc7f359ce752a54fe257a8757bbb271

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
208771e3d7e249e768f5ea9fd2b258f8

SHA1
40e366fec7e16ca697dea5f4ba502a3a142c2b08

SHA256
fc1f56a5db469cc0bd732eaf0bf6bdf6415a1930c0579dee1fbd47e41b4cfde9

SHA512
e9ee174f16a4773b384880dc84148562e95a26c90f21031dfcfa25549e303fb78f34bdae362d3248d713c2075869af750859d6e8b0171245f0cfa5125900bd6b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
83aec3552f9d2daf35eb15bb2361652e

SHA1
d154b01e546c25c76aaa76a76443899a889c1063

SHA256
59d550d5d4efad8e001daf7dd992fb3083faf36e4155679e33436ae765a7090f

SHA512
33816f79b4781258090a889722c7739af1162cd0a53b30c1f098c2224c33ae868c5111c585ce3ed9c252267d1e506d63023df03950535b6df7886272adf22ec1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
6249ea908694c7a0449f4a392cea5446

SHA1
7eab7ee518e04338a65d6970765585d07fcc6dbd

SHA256
002096e858397e4e7e1f6e4813fe0bcb2f4daa18649d204c30cbb128d29473eb

SHA512
bbc535bd3097788ed858e8691bcec86d4c34f9bd7e66ef8fe8a7973aa2abf61b24decc0848f352de864ed396829ceea24d304b4c408dd0ed89acac49ecba4c34

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
fa79333155f9e3de3079bb4bfed57559

SHA1
3339359be743d60059318a2348157c10d1fcc2b6

SHA256
06ff56ef89aa6d17b607d09ddfd92e08c3de2f5c3c70d6fe926e50a73790e252

SHA512
dedfc463acae23dd09ab06208dc0510957e14783bf030e9e62d077803b9aaf42cc209b0c435aad47fc41c82677e1e7fea450b7894f184643496c5529fab25337

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
13cd4f9d4b2e4782762a191490b66003

SHA1
f200d378a69d640fc5e1a6f995257e0502e068ed

SHA256
43e09e7de4e403a1e5cca0879f13fdec563f15fcb5b517e242c268fa533cad3e

SHA512
6bef419fe2fb2602ab6409c3d9c74c66114ba37dca6625d67ab24053fa78f4d2c234879bbdfac522a299bf52b45ca822bebde7d0462430dd313228ff70d32583

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
5e641de1f9e0e296f5599d15fde58a2b

SHA1
df0c41498823fd1e4d6fbe45d64a7cf58286f0e7

SHA256
71976b1d9a83256328140000613ae4129e632785652928a09f3e779932c585fb

SHA512
8efcf8b5f12c3e48cee4c7958ce8069a1009c05faf277a36c8a7bc4322ab4e8b0babd45c4ecdf28ccf8df02620da5a904fea91aa9f8c697025503035ad067479

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
1574a1438396e3e39145696aafe82e38

SHA1
faa0086cae3466b2c2a7635db5cbeef235324131

SHA256
294f175bb3030bdcbc0cf1872012b1546a7c5c793f47c6dc8730cfb72512e2b8

SHA512
f465ba807ae406cc5f14c41bb37bc6ac2a32419c20e7e2c7992c798f45d2343da95405fdd43de9e640f39582f19d76a650330eed59760c9be2e4d1323e2b77da

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
065be0399e33ea930ec9a04dbad98081

SHA1
ae27631623451d4a88c488fde7a6496d245017bf

SHA256
3edd96b0eba0e2fe8e13d532de9008ba786bd4d85e004c5a85b431712ac0d831

SHA512
ca3b51135d2590f5e8a9fc6fe1fafa19f0e75108ab6b73dc7c8341c28a8eea3309290f547077e35b20d5b939cbd44ba5b079d72eb779625a21ce1fda10c21778

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
4bc369172f2f0c3ce29d43da83dd3d39

SHA1
e6e4b13b82674c65f88a6070949db0a0ee1420e9

SHA256
d777f953cd4ccb80725350415e9ca4693811a94b03e55c5368e54beddb08681c

SHA512
80bf92de5b66e043dc5d6377f9bca87274848abd131ab819763ddb49beae4f7554e8e742d0937d532929e7f117c264fcd2fa6bb8beab4c3b08e192e1cc32adc5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
52c3d4c4a009638eaa863ee899558f06

SHA1
4043dafe8269de8def8e7b277ff48559908bc526

SHA256
c8112994ca567b0f332c95a6490a76122162ebc883d267ad4152041dd73a70f1

SHA512
3b056d7522c120adda72f7bd0f61112327099218f34777f0c962b7dd540bcacc7897a08e017a7e6178d66f7a3ca05537ad2c1a554ab664515d32580f9da6cfe0

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
01aaf1c2eaedb5646a9f86cbea673379

SHA1
9639da184825a154bc8d6a3b57206c3d1d5b14ee

SHA256
f9b82e6f352b04e2fc688db406edd56ec86ec3c4d40c25d983ad7a222de8fec5

SHA512
14cd9ea61c81d42d344e1645b2d83037f352264f9285b2a55bcea58ac63631331099507b56e530e5a75eb091692c4cf43bed60458c358319825acf8ea630d436

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
282B

MD5
69a98ef655778f1cb3764a923acbae80

SHA1
22683321e95c9a631039d15fc49ac5d3e639ac54

SHA256
2ff127d5bc4c7333c8f522aa4b456684eca97c06d452bf7d00b6a99b49b11b0e

SHA512
610fc09f40124e1a74ff303ddd95ad5809679be9e0c381e5d367ecf8e1e137c3da188142de7a2c5fe2b1225e12482245f2b5c417d43d73618108bfb1c32a5ed2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
909e8ba569e1e67dc9d66359f1aedd54

SHA1
8e023a452996be5c64f99e6cc99fc830839a79c8

SHA256
b0b918a9b5cae8758c441e9accfd89ed9ebaedc967e300e7361760efe5e9e7f6

SHA512
e25ab14d078fb910f59660e96b10e8f57ff3a4f35e878c7d26cfdc6d76e729f60cc80886f8bacb5a2d00b211b66de7597bbaba8f858d0d84d89dbf9dfe5ff48e

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
92df00d3e851631d6f58a7e24f97632c

SHA1
93041026d6908d3e9e0dd91a5dfb233b58f79bda

SHA256
738a170b603781f24ca8c6639668a22f64c8d1d935a710a469d107a6b29fbdda

SHA512
b672f06cd0ff0517910fca0a114a96b247a95709de2e188e4eaa76e3bc2f1620b54c7d79f5901b5ce9efd208b4c8de3772563ee977874e05a87cc02e2af672d2

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
935d2b3cf5d9ea9f91fcafbe78f631e6

SHA1
b7baa5e2e7db4acdc67321c4c54b43cf28bbd0e4

SHA256
b6c304dca4428239bfe403fc8d0bd6dbaa62690f969898c7bc9a7b68bf63e7e4

SHA512
f33b1e8d1b3b24cf087466160814082da3cca9122a34533d277cb29a541ab28bd1380dc200dbb06ed34430244eb9ec58af29b93d3f2177f2835bbc11c1ce207f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
f84682ab4966c7e36500401b44770af3

SHA1
24dd421dc34b5e003825924c6c8a885de7614053

SHA256
75eea3835bbcb52806e501f48ebf82c311c2fb3e249abc4b0003c286f309a527

SHA512
5b1be6dfe6b5e6f7f807dfa1b0ecc98914b642e5f6b13ea59b905cd151da3115a724bc2129b86839e53676a93e24fa39de8da7bff28a57ad24b9400889d1ae4e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
ea26ff91b2d89b15028b7d5b2cde83c7

SHA1
a0daaeed06068863de356603eb24eea7b8277204

SHA256
7cfa30078e7ccca9c2351d5ff3b7312cc6b2d696ebdfd6dd53da82570f2c1167

SHA512
ae68faed16a24ed9daa89607bdd85bd28249bc291ce0312595deae639d7448ab37fa549f282c5bc9aa06088b0d2cca2a0d2378437401b96a3edf000bf0aaf607

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
d50a2c622ebe4c717f42d894ce33ee25

SHA1
f564f78915a7a8183f1e2021b6d43b74631a5fcf

SHA256
6e537e41b2c541de487229c16d9958ec8aef494423f198586532b970330eaaf9

SHA512
a898dd4803c12d1d4627b4a035705da7632aaf398e6768a4e338eee069acdda4be28b8170dd9aef9e510ab00687003e93736ce67c4f3b20e42d205f451bfba43

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
a5dc4abc2c9e94ec037b2b9464a04a8c

SHA1
e8d409a496fe64d9220e9e70501a6a0db025ba7b

SHA256
f64fed1e734dece275bc6324fb1f7cfab01fa9a50b89598a66092815b672984d

SHA512
8e922aa65ac4479bdcc435bdf0b4e0f9e02c4a3a3270da6df461b0fae849f3a4c553e6aca387ffcd7215808a25a93abd597e02a6001a4a2d6e9ef36d5ae89bda

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
fa1bbfb6a57539ced6d88b7bf7cfe16d

SHA1
9d47f58ad4c400a4f8f40a31fd2b21086700c0b9

SHA256
f00022142ad7a21f838f5825fa6dd6baa8d033cffc9eea5f03f3ca1fc0b38b97

SHA512
30816bc5875492f1a4c6f23f6c37da9d1b67c219b768330776abd064f03eda0059a332d1947a5657690291cf4867c828b8a5f7d50a10c01c2554089ef4f026bf

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
380253d174cede6cd93f85dbc40dfdc6

SHA1
29025491e40b692b106af87640550f403ebb4abc

SHA256
ee83d4b997a89e3dfe8c43625e849d1b4029ded97635a5b076525dc7255a7717

SHA512
9100699ff8494b88dd81cd91b7ccbd26fb5202827eeda1b05e57986945e264f0df95c41d23a555d3dd7f7848ad424c01c43c2ffd7843e3e88f73a82af96957cf

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
c85e3eb56ad09f583b2afb40730127b9

SHA1
68b9218842d8ef0e0188bc82fdca51e3695e59a4

SHA256
ffe92b44810e2252ba7415de1cb13386a25a2998dbf1f0fea76bf70607bd3c8e

SHA512
7c9cb89ef933e79b584b6e9293cfd3249a53729fa98f30c9902ae596b55ea6f26a04726d9da524fe74575695f8bf5953e0e55697831af856f6ccc34014bc3031

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
42a7b4af0cd987560bc2a1b74231bdaa

SHA1
aa50fb015777b93829500ce4569b66e044a46f25

SHA256
5461bd6ba303901761a1059861d82d0916753b8e750d3b2945be9939556ac127

SHA512
74c9b19c03d6ce3c0c3f1adab70a003a241a32be7ddeddd1641a8d3e536f057d5a57bed5297d8a60b9255caf952df0cda433e3f7e723f0d869797c154554d5e4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
7cb9007fc027872e50aa2b5d8e7fbfa5

SHA1
b40c5a347fdb08ba4b12cf37d1e08d464c704bad

SHA256
4fb6da64910353d2ab38933186ec407c344d2a6e3c44ea74c437a9f8efa9758a

SHA512
8aca068eeb3f54c62053de2d80fd6bb396676377ad12edb3d13278acc1d0c0c012a6750c7becac9df395826d331bdcf8950c243c16f647f75cd82cdbf54e2be5

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
3fcd879adf17f66fce2357706225cd9a

SHA1
f53669bd670b348fb527507d9823885f392e3895

SHA256
c4e47ddfdceb99eaebd836c5507b022b71ca28439abda84ce2168b173ad1914a

SHA512
5b390ffca395fea89c2728a8fbd7e484a0fd15765870ecf1a2ee3cc204c43a8470df8ad11c3824c406f66a3febfa6d5989d2798f74f22c0647aae4e86eaaff60

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
2ddb6da0de5c4d96662aaec6f7010612

SHA1
115051e2bd99ef34d993986df3e92e7027021277

SHA256
9b2b4af304fbb4ae06ed29117327dba2ef12c58656b98300784a4c2689392b51

SHA512
9ce4c97dfbb52870c7cf6d2b01e5cba26f2a0c7b41fcb9f311a5e55152e06999e5c26f0c1f03e4bc0fd239f25e5fb6d262c3f9510064cd78fd9edd5550dcf0a6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
9da5e51bca4edf9f4636755fac07d04f

SHA1
8052a8871729b18351b9859ff51b0acee133f44e

SHA256
74aae4d671b1370800dc2ec75f0f965579cad13ea44eb13efdb13c14e0f16f87

SHA512
850b574554f27500775f5a9847afb6556db0cb58f8a48724c52da3b8a2f25cf83890003b82e17411c1af51a9d7d80e3dd3694a823a230c66d82262bee4987fc6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
72da4e07be117c2dc10166e7ade72b29

SHA1
a295bfc01d92debc9586b2a9cd080eeda73a491a

SHA256
6488721adab66d081b93d86d23ec53121b77716edc21a1231ab2adfab4d898ca

SHA512
37ee65fdf031b2554fff3afd3f680dc2ac977b208cf68e6359f53096b837b550b838238b446a16ac994ab7e1f859380b49e9a05dd65648a7ef89cb46cf4747c6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
91cc11eb5ca035492a9e0d42196d6db2

SHA1
00038e8ff91686b57b8d26c431f6f3b4ef58cea9

SHA256
55875d194c13cf117554ce0583bca42e49c20dc6a33cac92da59e8e858d7b1d4

SHA512
0ba46d50dca6ab15a0091cc6a47ff9dc2f08f198029aada6fea060acd4cb329837964c247eeab74b17e0dbd043225f6712d93113982fbe325719595503120ba5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
212c6158835694d606357e417f77e695

SHA1
e961c6f600db53ca52c1b0e07486881d5cfed441

SHA256
a3c3820e89a0cbad9a2658fa9ecff790d145af3571ec31f89e5a3b219463bfcf

SHA512
eb23af11c557c299a97386807ec969a72e601e60ced6f56ebcf0b3c0c76c8203a8290d701e22295f3dc03788569d32ef5f0b8e45693ef888b84d2361e80ea4a7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
f06e25c2775528ee235a6b25dd358093

SHA1
1cbddcf9cdfbb68bc59cca6359f2de273321a390

SHA256
3715f8d3395cee723dd2114ef564d4c834401eea2f790c8270763968d68208fc

SHA512
02b45b0772adf8000e2d5505786e08aad9fcef9bb6c263ce6aaa8249a9ba3e19012e2766b7b56f0dfadbb2e5a5efd9624eb2971ca58ffbafb86ffc8310d28691

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
165382763b4043d39c6a26f8d346299b

SHA1
b0eecedf18d0785b611ac37602111836215dc78e

SHA256
0d8d0484395ae9d23351c92f2ea814b26f480654092dbd0218fe717870086fb5

SHA512
7cf19f1697eb3cb603876690f189a293e69e3c25476f4b4ab7e1ad7387bd5b674b564359ca8998252ec841d8f2b38322fb2bf7857cc54ad19a8c34fb311b5b8f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
54d3fe2e4867b1e8602f2591158e0d3e

SHA1
0eab11ca6f0b7970c88772e28255c080e4076506

SHA256
99ceff8bc16aae01ae15393e2a28b2340c4c5466e14321dbf526ace6556b9959

SHA512
6ce48552309a62b9aab1856dc2fcbc68fad5ed6c538639c41e88439c7949efb0e52a5ec3886e5efabed7b6c7859914e43dc245f9f21545768ba21e176f55c954

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
fbb8138be7cf07a18094a6fd80177e98

SHA1
97334945608a36e7b1b9a4c6c0ce9afe64dbfebe

SHA256
41ebc98c0faccf4a010679d96d7d82a12b68cc47a272373388a657ffdff50011

SHA512
1a2bd18ae26e9d37acba030cb3c3024fb43868b457ba85095cc74ce096c072d85a5c4a06039cd65b7ab234d3b421dbd9c3683780fe4d1658ceb9d12c0ffc4c00

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
0a4635e138ea24fc0b12787252681f2d

SHA1
f63079ac7d052c941a0afe8ec522b020573ff9cc

SHA256
2fbd4c38ba9ce056df8d4f405bd9a40d8bdb0403812ea4b726f4b2357d862d48

SHA512
5f25214b78770b74a26c77dbc9c1e57262488798c3763660e822d83673c46bb7844c85239d928164930f2701daac197eee63bcfa6532bb0fc0466ff9b6de9c68

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
d526ee854bd5dde0d632bcd847a235db

SHA1
a1663bb494e741112d2dc0598797253a67a204f2

SHA256
e9e23a8e6e3a0ae5799bfc2b1461808176e6f755ae0d8e34183556d83a33ede4

SHA512
aa6285700a7e4ff04bf8200576c2d42c3968837585a6770f74f313bfce690fa5c185de2ecf15c249e879e7b6ade46944997dcabc3e12cdfe4da755f88f761a7a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md.EnCiPhErEd

Filesize
2KB

MD5
4c2215f30978bb08aca39f3a192509fa

SHA1
99b93f552936ecef302deec079c7beaac2c69948

SHA256
5c77c64d08653dafa2560d22530a493fb54dea79d9711790eebf9eacc878245a

SHA512
5be98e984e2985604d7140bdb542aa5ba4007f162dea2d66725f15e2b49f51116cc980f1dfd18218e0b8f35402900272dbf2ed9dffa2fd0134ce8e2dd51a5ccc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
061be7b64ed829ef5232a1db5e757eee

SHA1
cc2a86ba08b50478aa427ae78b357974e90bd10b

SHA256
9961bca9358722d0881637af6ffd895b626a8271191698ab1787d9b1851519f6

SHA512
b2e7c874854a628f99f7eed2573da110f5f06ee14da09913466f8cb5e9588c70602d111937b6216f1e9215c87b64d235016d74ff4326b87e6884e7d205e7eb64

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
8b818ef421affda40df02bd57e9f8ba2

SHA1
97a140fbc264aeabce0952562d3548a870da5f5f

SHA256
e794a2289faf65cf03125ba0e0a55550c2316ee107ad419bde541eeb807d30c2

SHA512
f5c7776218585f3c7a9537b1ded8ddeb786db4b70da5fec24852c91b22ccbed5653c0a698e7f36b6042459c1af121207110bafbe4947251b3233587fd81a1084

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
402b944ea3d1286a778d3b498f90adc8

SHA1
e7d73e72ce049b84a52215aca43717643c10a73a

SHA256
bacfab47b102b0817ce8bc98345f6d6f8ffe3b2f9435fc6ea707a0383ad7abc8

SHA512
db29dc63714c68d1244016ddec4431f171fc72c49f7ef29e6323a4bd97b000b7c1366961f4535b5057be028af284d2fbc2ca139f65f1b35b25f93f3e9786bcf8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
1c6b159cdbe37ee16b160099ad62b13b

SHA1
3ab3b9237ddc1ec9816d49abbcc5677c0cf8c560

SHA256
8bbf4abf1e20e0d6f48600c82cae9fd6e8effc68d363e056eb0b2e609d3df275

SHA512
94a92d220fd52173793d037a4fdda2c80465ee70613c4592b0da73f5a1768d24840dcb7bb68908e70c5a74fa7ddb550defaaf3aa67103eea695832ea17b8e661

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
f896f68edcaa75de08e11cd9b5447b1d

SHA1
d6c030740c71353e6d5c067be2dbf45e943bf1a1

SHA256
b5c02f104212707394b1ba8cbec6ac8ba53c81ae550741deb7caf3d67867d9c8

SHA512
7860915c0795afee7a6f2996fbcb5cd33fbed302178fcfc9da7dfacabede2feebb2e525a145089fb857510e7eaaeec9723fd93cea32e9d95f41a829d8c2a8d92

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
eeba17c2075aa1f5d0869c457fa34c95

SHA1
2130a1a1d79f501229f622a5ef286789559e9f88

SHA256
3f9c2bbe1753211521580c9c4e22cc992cdc89ee0ff011b3358d4fdd238d415f

SHA512
a2351a053a8d98681aeece73c8ef4c6579b3acae851a6fef99736ab47d43d6d14ba7115406923fe31295b3e0ba72976fd69a8b72bcc998bbbea21046ca800cc3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
0854d9655caba5a11811a056b95d0243

SHA1
f69bbeb809b919d24882fdf43a7a5074113136e6

SHA256
5ab317180a4fa9d4151b8759656ec0bb10f1d210e26acfc4bbc72b994fccb268

SHA512
b94755147f65a1c8a311f2e8244cde340863a5d38872b2c3ae69e736d7c42a255bf6361ef0cfb24abd5d49c29938a72481cb48e2c714708c9f428add605efaca

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
5d14ea45a2a5fb1e0c2ba5bb48fc93b8

SHA1
0bf606b534839d250a4f37d33feac56da5bbbf80

SHA256
e8b0a98c51a426588f075f6bc38387679e456f33cdb69873c00013eda38f59e8

SHA512
c68630511903de8794d6fb2438d2c0eaa1133c8df37262e2ef51bbb174548c4d46f4c0b7d50b488336881eccdd57409a8021153d020b1bd7d3e06aae772aaa53

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
ea39aca6d13f0b7fa5951582ca5cde5d

SHA1
38ac10a3f00b6a3e636c21ebac5f99777f2399bd

SHA256
4156f5b507c203adc5b8ade7132217c13ed442d023285b55ed6647b0e6333e79

SHA512
72e114fbe5235c4c2b8578990874f02431df29bc0110e35d76a6661c7ac2855738aa3d3e90d78afe1324fef36a8c8abc6d4e897e483256a0c27324f179a412a8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
f0620d99f178c5171635f259aa33f8da

SHA1
c0c73977091651537914315c4bfa4d04f51b18d4

SHA256
92aa29a5a8b8157764e3e06911ffbd3b7b7f9a37a89b420bc60b7df780d7c376

SHA512
af77a55d7f8d53e1bc1672939571105c7abcd0c58ad1f5b6725797121a7dff4d88767ebe75592f99297c6746c0ad64e4ab1826cc411d8f58b9fae82024213792

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
e4187ca31440d02692fed4c74ff970b0

SHA1
50d7836c94b4d921a18c3be0d9ed4986917b5165

SHA256
b4b81ce8625526e65861da7a557ed02fcd2b297c24a740e89a10dc32dc59fc73

SHA512
0bc8615810dfddef52452d1614b540fe6cf21d5b263f61cafee11e058a27842272954ca879114625bcf686e6abb7ad0c936fa75fb0438f6e8a9f2d5867e52702

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
2b9dceba8ac2bd7cd8013ca068d8347a

SHA1
1132cc0a9df4b8cbe60628ed5e27f02a9490a0e7

SHA256
183cff016861c556208e4c3a20f75922386a36b412932b573123d0119d87ed1f

SHA512
51c177fa5c3dc9b353655603507e033ef3154a8544914462bb8f269fceb448283e6ddd6e9b9ab509350a888fced66ec4bbc49a17bdb1fa2b5b139e7a3a437a78

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
83a8996a2e6177c7c76f6241649c4b93

SHA1
eebd42d2c913c97cc2a0157b857aaf2eaecad96c

SHA256
438f3c27c18d8eab2a9763f7e728cc198d885a61aa49d3d0187f1239c8e159eb

SHA512
072e58a9ad391ebaff4300e9a31fee10e8c9d6610cd8da0fea5ea3648148604535857d661b7938de3019dce8505eeb43cc2edc9e42dacad1f8f95532090be082

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
574cae8dc52b9c64ba94a7566c34658f

SHA1
93621196198ce9c3fa245116e8fb0f620d7e22ee

SHA256
67732d1b3cac694b5bb6561b465522906cd60c2be6ed317cc3436480d5e5a217

SHA512
7dcabeb98e9d087540937e887c842b504363ad97acf1d08fa706dad4649da69105490de0610dc6d205c9873c3b41426ee740f2351453903b8bd484f1e88f6b23

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
510994d0c2656832d84946768bdee8ab

SHA1
fe93b91d77beab6d881ea37a0dabec0f42aa0679

SHA256
6ce573b6e8fbaf1c65c888ddd111bd1e34bbc210d92c3d94c741e72389063671

SHA512
e76325b3e56d0523cfd86c6899e5f8ab3c4ec49430c74dad214f207ecb4c8a9d2ad747e2d6fee3b1fe764ba2d22c84b46d29c91d81db257988eabf9defdbdce1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
521cc77f8ebd880d5813dd77dbf0bbb9

SHA1
afbca97e60b4878a136f08dca7802cc2046c2cf3

SHA256
852f9fb85b8e0f23e4857020a9fa1cdf70c347477c5f4e357bcdc729da5b5b6e

SHA512
0ba2f8a87b06ca383c893b32d5c604f6d13ad288ef2cf49314596adb64b913abddd7d1c2a3533b5cc16ad9b37025605c990118785a031cf5337a3b25a03a9aba

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
18c8e686971dfdef263c16fb7d7c8bbd

SHA1
3c5ac5fef569565dd78d00b8f845015c31de20c7

SHA256
074b0f66aaae4434f4626305bb32324da10da55b2ad6a7fd3373a0a548af62bc

SHA512
2ce9b7da6c8388a3048495ba49917559a8debf821049fc955eb1e270f9c1cd336cd80725d6e2f7a7e8d735d499f940404309278ef7c996b391e975c9ca500624

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
8de0064041bf6df7ce7776131790e85d

SHA1
969d540eec8c25332e5c1b2483ab77be3cd98c8b

SHA256
40df242266d32096a098ef681a4db34361a4d21ee78205b6f4e5b45ca5fe8921

SHA512
9a35582768822c7d73c7bfb54de32e1b0448ac83d1a54cde5b448abcc3e27e21936308c34d217f60cf59f8a622274bdfc9308e1bef24292944d18e171cdc7638

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
00f3c02acf4dde18562133dc25643433

SHA1
c0ac60b837fc15af5237c08a428d889f213153c2

SHA256
53336df593ede7197e2af35cd923cf53223189703a40a0501ae7ffa9f36f5c26

SHA512
ceb53246cca809a5fbde7d6f9021f28cbdae8d82094b173daf9c6c1e50b9d3e02d85bd58360a4d3329c354217224ca5c33d00fdea86f76c078cdb18afc754aee

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727662527520250.txt

Filesize
77KB

MD5
15fd7638ddadf8f40f7153a85503738d

SHA1
8911e807146215035849748b424a6605d691799b

SHA256
0b327f198f441ccdb8b58640c2aaaecc4115fe9a09d622c08c5c3db8f9945cea

SHA512
67828feca80a1e1e5a4a4e63e645a67e2c8d403e5d655b77d298f7e509166345a76316a763f207d37a798fb07064e018d17968945cb5ce2875197ebf4db293b7

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663115600892.txt.EnCiPhErEd

Filesize
47KB

MD5
b2ea9c17a04733ff48122d37c5a48bd3

SHA1
d8d688a1de1af71736b135b3bd096afde8949041

SHA256
4d2989aa98316f25e648b62b08159509384d55314fd7a97cea3d5089a7419a26

SHA512
c1ac150056592cfe878887c77c2310af7a0279c7e91261f5878d0c9103f0b9b2b40b30bb61ecdad6be11e132d38abd714bf0c40950b89e484a1ad1e4653c4035

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727669117479246.txt

Filesize
63KB

MD5
b7041dcdf45eb9f4ea553e6c320d131d

SHA1
af1cd158414b3cbf823136972bbfb3fabc23caac

SHA256
6d09e26b1348799ca0c0dcbbf9dbe2f1f8be3a23b700ed61e1c8bd5533e3c78e

SHA512
3e2674af8c170126b64e4727e006e1286fab629033023c1f89f9737eb8e7bfcfc6dd080148385162adf64e8212655d839d2f1c37776770d59960ca52ed60de03

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727671764608349.txt

Filesize
74KB

MD5
41bf2ca1a47d796c92277809a2cae8ff

SHA1
a96d0e58734f957d22af09386dcff30196063930

SHA256
e53309d30f63a0f868439948a853748506cefd772747b43b6d33c9be3478e625

SHA512
821dfc918a99921d086a9fa120293182c97d1a21e4de1de522c5d46a2eda51b4a1deeda81569a38a2499d75f582f5f40563f6fb4b6c98c718facd6a8cc435e5f

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
1486c9b0be87762a1bd526bf133e2e97

SHA1
d56fe03830df27d9d473e7d99561ab58c88cabed

SHA256
f6ccbf669e106c6a53af7398beec4efd278099094bca26513c746bc38e8e0303

SHA512
a525de337680fc2f7f274dc85508c9d328770c1532b195bd207436cbd4601f819882bf4fbb607c1d162ae107bf7b5c06e6a939239a20316213af34234df84552

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
06b213732503cf09f464b3d93252565f

SHA1
f68701ea84b0cb35ec930924020de8064f2c4fde

SHA256
048a249213927ad13b0ce49099311b68cdf3216c24e2ddc0595df72697317914

SHA512
fd985ff2d094029e255012507b91ed737985521ef078c4bb5e6b2193a053cbba7783c74ff44db0a1f86f180894a4917e37952d2efa24112c70e5a3f4471c7192

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
4307a2d58750b4429e96a57bacd8f268

SHA1
31c7467a806ebcc273ecd3c1e5fb52694812a09a

SHA256
dc9f80deccb9b4d8e3285b42dbbbd791c98d7a17a801c6ebf6f2e8e20ed197ff

SHA512
556e96063257394697d5c3b4a42c9a569567a8a80dc77018b2152ecf862865708352091ab1dba46b42f8245a31dbf7c6e66a885d120a0893bd0b31f3fa9706f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
8061002ebfa98b93241dec85c19892a4

SHA1
b4839f045b0f9792dfe6d29b4d2d3827b024f2c9

SHA256
0b6103016804a37bda61ac2576d04cb31a6ebd1fcfcdef92b083b9136ff7d719

SHA512
d181b60910b4756838eabe868cd73cde3a92515a9cc2f6fcd336ad68f9db4461160894ed1f94f2b9ba0e087395366a9d6028baf0637bcd90c0241c6e181b68d0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
032c4ee69321c35913cf6f2c80fc20e0

SHA1
68c567e190663a8ec8546a2d899539dcbd44d30b

SHA256
0afe39722d2ba94a90d65ee67607c07f623f9714b08ba6db11ccc36d1c152def

SHA512
75e685c217df59289998b54e5db8ab03fc26cf6f4904c8e5969e4abf46f30c64816500376e26536bd2f81d54653513fff0a8ac267464874e3ccab3f970a5c312

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
e991ec0ae02a9e13a38d397ccecb4003

SHA1
c0bcf9968bd209c767c5690e83e63bca658c1b7f

SHA256
c57827752789559827539a951d0b90108c4b7be1fa7d8e37c084c611c38ac5a3

SHA512
a93e912ba4ce5476fbb7cad2da3485a7bbccdd9bf1654186ebe2b9705499d40e10434ee86bd244ebf99a796bb6f7a0e0fe6471f21896666b1843e7e929345de0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
929aae4e9502908a9baba0cee77b446c

SHA1
49738ac06a11a90d03fea489f32eaecf1de99fee

SHA256
426a4471d19960e4e2d75ab495093a34fefb64484f3598a7109b1e1439079a97

SHA512
5c589a329292b527d73913d8da6ccdb9fe17cba72a7811de051b55283a309fc1fe217f3e73c49ce125c6ca0df9761447926325a9a2f1e9fb8402d5222866e27b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
e3b779eabe6ef8ba2d3e663b622da698

SHA1
3b76d9c4de72cae0047f91f5d7b3517944180e0d

SHA256
6cf155655ac8330fb55fc9c1f60f097e39805df720edb4b34853fff140991b0d

SHA512
4259015e7893a92d71c2feedbbfc5a111cd93a05f7171ec35b8f9ba96c9e1129fc1b6ecc1b34bb5cc951e1a52ab2c539f5e7da5e758a764cdf8c91505f12cc33

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
435a7d0a8ffb995138b68ae1b83b0103

SHA1
6d58d94d2588688f35c0eb74c4f5ba7efc50c091

SHA256
eb363739f1a3552750c219cce7c3412ab5f437ae1ed6cac3b53adf5b0620a232

SHA512
1921f0b80bbcc5019cfc4993072bc7878d9399e84cb20614f807e18f45221c7d44d21fdbee1e30df8cceb0d0f68f0091e49bf1865eebb575ed757d820326757d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
a4858bdfc6a8c2f77c7666b9cba76f0c

SHA1
3d6bc50e18d155c41261435546c028e9bfac5d9d

SHA256
524d28a45b8635deaef0e96cbeb656e30e3c2a3089519d3c0b87ebfe1960c4de

SHA512
92d56756f47453801b0645769a4590fcf2e03847f054f65d875c2c6e891c34b7b379719e8096a804a41bb5e9697fa19dd7e2af79ec1430430db5ae9214140b66

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
46ee30b647eb5a70ac55dfea93bc2d39

SHA1
68387846ec7fa66f891f5451cd023bec2145fd29

SHA256
7fe576714d6c24bb3ae0ac0a25a6284517baa5f13e5d84e36f28716611e3add2

SHA512
0169f5fba5bdf081c803e01f9d1a2d64a18bdc48a26f129eba05d7de565bf364a2e8acd123f16fd2a4b47819c5bf048a7708cbd7d7823ca6372fe269feb5b5a2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
a317e1a356b508f2b1ad5c9b60a0a900

SHA1
babca3a9bbdddab9789d070d016e0400b4cafda5

SHA256
5c56022b20ad4eefd3d2705d01cd4c9b4d79d85a25e3c17c0b69d5719a10a893

SHA512
5700abf38904d291866287c0ba80bb22f1dafbb4ab3c229c9e08b7d3f2a6d442a770d5b3119ed782fee673c663152b76de245eb46fd6972fc415ca10f638d047

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
a1c3c8cb124a41ba2239a38aa8355800

SHA1
23f908a4e9656de2e046296f11c8cce639385549

SHA256
bc24172c6fc4299cb3c0cba51d7a5b7eb958035162b98aa87011483711706c0d

SHA512
40afd69353c95f580ca3d4416bb907a5275021c7a260df35148f61a2c00a49960b7f488391bb9dd6f9500e8f8e6dc484be7b37e7f000d7cd2257d871bd21cd05

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
9c26c820ac84cbe1d80329de3e47b4db

SHA1
400d998f929aefc7d2aaa78debdddd9b181ca14b

SHA256
b26a7aef9574712a5ebe76d3c7e0dabe25a0b6e3b8fc049858a2ad4ec127b280

SHA512
6280155e9025489b5a6cdda8643e2e0140c77dd3a1f9f1e39ccadbdfcf3a0453f7898d4310ba861a49bc61089d4af13f6ed62b96adf3c3092b238252e81ae744

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
0e23894f14731a2bb52be66630d1229e

SHA1
b35185907b74f35bb53ba142f61d1ebb5ad35065

SHA256
b00760d1aeea0b81c8ec55d08a4389b6c043310ca577bd5bf9bf74b4a6f911de

SHA512
bb2ba9c8f8b00d46d72784fdb41bae53921eb13162de5730d24dd39a2de6b3f9c61ee613ca81d6cf4ac7fd8790b26b4f51062c66a8bd32c9a6e31ded2204cb39

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
260894c2b9e3cb88e15274eebde32479

SHA1
f61eff12adcf75fa95ca5289b5f76abb8e954f0e

SHA256
91a8a6d4b7e3fd56a168a18d5ab9c882c684afcf590a8973c87ed6cf0a3b5e2a

SHA512
7baed9bdbeb3dd564347293c8776cea3b85e479d94738e517108f44a6ecabf85ff8ea41076d7a53b3508ab9b380dc581856002bc097c585e99a68a24baff09e2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
54a0e48fbbe84a2cc7c58210e208402c

SHA1
aa86784d6e0fe09d0cee1e8125e1da420ac4721e

SHA256
b4ec9276c71b7c5945073a6076be4930a55e77ccdd8a0e1e9792b4a0cab660c4

SHA512
ff0a6fb506a898f267da58cc91fc0f37b11252161fe90f11e48d925799aa19a72f6559cca923db6b7544e0ff48da77fc4c22cdc465751ee4a150e493ce02b23c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
94469b5abcb3994fc9c871e35bd7f8fc

SHA1
ae27d2eeceb3d4aa3118ccc27d8fa0c58b538aba

SHA256
f6bdeb5b64255c04af8d121474b34777fa444794bcec104b8a9ab8b6d50b53cc

SHA512
6d494919dd42c011226bb67624971e35dedf1b388930a9f741fca0805c1dd3ffb203bb85087018c5d414034da267ac813c981db8a589d122d9dfb0ed54374106

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
2fe801a7145ac85508ce525c790fa62e

SHA1
1eeb46a6f593b29e116945aa5618730c15728ada

SHA256
544a4acde2750f01fd9830e0f87c6d34fbdf7887c4ef75fd6e87aaa71b88749d

SHA512
3cbafa9d378ae33d9fbda8428fdaeb14e32d1dd350e280424196d9bd363f30ffd5c6b90ec65aced9e0614227066dab04183983283ec54e6b3e4983b53f308ba7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
5e3de016faf8803ff2e9947bd8d28e66

SHA1
95c4bb078929c45145c954d489495144c9d1c089

SHA256
58767aee6a0fd555fb7571e112b0fcf52653eff3f1e334c1d6de52989a27b772

SHA512
82eb3d7f975b3b619bd632bd50de0d293873ef054c17f3c450b112cbae0f458657f97cf14e85e1de67005f025539c1b993a1809fbde4960ab2ff45abcf1b05e4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
ba7faeaa8bc3e8426d386366c164ccef

SHA1
c1c7595427e8bfa35c1ac7cfff31499803ae6b12

SHA256
d6b8cc2cfb4f0638d71bdfd3b1d71e1ca880f2a022ed67bbd8baa88f1263eca1

SHA512
cab06c4edfd17c6f598ea8f4c2e5db4772bbbbc5a858f2f6a269c3efe3cae40cd677fc82ff0ec0b88144f54e8e5856893126acc8b7ee01861458676fff5ca0a5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
590e683bcba8bbb45268c60cccc0a6fa

SHA1
d7256e6d3c7ed793036e71f136798b07a63deb9a

SHA256
81470172feecef20cf8217b717f13782130d5d66470e800db42f54be7b5f744c

SHA512
c043177d316ec872369643ce4454ce73280f7eaec95708f02cec117392449ba6522c7dc8938cc98083b2a1199d7d4a339daa9462f0938b0682d9b72fd01a8e2c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
4305ff4330662293230209ba18c9959e

SHA1
762174b77793ef60bceed499351a35f41d9a4502

SHA256
15c198b255f159a20382cd775c3fe67b70f407953da5d289499a00e750a35827

SHA512
f9fe3b9d8d91cec87a2b1b695219998257df65605f0242df7a27945fdac4ca0e3b0b138b2834ed125f7b3c55292339558e7f6bafc8021f65069f9323961cc774

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
1d74f4325ad1a5950336a43b9fe5df9c

SHA1
a9a4972648c0432aa98f3567096b78d7a398d342

SHA256
8d926dff202d9899636c85bbeb36530dfc4d9e28eaed8dff3e332dc24de0012e

SHA512
02fd0087e907bc612dc765c17718cb428f322beb266ac40d81500944d2726ad4dbbe277ad51e9b89f4f0a8899077b72e6387595fb14d02edbd3f1a5a232488e6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
1ecc63eb8e8506961cdbace709736e32

SHA1
17e22e01a36878d31c718c10391bb12cdb422fc0

SHA256
c8697a8ef1876e4502ce374236acda0eec4b26c81f2024ffb3aea05b75037154

SHA512
ea21d0964052adf4601f082453b2426439f6b7b7e3e22e5b54dcfb96e3206195b77d88fcc427790d6b3403bb43d2348e8e69ea221c5ae2db8b08f4d7c924b675

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
b1584469155c2535516f0a42dde2ba5c

SHA1
cf28f0c33ca969c059cb8c69c4d711fe1d983389

SHA256
0f23d37b16d33df998aa9c34bb401479fc7884bec601fd73fb3faabeed0dfa69

SHA512
8d14b170c174749be51fed17aa22de3213cd47d0dbd8d88b922d650a673e9381bd9e5d653c45c08bcf3afef36a513995e421564f41bbf6cc7913d8c2e11f50b1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
5341dcc1f58122b658dd00613dca03c7

SHA1
83a5618ddbe6313d5ea6b78ea8b8b711fea988cb

SHA256
55b40f7ef260890091f40790881052a5a325ceacd3788a7e89b733510f90f712

SHA512
cbf4c39bc8edb4514d198e2afc164d059967233c717e695336476561f45bbc9fac9b981ead4a7192d93679a44d4ca12f38e3ead410e538f48d3a59c110505eda

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
7000fcfb7a4b88709e82dde679ce41a7

SHA1
e88a0ac403afe9f08933a77318bf94a013657a43

SHA256
6870c8efdbf6d77046ed804348f65cc015ac4407c5047d171e6fd1d89f4900ef

SHA512
b12bbd61150ed010f7bb8c9dd1176c02dc0d181889c6b6aa6b16c9496fc97a2da18705771c79a5a39c1784b96893b47eda45e3f73e5338ad5a9e38e11cb1e8f7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
9542ef0bbd64fbc75efce588512ee735

SHA1
ba56ab04b7842f1465e5c3b7ef384047e9c456e0

SHA256
572719b390f469e6e1a3e8f414f5798a5c96aaae142ec1d5c3ddcf6617095840

SHA512
33edec46c381a95aebe3c4a9f3c870856bfd0d1431373a9e340370ddad1b430d95c371cf13f961683979367a36eeb64927ff8f33c9dce4e6992f7d9fe67737ec

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
177176a73270eada87f11e5a9720ee6d

SHA1
423d80948fe05f8bd12d7b0d71a068277bd30c2b

SHA256
73210058aa535380090e59f543110959cd9efc40f586f6fe906f7d3e86ceda66

SHA512
fff488fa0eca7ca8d55f2ed283f518ac3697e9c77ea2f01e3e2b48c058a279a96f2ec5790cb4314d5d397f4d641a969fc6ea2c317cf70176fc4128ba4a173dc0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
27000fcf99bfd54dc4bfcf6c0e32e307

SHA1
6b7b0a226bd18e4e39a8f1ae4ada4b3ade63de12

SHA256
f280bbff23af41acd6e6fe112685e6f1a4297d97f550e9afec736dce36b48ed9

SHA512
438ffc60a42307cc96770416788cca7be80728a83cefd794c533de59d1bdee64cca18f0b56b10ab551c9bd0f015c8a262065b14b279b5a0124206df3f77965d7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
89e8181c085f59199f3565fbd8334fde

SHA1
b8aa6eb2f9b3b52891eeb04774fd21ad8b98ab9f

SHA256
4052503b3fab8a016f8f4815498660d7a729292dde53c088cc7b96a13066c540

SHA512
fbc1a16e291c11620d3c2a95d8d09404e77e1cd8d5077b9ac06779bc1550488f620fd6a16177b74b5e1f483d9e6ecc0d51f6c91d58d12ec39ee38d037f52a084

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
e7fa3ea02d8f19f00a07b32543e2ac75

SHA1
ea5c90ac97ca087169e30c5c911b0c6019531586

SHA256
096c9520bcca601cd327d00f3da2c968103646f9a5700f3bae33a9d924a746c8

SHA512
7189bed553d647c670e4e5e66c41dc4ff86be0486e8f25093c7cc96b805ec6231d531ab2bd305de73b5d5d7476852887135160b8bf88e8d256249d8e04895d8c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
cfdd1cec771718ab6e6f32841c240dda

SHA1
1019ae44ae5ca1747ce5999b08401f6247b095e0

SHA256
6c40516bf107585b1a1534e31c4040332421282dff9398bb822f940f27309fc4

SHA512
746429de31dc382d77fd2301bf0bac8e0ec517af1f6a7b9a646b4121f05fc615b3657300f0990e1470196d434d33ee8977ad572dd822be7af62bd5c129417999

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
e087a6ef7b6034e33269da44b6bc1869

SHA1
c4d1a55ae181b20334cdc530d72aabebf17f81df

SHA256
58a53ed2573c437fd51264dfef479e5ff18f3b1c83d7e6d25f480b8ad6867faf

SHA512
a752d92983517a47dbcfa222f3c5b6bb10b41f021b73609e171647977fd65514211e9e7d08a0a720e2740a02dbe5871706af742a101e7d7b99498b8695bee0f2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
eb5cf9bab87c36308de934d7fd2b40ef

SHA1
6f4019fe7f876d2e572fe26725347eaca8fb392b

SHA256
6b354b3886d3b1d7ada053c6e34e494ca2880c71f0c4896b116ff2a40d393db0

SHA512
2bf7bcf42382bf060fa8dfb031e4c98b907e87b9b9e37b6fa5f3238c6923cb81f6ea08caf183ca1ce5741d73a42a4a6705a411752ff12771866af81d33341919

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
1f55db5cd2efe7a463f5663a4f6bb7b3

SHA1
0ceaf825a750406ae8aa3952aba070e8bab4ccd9

SHA256
16ca7056a78d5a9e5170ea2c21935316061e39b2d6ccb2483785a27572d335db

SHA512
6bf855f56c6ee315207ed94341eea2c9f0cb0add63d534d402d57a3881462de57140ed49f7456c0299cbe9c9f8b2f16ae35daf5e29478611dbe957c799a46c0f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
04bb9222be8cfdaf8373ccbd58f6b847

SHA1
2e1547e2f8641997f915de7eb4a7cb630d49d659

SHA256
fd44a04d8f7b87a37369b790eaff361b74337b90143cfc70feff0bed0d7c22fe

SHA512
4a536f0792b843e8ed07ed601dd61335fdadc8ee6e910ed8b410c114b31da0bae9ee87abab14e353875109ff9e89b75f1ac32e975b759b1fc894eacd511e2875

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
9b1b039e11ddb372f1ad1cd6937e35ac

SHA1
88553c9bedf6514cab6ed2ab176e2ed2318f684e

SHA256
5f1c6444fab63d7357a97ab00e30b79e5b2b3cf6756cfe714038b17839d88c94

SHA512
36d051b5200a7340389f4dacc61c820701afbf6585e9dc0fbc1249e271246a72ad5cc8e6cd97ee45aff5a99b8197f8cfce919a033b70c8eb578eeac79f9a8a6f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
f41004f6d48e4999b9782551a5e6c072

SHA1
e8ab4a9fd72ac3fdeca3b4eeb808c89c731622fd

SHA256
2553e88211ee606c78aeba4d3450bf04c18a6189170bf53ce319372828e5bf04

SHA512
980163797090e02e861e1fbd81c8cf726a5d5b3fb464c7edc6f0c631c77a2eeeacf10430a6ced31bdd06eeb832571ff29ff01853d7b4ef3064273a2e44f893e7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
75b9cc0d9be4bead6764585254690768

SHA1
aa4c220d461413df0a5581051064fae4b5b56a92

SHA256
26d2d163afdf191beef09c408bdf41499516f4ef037b8d2b4b0a5760a1393e25

SHA512
390d344db48db856b2a0fad1c027b8e4fc01e13d1f2f9946dc494ce8fbba3ea65780dc0ee04611ca68c0aac0236aee1e9f5dee3b2265bb2751f7f97e876b7116

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
880eb04ed4ca33b32a30c0c283b51e9d

SHA1
9aa9d0b06ac1ada9190ddc61db9200b2bfa63593

SHA256
41c7f57bd838fc38e9a0cb31ca6b9faed1577740b2afa43408905864a57d8f70

SHA512
05b0ffcdf78600148a9074945d7dc0d88d1e7475f9dc6a2fb96eca271f5fb3f85c77e72b614699e4a4fee11c2562a05ba8a59f21f42a36af4dbce8d8abb47ea7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
03f893e59c5183f888ef89067499b6e2

SHA1
811f247977d3dd34bd86e7b4d496ed3e20a2e0fd

SHA256
07abcb96d2ee8d4a053b21f6d76696a06332e199eca69ccf5b7902ae15687f27

SHA512
cc150023fa61656b55f52fcd92684b92d42b05bdc606a451d6e74a662c98011a038d2b605c722d79443c3a3ccb93e9643aa8d23e897ea0a24cf5fb2d7a30f537

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
cd242cdf609fb96c633ff3fafbf3c8d8

SHA1
3c910d692d83d4e36ff4633ae47c15c8bcdcbe42

SHA256
e1c13c30d2bb0a52c14a65305776ab1e03b02a19f7e9ce9826c3ec6947a4c755

SHA512
3df0cf09c40d84f3a451b858b28bd0fa840ef2f932a7687da6843320f23a864a22de9797d6d6684f725b5e92b49c5221b6696cff4ae2b235d1571232571a96df

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
a67d6fcb09c682d15e8425a3e448d57f

SHA1
833596762711a80d5157982372ea18b1c8b0b082

SHA256
cd333440118507e9168130a4b4da1d0db6e35dca8f382c130f6764573787a103

SHA512
ed8d92609fc5addcdacb78804d3b49fb0d7aa9973dfed95d1d4dec5878a162114cf184070d201ceeeece43ed1fccb4fd5a060a5b48e9203758b2c2de23fbf895

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
22c3c8f47285b110a0741b8eb4b91077

SHA1
bc87753abba0c1bde71f453471869fba67ff6156

SHA256
32d957e999957c8fa705aef83e7c0106f5989b557cf0cfbff9e084cbcc690155

SHA512
3daa25232e87da3448bd8655b6a3c12336a88eec73ac184ec202165e0f68bd66501f9756dc7fc5a4e86a6890095693d573d944119de5907264c965b850b27cb1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
0a872b493c6aaf3cbe6e1158692eacee

SHA1
d8cb5df1a89217c82c06e684e8ab0198fe2dfc44

SHA256
54278062fce1b14eb1e5088c58a2ccec6b002393f6d0e1018b529246969d2c8b

SHA512
931bed784cc83a6cbb13fa9111343dc43a1c62c15b7a20c6556090a824e98a02e233582b8b6de216a7dd94e6949f08130eb2d10fa4f19995426f967d1cd7bf42

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
967f273ad446d49f8ddac3e8c4b0534b

SHA1
ae1bb9310bdd57be427403f81e16ebd3af923285

SHA256
f908dbaede67df299ab9ceb5f0a338498877bab2ea1fd70593b6809b676cc2be

SHA512
da278d7177534fac2fb9181e490593c005ed79bf587216f53321e1edfea0940141ac38ebcb12f5821acecc28bce8d9bdcec6de69b42520b20403623557ebeb44

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
4dacb1863db0904920bcf6a2e2e48fa9

SHA1
81f9775255e4e27957fd8ea2867e0649c7bdea56

SHA256
b829b7488c29bd406a471554938a64b5e65e316cfc3e45b0e21c29fee7b484af

SHA512
bd9e030a19d6dd5c7d2e112aab0f8fd2da6fe890edb9b9ea7df55aaece5e543d65d3336af52e27ab153c9084e9fc09cca89ab9f8d6122bd49e4a42f51e38e4bd

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
016459ca357970c5b3ff69335cc29f37

SHA1
5764aee6adc66522d969d776ca20c7c5aa4b2754

SHA256
ee1d73c109aa4ab70b20b6948a6c0fdc6a95a7381a9093c3bd090da7280a7524

SHA512
fd8b71a0bc9863a6465b4824fcb930d39ecbd7ce4cd295fe353fdb2b6fdf4934ee9300ff1994b29eda49ad8d2b3eb5a4a21203e1c368e524a50ec63140381afb

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
e06778febf1dda8629a55a331a365b4b

SHA1
df7bdfd40e791d07738b48b5754b070d48890c51

SHA256
f177bc1ddae6aca007a67062b7f3fd2effb72b927c433ed2d0d3f8fc9e900aeb

SHA512
5de7905e13873e75b3c430708799b7e9134958cbd5f248e1f9858277fe96c8047ab7ffacf515874762f0517a2014ec55f7773437d8d69b7d0f8040378b3f5307

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
96b94702a988b1919067e245edfc9fe8

SHA1
378f178beee93696e7cca9ab2b46f65aae4d41b7

SHA256
4930f5f1848dab7193839f6a8dfcfe29db05c0cee4a81bc421cca554b940f60c

SHA512
7cf8a337cc766d286a7524cb36fa0845a7ab8ff0ed5d1dd7c29524233c5d48cca0bceafddb6ad561aca8f08a1df5a4fd3167f68b9a6592c54286517527b4b084

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
71344c61cb724db2f5fa1a613ab02f86

SHA1
3919749647939967bf87a8b08ecbd8c572549010

SHA256
119a368ce021ccaea4ddc580d6f1af153d323a8b7227d9432a7c5c4dc9a3e79e

SHA512
d9ef7baea570fde17d327066bd9cf3672eb34aec73839b172875a528cf049b8a2cab1218dc18f49342f9a8930c088973595b24a52479303a85d37d6945f441f8

Download Submit