7373393f8dfa7f01ac42b42c92b33683489e99605bd2db2339aee7daa57924f6

Analysis

max time kernel
94s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-10-2024 10:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Size

231KB
MD5

2113f6ec5f174e363c20508ba20fe96a
SHA1

6d548a53f9dcc79919e4fe492c540334ab814625
SHA256

7373393f8dfa7f01ac42b42c92b33683489e99605bd2db2339aee7daa57924f6
SHA512

929fb4855829499db5fd3ccd43458933a6a128cb37c6bfaa78adfcedf4e8e89e608252339385ff75f8d784bd33fbdd6cc722631854a13570aad28e2ce7ddf52e
SSDEEP

6144:IJFW+7G1EjB6vPrsEjp13J1y4HArcy8e9:U6yE333r38

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2497) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Drops startup file 1 IoCs

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\yj81lIX63k4iGGn.exe"	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\System32\DriverStore\FileRepository\netrtwlane.inf_amd64_20caba88bd7f0bb3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Host\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\colorcpl.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_firmware.inf_amd64_36e4e17f210128ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_pnpprinters.inf_amd64_0c653d53a35b896c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmhay2.inf_amd64_e87e378eb673af65\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsier.inf_amd64_3ae2ea3a55ec0279\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Printing_Admin_Scripts\it-IT\prnmngr.vbs	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Printing_Admin_Scripts\ja-JP\prnqctl.vbs	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AssignedAccess\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dpapimig.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_multifunction.inf_amd64_8bf0fd2423b20b97\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvwififlt.inf_amd64_c5e19aab2305f37f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wmbclass_wmc_union.inf_amd64_a02e4111c770770d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\ja-JP\Licenses\OEM\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\write.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\XPSViewer\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\zh-CN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\LogFiles\Scm\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_system.inf_amd64_184528953a6fb673\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ehstorpwddrv.inf_amd64_220e4fad6c84d016\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl010.inf_amd64_b4f4b670a266fda5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmlasat.inf_amd64_36a71a022d8bb0bb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netwlv64.inf_amd64_0b9818131664d91e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_diskdrive.inf_amd64_1debcd2bd95e9c0c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidirkbd.inf_amd64_20ad4886826af1d2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mwlu97w8x64.inf_amd64_23bc3dc6d91eebdc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms012.inf_amd64_707d3849370b9d23\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\cs-CZ\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\audioendpoint.inf_amd64_4fc4a632c1490033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_securitydevices.inf_amd64_f10a5650b96630b9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\default.help.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\arcsas.inf_amd64_b3d75f82c617ac6a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\idtsec.inf_amd64_9321d33f1997dbfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpace.inf_amd64_5e0fbd01da4f7c7b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\xusb22.inf_amd64_d0f2fd4c931f4672\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InputMethod\JPN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netxex64.inf_amd64_ede00b448bfe8099\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\VpnClient\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bcmwdidhdpcie.inf_amd64_977dcc915465b0e9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_dot4.inf_amd64_55905bb33692cd84\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmairte.inf_amd64_a99a7ecb03853141\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdcm5.inf_amd64_a432be022b5f8139\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnttd2.inf_amd64_76ccb77f33c66c43\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\rspndr.inf_amd64_4e80c2bb5314f071\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\CameraSettingsUIHost.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\amdsbs.inf_amd64_e2a1e49127fb17ef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\flpydisk.inf_amd64_acb1691126c93472\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\lsi_sss.inf_amd64_503a2398f4c86893\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\fsquirt.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Printing_Admin_Scripts\it-IT\prndrvr.vbs	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\BaseRegistration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dllhst3g.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmracal.inf_amd64_dd534e815632509c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\megasas35i.inf_amd64_4df7f6223ebcd28d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\percsas3i.inf_amd64_c17a63dada1eaa02\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\auditpol.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\inaadffikknaacpp.bmp"	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
File created	C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\StopwatchLargeTile.contrast-black_scale-125.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.scale-150.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\MedTile.scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\LinkedInboxWideTile.scale-150.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\ScreenSketchSquare71x71Logo.scale-125_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\onboarding\landing_page_whats_new_v1.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\large_trefoil.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosSmallTile.contrast-black_scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\Weather_TileLargeSquare.scale-200.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_LogoSmall.targetsize-16.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageWideTile.scale-400_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedSplash.scale-200.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SmallTile.scale-400_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosStoreLogo.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-80_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\Java\jre-1.8\lib\security\policy\limited\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireSmallTile.scale-100.jpg	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-72_altform-lightunplated.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.targetsize-40_altform-unplated_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\StoreLogo.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteMediumTile.scale-150.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupWideTile.scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-40_altform-unplated_contrast-white.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\pt-br\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected]	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\Windows Defender\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-80_altform-unplated_contrast-white.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\fr-fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\Icons_Icon_PoP_sm.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-100_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionGroupLargeTile.scale-400.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-36.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraSplashScreen.contrast-black_scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Generic-Dark.scale-250.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-white\MedTile.scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\Glyph_0xea23.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\require\2.1.15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ICE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\167.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-36_altform-unplated.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Dismiss.scale-64.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppCS\Assets\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeSmallTile.scale-200.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-72_contrast-white.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\new_icons_retina.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\ecc.md	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_LinkNoDrop32x32.gif	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-48_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageSplashScreen.scale-200_contrast-white.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedWideTile.scale-100_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-36.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\Google\Chrome\Application\123.0.6312.123\MEIPreload\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_RoomSetupDisambig.jpg	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\Client2019_eula.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\en-us\jsaddins\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNewNoteWideTile.scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-125_contrast-black.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Dismiss.scale-80.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
File created	C:\Windows\WinSxS\amd64_microsoft-windows-acledit_31bf3856ad364e35_10.0.19041.1_none_1dd28dcbfbef7cc1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..xthandler.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_9368c95f5724cc3f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-sqm-consolidator-base_31bf3856ad364e35_10.0.19041.1081_none_491d51c316b5ea8f\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-charmap.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4a077f22be84abea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_10.0.19041.844_none_f3894559140c31d7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-m..a-casting-shell-ext_31bf3856ad364e35_10.0.19041.746_none_b848ba69842ffe9a\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_edmgen.resources_b77a5c561934e089_4.0.15805.0_de-de_2bfe7bc15a652f77\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..audiocore.resources_31bf3856ad364e35_10.0.19041.1_it-it_672a6a2783e60b27\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.windows.h..agnostics.resources_31bf3856ad364e35_10.0.19041.1_es-es_65d30ba57617e51d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.hyperv.powershell.resources_31bf3856ad364e35_10.0.19041.1_de-de_0b489301cb4b431e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\dom\images\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..izard-dll.resources_31bf3856ad364e35_10.0.19041.1_de-de_1687920e1b81dd7d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-mfc40u.resources_31bf3856ad364e35_10.0.19041.1_en-us_7c32e636b8c8e72b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\common\monaco-editor\min\vs\language\html\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-payments_31bf3856ad364e35_10.0.19041.264_none_3c5559db7416f46a\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Assets\Square150x150Logo.contrast-white_scale-150.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_basicrender.inf_31bf3856ad364e35_10.0.19041.84_none_e4c76534c11fd2dc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mccs-aphostservice_31bf3856ad364e35_10.0.19041.746_none_33374e3aacb7c6e6\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-setupapi.resources_31bf3856ad364e35_10.0.19041.1_it-it_acfca3ffe0eaab8c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-spp-main.resources_31bf3856ad364e35_10.0.19041.1_es-es_80c64f3b2dac5ccf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..ng-legacy.resources_31bf3856ad364e35_11.0.19041.1_uk-ua_0001e86afac803a2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-mobsyncexe_31bf3856ad364e35_10.0.19041.1_none_af96916428136673\mobsync.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..aryauthfactor-winrt_31bf3856ad364e35_10.0.19041.264_none_c3d04ed728f82ba4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_11.0.19041.1_none_8a11dbe22c9bf6e1\msfeedssync.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v2.0.50727\MUI\0C0A\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..rymanager.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_0e39979eccc7e2ed\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-cloudfiles-apilibrary_31bf3856ad364e35_10.0.19041.1_none_3f28d2502bb44e25\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-compat-compattelrunner_31bf3856ad364e35_10.0.19041.1202_none_33e8c5dac6801a49\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_windowsbase.resources_31bf3856ad364e35_10.0.19041.1_it-it_4797c8648c9e3b3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..tion_service_iassam_31bf3856ad364e35_10.0.19041.746_none_59a8ae5eb289884b\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-bootux.deployment_31bf3856ad364e35_10.0.19041.746_none_1c0a97992f105d4b\r\bootim.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..memanager.resources_31bf3856ad364e35_10.0.19041.1_es-es_5a4ff6b3276fd74f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\clearCookies.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-printing-adm_31bf3856ad364e35_10.0.19041.1_none_bba6ca982098d111\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.reflection.context.resources_b77a5c561934e089_4.0.15805.0_fr-fr_f0679b39e8b12cfc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-webapi_31bf3856ad364e35_10.0.19041.264_none_f55abebacbd4683f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1266_none_777e4c5802d14c18\retailDemoMsaInclusive.html	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-cttune.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_145797bf9bba159e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-eventlog-adm_31bf3856ad364e35_10.0.19041.1_none_5ca479c80833f252\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-w..indowsuiinputinking_31bf3856ad364e35_10.0.19041.964_none_d7a4e81d76688a14\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..r_service.resources_31bf3856ad364e35_10.0.19041.1_es-es_6871eca24b40d9a0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-playtoreceiver-dll_31bf3856ad364e35_10.0.19041.746_none_c86987e3f50036e2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.5\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.906_en-gb_1dbdc338c2468486\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_b4fc93ef208f3edb\403-9.htm	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.19041.1_none_cd0389b654e71da2\Windows Notify Messaging.wav	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v2.0.50727\GAC\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-network-security-mof_31bf3856ad364e35_10.0.19041.1_none_6c409dd882170ccf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..kcontrols.resources_31bf3856ad364e35_10.0.19041.1_en-us_0d940bcb0cef2392\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-notepad_31bf3856ad364e35_10.0.19041.117_none_4d353cf1ceb5d6d2\f\notepad.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ncehost.shellcommon_31bf3856ad364e35_10.0.19041.1288_none_c9c1f87300f820c5\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wmpdui.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d2104853b0241561\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-w..rastructure-upgrade_31bf3856ad364e35_10.0.19041.789_none_3cc76cf1163eed8e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\Boot\EFI\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Assets\Square71x71Logo.contrast-white_scale-100.png	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..-socialrtcomponents_31bf3856ad364e35_10.0.19041.264_none_b9643e8f2a29f875\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx35linq-msbuild_schema_v35_31bf3856ad364e35_10.0.19041.1_none_fe54aca2ab1a7757\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_usbser.inf.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_25eca2a6806abe40\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-sethc_31bf3856ad364e35_10.0.19041.1_none_2305f6cf48d996c7\EaseOfAccessDialog.exe	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-e..rformancemonitoring_31bf3856ad364e35_10.0.19041.1_none_677a60dc537bd64a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mccs-syncres_31bf3856ad364e35_10.0.19041.1_none_321a321236e44693\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..rdenrollmentmanager_31bf3856ad364e35_10.0.19041.746_none_ce6bfbcadad4054f\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..p-utility.resources_31bf3856ad364e35_10.0.19041.1_de-de_016a67c74f771486\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

Modifies registry class 10 IoCs

Processes:

2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.porno	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.porno\ = "AFZBCNZEIHUPOAG"	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\yj81lIX63k4iGGn.exe,0"	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\shell\open\command	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\shell	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\shell\open	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\ = "CRYPTED!"	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\DefaultIcon	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AFZBCNZEIHUPOAG\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\yj81lIX63k4iGGn.exe"	2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2113f6ec5f174e363c20508ba20fe96a_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:4768

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
73ede960d08cf716f0ee41d3ca38bd38

SHA1
22883f1c9e91608fd08bad978794fb1de0a9d830

SHA256
2bc4a999054bc586aadfa9be51cd582d362a0e656f0f279cdf693343ff8a4755

SHA512
47b20630cfb0f77cd95ff1eb40ad989b18730786ad04352ee2357e80992bd277876d64fc6b9cf40a65011b319ad2462b3050156429d0cd4cf66cdffdf85387a4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
621db7eb9e17bb3176409e3edd129fce

SHA1
6e4363c89e23e2923a2af4b0359440bfbd3fe621

SHA256
9b379867cb35c99e9469e58369a44268b400e7e7176a1b485e6c16e67f83be15

SHA512
dfb5e62f11bb444aba6a7112d484690dbbcfe345fcd978af7f22cca34a16cb8a93e7c7d5917ad496c5b8c6a241f0b8041bba3fc4e80ca046c987c045dacd80e7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
ddaab9b480145a7e70f20eca6f09049a

SHA1
5a5456524eddecdfaa423bfd4a08aa05ba9ca616

SHA256
c75b677972651f46809aa94e203573bfe7e89d75c44b4ff1d6169e2a6a60f477

SHA512
b0fb465b0c52ad92fdd3ab73704b214a4fbd7c9f115cb243d5c0c0ef06cb4ab22958f90523c0e11e90f6947bca279f7dc30cf4573eb636d322408f5813db3625

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
8a38a05db39202e75829a8d2abc2c366

SHA1
1cc8dc66ed064e1ac3d46377d3ea2fb3a9b36de6

SHA256
20ea9c8261ba28e4d22354ff7555f4d0b05e4d44fd96984cf5af7412402e7f54

SHA512
3275791d34a2fe460a0ce08ba769ae3d26eda05e8bae514f5814cd3145fe1d83bfde7a0e0c7dca116aa8c41d516e0adbfc48648b35c82062975b46bd6399d75a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
7d1f7d506b6418ff5c409aa06db6f6ab

SHA1
a7d01959f44de7c02bcb693aa635dc21c941a740

SHA256
0716df05d300f2cdbe30a02425b35f4d52738a9677ef6fac63ecce93b211926e

SHA512
c7d92d1d79aba29877f55f6d7d7bb8488535b9e2538061705d45e52457f7713788dbcebe494d97c9e229e90cfcf28183541d33fd16f4ad710823f893b579669c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
666712ad736796eca0ffcc05054482e4

SHA1
927638262b72ebd2f4a43742bd9dcd4b95ceed9e

SHA256
737bb9e83bfafd87a95c7a1928e96b7fb6a6dbebefb10f839af3c9e8d105dd0f

SHA512
c0c68ec3c827cd0f2afe83b339cb6f6ab47904526cbd51544b8886329db53ed54eda60276b9696d9458e8aff11db2cf50fceea7341109d5461207a12fa0642f1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
0fb2f6a79eb8cf8dae36200898b5d2c4

SHA1
950d8d6ccca407ae55ffdcb621cf58345ee9f272

SHA256
dd1d1d079cf89e085d69c18d46d649a238520c9ab05dd6f6cee01a5508bbacf1

SHA512
da7c1d5b06fdd983ae0dbba7d9073e88ccfe7c226959fe9ea78e825324224a89a1cc1298e22cdb86242010d63a06a31da0ab7ef97440532b2230683cdc11d615

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
b4a83320862a6f62ccfdc40afa7de730

SHA1
63ef7e63170f8e5f14a9985fa280bedc2fcd5f1c

SHA256
a22c80130aaace3e27103634f79f86363acf2b2f3149f15a6b0d8685c1200575

SHA512
e0b8cb10d65fdff59c1d03a71647868cf7dd5dc9fe7e9fb14e60fc395360b178b0a9b3ba1ac0b698f2adc221a690f37968f4a09aa608f43285cdea6003617572

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
a025e9eb38c3803e41b7c59089bad13b

SHA1
a37cda6bb255c59cef63233c5fd241a16030d3b2

SHA256
50097802c53e3bdc41e0275c297e27e37f209d788345316688507f3e6a0d72c5

SHA512
8284ea6b3d07125aeaf7d518292019f68e2185178203bd9a860633f3dc807ec46f32d91baa3fb0f688c0270a7d42e7a2d35497a7e7b288fb67ec8c99e4349753

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
f1979325f82ca57614b548ebb66702b5

SHA1
8d248d45e6bb6f1ce3a4af7211a16a6cf47056df

SHA256
ba4f7384eabb5761d8d59ea70a5f3ad9e3985578725344dbe54664cb75633c32

SHA512
8d399e86c6fa7df8f77fc7be99e358e3a0c7cf0bc8f240156396e42febf38b7d65010b4a365667070bf3d867e23d9c9d563c47dd4c05a2da21be0b7d8db0dfcc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
b783f78bf4729ef6e61bd675881fd42e

SHA1
8c897bda2e495c7201452e1d268095a6aed90f70

SHA256
d8d0076a015f1f17390090c5cd85cf3ad957aec7584d38c55978c40860e55a7e

SHA512
798f8c62db83e553d10ec17caf7dd207a1f4b5dd10383c163ae53802ec072a488c2c08ece4bf1c7f68c21b4610b21411bd01f0d1ffc29980fae3d44bd6b85d2b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
fba5362a6fc18a1d2db541df01858cdc

SHA1
c6bb568d229f21cea54f9616624c952c25047c4d

SHA256
782379e228cd7aa5ea7f3655d8fe59a56d984e2e9af2818d88930761231ae6d3

SHA512
72fec701380204be8978f94768869e54663f9ff83f7a751fdc77afe928f2121336a3a0016a9cecfc63145bf5ca39fd4d87296778e49a5e7d3949a16dd683ca2d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
f53f98a6b276db1e5d316c3f833dee65

SHA1
a9323a34a8066efca318e3dcaa0e176b3faff877

SHA256
9e0437ef1e74a3867770b1fc1496ac853928a820165ab75856f5b3401c28ad22

SHA512
7ea09c21a1febc6a84ce64357e5afa83fdfbf5ba53196896b98fa6b58c65655111c44dc107c6985e6557e4825f9e4418111fbf4076b702551e6dcd7ac769dd50

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
2b124d16663706370c30727aeb216694

SHA1
c3de55a435a2bd8e5a7427e81fef6cd7b3ba6dac

SHA256
fb73720ed747b06ac780c6a283a3b4cea9da966cc025da809faac56d66f47e8f

SHA512
16ba739729e1325940c7e519c003d3a1cffe43bdd7f83e21881fbded734cfbf1df5356364e171bbb49da2302823f9a170237e2e3c94d665b17dc9ac3d36b7e52

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
ea5148cb1fe1508d4b577d8742b904de

SHA1
7d5671ea2032726518727ef93cf5363d05106d7c

SHA256
2712aa5f2d6dc63bb5f2d12546ebb1c00464d5d7d50f9561bb4689301c17baa3

SHA512
4592487ddb77a63327482e025088176f5266936abff27ad07a530b9da0baffe8343981416cad369d1acbc46b548c6b60b59033488b67338c9ab601b4ec2796f3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
ae7a3a51a007cb420bcbd1e9a8166803

SHA1
c96447c079aeb28fe0e83b2b2a14957b97448359

SHA256
14d334b579e372a244e06d9ece661ae021c0d9ad8ed9386a02b3811c41619655

SHA512
5f7f9057ec82815d08f9cb155ac16674324906372fb211f46b4bcaa9881445d07e1171ee36bb788a4973fb931e68aace07f2e67efc7cfc1f17cddb9a25c9d759

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
b7fdad16b7fe71b55192796c8e1384ab

SHA1
15bffa6ae394507808a2bb21004cd1c58fc85179

SHA256
716de0d46bcce5bf67e275281c1a044334cd2da3ec8ccfd1898bdf30dda9fd77

SHA512
d64c4fa7eed7475edf27997969c7836c543b0a415ea3636418e536fc771463710ced09c372cf1821c8889b74656fe6c605c408e7a4cb78eff484e28b6ea77200

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
f573aca788733a92cf10d2e0d6aef244

SHA1
3158fcbc1f538a0f0924e51f37db8fbd0722ba78

SHA256
65bfa3e848ef7a5e18b46136392b576aad34e9539fec1d1bf8392dbb8bb4215d

SHA512
49fe8c4acca4e8fd8922b0284570dcf9186395681be9024a7db9c146ec6f8006b6540c0a849f7d79bb04faff5b19dd2e42ab6e0110fb86e98efe1c26bc5e3223

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
574c101f525eb6bba1d622ddbaf412f3

SHA1
29c585d09ba94f539e6d9b4bab5935b724647631

SHA256
9346194b21ffc4fe3f813e9e1f0d9d9b1360fcfd67297ef24e5641d76b428efd

SHA512
d966cd4ec0fe053692f40adc11a08dc0dcde49e9accce6bde36303ae82d6d7e2cda6eba0d0793585799c422be2ec89f1d3b83c5bc3b95f19861ed8ee74fff0b0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
8c5132d4c820fc675f47fb40c7940471

SHA1
1bdd293b950cd20a187d5f485b527fdb5d160df9

SHA256
659e6d81b7eab7ecb6583939055dc130d07cfbf71776b3b2e37df3d7fb0b27a1

SHA512
1a3d59a4b4647670d3d214ce2c9e98589b65c9aa5d44d01e8e554028f816e53f8138fcd4af3083aaa3bce81f52e17b80a0490d096911079f3693552a9ca17c6d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
ec6c11c10daaf091ac456bbe899f45d9

SHA1
ab6c3025bbc514296627f8069fca2062da7f7a05

SHA256
088851acf13c59f065dadee33db05a16343747b3314c186411f41b1f2146f579

SHA512
07d7cc41354d04a2fd5da53b71b6aed66258d5934a10694e5c641d2998658ba9f1b5c59df4ef9d0619e7ba6a9980929c480c38b6aca2784501d7136fe414b757

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
cbe66a107c4f5b1598896dd752756726

SHA1
ffd96ffe2a83bbf44b96428698c9f5e106368201

SHA256
182cd52e5d79e6f17f72f654e084f5470a08b07c3617e8d78e009c4f5356e11b

SHA512
b490f9850bbadaabb62c4f0dce916ecc36d1d43fb647f6dbbbd289ee4bd369fc2fb4bffe3d49cdc6d9ae6317eddcfb47593e8fa2c7053828b9e27f13f11767cd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
a8baa0de0d7d3ea6c1d457f96c2ecf25

SHA1
e2b261bb6505613fa8d2c1d0bfcf201fbfe8e226

SHA256
17080ba270a91211380542825cb580ea6fa85df0c12c2ca780909e7a3adb3dcf

SHA512
bec6cdcd3754657e1f8a6d1061e5d862448870695534c5750a5ea1279b2d5072a42c173a0d6300b1587cccebcd57e601e0f16f66c480de0176ae2c580198bce2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
9c5c8c8276fc43bcec6f108511713023

SHA1
23576bd8aa114b6cd3a5f1884ec97c9b708812fd

SHA256
20bce6ab4f89bd711c539926fc9b0f3bdc0cda0fc83807eb251dbb25de1d4e49

SHA512
148f350dda5173d377817abfd7a06173226b2af01d494c79f84872a7e618e9418ca72398e4e887f38ff81ea2e112ab0a7035877c40120ae7f356f59b38647bf5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
7a4d4d778a4450f42856bb8f6fad7905

SHA1
adb71b3f2a9d2231786a0f3946e82ff851e8599b

SHA256
a553bedfc77532c3e287ef80fd07d9bc61c250f0667ec08da2bb0d2f844fbe5f

SHA512
9456852e372958273e3e298c0f0be136e69363abd47e84449c131f9c223fc48231634e5c737e99d73fcc9675742f24caee86cb4f9171c76db14947e3e9c7ba0b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
9a630d22886b1c93d46f58b11b2258cb

SHA1
4be67016d3bd01194ff5373935a87e628dfa3d81

SHA256
333bc1ed5c9c2aaf9164a5968acfa97288abcc1637881c41dec79376c5a1a236

SHA512
4833455e6b93b3ea17b2b19fb1e480c41ce42f20cb6ef8a8aef6953830cca7f891c4fd802caf7ae629b6000799852a1f949b84f62406106071c4be2aa74e738e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
aa05e43536583fb6c01e20cd6fd6d5b9

SHA1
e66b2fa81e3f0b5ee85e95db0fd614a88e1e02f1

SHA256
b553752c9bba4bdb9dd7169dd7b33cd1d5428ab7752dd9c4eef52eeec036c58c

SHA512
e5964aaddfe5090a065d01819f39d7c04a5f5e9031acd017418f86ad7e5e136175f9e3a56079f3f2f4b17958296159e40310916da5eece402ca688de0a384e47

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
a9ea5659633f8b4456e7bd22d37f2ed0

SHA1
7419fb94be34db8bf647d260f954d75b21ace5dc

SHA256
fe4db024d66c5ff76977bece96d102b8eeb46c167c18ae1a152a3c5efd47dab5

SHA512
ead78263f57cdd5ead99272f04cd14c7f8891820e5c5b46513cc0517e486a8c0ab73928b0f673e135002464031d5a7bfc148ae8e69611226c9ebb4abced7f78a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
f9dad82317ee14787c24b091d1e30ea5

SHA1
dc64594d9932e90a00376d962a5245278f839305

SHA256
9ed5c718494571413840ff0ce92b916aa5b053963d5927899eef78d595e3118b

SHA512
1558adcc13a7315eaa79484a89aae3569f6c69718e5f016a4b97bf7cc978df58c149ce1e606957c5a005c059e3a97c542db5c3ab227db05a64a33e3b1e68964b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
aaac3a79353b66b961e3236a02ea76da

SHA1
4e0d35a2e2be9fef3ea89df100d352a3880534b7

SHA256
4c9fa3975d98e8ce46254d39a9a3df78a00c880d84042fa8424850065106741f

SHA512
0118df7c71063cad0af0809631f8a017cbb0d6c069382d0648285194a6dd02b71a86985829466c1b3835b37b408a141d4461e928ae5cf1c88e582236d1d1aaff

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
5328b46c963261e01c10f616efa812a2

SHA1
24658bd82fd90f4376f262a61e2715ca5e90a8fd

SHA256
6d8687f0d16bab49bb50ced48397e2ebfb188238bf6a44e1ea6a8766fd05d0a8

SHA512
f5972c602498df3f23d509995a5cf4ae3f9b41e088e76f2a8b4aff53b99e8d1a1fa41ba76cc01cb76e0ee3a4a56944b4936bfc689a49ca5dd65b183a748bb0a5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
9456610becc3cddd0b988afd05aa12f0

SHA1
6f406f25ea0f78dda8370b40d5c4e7027958b1f2

SHA256
46de5d2d67bde78496f60842dd9604054a9b734174ba506cc51c4ce26b75f3b1

SHA512
57906dbe3bcb8ca795093eed57803d5bca87cd165d38603c8449220e9c0b151c0ed5f7067b0b11433092aa0b32f252f4819efd78816f687331475adfe9ceb1f7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
421e8a9522c7750ae63b8a0d1b21610d

SHA1
0d222ad80e32c2f5687702c09d8ff68a2ed82888

SHA256
25a46af726e106d40c3ec278f4ab61e53e0223400065c02fe455e29ac01c1fcd

SHA512
d5ce1062eb513f78cc2dcf4357d7ba577e0926eb948c9f7cfb7620dfa6dac5a9ddb2d8d1cf77fa510e42fc9eeaeb42486557449684ff12a4736bc598d77c1b31

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
d0bbd06a98beaa15430dc5218b20456d

SHA1
3006348960315a9541e63a527c5f024a83c05468

SHA256
a6b8f0b79d0a6e5c50c638c42c8340970630520b04a1dad83fd43e57e393708d

SHA512
49afb8150234afcabb180409bf86f48075109aafb57a97d1124523a759c4c5990cfb781ce7d67eda026c014c7eb0cd5b7343c3e52c57481f42fdd98be7772353

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
640e8847c20cf18b6be5e171af22820b

SHA1
4ab8b1384cbd84c73dd7f31a04c38b666d23be62

SHA256
e737c38aa837da1defd831c4a267f4686156bb6b1214b0be1e3ea1e341cab77b

SHA512
750c1395cd90b5ff3ea15e53f7545c20889cd83a86843f14370c80479530cd0d428315916dcad4d5f41151ca852962a83700165e92b7f973f36e21ebc718989a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
e15c4de7a11923bfa3407e75b5919032

SHA1
2352fb4d63eb2e98a0e0c0baffe949b77518314d

SHA256
61d3bb81a4668d1c71609920b37b26a84ae730dd6b0ec8ad337277e89236bc4c

SHA512
7666baac411c949f516763de5166cb5e93883887df0970c73e9a44b65d464bb1140b72445f3fb453d8b40ca4d1895679fcb0fd380d8d1926ad3473e412c78130

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
56aa73f128fb5f1154dbf4a97f68ecb9

SHA1
8feb354da97a1c3e4f04088ffed0a45e22adb6d2

SHA256
3a3251b48a13c40b70c883ad44f44d1a388484b692d242f76f52620f11746825

SHA512
f5f87bbf1110a142c5f1acc4276bd61ad5090e2173fadefa1a10668972ea77684b5b7a2120eeca29960dccd67cf86ac11591e092859d84ca81faf09e6e19942f

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
42cfa74db227829ce3b5b270188a5ed4

SHA1
0aac5e5b403a57ef1e55a83c9bd02d56403135c8

SHA256
70ba8e5477cfecbd6a04b410ad6256eb689517455b7f7f95e8c1c0d74a853258

SHA512
15ff75a3d4b22974c7cdf1683d96dcb934f9f89841230946f0f1215feb00b6f36d8155fe41d0268c4be7fb801a7ca07c3563e725a548a0504feace053c59ee68

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
230B

MD5
ac69af47df8ef098d5686092ce8f9f10

SHA1
2e60d0057f0bc197f792bf855fb38ac07448a5fc

SHA256
bb7675abf95f706b88fac088a56f5194db57415e7ff8433097ed96edae7af086

SHA512
dceb24df89f0855d439d3ed461cac17d56216b4c0b7348c6623d8d92c32f65515713089021ee621f7c7de5ba6437889e1e6d4bc041b6b2c61907ae5e1fd991fc

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
fdc4ad8a327776894a38106dce2dcd2b

SHA1
bd33d3b2be110fac8a22a16e1898a5d765d7bd31

SHA256
b4d2b326a2ea3f62ef00fe2d8642b2e30728ff98299703a37214f349059ee673

SHA512
9bbfa2087fbbee60e7ab1202d2eb5926b4e660d10b207e0889aa4ee87eec7fb2b9998b7f62ac18be980d388565473908c38d9be7ace9229125261eba55169d7f

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
0cfb2a2f3285e90836860a64d37b70d1

SHA1
dc634d798b8a902a0c9a68aa01db0029f9eca18e

SHA256
3c3f0c1402be32d03d286bbdcec1a190da9c5068873860328e183a3e9ed9fddc

SHA512
4114ac4ed5ed9720639144ea422323e0d5db4f16bf359d2b90c40b423f0ccc8c6e4515ae8e2f8574c5fa80cc0758b94b51c8073b7dc72c68cc3dcf4112598e55

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
dbb3e8f03a943684eb1bbe7fa1df7448

SHA1
9ef429fc9d971a67046d7530ebd5ec5533c93d52

SHA256
c0397b8d3bcd1fd39056698c43e823a876f62d4e4628334f1677439d488ad312

SHA512
11a9173e512e8b8bd7edb5cebde27204dec3a9b1dc89bae26611cd064f2bda6fd3b4064d483de613a72368635d3290a37d86a3350212e3e636fca1ab69b2fcd4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
b2b4b8958f489abb4429e7bf34dbb9d5

SHA1
89394b03d10d9823aafbcc082675c2588e9c64cd

SHA256
87125862457225dac9fa991086da5043be4f66f4c8a3d17e5f9957e82dfe069c

SHA512
907584e168fada92491c37cba861994ddde9f89c87f00fd7359f33d295259f6f2ce527636bda192ef602d3925829b03cbc0ff91112c9c2212329984f9ad718dc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
917fa479ac9eebff22d67685ba953926

SHA1
1939674a45308c32df13fac55fc2ccb03875b224

SHA256
0d5f3470a47192c95e8964b3844e4171de4a3c3171860a24935685cdc4d8f83d

SHA512
d139bf24ef3ff2f9e80394a8d222dcfca1a6fa5361c52308f2a6da9692544354d0517f05dc24c1a406ba51c80337d11216f87058cc3f8ff2cddc18a09cb420cc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
5738dbc5a8c29ef8c0896baa090f7b21

SHA1
746a032b78760a71b0835be337852d43d94f5ecb

SHA256
c3c24b4559287b5f3d1347158f6899eabdc810e50b8c37d2123f8584de93760c

SHA512
44f79823e32ce5327f62b7100fd015d73bdc0afb0ccda33e76e1042c618733771b208d2ff4e58ee8345f4dea0d7b263b264e14162194797b5bc758c7be675dd8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
8019f11ae3d115df48b7f2d795cd7ab1

SHA1
4a52f36aca8150e2294ee19fa952328bfc9a0dae

SHA256
ccf0b1f20dfb9329ed74305453439a7a7c9992bfa8230ed14d2c2379f037f54b

SHA512
dd731f123fd5e5eccda3a9e9ce43da28b6da138e75d4b0b878fbc63072aa4aede79666f231363b5dbcb9bc8d20116cd3b87cdb9ac66a4436da48c3ca16fd7968

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
8ea2d2ae5f3f92cacfee4254592b3a7d

SHA1
3c10f8e6cf5156634463e12170561ed8253a384e

SHA256
c95dd949301ae94aa37823a36244a1f2631f7d7f5ef15f874bf108e8769ea5d7

SHA512
9af3c899c354c99e3ba13b87849e7f251c484a465e13aa62b181c56d0fbbf0ced4e973dfacf335ae71385887211baa19b5444111906eb21a6ccfadb20a36e983

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
b0f31ccb7e0d3853a2efc6c223bc88b4

SHA1
74dec344e18f2f0f5e636b6eae75b84d1bf5a6ad

SHA256
5252efa9fd101c1fef872cf4d28425e40c2f04eb81e58f30f3f33b3172424d21

SHA512
1072a39dba0056dee570976de8a0c2b4358a04c56f1ea12b010163e517ac15c96364882d148a200af1dd4a14a9d47af92adc362f1d84dfbb15a24079c10c0f9b

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
cd78713b1c35c68a772d45450f100b7b

SHA1
a10e6ea14f9fb2d83c3523d82bd23bfbe02d1a42

SHA256
d665bb62b529c93f4b8a47d539a0a55ad8bcf51f1b0517e8b14a47a0ef1f65d0

SHA512
86377155c40496fb9f84ae20eca3fb8f09b46cecd1385b40d0ca9c600d4524d850308cefab5f19ec477f7f5999e60521753244dc69161f52ce17d047b0b991a4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
396f14fa238737291e00e71434718cc2

SHA1
41b6e4cfe431a5a334d8dd83b4c9a5f297f68adf

SHA256
adf61a87ad8f13f65206787fa3ae2d72d1faea5b14b839f27c0935aa1f0f927d

SHA512
b79ea935de632c77a5a15714353808b2ba6118aae1a880e25417f5fe35144dff6c381611e1265273079e18a6385f4ffac826cc205647764d27879654c677717a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
6464f02499a75d81ea98656354cf4e5d

SHA1
57655808e6a5badd04d866d7e464e2070b24afd5

SHA256
dcfdb11e934f77fb94081214f668e708c7ca6820c4d6df344d004a40df0cb962

SHA512
61c81d1b3b3e3cfab2edd628dcc72de68dd03f2f0bb5383ec1d836beecf14617ea730978af70b1552260ae211dd9ee91ba3342b506d6b32763a7e9b28a9599bd

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
ed4c7461a2d1669d542082dbfb2bf17d

SHA1
8dd436c9155524dd7ffa219f200cb246ebe887e8

SHA256
45e01a83f82fe14bc8799cd6841a7e3b7c2253f370e0da10d6ee19c354a36ef1

SHA512
fe26d61a47987ca2b73c312fd7c3d90465c469e7c24adac9dba8fe771ada6a50f0c3a7b0ad04ed97f88dbee1f21493ab91cd7ea3e25f0e0f39351b525b9bcd84

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
d271d894b37c2cd3afa02747160d6299

SHA1
06eb872a61c32ba53d05d5c7d6b593992cf4c5e6

SHA256
b3e504b3bd83e5baeb671c920e04d30ccf0850346fb212a779363484d956b59c

SHA512
6091c4b557b51c51380822d81e40e6517384774502bc9f5b20bdd84dffc21a126d674a67c2fad1ab96c2f9d38148fd7ca72e55fd6d0097ddf3c8c507b91b04b6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
dc5579cc30e7e9883c8d202fc58d443f

SHA1
a46af9a3457c39af6cd558c796d7239c276b9c80

SHA256
6a1b7fd1bc3195fc385fb81444deffba4ef264d2ef7c1a56f54d7149c05f1afe

SHA512
d782230a20ce05ab03599accc34eedf990b0ee2295a5792898aac0d69385190a46da3c4ef6c804afd18fa0f2adffb2cec17fe19bf044d7574abe8bd653e2a57a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
da20b0c177dbb5dd71a8d679f690fb1a

SHA1
2619d7aa4040ae85826c4042606af893cc921e06

SHA256
ce08aadef55f0429ef955b9d6938ae7b802cbb5735ffc963ea9a6ce0a6a5898e

SHA512
ad487d6333aac764b2d5482b6baba15f88dbb1785e427f09edff96a4922bc5a3b4984e51e611abfc5b3f7dcdd23799d45e6bd9b955685e2f728f88bf0c03f1cb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
c6361a202ccb560ce709d8f144583ac8

SHA1
7899a9a969af9a9856695b74598d0cd2d86d7356

SHA256
dd4d1673746a20799be2cb902bf6268d00609d30eb94d2174c9b358d1e5a8e26

SHA512
6456ff4962cb822ea6cbb8c082958300984d08df0d43d887a726736fa55a044b0b3c8845e74b2117c86b1e46911773259c0c2627edb14ab2388ac5d3cdd17a0d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
00f34fe7721910666c9018a816ac1f60

SHA1
81a35bdc058600211bd80464724be6788ce0d477

SHA256
9defcdbe2072baca47c3e21bb1ef8554019dcc49d2d27436ce441713424dab83

SHA512
e2d5dd8b10715dad0282c9dafc3ab93fb521a16a1f8635e34a79a766b59d52e8ee698aa48a031760a4733df3e1b8c7e6bbc53767438aaede6bf05d6d6e70284e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
fd074e8d95c94c6bd6146ea2023686b2

SHA1
98189b1a05933761710fd22732bddde1b26a2190

SHA256
96acc63275b3f0f7bfab5bef9ca04bdeeedaee2903dab2abe7008253dda4bf0e

SHA512
24d2a859e4a43b2ebd061c6b0b29936eaa936f376eb7584360043d68370daac2c7da9e38f65d0662f76e04d5abdb4c4e157eda9375fe0318fab606eb752e616f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
afcc1495569f8520b05b179a25721d1c

SHA1
dd747c361c65d483c73148a3811bfe509388aa4a

SHA256
3bf93ce733734800c888f6107195040e04874af04c7a5f479ac601af245915d9

SHA512
88051425ea2de54b046af8f3508d0d5b679004b20852c13385c43b70bb408768749e8906c8a95a5fe0f328db88c2dd53da135352891baaf53b5c6a6238b45359

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
9bf18dc29e221eddd870de77d460e1ad

SHA1
9eea648c6a2e52a4b934163853eac509b72200c8

SHA256
97b6eb644d0b74c129aa220214516581db1ff4049b7f03009e6db1a6f22c19bb

SHA512
d85f46ec95c04de0a270b9f9a29039c847b360c7961b52f6517326c8d3f2da38fc4bdcd647fa492534bb6f74062b537c0797b1eaa6a3a4616a75de1f408a8785

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
3f1e20331fc19802fe779b1641e65726

SHA1
2fa39fab75a0c92f88ea1d80bd98d6fb52fd3a3b

SHA256
3024d59a09b6cf96421c87fb2021f718fc41c66bab123eaeec43205b4e6cef76

SHA512
bfed123697e329a531fd0e679b4d2bc0559f77178ec5fde48c850fb3408473988db9b2d84802f1c1616d334ab3bcc4fc49bac8656f2fb8e00e58bf23eaf0e7bb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
5d9d3dac202df9e7ac09bf89b11e7304

SHA1
c9db89c82b3a333c320236bd92048dc62498720b

SHA256
531ed5eba3e2a349c7e5fbf27a50f4617602120b6dfb269b1a7573b52783ec68

SHA512
0aafa0c7c344d222100c15f0ec8d7a377c742e800376f0a382207505d8fe0a286606bb3b1bceaf70b5e75d28a1af59a32bda6dbc471efdbfa1b75c36acf9500a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
e87b96cba852542c76098cba42e50fc1

SHA1
a287ca9daf58fa650049e23ca367af729be18f51

SHA256
a1ef197fef08f4be54507f21d5afa66049bfeace8f6df3f3a959fd6bc09a6ed8

SHA512
4f1b66ef06238075e8b544729a01414730e8cfbebd6bf80ea462e8c96fe0505a8745451c21740072c7870523031dcaf0dee747cddc2b0e8a492a84d6951747a0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
752c2ece5f6e934c38c85570cb659487

SHA1
d66d8d785b2bec9df381e78ca9c2d3b205b09ca9

SHA256
e26749c98c71ed349f2b6294290236ea31aae2ac5b1df5b9eda7275c8c90499b

SHA512
432b2b8254b3bd00d9ea4155742c0aa1b3fc7e7b0a9b555c364a4cbc94882d4dd8cccd64c5803ecaa3fe44ceb23f1b088bedf85dcebc3eaaf499f7dfbb13d767

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
9acf77de9ab2715037dfaebbbf5db41c

SHA1
0e77bea9e5cb2ce7db054e4a58818bce5821c26c

SHA256
91ff1eed71dedb8fa3dd1162186372917550887855cf70108424313ff3296870

SHA512
2b2aaa39e2302b8e4363ff2e58631efb9e91447b8edad2cc2d1fe5d63b9c8f33dd2761d8141e0a6d550fc4477ca8f363209c5911ac25bf1fe3df0ae2b71522f5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
1977b4026f35c87a8e9642a3ef746d06

SHA1
1adf269f8b04714ab0cacaca2ef6683bc843c684

SHA256
016acd7b4a9d57913f64b28d74b3db0eaaff4a5419ecce8da05722c47cb0ed8a

SHA512
3baf62d1e9b30c5c985e6cd7db0e74efd6a72310d0bf899d96a0aeddd26ccc031db37d180fa4f681086201f39b710db6dd0fe567854eb0aef55467b09d79667e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
5c3f5645bc4ead59edc1ec303ed560a8

SHA1
3814bab86d7c3a852d93482a742b56fd07d4584f

SHA256
877d2dfa964f1c30707ec993dcef32fa055123189bba5560270d95cca812b061

SHA512
2e7e4da6c6ea6476931d4df33f589adcc7d61d5917cb06825ba239c5bea5147ba9d6e6394661fdc4a972a9b7d1e1815572b6e420761eafd5e6f28c66df53a207

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
280be3b11f062aaf23b697f5b05d81d6

SHA1
c62ea5daae07f28448f939a5207bbaf7cb4ac5a8

SHA256
bdea07b85bc66982318bf94a3b262e498103f3ae4b7a06ad8d121f929f5e6014

SHA512
500e616b41ac04dc2c9ece079ff0a3c1baabad3e1933ccce512d98b430906186663742cae2102a80735e24aee170b516763eea4710eccae4ff1b7448539c762b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
ba8578214e0f9ce9fab9346d05b1f2b0

SHA1
bd82b966d3bea7898f611c9f503d4bcdaaf204f6

SHA256
5115c9e9551afc71e5355bf546a876728da30e9b64699a152f4fc4b43f97d856

SHA512
ef29e41a5abc46e8f9f05f3ef171eac2c0420f31e2f4fc7ea47b6a82da00d6563c9d827db1db8cd750013697fe0b055fcdd624dc9af1cd4ca08470428b86510d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
96786b8784ff5511a17d3aef66a7e86a

SHA1
d04b04b729d758e316f59ed813e563d107a4af95

SHA256
36f98b18a25963588241fdd8976ce8f9a78e60a8403e7b0dcc82bf4b10129919

SHA512
c75c1ea265a23ce8edfad72ea8a3d5f650bea8809729886805819560130f75a046c5a0354bce2eb01cf8f3dada670d8dfd078bc70f3ccc1731fc950bf8cf99ef

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
a52115879a10ae0d3cfde6c18fa6539a

SHA1
046a6155e45c9677c7539168a689bfcfb1be152b

SHA256
a266a149c988fcaf306174be45294c18699cd0ad23ef1ba610f0893c03e209e3

SHA512
5d7aa006c4f26f979741faacb5a52ca7116d5b09630cd55cda728b844b7fa4d11e3876c82aa891f0042ef9c6708457162755eb348fe67ef38f31a4ac1a6788e7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
d57d53f3ff9e691738ceb1f3b255306e

SHA1
7d971d135badf2c600e41b9b87f771e064792886

SHA256
96bb4aa9d83d293a955158f604cfe2d499a6590a58cf0432805310d771584c8d

SHA512
23f3a9ab7cc8fd2a86b69dee0efc458b06dc7aa261ee79ea73fc423e5ae62c23931e0c78e056378b26a58a88d7bb695ebd955e97a609ce26af30c9385a1e230d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
b0f9d9f8c368637401f6a37f2765e846

SHA1
0c8003ff82db1e5bd29de91a835c09615bb2779f

SHA256
e7dc5b11656104e537e2263e45778c217891d323b18405e38ca7af0017832197

SHA512
e98542bd4402e683bc10895af0d5ed7536ded404a95c2f398d26ae67d214e76cd6207cb93cb1f75369958ee5d64ddba58e180ef0bbd9a0dbfecb2b31aeb73d7e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
138407b8216d819b677456e1e673882f

SHA1
9de8eb0ea7ee6e9dfbae6ebab8063e65ea3ba4ae

SHA256
49adf64ca3ca7d92788ce289f850068650a5f35ab515195c163aa9572792b620

SHA512
1a791831979688d6a5847b04657e87327de7a25fab0d0876ee5b3120db27f9fed0327ea54c69d25ffa33132bc457ed7f520e6034c7901f6e38e5b757613f23c3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
1e1dee6bed8fdafcb4a9d064379a0fd9

SHA1
32b4b03eac72f08ccff5c7632dcd3dbd855c854c

SHA256
d580044c80524ed77109d48f42feb6be61a46017c618cb43c363e98032c7dcb8

SHA512
007d11bcbb0721a3deadf5858f7aebc4dc347557a8552d5302d726c3a9c78586ad42603937d16fad7bdab216d75efb1c37f6e5faed93d4148655ae350669e789

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
a318719f5624e1bc11365af67b8bc9fe

SHA1
7d06d9582a692ef026535af8920563715517271f

SHA256
73bc6f83715016b05ae5165f58e5062bdee544dac8b62fa06b8709ba8b4c8c71

SHA512
c0d8d62ee2320b3c625ec1f38fb951c755533e3a6131ae516801875fe50e803d1ec7e01a7ef4337f74e4bd57a99b219d670c2d3fa34a32afbacade5cd3980732

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
70cfd191056f77d2f0f815809b3d3284

SHA1
425551ee80758da27bee86d86480ef600b138fae

SHA256
41787594dd32a5ca7f0465800b50c31f54f86298432b89dedb0a33baa3a64f6c

SHA512
a8f989468ce30da053fd231b126e378c96ccb3dbea60ceb26cf7e9e1b0668a1d45bad6286599a2865635c3f35edbee1c2874c2af585907fb05fd0a58a805c830

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
f6252a88887f736b2bddb9a8356f9781

SHA1
32a0cfa8201a713ad78a5f83989032b959ad3fbd

SHA256
feded0411c44d33fd6b80b088e9b6a5883d099205ce47a77d779c0a759baa6e6

SHA512
a4e119324ccfc218f350e091736b66029f567587e509a7f4d51b7234ce067d570ec824ae5168a33aaf6dc3a9a5b015ff85574b051d38decdd69cf69d1dc5e28b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
fe17c96f3261a2f41032f52428525335

SHA1
a814040fc9bdc2893117e13bdf8caf7b57fa40ac

SHA256
028a4999d2af11f270671532168532850ba50e837cc758be2d855150e1f40943

SHA512
eee4341944ead356249634353767c5e795e6827e5bb73d4d210c822921bf2107f74001e9292af775ab6b4e8271db5b8f25cca39a46484e4a13944f955335e27d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
27ea6b1aef7fe182fd340486bedfe8d8

SHA1
f0ffbaa86ea78729bdeede0662bff8d5b891dee6

SHA256
4070e270c401a9118538a20d459977d9b0a98f8a5a4ca4bdf00440986dc50cb2

SHA512
471917f5639ab452babe15fd5a551bc2d305e8675a78b66a80a66e91f15b2131133d2410b0d39c857ef60a510b2e810425a10a9894366e1d246893a841e4ed6f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
9b1631bb3c0f19cfbfc384cd6361cd2c

SHA1
4a866f15404f33be17fa6a673ec511bdb8198c46

SHA256
99e8c39160c4c0576c9b0e7a78fffe181f9b4181bd9e1013e7063e958bfff7c9

SHA512
25db81b5fd6071b638518649cea9c8c8a990bec301c88ba87569888ab0b077af435f98e03ac0a3676014cc4f848e77a77f408ef932e0708d076578f55a011ce9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
15fe616fabc5e1720ae39926f70602f4

SHA1
5c7b26d5c8663d151f7cd76ac042bedd333a24a0

SHA256
c698255a259492b13aac04464657fa30af6badeeefda0b6cf980fd97723793ca

SHA512
b9ec155d1cd4b331e8489c2025f54fa48601cfa28a782a8c3ecacc9496c40fd55c599609f715b90ed55fd0b3bd36a6e4421750f77c4f96af0ddc606fc6d81020

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
079cb768338e9c1f448f116c9a6b455b

SHA1
1eafb9197089c74dc90dbe3852a38f86afbb83be

SHA256
260750803dbe3e392d204b54e3598c21c388b6671c11ec05aef5ad2517ab9fe6

SHA512
a81c6c81861b1fbee3061886bb091b1016a5e192f7ca1b85007250026318cf5e44065e4639839219ce28db9f4913b5d9673280e54457d118c9419bce0fa5988a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe

Filesize
1014KB

MD5
9917b39a7a39dc9f00a69708ee17009b

SHA1
14def347550875723815c6e1d87a944e3723908a

SHA256
97f3c33a437fd147a78d6799b8a71b1ff7fc1193f7f8508ca1bf3be0b4d79419

SHA512
a5d950e2e8c8492839522cd0d3d5f16d67857b15de6e34f34d3a4881190d5853317451c4091ff9d638e13f4e0b8a191564ef50671d28416321a43630a372b1b7

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727658720680492.txt

Filesize
77KB

MD5
8d0b226ae042fd7fdb8290bc2392eff5

SHA1
c95e467422994d6d206466b42946e43456b83801

SHA256
0556750970591de0d61580f290dea99fe21c8733b197e09df9e1bb6d2ecae366

SHA512
0a86ce12e0da082295dfe0e3f18b5d1688adbf73954875aafea8b636407b30de0b3616a36377e336e23b80fc06a8b0436105f50c67024c239bad8818a02c0b39

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727659161166784.txt

Filesize
47KB

MD5
d1423e858213e77b0b4d4b29a369ff3f

SHA1
01e6ba2675470b27f976c633fd6b607e62c31dd4

SHA256
9d98caa1daed872d49d895de854963b95d2bcbdda4a204495e31520f2d40ec7a

SHA512
c5e29127bd2bb3888d111bafbc8362e221cd17b3b702625da4e05f2f6211d5d39c64d162bcab1192ef1d07401a4c83fec34c0ae10048555a762a51079bae7d77

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665191668352.txt

Filesize
63KB

MD5
60c64a62dfd242e8f031cadf3ba1dca8

SHA1
1040f5a9db159cfb8f4050ca27c443cb8933da17

SHA256
457672e5da422d62f1a3e95b27e8339a4368ceee3292d994e3b6f1cacbb70af4

SHA512
7cb29e5852c1d8ef5aace619971c5d35d4d01e6e4e1c722a1c52ad8e55f129ef90864b92ac7f889b487a81ba1ef4c17ce8185cece71d6d85b39a000e359ce799

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727667861810871.txt

Filesize
74KB

MD5
1239f47f1b1184e43ba1d5a1300298fd

SHA1
738054386eff6da70a0942671132b78f277b0334

SHA256
e3b557148b6d1a87677017cf9b3e7c6c93c986c9b87cfc1baaa459dfb2368818

SHA512
ad2725efd6a65e7fcf463576fe968260a7cb82537494ba25b5628d2e8d7df606c0afb6188863615cd9f60601a72a58798f422628080e70a673ad7c9718c3ae10

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
dfcad896e83f3067774f60ead5f46bd8

SHA1
f49ee703295b5a2529ee5e3ce8379333b331c7bc

SHA256
be010eda44ac16f92d445115bdfb77862676ccc391a134364eb94e1fc1891c52

SHA512
1e161feeebfc3926fbaee8fccfe8d7f1c8307dbe587c38898e96b19e47364b2197c0c8ee310c565d06dd6b06d2b2cbf9ab2d01d9106f11a5b3a3684cbefcc468

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
af8d882a99afae5eca7ef6735feaf64e

SHA1
0c9eed2ffbcdaf3f0fed6f940fe64eb6895408a4

SHA256
c4ea52a669fe12444917ede5a1e21e6eb70a191a5bfdcc495ff2d943f16bfa33

SHA512
3adff34ed64853360b616cf5d671404a7ffc983c9545740eefa5d01b6a1dfeb44151710a5377fa60511bcbddcc3007cc91dfd1ca4818ad745f5d9b17793643cd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
7b4ac7fd4fee562df4c02dc5152e1dd2

SHA1
2e82538747444d1bafba4cf039ca3917e690828a

SHA256
78ccad2aeeec180629bdf97aede7895a1455f1cbd4f4a4d41b2d9e682c585591

SHA512
76c726426c0432bf1a552c6d5a22f5a3401f0a1dfe197fed681ed47a0e5afc2041b1741e123844777e3fa1a5aae80467f8765ae8d6e2df7e00d1494e321ce176

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
52a4e3bbe2160a0aa8b12ccd12e8e679

SHA1
800cb044c67ab867f932496a1232b0bcf02d401f

SHA256
e8771c4c1f497ee7a4856512faac7ddcd263c30a7515306e29a500f45a5bd79f

SHA512
fb6e8b191abfcac23487fe472cc983a93820604087995d0c75fa8ef0fb47e3c772d840279dfd2195f24baf32af28a203c72ad2dc1ac043a696c27461b6475133

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
b5a221105d3df67386f7e70b7446da4f

SHA1
0276519d02e1fd906b2210f847ae238d7eadb125

SHA256
b773fade044902cafb97a044c7d21d6ecb6ec6ba8a63196bfcc4b744a552972a

SHA512
50f236fcac3c57de909518886df97a09d3f8186492c561fe6842e21efb3ff9c1a95942d35a88465ee38e63f7ea9f3852e426133bb4f942ab7e87850dcb9ac448

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
2e9b16ffefb1c8c3968e7fe355fa293a

SHA1
a369a5f33bf662cd5f8ffc07887e8d34c441082c

SHA256
a329e4d0103263ddc12c1d3fd93ada6421e6105003d79167059936c11a0d40df

SHA512
8ddeb31d19b498f91a7ea064901bf93c7f6c33012770db44e5bca21026b8ab27e610ba4009b06e18c8c5f4cc5813692310d6c692686662792fe1c8cc389a03ec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
5faca8159028ac4836654c636c9c79f2

SHA1
0e1fdaccf8667e5967d5327320cd002d7d604e12

SHA256
456cdc2046e09ab597a94579832b2884fa2993efc451a7609ad1f68015238b4f

SHA512
ad723f46d4d9142a110e071d4e2aaeeb09661122549876f99ed888522c0a84f629958d30e710968bf8bdc405cca4afd5c561e9a15fc67730d71ad3c6bb52107b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
72046d9ce2b319185af8e439624582f6

SHA1
46fbb2926f66469ae85f39082fb46dc868dbedfb

SHA256
fb5859c33f7084e9209e94206f2a1354c4c466e56b9c8bdca668229b2fc713dd

SHA512
17724e6706666ff62dbe233e05b299e52e96ee83685934702204a80c582df11fd18857adb2621f6933104c791450348d358b77150ce739cdd3010f0a4017585d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
5422aadba7876d847e335a6eda668699

SHA1
c9b80ff7ff8a8d61f9df15dfd1cb47eaea2b0a6b

SHA256
362fc007bde371124a9ba08473447426d2235dd06fafd146e42d08b753dca67d

SHA512
1628f61a5c40debbf659f2abc3fc8ebf5bf713bf54f027946deaa83de04e26bcb0a131951797183db7de6243cd50aeb73926a642e2518888053173b637272f33

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
7d940da3823726278e772a3ae64b2d58

SHA1
46a6ce845231a68b42fd0735224c9e96225c8020

SHA256
ec2459f48c9773c509565bad9a30c493b7262902aac6fd757d49ad91abc68a8a

SHA512
02b615ac343e4bff2bbf0700c03168ca931dd45f48675cf9691b345d1b44816d6539d67aeaa27cfa8e70429478d47da9592de9eb1d4a2e9f1df68bb4100177e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
5db483d4fd109aab73d9760a43c9abf7

SHA1
50f274b7671660b1749989f7d8d331ed2ebcd824

SHA256
67cf7595af9929ef87eb22d8fdfb82a725ed946c13958d47db12251730e23dd1

SHA512
190f14bcefd4462e60ae28ee8df421a6b5d3124b87903f801479a298d1b2d2abd318907ef132c020c662048cddd6e181487635aa701f649bc2d1d5b1f32ac1a9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
158156dbceffd0b971b55fa7e84e2351

SHA1
e5c3f6bfa703bd6926009d58de63a260af240005

SHA256
c4d1b08183f2d06925240dc37ee54e57b27d572ee65349e55a68da39121b2c60

SHA512
7c0d11acff4398032fda677a0e98e2bf7d4f3afa8fda656bc941941e17e0e74fa5ab8a725514e9506cfc1ba8592dd50ad4de9e6fcd2ea389de45613c27464253

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
38d91d70b6af1387fd251762a5099de2

SHA1
4df70ce20abe6e2eff62ec70403d3047585779da

SHA256
7072940b5d76d2bae2b5c6ff6e156ae9c6145ae453a13100da0627d4fb75d790

SHA512
c8464d31e5fb63a1e8f87524c8cc65ebcf6e9f89a7663d85937e8927a1871e7b87feb51452bf999f899728c3abb8e2de2404de2b98cbc4fbc747cca80d2d690c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
51720d2b6bc848fa1ab8ea4be99080fd

SHA1
6672c015e9f95d28eaf4e235d5607ad694846da5

SHA256
12eee2e0439287dcf8cfdc35d922d512e35abaabecfd9f5044e3799a6f96eb37

SHA512
89f8fe929dcd0d43e666445f7694818cff559d5027ca7d5e9a0abef14d76fd6da73450698e6ed4b26ebf28266e2f5bc19b3d185e0693fdd32835810f156df37e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
43e0457a8180d7dea551fe50670c29b9

SHA1
2b78ecb2a328fd502e87418724a8623a3a8da6a3

SHA256
cfabcc78d654639412b904aa10484e6ca3f5888fbf9924be922c345bcf05c887

SHA512
30b851a113348cc86b3dff87a9759cd57c40b349fa30b2eee63333e12575b228c2f83625bc6b7b0ab931abffa12861ccd7082f0e78607b3497072a2fc6e7b20a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
913515b81711db96edd0ef5ad4c7c9eb

SHA1
ce81e070c17a81071b529751acaada0ce59276c1

SHA256
31ab08e1989de0122bc1ba014d288a68fc1212798eca99a0a4738a9d0b13dc13

SHA512
f338a88c70e126e4619503898856a7ace07ffa9466729c8c7a3ae20b5ccf70388e106a42e95f7c0fca9b94b14c5b4fb552f408ca12175761d5d5a04dd047a8db

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
3d1678cb420208ade9f78414dec92199

SHA1
547a4296d4fd70c75bbaefd63aaa57682425ab4f

SHA256
7515b8d4df81d0b9686f354ffdfe9f4d5205354c7e92a6e0320f167ba00b28d2

SHA512
19f13836934410d0dc4b43867fb0954112b31bcf7317def2c3cc281bfd58c147443811ce692a7d6200e7404e80569c1970c49a027debf32123973f2e3d85ba2e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
b765120006816f8ca29c34c97ad563e3

SHA1
b369d6e3b6a48e030cc39935bff6c12c4c5f4f3d

SHA256
7a682def87593a1f16d23b5465f24748e09b7334defb2549db60e95784faa376

SHA512
c5890084a877f6bd379fcbd8919be2d23f09b46b0364a5e8f283d7d75dac06df72ee79d34980098c2d0e39f41b10c523cc0e9cd51c7229631202fd2209b81c7b

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
cd43f10f293437ed98b69feed71d30ef

SHA1
16c84001f49586daab1eb7042bf2c74755c77183

SHA256
9c41c70255e2eb65dd4f0f1d7452da3b621b856bd49aa56f6fe0b0a4ea80fe91

SHA512
fef0c266717c493c5132e97976d276b3b101000cc0e1a241045e833c5db1ae99fe4b03c3336873d28e18d378efe3c047c27b0d8ddbb9b536bf9725be4343d1e7

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
0bb6bc70fefb5d6ef27e28664b39b1dd

SHA1
511f31e41e564f6220b8a332654010bc96c4d5eb

SHA256
d244035662ba0c12d001fbf619bdf30ec4569c264b99e9804e02339942a13ebf

SHA512
25362f4a6a0fd36aaaa4e779c8fee68b2c114c96e593f2cf2657531de39362d63730c43678582be05cf3d41b0e6901fe6bb23fce52735f66655f0b1c84ce02df

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
d99f46d7931af6f448ce4620b6a376a4

SHA1
4cf6c0d000d74fc67297efe75a3de541e461a15f

SHA256
c4656a914ea43d132b16d8c176d8fa4646cba56c5920b0751e8b58a5ecdc308e

SHA512
d1730169b7a8bf3d0ca34ca4ca8b84e92dd69d10c58dabbef90a968e7fbdd30e5b6bef8caf8ae6652734114c836da553f8ddf0fa8ce2466ae40efebb9f16f0e7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
a3cc27413ef7e9f8d815d4497182b766

SHA1
496843636e993e8f208f4d6bef3b345080f9a661

SHA256
55be463151c31a2f0d8aa1571f2e00ac404d3725bd7e56f49415c1f123c0777e

SHA512
a1a3f67c7ef37195afe71653dce402d2cfeb1728f7e9736b48e7e6ff6d2c6086b3dee09d0a6ce57f8fc8cfa89de18edf435bedb1c2c827e614460ec26a60d824

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
65830bacde136935942585651e42ee51

SHA1
ad8219c7b5133b2b1d6514d7dc5bc884783f1677

SHA256
79bfb624f520d17c47c92652342f70453ffe8226a655d7534a37970b876eb397

SHA512
26a157fd14aa27db611772989e9351da42bd5e36c6519cbeb90f87a7a143a4f1148b47ffbbc76958348fe35da4cc200ba01ef86d713f99d8885ba463cf0ccf0a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
d784dfc15df0607a8dbab51907a65330

SHA1
94a40258e2cfaa7e2e5f8d65007e65cb3abf0640

SHA256
7a63370716467fd06a241288fb2c0bc4874ca50eea19a51f3fbb6c44fcba0385

SHA512
70e8a7eac44bb8685f65e944f40cbd21880b1169b9fddfa4c421d72a664c93d57deb2e48d0acb577fa5f756b6ea53b921eb607f007f3b8f861a3e27b54a3a619

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
f13c815dbc788f0974d6e51c6b2a3317

SHA1
c740d32cefa8eefc9f4db4ea4825e67be33ef287

SHA256
afd989d19348f3977b4cbb3a80ed07dbad863f17c64a2abdbf3f729bd0a67d40

SHA512
65e08a755e17a21b61d8e173ce4f0962e67de5de0274d6d3b19ea4998333cdf3f6e73fb97f807b35da6d8071530fea6bf04eede60874576ee4509312fcdd7711

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
ff27081e865b9fd30f8fde75b9cbaab0

SHA1
980111f9241d8c853fed21b929972450dfda7b03

SHA256
521c8b3c1df4632675a13f9b72ec12af332fa530c23f70e9e95b01658b757de0

SHA512
8e27350ff15d89a44714539c7bf23a9eef263f02d0b727c2c2979af574b44e6e2bcc2ba4351e780bdaad6a988a13b666d09d725eea59f65a17f7c5c85aaac696

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
b5a698ff4d3f0c0e00a6ced5839ecfc8

SHA1
9cbe419924a7144d0241f19418b8a2e06aecc258

SHA256
614f9adffbe562dfe6183ddf2be5a46b12fc96669e2809da85b9b883fa883a9f

SHA512
36fbff71a855a1598aae00d21c97178f08f39402971d1fc335d492657f956119bdfe9b27c807a83cab6d9465e6a9cf7d834d7f2b17852b0c1b049c0276aca238

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
93a9805f3b131be93941974ca0f3981e

SHA1
9e1f731b61a48fd975662ea40c53ef677f89f636

SHA256
e7589a38ce68609d4232d0fc71e1fb3e0bfab1e098a9590e711babc47950a614

SHA512
d3aeac45769339e10f3541d238fb51b369fdf866616e8b38652a9976a766aa8ab5995384415a5a0b7d60b740f095abf698b2907231bea62c64d667c46bb4ce61

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
822da79b8c5620df730d90d2eb8f3c69

SHA1
c82e2aad59ea1cddf03f1007f243b823db473939

SHA256
c422394207090fa9df0ee635fb508ff7d3a2ee5478b26c3bf06ee489dbded6d5

SHA512
f0ecb4bdfe791e674c6007ac76f2c40e9777f4ccab7d3109566c2ddb9a03658c17262062fd900a98b1124b4ccdfe23645dea76eb6c7e162f35c3ddd05766cdb6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
e54c08e7e93b1667537fad527df08913

SHA1
17bb3105d5face32dd82d84233d9a2e59116f6cd

SHA256
337dcb770c9ffd901407ed085540d6f90413cb9a50eac8b3532a6895a511f802

SHA512
56e7a2812f30692a4f555ab55b23429ecd9ef0cd959e09cb11535e2786766cde1d71107395a5623199f362196278606e9fe8f1c4ac18418f22725e46fde28831

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
ab143949c52b175a6fcdebba2a1769de

SHA1
cd5d442633019d2bc16663b8fffecb566f8a8e5f

SHA256
948ca8c2af322b4c1e049f8306867f8bae4fe88278e56fa061a633531d31460d

SHA512
d314741b03d952000e37aac55ae55815d83290c304d51ff34466995a71e7043171ca435dc215d5f0f5e260b5be9e2675efd6cc501afb6515aa1ed8a509008b2d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
170226333e21508d0c0099f4b1ce27ce

SHA1
a152bab30e8b6c740849cf19982cc4d3087ccf6a

SHA256
9a96504d1382560e72bf9d5682df0610b39e39aa1e7095a4788865121e4e652d

SHA512
2250958ef8d3105292ac4d39215a97149c770028f31bd46cee2b0abfc350076f87fc50c2c116968f3a3e83dd79eafdd2d77e1dc056a6724906629043c1d03802

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
ed8c6e26e55a4eefb6df6add2c6d1251

SHA1
7bbfed9d289788dc576dfe97dfe787ef0983a2dc

SHA256
ac8ca67e424ab12eae7de07610a4505af8831f1b7478c52be78a338bafadd2bb

SHA512
49fd040a8410f9d83e022162f6f8180d6e1663d97a506da47d5d1d55c628ca3f67da3315f5ce466b954f4e82aa1ef9bc57703758edccbd361d21f14b67439d64

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
adb0b341771c5aa233e7891482426d4e

SHA1
0a34b2aa4bd2939e4c6e3998caf3cd8ee03140c3

SHA256
7b8ce5355f179aaa143b073febcfb66d6d856b85c40257ba646c522dd7a501b8

SHA512
778e905a7636174d3a3e9856c9f4e67b5c772005bc8443ec7c5c7b8400926dc09f7625fcdfbf91aa727a720617d570765fb69ccafaa435606f830c321093881f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
513f792b381951289f0e486ab83820cf

SHA1
faa27f00c24b468f7cb8427149902960a3f1f37b

SHA256
dabcd2e9a60f0ee28415f0d4c88d6a8b0e8b528b8d6fa3220193bee6ad0cf7cd

SHA512
98cda17e3d1f3c07dc878ead52fa2a6aca0fa7a974aca1206e22cdcb1d4065fa27493d2e57676d91c2793e7a51a4944debd45db14823c2a672b0b4da0858f716

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
f73e17a249eab3dbd9a86a1e4669108e

SHA1
04e59a40b1ad8baae32df63899420675173bc212

SHA256
a375607df5c42d7f6a8d4ebde835b8d6e22b0529f5ecafd46ddd362f0f487b44

SHA512
1adfd75f4cac350a895971a84a18d61f7455c4fac8a6b1a3e3d5cf2a69af085445f105ccf078e32d0d261402aab26b84de0a63bf316634a5ab326f2369a76898

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
ed83a80e05770fa41d645d1d1e2e132c

SHA1
68f9b65727b031df4d815630d4d70d78789f2839

SHA256
f4c590fc73c91200bdfe7f174be41bb38b9b5030a905789ea4749eda7c89c021

SHA512
674218f399568c9f83d75e4f54f46a62f1214fecfd00448a70f830e45e9d37b4f9ac843952ce9f1d2cc89b74f27cb90656569026285362790c9bf985f3074a12

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
675ecd41a0ba3f1a4c67e2670dd6812d

SHA1
fa9b7d89cfbe789bb1ae38609d8c51c5e93de08c

SHA256
2bc652bddffbb43ca8629427c433e9c5da3bdd62006aa23ec031a406bf4071e8

SHA512
989c9326ebaadf11e0b38bccb0b999fbbab29f6ebabbfbb453b7b9859b7e3f2e3f6a1b0432f1b3abbe055608d7a11414b7a69a4b26ae655f0a91ea7ab4d6fb5d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
eb2c5c1fa641a0c2ff60b20105f0ff53

SHA1
d8d56ca4e46eb494b57c023e33cc33d351aa088b

SHA256
993e45a22940aee5b4a91841b2d3bf2469338bc79830249d17d57014788725b7

SHA512
628cc49bc7cb2977b3e133beabd05704cd0f8d4c21fddf7de3b5e6094571192f710debee434d1c429ea32b4ec17de052a546135f5f8a4fadce8e82e8ca716797

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
8749db376498081e7d4a9caa5177ad9e

SHA1
cf3c7aedf440f6e62f9eaf0048c7663fbc9b4ed8

SHA256
6730f60405dd37bdb2b5b4611eabade345cb536015e95e577aac978613a06ff1

SHA512
057abc509eab54fc1ea0aff1c4c30ba987421c8dc5d90c92e2660ac2346d8c784cb693cfbb4718b611da80633a7082643d95f2d7a07371fb69e2d01dd964150a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
725196c54bc39494497c46a099d015e1

SHA1
868aef5e107d96493909c486fe076d60b07a445c

SHA256
df876a7e393665b054c32b3090a22f71b122879a770a83075a0af0ee935f1b8e

SHA512
bbfc52748ec88170c28c013388ed09820da28ce4243c194fd51ba20ef05ea6429eccc1c72cb5b1338d3958b8dcb0216768bd7eb6078edbe9352fa7c784437476

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
b1024bc5a9404d7200cf59e28045b955

SHA1
ca5fbae7187fd02ef9844e5f88b56a083b59be4b

SHA256
0c7fdab0a44597fcdff5902b52b1e9f8c5adf05cdf5cbe1eddd0f45790ce5200

SHA512
5dc2cd19884e4f0334844221e313355bb5ae20016a025e5b14c1c11f0eef95369d72adb2a502ea0c48ba2e23858764dd5866fac22da2dff872f72761c9544fb5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
1393ddff7e3fd4b13fc515013da8fc73

SHA1
b9a463c6975f602fd140835e409cadc3b16b17ea

SHA256
b2e666578e9b9b9c07cae5a3bb838c46168b2c3d10c3a4b19e7ed9c07fe45e75

SHA512
456eaf2268c94fec4f03ab5339e51fb08349bada969ea9b7872ae380d857ae2f8c60a940ba354c1e9e92344d73d9d33ce278d6837ccd3adc779d191cea7df04f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
deca5329d38cb7f6b558b1adfaf7ece1

SHA1
f1c3db7558734571632407958da0993b30a71fa4

SHA256
892410b926925dcb1007c5de4d20944c94bbc77e98fa3fe26e9f7e6b3e31e457

SHA512
84c8cb67914a77025a50ae9e833d5d4def0fe223ee7004bbb117233ef1f1902ebb6de79231102a16b47c22ad505c04c4ca6c6e420873b62b8c1148ba21c5c6df

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
9bbd3c6afd94aa78834be0fdc6c13ac5

SHA1
e86009eed084a96b829c82fc8bbc8264d41a0773

SHA256
c40b26241ba41802a614e2ff3d8043051a33c17449c935554ef66492571055e1

SHA512
644711104b6402e0a1433f03527ec2f0667ebdae0780ee1b99685bee54bc4c86e26738c301b4d3b735d73843ce1e7fbf4bacc44fa26de3bd5f1f5de859a84fc6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
682b09141294e1509001e31d8cb4b8c7

SHA1
4eb7482f4193521822ffbbe5792e76527411e373

SHA256
91a0fe22b75924d385b4db1b8e456eac0cd274b32de5ce7ce9a0ef67ce40f90a

SHA512
ade4b8f74db8bc7d691378f47a0867191b841b0e7f0d920bb9815721f09e9f97401a7e06549a2536cbb7eda90a340756838d4c1b39486a5cb97793ba3512f489

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
d3fb71e6c4724bac477a469d29af48f3

SHA1
a5c0110db0a580020f1fad45f056d1c55c1df6d1

SHA256
49b2aefe80e461694073c62317050cdeea84ccf6d651c3006c45f7d56122b371

SHA512
bfd61da8b75d835abe8fd82426a190489be4a373a2e1e511e18a92887ff30d7b317acb92b168abb541900e6afd718a53e2dbbc2f75f2b8b5bbe6734c5676d983

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
420fb0e69b3df197c04f9f0032d44e81

SHA1
e7cbe33372582f2a2fae1e8cc33e66e1c4029c78

SHA256
82215bbe2d1e612016c3a806219a41a1017ef30ddc0970c8ca57dcafafbd5368

SHA512
0a887f81b208f43e0feed12ba84975aebf89bc561794c6be1e06fc72bde85a3aefff71d5af585f60adc9f5dce2cb3f8bd4079931d10bc575a0aae40f1da35729

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
4e72f2a4b5c023f97284b5db59138a71

SHA1
3a6aad2bf73485116adf47707bba20c4868cd84a

SHA256
b41c1e1d7a875b75135f92159893c9cdbea43538eafe052ae4d562deed0a0784

SHA512
2cbcadbe33715a2b96cac9ead2e6129bd74387686b927cfbc3e1b30a928e17b07819905e5cb47fea2b876c864af728b7e473983394631e870b8f5b5d873e8b97

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
c3483c699b3547b8c31e1ea37cb34217

SHA1
3e1266d01b3dfdad612fcb7ad357fa79b374535b

SHA256
b751c3c2c7a952e6c3f6d8f1b0d2b918d41032b32574323be6a3ef8b1684a575

SHA512
0ca3b9e6de05ad29bc39c1e1aee25e54f96114eac363a6aac96711f4fe8e5ad3e5ac892e6adb5301301b94865c9708374fcc38dd63725f4125bf087896301bf5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
4fcb3ad95d809c10ab14ba2de5ea07be

SHA1
0313bbad5ff4321a1a4fc4339716eb2695d0ede2

SHA256
ee03c654033003c2b6da22971fb44acae999a4ab6d0fbf1510ee9faecdb8a9c5

SHA512
afd8096319570a98e127ecc6f8dda278933a6c77882bf2744c34558363ad8a78be8efb9d2b5ced80e49e289be253c86e89d09d2ef9541807e95ab8576c264ae9

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
741226c4366fe8ed179077bb9bf5b133

SHA1
f0c40f53d412f6463a3eaa7dd227b1210207c951

SHA256
e1421d8bac7910e68fe60ba10d769ac3c277394ce6dec74e38d604b4c210c567

SHA512
e3229f8d0bcaf419fc9f462cc69b26d6959a9d7e2cbd5fe6edba1419f77db7a37bb9b762af24fd3c0953302d7033b5e63ed6a31a6558abaf14b6cdb84b851b50

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
d99daadf70a4a4d1fde3ad41ba594d6a

SHA1
40bd6694807fb0646b982c4e91ed4ace0409b90b

SHA256
14c5394d6c6978350fad76c7e8e46655b20219973a5e413b683be19d9260e5e1

SHA512
2dc1d3b9bec97793b90c4e65098ce7868b98727a9f9a2db3e42c405491fdc28074005de5f8c1c26bf74587126e922db6e1473663ea7f8d6a4dab671d4fa8a1eb

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
311f3377ef244f171668ef7622d49e73

SHA1
473334a276cf8c635c3f7d95def745629fc05e3d

SHA256
007acd0b6b6bd4a3e3b5c988a3f91ed35f8686654314ed970e73cd6bf4705b8b

SHA512
0cc52756c17f9abf6b3746fc82e861c377ed0ca08bd4acc38705bc2f0f46a1379657ffbf42cb138bd077c154abdf4d1efa9941949689cb184c8b32119ed3c436

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
369e88930e09b7013894547788908545

SHA1
225c3036742f8bea145ba32fa21c8988d4a496d9

SHA256
8272f004140f05701f043a22227d3e6b666900b092ef55b069d2e399d14d86a4

SHA512
21481c73eba90b677b82bd49291d70c27eaa1d8d261fdaf6d032f9e1ca9b6579ff644c9482ecd575826c144a0bf05ec5330de15c67185e113e8d36130c940538

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
5e6b29b71275e226d349fc956a216645

SHA1
7cca23b30030fa458513a825dade9b2b8825289d

SHA256
d46687663267693721d553824a96466718bf2953b6e68c9f5d4d6af56daa804c

SHA512
c4c368f7dd4324abbd0f0e2a14ae165a44808b5d7099d4bbc7b5b0c539878c157d4f92dd0d4ee8903696146f06ef684980db702d43e35edf5237e102d747a6d7

Download Submit