xorist | 9be38b91de4c97f277b1cf221e8a3e8b95141e617e82cfdd5341faba775dcfba

Resubmissions

13-10-2024 18:32

241013-w6x7wa1epa 10

12-10-2024 16:11

241012-tnbvtayfpb 10

Analysis

max time kernel
116s
max time network
96s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
13-10-2024 18:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Size

16KB
MD5

3aecd251d296551ec8827008796244e5
SHA1

2b225bcd484f71b14e3c4792cb0c5965b26a830a
SHA256

9be38b91de4c97f277b1cf221e8a3e8b95141e617e82cfdd5341faba775dcfba
SHA512

ac2a5f2ab6173145e02c07e52a423a674ca9a1da309c3027e52dcd1c0302186f0d1d124c6d89302f011bd945dbd1f92b0e44a9bb7d2ccf081f7a58859f9fc975
SSDEEP

384:cprr1gkDCgSLY19Iigbbjt7l7l7lljjpeyLLs4LD/B:SrVDC7YsizU

Score

10^/10

xorist discovery persistence ransomware spyware stealer upx

Malware Config

Signatures

Detected Xorist Ransomware 11 IoCs

resource	yara_rule
behavioral1/memory/3664-6169-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-6172-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-9703-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-15532-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-18157-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-18582-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-19514-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-19722-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-19724-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-19761-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist
behavioral1/memory/3664-19762-0x0000000000400000-0x0000000000410000-memory.dmp	family_xorist

Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist
Renames multiple (6341) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Manipulates Digital Signatures 2 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	\??\c:\users\admin\appdata\roaming\microsoft\windows\start menu\programs\startup\êàê ðàñøèôðîâàòü ôàéëû.txt	taskmgr.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\gX3l02hO2C0d6Y9.exe"	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops autorun.inf file 1 TTPs 2 IoCs

Malware can abuse Windows Autorun to spread further via attached volumes.

Replication Through Removable Media

T1091

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\x86_microsoft-windows-s..ccessagent-binaries_31bf3856ad364e35_10.0.22000.1_none_d85560fac0cc6c41\autorun.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\BitLockerDiscoveryVolumeContents\autorun.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\xboxgip.inf_amd64_3e25c04e2c3d6613\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Vault.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Wldap32.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\cemapi.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\iscsi.inf_amd64_92707498edba0868\iscsilog.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\p9np.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\pku2u.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\TSWorkspace.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wbem\xml\wmi2xml.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\da-DK\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_swcomponent.inf_amd64_064f0b6413e2d085\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\fltMC.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\net1.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WMVCORE.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\es\Microsoft.Dtc.PowerShell.Resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KeyboardFilterCore.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\tpmcompc.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\netefe3e.inf_amd64_7830581a689ef40d\netefe3e.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vca.inf_amd64_ae8fc5f4a51fab7b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ws3cap.inf_amd64_cfe8f1c2f6f0f4f7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\gpprefcl.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.System.Diagnostics.TraceReporting.PlatformDiagnosticActions.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsopenfilebackup.inf_amd64_8424300b27b24147\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\rdcameradriver.inf_amd64_a7342c1d3e05adb5\RDCameraDriver.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\IME\SHARED\IMESEARCHPS.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\KBDSW.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0021\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\TempSignedLicenseExchangeTask.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\downlevel\api-ms-win-core-fibers-l1-1-0.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\c_fshsm.inf_amd64_1b5e5791cfb69c03\c_fshsm.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmct.inf_amd64_9208fead72720c5e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\mdmsii64.inf_amd64_d233a83fcc439aa8\mdmsii64.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AssignedAccess\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MFCaptureEngine.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\oobe\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sc.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\webcheck.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\IME\IMEJP\IMJPTIP.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.Shell.ServiceHostBuilder.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\ehstorpwddrv.inf_amd64_55a4564b7d07f0ca\EhStorPwdDrv.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj3.inf_amd64_0927be759789c1c6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\F12\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ActionCenter.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\azroles.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\F12\DiagnosticsHub.DataWarehouse.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\tsmf.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bthspp.inf_amd64_d059343065e252d5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\c_image.inf_amd64_0418b6e295a79311\c_image.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\perfnet.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Wpc.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\windowslivelogin.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\es\Microsoft.AppV.AppVClientPowerShell.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\ehstortcgdrv.inf_amd64_7f1875bd3a686318\ehstortcgdrv.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\pmem.inf_amd64_2b62c40414d14511\pmem.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\esentutl.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.Management.Workplace.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetAdapter\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ConnectedAccountState.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ieuinit.inf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migration\msctfmig.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

UPX packed file 13 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/3664-0-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/files/0x0009000000029ed0-6144.dat	upx
behavioral1/memory/3664-6169-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-6172-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-9703-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-15532-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-18157-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-18582-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-19514-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-19722-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-19724-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-19761-0x0000000000400000-0x0000000000410000-memory.dmp	upx
behavioral1/memory/3664-19762-0x0000000000400000-0x0000000000410000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.41182.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-32.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxCalendarSplashLogo.scale-200.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\JavaAccessBridge-64.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-006E-0409-1000-0000000FF1CE}\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageStoreLogo.scale-200_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\fi-fi\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\orbd.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppPackageWideTile.scale-100.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-24_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ja-jp\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\policytool.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_neutral_split.scale-100_8wekyb3d8bbwe\Images\Square150x150Logo.scale-100.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_neutral_~_8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-30.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\NewsAppList.targetsize-30_contrast-white.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-180.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\nn.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSOCR.DLL	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\upe.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_x64__8wekyb3d8bbwe\ExploreModel.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\hu-hu\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\System.Windows.Controls.Ribbon.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2008.32311.0_x64__8wekyb3d8bbwe\Assets\GetHelpAppList.targetsize-32_altform-lightunplated.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1909.12456.0_x64__8wekyb3d8bbwe\Assets\tilebg.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\bg3_thumb.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\FetchingMail-Dark.scale-200.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreSmallTile.scale-200.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\Microsoft.PackageManagement.MsuProvider.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-time-l1-1-0.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_x64__8wekyb3d8bbwe\Assets\Icons\StickyNotesAppList.targetsize-48_altform-lightunplated_contrast-white.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-60_altform-unplated_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosAppList.scale-100.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\Images\LockScreenLogo.scale-100_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\Microsoft.Terminal.Settings.Model.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\cs-cz\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\coreclr.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Windows Photo Viewer\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_neutral_split.scale-100_8wekyb3d8bbwe\Images\splashscreen.scale-100.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\PDFSigQFormalRep.pdf	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files\Windows NT\Accessories\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-60_altform-unplated.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-64_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-64_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\nb-no\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\api-ms-win-crt-private-l1-1-0.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-400_contrast-white.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\Ole DB\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2008.32311.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GetHelpWideTile.scale-125.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-GoogleCloudCacheMini.scale-150.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-24_altform-lightunplated.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\System\Ole DB\oledb32.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-400_contrast-black.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\Microsoft.VisualBasic.Forms.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2106.2807.0_x64__8wekyb3d8bbwe\Assets\Store\Wide310x150Logo.scale-400.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_x64__8wekyb3d8bbwe\Microsoft.Apps.Stubs.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-48.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\server_issue.gif	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-shell32.resources_31bf3856ad364e35_10.0.22000.184_fi-fi_f3b87aa95377148d\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_dfsvc_b03f5f7f11d50a3a_4.0.15806.0_none_c0d3d16c74269fa6\dfsvc.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_wvmbusvideo.inf_31bf3856ad364e35_10.0.22000.1_none_7e8c15a6a0560505\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-lsa-msprivs.resources_31bf3856ad364e35_10.0.22000.1_el-gr_bd4723bcfdf15489\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..fiedstore.resources_31bf3856ad364e35_10.0.22000.1_de-de_22aea951642f0999\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.CertificateServices.PKIClient.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.22000.120_none_f759261c81fa2ed8\f\SecureAssessment_JSBridge.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_hsp.inf_31bf3856ad364e35_10.0.22000.469_none_ff13f3645f05019d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_netelx.inf_31bf3856ad364e35_10.0.22000.1_none_47e8f5dff3f4157e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-iologgingdll_31bf3856ad364e35_10.0.22000.1_none_0d21a3d3012ffca1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-security-lsatrustlet_31bf3856ad364e35_10.0.22000.434_none_dff7d1ca03eba43a\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_uiautomationtypes.resources_31bf3856ad364e35_4.0.15806.0_es-es_b5753cc2ce8d8d46\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22000.469_none_a883bf3f9432d43e\drupdate.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_amdsbs.inf.resources_31bf3856ad364e35_10.0.22000.1_ja-jp_4f9ba2f6277f4715\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_10.0.22000.348_da-dk_189e5a260215a5b0\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_networking-mpssvc-svc.resources_31bf3856ad364e35_10.0.22000.184_da-dk_dc749b7c231e580b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\wow64_microsoft-windows-security-negoexts_31bf3856ad364e35_10.0.22000.434_none_bdf2ff4fb3034b29\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wmpnss-api.resources_31bf3856ad364e35_10.0.22000.1_it-it_47b8da5aef94417b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_10.0.22000.1_none_920b85bb9643a803\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-sx-shared_31bf3856ad364e35_10.0.22000.1_none_993c08d352b433b0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.hostcompu..l.cmdlets.resources_31bf3856ad364e35_10.0.22000.1_es-es_130aa6a6421819ed\Microsoft.HostCompute.PowerShell.Cmdlets.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-applicationmodel_31bf3856ad364e35_10.0.22000.37_none_04044287badd9e95\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-srumon_31bf3856ad364e35_10.0.22000.1_none_4b1167fb55ba3c07\srumapi.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-t..i-pcshell.resources_31bf3856ad364e35_10.0.22000.184_fr-ca_6c320899191f13ee\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\SystemResources\Windows.UI.SettingsAppThreshold\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.22000.282_none_04af1ce80d4a389a\f\iernonce.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-taskbarcpl_31bf3856ad364e35_10.0.22000.120_none_f0413261aef7465d\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.22000.493_none_81cdab704eaad423\Assets\contrast-white\GetStartedAppList.targetsize-72_contrast-white.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-xamlhost-library_31bf3856ad364e35_10.0.22000.469_none_757dd82c4ab4670f\f\Windows.UI.XamlHost.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-simcfg_31bf3856ad364e35_10.0.22000.1_none_15235f9870d6a558\SimCfg.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-m..ace-remoting-xactps_31bf3856ad364e35_10.0.22000.1_none_7b36628e5ac03053\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\es\System.Runtime.Remoting.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..uetooth-dafprovider_31bf3856ad364e35_10.0.22000.120_none_1b2f92efaa59ead8\r\dafBth.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-userenvext_31bf3856ad364e35_10.0.22000.132_none_649a849d6982d53c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_wdmaudioapo.inf.resources_31bf3856ad364e35_10.0.22000.1_es-es_6de8f7bde228ba06\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_wwf-system.workflow.componentmodel_31bf3856ad364e35_10.0.22000.1_none_86091b9b5a814b04\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\diagnostics\system\Networking\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-xwizards-registration_31bf3856ad364e35_10.0.22000.1_none_79b115fd21ca5a1d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_windows-id-connecte..t-provider-wlidprov_31bf3856ad364e35_10.0.22000.51_none_2c16224fd2f86194\wlidprov.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-i..platform2.resources_31bf3856ad364e35_11.0.22000.1_en-us_4871f0b6c28df689\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MUI\0C0A\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.5\MSBuild.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-eaime-adm.resources_31bf3856ad364e35_10.0.22000.1_ja-jp_04b1c275a125920f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-r..ienttools.resources_31bf3856ad364e35_10.0.22000.1_de-de_af2479c6d7fd916e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-refs-v1.resources_31bf3856ad364e35_10.0.22000.1_es-es_a17930135cbd727e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_policy.1.0.microsoft.powershell.security_31bf3856ad364e35_10.0.22000.1_none_f89f77472e5713e8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-onecore-pnp-drvsetup_31bf3856ad364e35_10.0.22000.1_none_be75fd809cc07e49\drvsetup.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-van.resources_31bf3856ad364e35_10.0.22000.1_it-it_5dfe3ef1f04fb0dc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-msac3enc_31bf3856ad364e35_10.0.22000.120_none_a043fed800d1f7a5\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..cketcapture-drivers_31bf3856ad364e35_10.0.22000.1_none_734c344c0b1fbda7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-w..ovider-cimwin32-dll_31bf3856ad364e35_10.0.22000.1_none_25ee8ed70ad8def5\cimwin32.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-application..nverifier.resources_31bf3856ad364e35_10.0.22000.1_fr-fr_7a448e1f76d85b9f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-sensors-core_31bf3856ad364e35_10.0.22000.348_none_aff96b9406c60734\f\SensorsNativeApi.V2.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\x86_microsoft-windows-s..-installers-onecore_31bf3856ad364e35_10.0.22000.280_none_8ac2284c72671da3\httpai.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\es\ComSvcConfig.resources.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.22000.120_none_f759261c81fa2ed8\f\Square310x310Logo.contrast-black_scale-200.png	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ie-ieproxy_31bf3856ad364e35_11.0.22000.282_none_cf0d4c22f9618b91\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wwan-adm.resources_31bf3856ad364e35_10.0.22000.1_es-es_968d35517fd94dea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-d..japanese-customizer_31bf3856ad364e35_10.0.22000.1_none_c381674a902a5122\imjpcus.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SbsNclPerf.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File created	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-l..erprisesn.resources_31bf3856ad364e35_10.0.22000.493_nl-nl_30911746ea83798e\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.22000.120_none_bb415867ae85d51c\f\memoryAnalyzer.html	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~22000.493.1.3\amd64_microsoft-windows-s..ngshandlers-display_31bf3856ad364e35_10.0.22000.71_none_c568c7966675623d\f\SettingsHandlers_Display.dll	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-hyper-v-drivers-hypervisor_31bf3856ad364e35_10.0.22000.493_none_2b6ddb5beae8ce90\r\hvax64.exe	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe

Modifies registry class 11 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "FYKFBQZZCSUGDBT"	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\ = "CRYPTED!"	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\DefaultIcon	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\gX3l02hO2C0d6Y9.exe,0"	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Key created	\REGISTRY\USER\S-1-5-21-3973800497-2716210218-310192997-1000_Classes\Local Settings	taskmgr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\shell\open\command	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\shell	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\shell\open	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FYKFBQZZCSUGDBT\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\gX3l02hO2C0d6Y9.exe"	3aecd251d296551ec8827008796244e5_JaffaCakes118.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3416	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3160	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	3160	taskmgr.exe
Token: SeSystemProfilePrivilege	3160	taskmgr.exe
Token: SeCreateGlobalPrivilege	3160	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe
3160	taskmgr.exe

C:\Users\Admin\AppData\Local\Temp\3aecd251d296551ec8827008796244e5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3aecd251d296551ec8827008796244e5_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops autorun.inf file
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3664

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
- Drops startup file
- Checks SCSI registry key(s)
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3160

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3972

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\UnregisterProtect.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3416

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt
1⤵
PID:1248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

T1091

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Replication Through Removable Media

T1091

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
bd482a21ac01a36e7b56304068b7f04e

SHA1
03670c513d8f952ca422ea51f77445b3b3894ba7

SHA256
072ca3fa4e019b3161106c39489aa5a662a246db9732f35e49b401c3509bc41b

SHA512
251f7921be41a4315e539fc582fb9347e9a9cf3c5a37983e843275b6adb11c949dbd8459e807be66f04e95f58e6b7da6f3e1c8ff3fe81751a8b5d19ff4bd602c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
f9ef9c1377b6f58591c65ec1ed6638b1

SHA1
2a0a1b7b3109c69588fa0fec90b42423c267713e

SHA256
2a52f1533001cb785ddbb69bb504a9fbc97fb6c620e31d9a5416562bf3ceec34

SHA512
01e5dc00afd477326ab58818e9cd0690602031e97031ee769cb561d48fe5ef67c37662d82ad878a1d3b7c800c1c8127da7af7066d3ac9b015662752fe423c1ce

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
fbb7e66420aca3f37ede53a6c59100d0

SHA1
cfcebf873a300859abab8efcfad4e96fddb81002

SHA256
e993e041bbcdd750cd2012cec57cd51e5a76cc178932ef9bafddabcbf46e0110

SHA512
7ee906fc6423044b51092bfa1305d26d0c491331a3c3602b18ebe3779509274f5ffcd3615fa159716a82ac31740752ba4e88f97b6106abdbfc5eefbed39de267

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
f2874bf8f43b5d3e559e67968ca82a21

SHA1
31f44e939b6da7ae4a1d7fdc6121c39b5514043c

SHA256
86e2a3a7e9501bd5b589522889bf2fd7abc2ad337a8b7835467407db1f77c3eb

SHA512
c1293a677e1430aa8f9b57e5fdbf5555579ce2b1095cdc91ad37425950b40a11adf04b807fbc93c5ca2abff6fca8ad9303f8426c4c800abc00c4726b004f9234

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
660039ee59e68a336e53bcdedd6c7dd9

SHA1
e66bf1ad9ad464cd5d6f49726e10a8ad60c347a2

SHA256
78dad5854bd8e4ac7556611d8a6aecb4d63bb7bd3f157b75b17030da1f3dc0a5

SHA512
d93d526d9ba5b7855311b442e5d3ee500be9a597dcf54e3e087956d5bf899b18a9f2ba65bde9e7b7df752ea05a7e846e7561f6c86335d2ebbf9e41094cd4ad12

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
23f7e5030ab6a2f82a07ae3f959079c4

SHA1
eebd6e399f42762ed6609b599948305249084f63

SHA256
4bb98f9af95b44e1e00e373ba10cc8a999399da52c423e75a9e46aaf43c18d0c

SHA512
e49080a139679bbd0e29b4044b4fa6380881352c127042ad77c03c0f11a55c57817b018c00dd50d2aacf3e5025821908089fb5c5ba435df196be4feecc278e17

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
3922f624a531b6ec69262c50664b9a5e

SHA1
01be8800834cd808b1e82ff69e1715cb41a1cc74

SHA256
86f1a1a4037e47a3a6dcce320018633611059271cb0a081ca071f041ef767c64

SHA512
afb798ddcef7551cd013f2467b128f001232c3926606bdc541dac55b56824d33e2249cb5681f30ffa6258d226e370e610005263c5668548349e6e9cffa16acdf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
78e92e40383763f93b0f1321da2cd372

SHA1
7f32474e30c74375339b5a10e6e246bac802788f

SHA256
b76ff1a6302e0f2c57a13cfb38c853017fa86e11ab951aaac24c6998942373a6

SHA512
0d870d82b373102dec305a17554027fac27462a4fec6ccdf8cb3e9301cfa4480358a391691e75162b498424207d485ffc629c71cf6276fb082133d7ea78d248e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
a75fa446e7303d32c7df521ad0995477

SHA1
9759b464d376c31775d97256180bea9ead92734b

SHA256
b489774abd94dfb2d73c697800442c7ad86b64623f164a087c85b09f4ec16b10

SHA512
5f612c60b42c17e83cc04305037d01950bae64f89208b11c068621904e429581d6a34ccb6cd0eef9e656ada2a1023237f8b580b9d3588d2813d33fa584b1eb59

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
1c9c127d182335ba4aa4b136042194db

SHA1
6fa0306a13c07b6ff0587f2ace42e8bc0420be85

SHA256
d43653b6fb1b7e6fa6d7c0255be53dc5df6be6083b03af859411b3867e7f04ef

SHA512
7f214a3984d032036a2c1307fb40a1275de2f078ec8ce23a60f6e446035b4ac0e838dba26bfc2cd335539d5f76b151b9658ee75dde9b39f8c3d624d411133af1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
13d0524c1981771da1684e0e9fab319f

SHA1
ea152b0d2ed5e79ee70d038d1ee22f20f8b734d5

SHA256
b3f3f41b1984cfa84ae8b5ea47561d84d8623208ac9a77fa25403d4b74a09a24

SHA512
6887522911e2c7ab988276a997b5a016ca8e937108dc7e681467d3052a818f912f32e4aa6b82dc2cbca56833174229a5e78666fd09f9ad88685bb233fcbcdccf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
bf3587e7e2981b2d1a593e15bfc6be7a

SHA1
fb2b92c9de39fee1b8a728bfae01000a4d3c945e

SHA256
75bb09249190b4248996649c80e603556ec6ae5a919216b0369190fe681f1154

SHA512
0afa95d5ea3989674260078a5708f602b3a802a436edf1c5673b00751ef0cbbc77f531e9de78a952b6a8598f60486dbee8a4041805241b0bf69dc0f4518b73ac

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
524b464348da1d69bdea25305daa654d

SHA1
e79e208b5482333bf1e9c0fe80e1cd8d912bab12

SHA256
81311a6020364f1074c6c31888861c78a14a13095bece9dd543fa037fb6e0ebf

SHA512
a177bc29600f8a538e0bdd6f993805b2e35a3d185814853f28dbe023fb564d2b02822626ffef9a6a37786a401b63fd29ddc60d0cd675707d5b8bb5600227ce3f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
a5df884f140b38c9cb0372e189409fc8

SHA1
b819ddec5ee03af21e5c69c21515d42238a19815

SHA256
aa1fbb0eb23e14303c2c9b6f8957b26c4d34663601205c1c484514b8517a1ee9

SHA512
5adc6f8273e8566b819c85eb8d7b62c58daf368ff29348ade5c1f4559df545a25bbbeeb8a1344ad103f6e9b6bf3df64940c89769cb4815bb685c330e08fe0817

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
ef0ecf5cce22ffbd804d704826454ca8

SHA1
b525d309e18f3b318654d190333def3c56835275

SHA256
1dea6e70f851b136626dd7228547b220f982da1ce4ca6720ccfac0d93b6bbe3a

SHA512
c304a2cf0fdc9ba9d72e3daeb9fe99eb772f259aecccd35f6084a3b6a49f558c4676aa64a92d86f2db06b259585dcb642b85babeca6efeb668c4dda454ea343d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
7dfe668d62c5ab9ad4b7ac7cab8f0f9e

SHA1
796f47b668178df196bccb91ef6fad3403bdcda1

SHA256
acfaa6a2c0f8682bf2d4357564ff10da7cf2e344d1fa01113a9bddaf0345c695

SHA512
cfeaab92423058d6827d3d7093b0e08189667d4a4cf3039813a92d5510111d4fb0c45ca9ea1c2fedb6ff4b9c1cafb577c9f9cf278db64ed4aa843c0679bb79c8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
583ad776b147f987d13bd7808615467e

SHA1
7e2eb470e1b7b73c63d0152750681cb8e1945927

SHA256
08bae49418799919b7cbcce0b11d4eadf5e38ee8341885712cd2822d9749127c

SHA512
f913983b02d06fc311cae0f15c858fba6f342643330d8be912680a912a0343cb7affea4365b0acd1a3efd4300c8c64274d25e92eea7295c4e4de8d2124acf2d1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
a5d275f98dc4dd4891daab013dcc6f9c

SHA1
d55ef536191a83c226117259d010e4937542ca35

SHA256
b10993c20d9e29b90e21d136933b264528d6ef4ceb36b6e3b229ffce8139dfb7

SHA512
511f9e8445544e9554fff18657fce9b28977df069c55ca8947e82a92b2395bb0bf382291adee98be78783067263dfa455ac99f5f80be1791e21b3f86cb96fd89

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
f74b2e6ee62ae704ae484986aa992609

SHA1
8205f6b6791b2358ed7c798f546627d5706830ef

SHA256
0fc56e38b6e1eb2632aa7c4037dd3f07e93148584761b1230bce2f1c74d91e13

SHA512
1a8782250e5c74aa0daf6f53600504043f05997b321f956cf79aa49e8d8f66c5d658efac484f923b3bd393fa6e06d08213aed286f737a5d6817c1394e03be412

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png.EnCiPhErEd

Filesize
703B

MD5
23c1c76c9657936831aa078d88c127cd

SHA1
fd9e7e2fda2b05665dd6dd50e9dd401962f8d524

SHA256
1b602f9a7b9276c863662223f487f5dc26624c5dffe7c0ede39dd37d78d0c397

SHA512
e11bb734ba8dcfb97e243d3c99c0107451b1fa683a7c1ce3a048e2c2dbca4d623a62da07ee6596bc32a8a7263d747c8f6ce9585645693505d9f6df403a9ae8e8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
0f605c467f6c8be1a1887b10a0c09a5a

SHA1
69334c3721bfde10db6fd0dcd7ac67a17342fc6c

SHA256
0a7212fcb350d4956608907a7a95714f182fa5b51b51741bb4b778bf64dd43a7

SHA512
537d1867786b93d3b773af67f8c95ca6e3f76d77872e94d62f7919436f201594ad35b5da3c172cf19b16df5e9d9dc50132a161244827f8c5c379e108e9c7c2fa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
0dfd88d6c0fe24c8efc8eef268ee461e

SHA1
04fe2e20a55a5b7068a3d690dc6b7f40d36c7fd2

SHA256
f0d8e8d54acfac91959d7a8c312354e0fcff7c4d5324a2c6af8e18e4844acfff

SHA512
74a2aef5fbcfd19db7e0c31e15b04056a3a771470971da5950c82126a48ba7f0c406757e544885e7d7d5a3506f47099d9f869de61ee4540e0e4863d742269a8f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
9ffa92ec630a1bfda542ecdc785bf364

SHA1
ac9014d80ac8c6ebd94762eb3ee061dd993f7120

SHA256
a2d4f970c220726f4e9dfec72c1bf170847e44c9060bce2e46ab161e27e0614b

SHA512
d1aa3a76baf97a056256deee9c720bcadde60257015332a78784ee237412de5c209c8ba6cdfe7c7c8e69bbfaf7949b9f2de18d8b9cc03f6cac3fe934c6a3b922

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
d61e4fa92bb82be0c46fa83b8833ee3e

SHA1
f40c20eaab0f792f7b1b6da08a472aa539892d24

SHA256
99970898144a971e82aa43ee318935133ea352f3c51393f8dedd3d29704879fc

SHA512
29bfe2af495aa56368321eb18bf41ab95569e5b2ba4cf60aa32ba25e52a36b9b2a1de3e384d574095bbff14bdcdbebf0fe3a1ff64184fa68b7b780fc9099ad90

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
525dc6b61ed382105b3344dcaea271df

SHA1
89ddfcaf0a2736e7b18fb51d176ab69fb90a6de4

SHA256
f7325b276ef7a6b3f112ea65d47d96c598b649d6f2652a26f739d55cbe72a1c9

SHA512
d853d67a7b51e1fa6a0c7247dd8e812275486c529188fdf2fb148f127433084d6c52a6388fcbc7ce7affdc497b008385b63844f75208d08a7c05fd3785454b19

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
e67b838b9500f3d45fd5b9bdf0c59fc4

SHA1
2c2a83edd6d4ee959f4d1e719651264794e02a4a

SHA256
eeda34355d57152775565d00f9b296984ec964c3a6ad79a8757a95c8f2536e1a

SHA512
c5b4f19aa2fe49f99a8858445fe0cc61f58513060c42ce7f007168e090ea245203edf4336332a6237dd0079c163e8d8945d5e2b064d7d1129424a1fb30af5bb4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
450325f1c28bdbaaac1aa7306218e485

SHA1
1c2a700eeb0985821a42593c890b3eb302429c69

SHA256
b5dbedc826e528b074f495f818890e28654b476da7f3b723bd7c17e0e3ec9120

SHA512
d0f57b804385fde84250f7680a0887ad84242fc237a821bf097726867faf396484429675c2f682aa6430c2bfb73764451d0e4605d028ccb6274e5e61454814fe

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
f8fe80e83cb73fcfef0791e6cf136aae

SHA1
4a682dc6185d671eae5a130e04a8c3cf3e10cb12

SHA256
3cbea64639037b3b7af1c0e37a0e7ee57f5630ee506cdf7ed14bb7de8c3669b3

SHA512
da802643c0df7191e6d1543fa5c0eb4976ee9b5124134ecbbe2a1b360aea93a7b0feb6c650fd6850c6dcd162e4e9795606978c5805ae647e1f1d3bf94d1581fa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
a48e8a1b4320f3014bcb59ca65085e10

SHA1
2796a9fa9583d2f58472aa9ec0b12f24c3f547d0

SHA256
02d88902ebdeeeccc1457b5d464a76bfd403291d51e5de48d0ea4785bb22d018

SHA512
173a24134660d42472b64aff86b60cd8861fe5316cfd6e705914d2ce5e3ea1f6dc5d9866000a50095fa08e97b885cbbf6b0bba5e35cc7814f298aa58efd79351

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
24c0e086646e6b3daea622fe6f6044cb

SHA1
2b46b26d9dc707fcc969d5a11f33f99eaceb73ef

SHA256
d9f1553de01e45c02d75bc4e549ce5fc561b5dfcb940105589d0a2ea59960840

SHA512
2b6c471673b06f02d0a4eb48237787883786516f68c90f96e01b18b7511791482901208c2f1978b96b044b8020e400e0c653b6c0271c024be25af7de36d39f43

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
c58aec00229e23a022f0d5e092b04deb

SHA1
e2e7d32406b216b188fb9e435d6f81b17518c2b8

SHA256
7da5ab53cb9b2ba693dea6ef9e7ee65af5f42a01e98fb38e7863005b77e2da58

SHA512
bddd41db0633cb34134116a6d116f9d74c2da836bb0ad281ee805c503d0099e2969dc9614ce90ebbe1354d98840ea421db629bece146aa515378b5f3d6058ffa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
e072f1e1f743020b44ea194c4998bffd

SHA1
0668e924c4fec2dcbe92a1e2feb494af1db22534

SHA256
f275e25fea80f7fff78c5dbc1908d71d15190bf0c66626eb4e0fb0d098ad8bd8

SHA512
72e1dad26345042c953bddb8db265ce4f35362dc523e0e62770bfbeb40e66a5f1a854de892103ee6b0f3486c2b58a748072dbbcc9630ea1836d4c5d27c7b6673

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
a8b0f377934a33b271112768f733668a

SHA1
78c6c700211aae7e37ddc7efb84ac9719e11da05

SHA256
0c304789752e8afc69d00c345d3e369e86463fe6283b344f62677e7940b9e994

SHA512
6f1bad2e335b9239e81c2fb10fb222f1e08f9c669c25ad43eaf8459823c0923c2442b0a8670c81e9514b2ef9152a103ca531da5eab9cb89f4263bcf44d395a21

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
e92abdf1f756654f6511f95300208c0d

SHA1
c4518c5db433a41f78a36939e3f950f0df876db5

SHA256
3d23f9a6c9c44a1628a0221fad8e4f263b51a61f0c29a78e48607162d8b8cdf5

SHA512
c64fe7a48a12094c6d2ef7d0f22d1de077bd72e4ee87933bc6daab278b88fc0712030e50f648c7b3d4dda0a4c20f6a22c1fb04456544ddd917174c2b1da71a99

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
33aef50aa2be6521c070ea3d493e5c56

SHA1
1df681f10366d005b9add62413498f5f20e916d7

SHA256
ac7fac5cd3148f3fe03f8e3c95700d532b49d2cd6c21483681e4f6e9fd5bbe74

SHA512
326c6a7e0dd5d3f057091605b66c178f9d8e0b17cde1412dab479665d0b1842a840b6edd879e6a8663178361d5767a684692bd3c22ddabf67691bc0de5432dca

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
43e5804bd90b8089b2e6874c8927968b

SHA1
eac1c8c0bde71b4dfbcda8a70f2e8d23074cc4d6

SHA256
f8c53dd0b2911a9db04f4c6b16728794493a830d8e15673de8de6b2ce172abf7

SHA512
2188a962491ad899968fcd729b533bd8cdb4c7f3fa618f3d0591cc4a54fd2cc2fee04eaf7ba881ccc38f860c44cf6b6193bc6913fb1a2d41ebc7cb21cba335c8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
1f8be324708f92bd82e15cf5b9499d17

SHA1
8d33750e0caac4a80d45a77d8e7c69c47b126832

SHA256
90016445b34dc435e84575924e8f768294ec02f24527450211b20f7ea5ecd172

SHA512
71670734e941385c35beb436d9fa431c217d3fb398502d3fd644a38ef05c791cb5108afdb9230f9e7222e5b40ab3d44e1c450915f0aac97c38ff38bfec256e4b

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
5521bfa867726ec725e036bbe77009fc

SHA1
e2d56b4fc90a09a1d82e08e49c5c909835a32688

SHA256
fb0f017790ddca4304deaa9177db4abff7f6058fda9a2716d653de22f521cbae

SHA512
06f49215c18428f369d0c540e230501604fdaac809e23fa8ad3d6231df96c1e6438940a8987661b7c299bcad1a0d463851449a7d8e9c2ec7aeeff69a3fa9e6a4

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
181B

MD5
7b7d352a7eaf1faa87385a24b34edf71

SHA1
d2d03c8c818f4abc41d4e25b9f98c4cd32e297f9

SHA256
b83e129ead7114bab33f15ddc0aa4939a588f120867304a95063adb8ae62ec88

SHA512
a1383cd45991a0e73fee095172ed3f024f1d98c1e0ce517da5aab2cbc376924741efe6df9909e2469336b1dd6a04c9f4e83d7f3b7f196c016cbf14fc6f0c7753

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll

Filesize
558KB

MD5
9cb23f7a97b5f4d9ee53e918f1eab342

SHA1
6ba02a34890b0eb7ffeaab64a14ad20e48bea4d1

SHA256
b16b282aabab4e246380c8bc91da1d1014d63854186898f196e6d57580a0f788

SHA512
3283346770c9155c5c344e146cb7c9b4abc777e7a2e46d2ea8e1f209d5e28ae5aca9d8f047dc4687093da29f212c55710429941353ba5c44257558094a5301d0

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll

Filesize
95KB

MD5
a8349e4dd90028ee382eb9e5eaf44942

SHA1
d61c663724fe0d8c80c4db51045d64da27beda58

SHA256
a79364603ceb4b7579b9b83c7906c0e4c9342179c314d65b21976f0b04f82f9f

SHA512
680413ad68387a0d10c55ee1cbaaf0811c2586dc441254ae291223e38a90616a4c8273d6d005aac9a4bf3fceed53cd47374c95849197c1800762dc6feec72980

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll

Filesize
36KB

MD5
9d031e302d4459a6bba2f94f0746055b

SHA1
93482dd83600b94287158c6d017247592d60dafa

SHA256
8f60753cfe301539a7243290d3b1a4a3ba4e3700bc8c8cfa136c39eced51bb53

SHA512
c6a19fcb0889aa85c16549e1da215071ac5fedd71577f09bcd5b56f6b2b98f3e193a639b0f0bda636dd6179ac284a82a0432fb18204a5ac55bf5cd5e0c2840bc

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
3797e72f022ec08e7f4a33e1e1d14962

SHA1
a46948a11e241102426a541cc8a5580097cab213

SHA256
61304a304d3fd32aa781eb96691240fc5a49ae05cf9ec6f2e78fec13fd812a2d

SHA512
5f75fdd63da242d3db8580dc7984959a7001da75e33eb7f67fcb24619cf6655390384c75754e5951910c9561e5aeff4dac7dafefdceaef6338ead5ea0b5284f7

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
fa90aaf17c64b5598cdb4ba6a167b505

SHA1
c306cf95706b9dd4b29d5ad19f34bc971da93a70

SHA256
7a5a6bf3681bd40426a944977cae62ef30fa12c163b66ed60d3f04d8a558b266

SHA512
cb7b48504c462e459694064069ef6b4d9fa63982520743e756e6defdf7eef1eddd5752c7c8337dd317a8adb7ebd079acb76d70491ee8529e31da8efd3787c78c

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
cb6df95e81faaf51835e61225d60c7ca

SHA1
0c43896188d9faf6cfa652b317e30807f3ca6d01

SHA256
aa111c364b8a729d259ed0a20fc62a857828eb7950cfc735d12a56b9284931c7

SHA512
f4801f61301b971bfa0576ae7dffb04bb21b1f38da618183141af163c0bc97aa1778da8131d9d2efe7610f3a37c75d4e7cb4fc731d745331103bef9216679e42

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll

Filesize
11KB

MD5
934be24fa2296f80e3d504b15bb3fc2f

SHA1
3515c057c1575627ef7d1866e6ddfa6e2fe195e2

SHA256
7987fad20e750ebd9e5e60b9da0776ada4cbe06dd0ee2c7bb0592aeb95e45605

SHA512
986c4dec2b4f20fcee0fb93867e036e293d149e73b6e50bf1fc6aeb278a3b03f7d1040c1d63a605467c85cf7543e27a8b0790dd0c6de8e5fad16621c0bd74a16

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll

Filesize
11KB

MD5
0271145c9069ac128518474097c41d61

SHA1
b414ca2d09c81669d04c003e6005092cf5ed6f0d

SHA256
f95508e702fee73877d67b8c65497fe010d235478f64df2ca1b8d3645025c5f2

SHA512
3021deba2dd23c56126a6ce75e8e541f81bd05e8e75b78e1036885d1fdd0e8618708da3e077cb8b6f8ff01712945181016eff5da5165c05ed3b757e09c77970f

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll

Filesize
11KB

MD5
5bd5644c07d84f20132ea30b6b283133

SHA1
26e93d6d835e986d5c4473a1885ab6fc7bcfaaee

SHA256
4fcc3da9cc2eb20a784f4b07bb1db98e97f406746b6c5c379acf9c4f6b2e338a

SHA512
d6e4484a94678d6fa4e9720278fb346ff7294ece7d362d8639ccb8cfa14b048d03c45d3ca7c7763fb9341f76438ef6f6021eaf055d9c0a2c6ecf5e3ec84ba4bb

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll

Filesize
11KB

MD5
ad212bb0901566df12bb3015fc64c2b2

SHA1
3cf8af215c73657c0318c396fbe5f05e69380fb7

SHA256
8b9fbb648d05c1be2305fe2bbb3850a3005982289c3f27e357b7d678a391baa7

SHA512
a7b96655acb65ed35aad79c10b5769d3cd96a9656ac1366772442cf8910b53e2c91c1d23b13ec8a8056eb9293270e753398be7b26ae75bba65fb33a9549911af

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
11KB

MD5
ea5f52a99d697c676e48696e54f3b6e1

SHA1
abfe349877ff0325397d06d4d4d34bd8f2425171

SHA256
b23d2a0e71f8c2f71dd823d6037b0cd29698067d82b957a8704f00a754253910

SHA512
4b54bcf3dd928e10da4c3b908e061c22540f687d3da125f88fc924dd8f4001bd97228b5bf9c8ce02bc5a12f915fb9972186cf5d572bf55085d4782a77351745a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll

Filesize
14KB

MD5
67da7b0304430da268e31be3a40e6ee5

SHA1
efd3e1f4ebdfa0bb683473ab3a8e79a105cd3e84

SHA256
68f48342cbb206b03a96107e1519c8465fa1ee1518e9cbe3c5508c352146b344

SHA512
23447e4d6aa8dc1c8a503a9c28968fcf692639cca94777d8cb84ced1ad1ed4942a21b1257f6d7ec0d587984b07432d8f356a624d24acf2359ff91964edec621d

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
b1bc1343f800e685775a447fa445d834

SHA1
79944b1e6a0096e21543f47cab076f566f33f204

SHA256
c6cd23147fd416de055984cd6e6d6977d98cac6e699dd4db01b291afb8381fa5

SHA512
c4688be087cf19d9cd898cb299752e0a14bc1271ed4d46b90770c49102f7882c8c45e1966044ef5b91541d5f4e878612e45cbd80a50244f1341fe4f5e4e1ebdd

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
0bafa7be6fbd5359a69c701aa585de2f

SHA1
078167c11bed9d016d985c581b6bfc4d5fb71ff5

SHA256
a7aec99e7b3fea24aff94e6e63d62e392f7044ec989f186db7856f5f9e65dd7a

SHA512
44c2145fdc1dbff31f84a532969909594005a68ba8e4ef1a31f7baa1a6bd6bf3c2abf1edbbc81fa1d0cdd77057ced3a5960d9994ced6aaf73e9909e732f2629d

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll

Filesize
11KB

MD5
a10b4c5021a051ca5f83e699f0b9a9fd

SHA1
43b35cc1bcaa291636b780de58c1651305acd386

SHA256
8046154fb0ecc7b7aef7e157b0dafcafca7ee0a6e479fef9419d0b6d18a3975d

SHA512
36f3436dac3a8c45868d24c43a1f35d4869c5ec32ec7b662efcd95ef74ed6f9263f429dcdba64a9bb142a0a9cdf5e0f1614e492627f53e24657015ce797b51ab

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll

Filesize
11KB

MD5
b81037321ab5018c151b10b88b3d4f4d

SHA1
64f1828f6ceb0acc9674c6784e8798e8435829b8

SHA256
9abc629e17c37d192daae57394d0fb26a9ff427e1611b77d4025864dfa85c0e6

SHA512
03cb79a5361305047c1fe029dfb324a738050bde9d2b1072607961ea36120354028d3aeb22ee11cda7dfb9145f2d1f134f1ff0ece385caebcbeb9a676f61abba

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
11KB

MD5
5551da3fbc4e3d2f6b5335c6263b432f

SHA1
207bb29f7fe9a05c1b5535dcd56e52766ab3ff3a

SHA256
5e4935044bb923c51b1a8e1dc46b66e18ff12baa638cf49f1397fc5d10ea6c40

SHA512
813e9f196d84650fe9a600d03dafd9da17467b4e50935e2c20e914f6bb281a99878f9dbd291dee8ec3ca4ca12995bc43a6db2a3c8b1a24f55435f79b291a8f99

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
12KB

MD5
d5161e5fa1fc6ceb195b50ddcea3ee62

SHA1
c082231c9d4f019eabf20c0c50499c4b33fc3c51

SHA256
eec08cb1de76426d66792b11b6ab36c688d6dc63758fbd64ed1c3fa7357c1989

SHA512
b58d6729a2cdfc25b5089a4c40900fcd389f0a3657f12621388a3c7d40e27407d26cefa1ad590d86cd8a1b1b8b84d712fb2fb4771147ffe62404beb37454340b

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
c8f7be98842820a259d6e7fc767da68b

SHA1
38a84710c3fdd3fe8bdf2cb6faead5fcc323c1a7

SHA256
1c18fdc645bc4592479d35c2f524a23600cb92af981b36e4d2b58dfd373e0867

SHA512
23458b65ace57d0e803da3bc4f399a6f67873c043b8947c116be61e622fd24d9949f027d6a8a00ed2207c239c20a70fb62cf319012cdb64e044b43e7511226e9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll

Filesize
11KB

MD5
0196f12ec8850cbafce46ec686a5c75f

SHA1
9100e24de91e868e6b962a2847be9a11317970b7

SHA256
2c97a9d0525d0257545023546e711dbde3705b3b0a34bf9090ccef90b2fad7b4

SHA512
961059676f1857829006e0c4e101d42407cf05351cbd70baa1360ce99e493ad6f89b7f30d74a15ec8d4fed8bb704d8de0d079caa8b8faf84d2faa627ddd19276

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
11KB

MD5
52b3d4371bd7004fb0cc25f8eb84deb1

SHA1
63636a5d7a0e110869d8015a7d69681317b537ea

SHA256
71752f91719af1e75b5032ef62fd37436d847a745fccf80b88949717680333ff

SHA512
bee237607d6c4ff3051374e88260e4d66468661e5ecf4de6b760bbbf623319ae3368f53993c58b1d6fb529a1cb253610ac6ba1b5b7a23c6e2cf7958a49123d49

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
12KB

MD5
f7b581134b967e7f3b516b5bba78dc28

SHA1
4c56524c0120de714004e44669555839edc7f83e

SHA256
7f19b3049a7777c9f8fbae724200db3130ce83d5cb7490c3943e24a872fdd9b4

SHA512
33f55840869c51c2753b3b4825a2c31984b9b659f0f6d1992e0474824802adeae42be994e5f5cba3e6b72005a080a4e8e451abcfc8f14471e18629d6848728c8

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
13KB

MD5
0bd2045fd2eef522abbc66df43ce464e

SHA1
6aba353d593fe0ce390b9398611a7305eea7fd83

SHA256
6dc56420767f26d7d94136677ea3ab8fee0455afd9907743693c00278465a860

SHA512
5642ef133754e27a2f60cf89e9114eb93718212cd70e89b57f4ad238165f4c17dfcf123904b04e68d65ce46d14a63ca02900a97e4113f54fad26d980c0ab1298

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
11KB

MD5
45ee1e95d1300bb86195ef95318d957c

SHA1
0d23d59e882d9384c4626ac52f26ef3384b0c3a6

SHA256
05593a3d53255f02a7a946c4170102a21e12d26c3e1e4da292b045644b640470

SHA512
50ba6f6dd9e27781c323d8ed4e1d29cdf8898f69c2bb6e5885c53d8a06e40ecf84a157f72c372ce5c16b6cb50120c00626e2539a64bbd1bab17dbda3e460f8cd

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll

Filesize
11KB

MD5
b7d294ec1b8689ef327e7d1c2ad9de76

SHA1
96d145adade2a5108559626d3d7191295044659d

SHA256
e70fc4f5611133ce73a3a2b59dfbcde8bea7695384b5719835cdff9d4ddf37bd

SHA512
5bbcb47446e556abeab10e873eda64675bc36b6e6d47816f2a6f31baf94a04c63106f73ef5f7c7d18c0d02fa4d881e807098c4be175e8113e741a4dc222fbb35

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
11KB

MD5
85f6fff60512877dc94da28a99de40b9

SHA1
7e74f0c49d53e04ca730c71d341530440e42255a

SHA256
02e3164eef7a7f5b109ac86bee94f416830d2eb16f9bba5a309b5e549ff6de4e

SHA512
7b7f95aef5b9764594989b6dbcddafe79928356161d16f3bfd4f7564a7d248c7d66f22e11866b03393ddde58579bc4f16e438aea5e170c11fbe84ac461a4744a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll

Filesize
11KB

MD5
c2f350410b4497f57db63ca693a33d54

SHA1
0074a740b5ec217f17d39faeff35d42d39372f49

SHA256
7429cf08655aa09a1fd6d819b07189a5a25a1485d608a2a480cc41e58240bede

SHA512
ade367c6a747288d6d8036d2d30fa5f3c84f0ad65d6d084361f9f38c17818f76bf0807f0d4eea303e2614658e2d08c4ee98662a75e9ec81f4711f7f9c75a49e0

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll.EnCiPhErEd

Filesize
13KB

MD5
a7f584160411eae501117653bc1a4eb3

SHA1
7f023fb317fb1fb9ca8257c8dad9804634f83450

SHA256
42512323bea5d230b0eccae0e2b9648e99b20b51b0c7eb081e8fb3e84476caa8

SHA512
15eaf9c3c4bd34db8340e54c59fa51ae489eed7cef77eca32ba5fe72d9c8c8234b0a6b4c89a939a6e6dd7f1add9c46ffffb3cb39ed822f3d5688f8b2590c5e75

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll

Filesize
11KB

MD5
5a0a2b32808c1f151af1c8758335d3cd

SHA1
5dce1469d27f7623e914543ac3a88a6b87957191

SHA256
653daf2b246524b2d67c1a6e78a6b5ef67ce0361a8fe7891b0930ec74a2e9a3c

SHA512
12cbfc653f7eea217aeab68734839faaf7dbacfb2c9189acd20f06b6eb05607659ce0241d6ffaf49c3161263bc6f1492ec0d10b0120d5a177ea6fce5952746ea

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
12KB

MD5
7fb338e55ea23ccb8624157e2084ca6c

SHA1
4ba54b324546f92b291527f254cdbe7cc07d0c47

SHA256
83007ced054fcaa02cb24fecea922220860b29409e0ec3652be0d2bead08bcd8

SHA512
d1cdfc23795688763ca69dcd63696b6bdabaebfe946cf4f0497f9194af056dd624f6121f50a3134a6a2cb8781d6de68b4d4d6b4ecb2711bfa48f4419846af200

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll

Filesize
11KB

MD5
a799abe9ecd802f7dd85c3101676ed3e

SHA1
e62829cc45aae390af022115972a811f7d6fb305

SHA256
bb6a20b1528c856c86e0360cf26b76034de2c0b2e825a22626ab1f2aaed7fe56

SHA512
5bef711bf4be06f74e1220cc697a6727534f788a5861677ef434a7c16f8c9387b4ea3b6f750cccaf55c9892b057f891a17626baaa0676bf8387599e3e7c76fea

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll

Filesize
11KB

MD5
3f1ddb1fa6ab7994bc3a9473713ca467

SHA1
4f9ab03d63af1df4c9e7c15da9f7e49a4392f645

SHA256
3d77548a55c3cc1ad3b117469034730b5a83d424e8f8883dde535c5e81c2357e

SHA512
bbd83e93c4b286d0306b4b2360e960a5d437182596197f69e680cf753c21c8d2f971ce1089374cbee98f79f4cf7a14c7a6e372c7eedfe702d2942b7211a144f4

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll

Filesize
12KB

MD5
677dc5fccf02c26757973301f0e4286e

SHA1
6d2dc13e9fc0febed4a2c67e05309b2c869331e2

SHA256
d95999726d7150a3f4a14b700747e406ff0bbbb6377db606db9bec7a6ec8ea49

SHA512
75b7e0008afe11e828f34974bd98666f42b874898b9b0e62a9c037a6eb02981229149f37bc10532505032d2a129552f31fd1d0c2ebd6bc4c3cfaa83e20452ee4

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
45e741ce87942bfdee7d703e29ee4a2d

SHA1
2d8341d7f586d793dfaed667c3366cdcaded4f0e

SHA256
311da3604d5953aea33ba8a021e874d758e7845c1f377ba53af572253b561e70

SHA512
caff2a98df34626b49d895d213914e30ee4c27c8877e52773cda31ff5b80e8f83c884008a5cdf42235676f7561887502ff00506c1a4ba76933bf3c7d0472009a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
87679654a0e5d6c98ef80e5c1a7b7b1c

SHA1
3db52f0e3675d760e473232218192ec88116ded0

SHA256
7537d0609366686c956274d05ee5601b59ca7dbde4acb51c6dfad166101fb652

SHA512
efd77c0df410458e56b3bcd49d2be836def72294d7a21d8f08f91ae80ebcd8da39bd3d022f0acc9c8d57a515790caf7e8138e2146f909c2bb52cc99e09e18778

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
6c612b8470739c03445198e28991e59b

SHA1
c7df283697dee1ef8001461330660f669d7cc77c

SHA256
83464e3cc379eadcfdafd9fe1343adf2b7a208842a8385d590a8c59832ec3eac

SHA512
ab5a79da6709bf6c5ca32f734e679c27a341b490d41535b6d402de7ba4e8beddbab60769b1120d517cf69cf43c348be374274cd64c72c4a951d15568b73e51e2

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
ec564978ed4ae68001c1bde1d703f813

SHA1
a6de022996f7cf86d877ba9bb7ff283ab898961b

SHA256
3022f629d88c1f0d1e57da715af012d693f7ef169b5154b4631c5e91db63adc3

SHA512
59c8a5933ab2e5f74070ca1255424e682e61159261e1d4400339dfbecf66346c27fa11b59b8064ddb0082a5bf0589c5e3d3524097a528479aa641a78e33a1ec5

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
d4f1c8929da41bb9417929f73199b604

SHA1
919082982318ff260500eb6ccca33b47e6bf966f

SHA256
0c601f54796f43f20655203a483564e47f6dd7371bc0de83026eaa1aa05b247f

SHA512
dba33e5c609cf7005fa8007d92212066ac45981d4005d5fee2c8b026d71c31f5d02bff61a30efba1ab91973b74cf99e2a83632b0536e9463a54f09f021d8327a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll

Filesize
20KB

MD5
99f5c00391d93b08ca82ddc9d46f4436

SHA1
13db84f8e5b68c4886a161ed6cbde601c7d1775c

SHA256
6af467029cdf57d20164f63fb447e1ab6cb15ff2b205d7e273533ce76de63465

SHA512
c80f4df6ca4c4ba51e57e8405e179b397ff97085f41915685d8d188b0f254d0a01345b54e83d2be970b100d6b865e9f061b6b43bfd82b84a00b802e8c71a7a4d

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
19KB

MD5
da47446132f235734824db886e66558b

SHA1
83b9288f273336a2cabecb0034720032fb48e26b

SHA256
69e89c82a775c4e52b5cf0ffe6083b1f4a110f5f3315ce6e89d9d7fd1f95a177

SHA512
32062e95cb5ccc9cb166f8b60b7691bff5d4ae80580d059fba8bcf1e1edc07092fe9137b43350bbc267504492709f261f9c3ef89f1c361c42034f3d54159101c

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll

Filesize
62KB

MD5
3af14dff108fe82ee1c7da0461ba335f

SHA1
7894e3e07fcb87e1ffc61d283407053b430fcb53

SHA256
71aa291b3ae020d594a846fb95f0f076e05cc5238875b2d0a4d8c0ace8d2ad2e

SHA512
b8855f5e685191f6e1eb2622185e754c91b2aeb1de235411e3dbee1a8aa5401aba9bda37e0a587312af646b46575a8b5245dc746e18a3b1daa4acd58a80d1930

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll

Filesize
12KB

MD5
d181643fe4a9a87a4c8bd71ebbee3361

SHA1
c3925049499a5c614758ceb991ed8799e8b3a295

SHA256
57e76ec5c4451eaf3c1e8574fbe617469e343057438c3ff00b11444b63cbb199

SHA512
f3f6d0938d91d929351b134cd551ea674a96276b57f56209bc51740e78ab3341704f9cbf449d3f67c8b2a3a1f2915f25f3774bb3ffa6ebec259b8d5f5e206116

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
e136eed8632bb42f4900c7be3e353aad

SHA1
b79d44843553e88751941dc13e5a66fb499fae9c

SHA256
07b4368552173a8b7daaecbf3b8c2c75032c101b654ea836aebb904c3ad0d581

SHA512
3d9689b676024acfa81e1beae18fb29bc39b9b65b8b2cb74c657b987688f5a11d66d5772bace931a9f747cb16dfc4f40dd2882711e976065c54146e2bd433049

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
f17bd4b05146f17b2a92b8a61a214308

SHA1
54c665573763cda90b555e722e0cd061a60888c5

SHA256
6d3ccd284deaad5dc358ea471c165b5a3259e43fb3d161b3f0edc8a3657e328d

SHA512
333de24098b05e7bfc818b3426bde078cf47e4b4a621f79734469adc904d1aea9fdf9a29a2538cf870f0399bc35852104b437833c9a03a53cf0102d2e9935130

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
0828faa274bcfeb8ed7a01e983a9c285

SHA1
90e6f1990f3eec722bb7caa075583480708ffd08

SHA256
3a88a8a7c58d488a83105c5eded1202125e16c857019a4a9fd076aff810234d0

SHA512
1d24b6b0357c8fc1da6da068ce6fa962ff13fb0dda750158b79dc551f8b8cbe97b604a2238967043d6f40759d9a05a7f35ff5c1ea9753c0e1e2dc23d29e13aee

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
84abfa0fa2ad0fc53d08bfde8926adc2

SHA1
62ae7e31306b64721241dbdab5b884a1a87d243b

SHA256
aac036995bf1d5393e2b5ae4d6dd364043696883cab38f9f08472738a14fa0db

SHA512
b37e5c0929d4919fbe6131a09233c093afa93f7f4fae6dbba3f34eaa4ad3be1f73d3a374b93d049864a69d389d50596c7cbbe786261c70406e4ea8db8bc1dabb

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
cb26fb70535e06b273aa4e89b02a900d

SHA1
7ec8e9bef3c358533b5bc098fd8ead0ec0f7e8c0

SHA256
77c20e43c21b3a46ab0b9d8f92fa264335f16dad116f2df2faddc4395a1139c4

SHA512
bc7b6cfd0a865b32b1e9ff7eca708bc572385fb425d6519bfb20972acab4a54000c384c039be2ee23111bfa3c671f4495f38c24ea571cf3c207461ebdf0648ad

Download Submit
C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll

Filesize
1011KB

MD5
d4f6aaf470eac38a1f698cff1ef2ff70

SHA1
127ebd9e69e524063bcb62afd463eaa3422d1259

SHA256
4dfc7a8b902e637be5f8ed0744c36e783af66ab4151624a2677fe9da4deade4e

SHA512
58d5e11e87ecbb765cf137f9ab004ade548fcd4c0955401530bc97bc295a99f4da02db799eb87e1d75513198d8562989a1cbd96a570afb1498fb97ccf122508e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
21eaa2b247d3254127e84b573913320e

SHA1
faf5cb4f8b4d256221ec088c92e01e0f9b564452

SHA256
2833781842575da4fcc58f58e207c848c6f1dd75522b3593fa286d26820dc6c3

SHA512
38845a38f5d3bf06585ee3269cc57ef75f4798a8f6665754b7a3d2c213002c7457d7381ebdad1557b64220c5191962f2428b74bac3d1e6cd47db22dddc1980ef

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
ca63a76dafc658bf7ba16d954e43ecfe

SHA1
80a59aa883739e98982456b8f05e8c5dff364495

SHA256
58dd1933072c1b6c5c317697d076e254a024497e4db4eb70eb6c24ba3dfea771

SHA512
8f2a31c98a3b6e0e68f6dfb7e7104eb5aa24f86ff52cdc56c91d684320c14fa1de117f473d56c0b799260cbc30e3e81f447432315c9abe13c13ed7ed232df681

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
15e76148fcc9f5b34c46fc866abe6243

SHA1
92b7c1c5f875daa1feaea93df93f7f168df170b6

SHA256
82ad3747fe4e0a5e81e6a11cd874e1ad0b1ac6b92753d62bf7d2c78534e0506c

SHA512
9e6ddba177a27c61a1b9bdf6ed12e03e610949c8d0206bb7a9bd7de68aa2b98cce5947650d6fdcd13e4521c63009ff291cb3fe2a5277355e3360946410b32dc4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
9f027837448462b0dbb95fab21c12f0a

SHA1
30bb839ee9f7d4ec669182748ef1be0e5aba1237

SHA256
d041047bc5aa00b51e85bf7611d4e5068176bc7f8155baeb0344727dd40705e2

SHA512
8dc7d608a4e9f0aef1dc6e27af6c74668bb3ddb1ac79bb821bf0dfaaf30c32a9c157bb33afed46e8175affac62784e1de459a30c3e521313b3b61b58e866a82d

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
81864b48acabe35709f1ba4853afbdfb

SHA1
cfbe4f595d7557db388865129040bd34f2a0ad93

SHA256
82c290f554f6ab6897187062657307aa601b2634842d759bd693fb89ef7433f3

SHA512
f91d4fe758faa25f908b8bf62aed86e52700e2066fc9ad31a0cdc414217da5f7d56d0dda565b54e0fd9bc27a409e9072075da63c0f0820176822f224369229a4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
b007e271ba39b473a09208ab693aa6a4

SHA1
413aa942fba0871ae70f0a56931871b3b9598bdd

SHA256
2228a913e749a420b83a79c6fca1843d59f0f6881ba318baf8da2253f7d3f347

SHA512
22f34cc8fc2ffb3e74e57e81e2c71b3df0635f8eb1fdda14a8a57ac4733c6827b182f2236f3487863dd673812eb92965f31388736f914086cf9023e6ac42fb5b

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
f0cad9f4369f83350e4bed58544ac938

SHA1
067aed8e842840ebbf2acefebfcbfce1f5e6e008

SHA256
12364c0903fec30e5066c6979b21488ec3518ee5e0448f215bc3857833c20bdf

SHA512
f240090099bfbd22a9e70305c2cb10c8091c5bdef19b27eae354a2740f81f3bb6d2085763fb5ee589ec8715006b930cf9f4e5d4ee532b7e5bd35ebfb13525767

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
1bf27b26cc58405ad2caeb5bc2b31d35

SHA1
6fed93dedfdbbf87b99e774881e863738cce1172

SHA256
9dc7e834e1a155a4aeb83c68f7615e3f307be63cc94cc14783b82658faba9bd9

SHA512
1655899e3fa62cf82c513af0cee1f74a3ffec186a12144efeb413aef6f65fb2a0838de73a8c19e68dea8f26ac68dbea4a019d12a5060129cba279f7e062836c0

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
61aaf0290cd6c30c9ba6273e22f063b8

SHA1
27c2b2aa5cc45b2e191884963a525858a59b1706

SHA256
fad2494871abaedb832e9286cd658f769afefc098c264ef087603420293a8f52

SHA512
d1438b694a3765ddc4703429d41f3f8ae950b89db7e54e41a03867e4ce637add7aded971bee4c359f7cca6c39295122784f0cac5592ab8229026d1906f5a608b

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md.EnCiPhErEd

Filesize
17KB

MD5
f05f337b5b922d6a873883173d5bedb2

SHA1
665f678e8c124ff12a5e328f792c3ca649384d00

SHA256
0aaa28e187c16b99dd773e3712f68399461e43cdfab407f77e8aa8b6a4fc8e93

SHA512
399dcd42ae4aade528fdf85bdd9c8c86c91b1b0e7d87a85c751690d9677618a48f18841d5b724c4cd4f6048bd263592649ee0ee9672e5abbaadc7e3862ba8061

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
164c6ec8304961cab9b8e95d9a6e9dc4

SHA1
ee2259af65c45c441679773c487d163b9aabe9e2

SHA256
af1528e2ff0072ea629b81a9fa0860b6d8fe9e175af2795e7e424dfcc4f7a424

SHA512
826396a4594f81ab7c5fa46a8fa3c3a85879a036b7f39b0199def09c7a991307e02fbf56a84743669179290555cb9a3c7326cc78ab81564157255ec3fbc6566c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
8696933fc3624ec9fe6df952da8ad958

SHA1
da447e27ff48504d03e6bae221bfa7c5bd42da94

SHA256
5419031075f9477087f4db15ba545b0e66d4a3c08a664aa82711f56efd09dc4f

SHA512
1399f0d02e7f4a6e713f2fc7aec6b63f91eadc6f21be993e39145fa70f475c1df961b1729fc820a0ad9eb93efa4c8c004f74e7945be823a6fa90ab5c6eb31db5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
35fa4cd2c95c6527c8a334ad6a8797d7

SHA1
1e2035c73de80bbcbaa6ed6f540c96c6b733e653

SHA256
39e5ad6112ad94bb2991db1d0bbaaa35fa3abe77f58cfac3c04c3cd9de6bd8ee

SHA512
d4000a65816ba5770ca4967bdedacab3244c2dcbfbf01883c6376ad6c1de7d06e1a2ab5be67c11479d45909a84b1e7bd328684c3c01dc6500de403a9e23560b3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
6622321f1abea0b6c1d9d6d8c49703a6

SHA1
1263c5fa93869ac6f5778184361dfd081cd6e06f

SHA256
5870907219575b63cbb0e114101c7622da812f162316a874f99002913292d054

SHA512
0eac4158a7da504017247b4b17d8034813df641d8e1e03ec4466583e4f0aded1b872588fbe584901a77b76209c0376183e052a8952c97ca0810c40683cd536b9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
9885cbfc79340395005e3d958f3cbc17

SHA1
213c938b03f02034390286768df7b2107ebf5ea4

SHA256
21982486d4b10b2649c5e5a30d6bcbb3f6ff2c9052f297961ff34e67badcfbf1

SHA512
3d24a750a456fe9c231f8a2ba4d3236c261b325379648170877e7b6fc60481653987f72b14621b9d78dea3fef5ae78df03ac25e717a791cfc4d964cd01d03a70

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
62f03b870ffaa9e6c33ff0ce34d291b0

SHA1
c203ff5646334185c0a52a5a4be5703b7e02217b

SHA256
8e99ea15be478940d32b2ab1caf2449e7b58a6fc990762dc3df641eb035f8458

SHA512
d38cee2f5fcab12de705ca6133485b4d0955c2e6e09735c05bf1e980a33556863714b7cd11dfaa5839feb8a9c6bbbdf0fa2929402ac0e0e102f9ccfa08a1396a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
88182967c336f1985570d80992c4c753

SHA1
0b230621d0904ae38bcd5dc3324e96ae9463554f

SHA256
eeb1bd5025bad29dec2c13260cfec79e90314f5a50f1e9a63eb09bbd566d5b07

SHA512
7493bbe59802bac07c79a677b80ab984b56ad4c84c62be4ac8d71cdce5e9e8ad9af8d06937141ca3819c42e84a47e69cbd648d20e803e1614b01786d838f23b0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
ad898ab18a0aa3f1cf7b927c84347b71

SHA1
b9971412e61c2f549984e9c59a93f4bb16594d34

SHA256
67f85904f597b5fc9b85e059ffb998f6b76db6771562bb6eb8e9347630c8f021

SHA512
1eeb006582de0942ef8077a71e9ec6b9b420117a78df01f125754534496c082e23c6642057002b5a781e50828a3343b597ce6a54876e247105d875d09ff3dbfc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
d95e56d50723bbcf579195da7c5e8bfe

SHA1
a7d60326e8340085c5502e941438cd8eee479080

SHA256
907b20aee202682e278d5f11fa62205ed9bbf90fe9d6e5b4572b7c6d22f61180

SHA512
69b16a2e3e2d20777f2f99525a8ddad40117bdd0c961575b65ed85fa543c5a959b29d7e7ab902c189a18051122522b9d07d3801d39db60bdb779678185647e99

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
565d84086fab0f87147e121ae5af3847

SHA1
6884e8a565f682d27ad7945d35b2129de5f44ebc

SHA256
5eb81a50d0052c1e1840786cb22e1b8535f928f4ae421c881787512455efdfc8

SHA512
cd442fb382430974e77c5ea67a9f24694977273ea7f4cda545c56f1ceda4b5adcc44d9f30807b9de74383a8102408f77e1fb0a57814c6778ed778ee61eaa6ae7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
02c6b19c56034705b71363f829a7932d

SHA1
eefc6dc38f21604d91bdcd409329963214b1fd61

SHA256
e64a59915e06c8ee7005177b403dee6a32cd0324e31b1ab21b14523dc3f36c76

SHA512
583737a70e3579e6c535bdf8ffcab016c43e5b593b6cb329a5ac2b2faaddca9e4de4609604d692df9b31f0d2990475d37948a4c90d4a862c5dcdc497e87979a6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
57c0ee6aadd0c6389699a4b95eae458f

SHA1
bf7ab5dff771443d3e513bdfad345428f9a23168

SHA256
3f8c63ed27475178c8c42e284d2faa42c2f8130403b8a802fa5ed523aef99473

SHA512
e156a79ff5c66629284869dce1bdf9e3328f802f94f354ca59540af2f7a8ed53635309d38dc71f2b13e4df5f4d3dce601c8142dd8e7f2580fbd71055cde605ef

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
60e39f5fd87b6f3699a034d3762dadb6

SHA1
12e34ff2a10e6b9bd999131d7e4a1527e6c0e401

SHA256
5a0f1eead61bc6095ca2f4c92e3e0f99875f71ef632e420a84c6118c9d0c0d49

SHA512
0e168fee9ae00213d494d01f08fb0ca635930b7a53b8ca847119086419d77ea294f1a031d69d251927f297373c7903909c1aef0190e12d36ce2c2b8740e00931

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
f7cf011c9c0a2873a18d7c75e32c24c1

SHA1
3d41ce45c637ad10b4a6626bc8c068cfc7f987b3

SHA256
9d3f1de4eb4e02fed64d1653d37e76e1c35dac6ae764fef700a0220db4333ae1

SHA512
14484bfe5ba002f08f52f0dedd54fcfb226346521b3d87c88d758595c7f62afc5248947b59c716ce7dba599fe5473db15b410db3864ee47bb8201867deeb3234

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
ccca4413ee94ce9c786cebde628a8ea9

SHA1
5ffa778c0f69f044a15ccb7026f27be23ae6f15a

SHA256
61a9bb3d41ee74c5ba7e0c5b41f5f2c33f6bad6ee65eff263fc70730b08204a6

SHA512
dc39571707376fbc79c346c44527d3aff5fd9036bb03e8d22e166ff1050c98999b28224489353a6beddbaebf640ceccc27c9b581f05b7d2798810b6b78bfa6c6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
f1949b4b67811c940257c0f3f053131b

SHA1
cd89769bb6a42aa1dbf81b6437485ebb9d97b82f

SHA256
46372953cf0b03c9dfaaf7aa24376d37e2d70fbfd91bf9b054eefade0cf4b89a

SHA512
caa4876c31af286b91820f7f524e3d87eb8036ea1b28211c724ef923876ba0cc1ace2ecdadfa4583eb954d68de5da75126c15b9bed99e0c903004498a008cab7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
d026270303dcae6fe7ca281bb6a7a88c

SHA1
4237dab44f7be9435e5bb797d2f1fc8b4b03fdee

SHA256
f9031064151f69a3b8a6a2aef43da4fced416c5df1ab103bfefbc5dbb298dd5c

SHA512
4ce0ae60430efe70b6d058ee5656b12c8926bc264b23c929a0c58295463b6be6ccd717c418f26ae1e6f30657b904f862087937551d937e0040f9d6726704d274

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
16c19c579c0c65061b6092384be99769

SHA1
ed797b60f1ef52c0f61f0dc629ac86566ce1ab51

SHA256
ba70c4016d37de4c65dbc0075200e956fecedca965897e790ced6de0958e8cf4

SHA512
1cb490aab3e6a2a04c8e11f748dfae18ba127975edb78bde6c9a5cb0cffd12aaf1ac7ecbc8114e4d0246c647e59e40cf6bcbd49f200340e302fe64cc752e2679

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
cb40b9af6e82922a72a3b3b8099c471d

SHA1
92a4606a1383501e72d5a040c19f004dcba1c86a

SHA256
9eb8b5992434f3ee6ef4efc309e5215026b8af48d9c702aa8fcd189db69f21f1

SHA512
f56152baaa7d9960cdb3cb4f5636f131e6c8b1eb33afefb37876eca6be23b8a69d0ce27388b1df36d8da3ef1d4ab4c6263b444475e752f42486a159dd4c17933

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
b14e7b84b0521db6bf07f6eef0ffeb13

SHA1
575ee5dda2d14242faad1b748294abcc982499c5

SHA256
58d4614f2f528eebf73fba34bb15e99a2dca4703bf0c6b06abd90b25bd19bd17

SHA512
d817d7ffa7ba3e6b74ab550de58aade5189ac4ec5f7282707edf03f46002b92c6fb293f059595644b4553e5fd86462488470d7d8199500507be0ff8dd65b0cba

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
62ab3025826a7d193cea7e050876deee

SHA1
24b79d900ae891971ed40fa54377f97d7f70609e

SHA256
9184cf37b0cf86327c2ad122ddb4364de688f4d120662f3c9c70c50f644dec7a

SHA512
e804cc6ed73b3a1dac629cddb658e34b78b83ef24a65d8f57540c21edd8ee3f5f217cb29955d4be14a0f081da613a8c4dc1b2a20ab41f28e9593350ae05165b5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
7e141d99cd67e30b3bc0a6341a2aa925

SHA1
88aba77ebfb0cbdf520c6117dac4fd30d3459710

SHA256
ab8053a24d7700c80eedd0b3f59e5f3a617622a6ce16c03b1e3329d0959f7803

SHA512
e00a9567087a17ea3ecfc3d809a20f776cf24111f9e899e61f8c775b07919ba9436d8b4228624b08dd7b1b00c5008661f121ea339cc17e1fca51c5e9a14b33a4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
e879df72314703deedcc5f5ac3cc0c27

SHA1
f7f4c042740d547f62bd77d06cb44ce0ad72d94b

SHA256
9da92e14d3a85eda0c958ef1ec7abf2c1655e6bdace821f0ea3e54b985c5f8b4

SHA512
43e6fa7db36a076f2f7dda43a8aa3adad8107a3a4e3d376e246717525cd2bc4ecefb83e0f0f969ee1d525c36bb6890fa5f1cbb868a6655ec7a42fd6d0801ecdd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
c3a4aa7b7c41b8ca3a770e79fe53605e

SHA1
ed5133d3fa01e7fc33310ebc7572e63c99344765

SHA256
c6b63fd1283268a33c36995c1e8014abd465e52d195d223f85d9124f29cca7a6

SHA512
73e6b385cf63e73fccdef23ff142f08ec655c13a978ee276b5686a195ee1196136b6d62b202963bb90b76df70ab7ce96d2ad8ff605a51557c4ed20d2e69f43fd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
66dbd3c747bf47b3028c5de04536a09a

SHA1
019efee0f44da9d7dbf2e4d3b66c7f244e738290

SHA256
ba4be91a69f747f8e850acf75c019d90935a5b641b3915c41f05ad3f27a2dd2e

SHA512
f549094b5dd8aa1c080d407a1ef9cffdb1c03dfda0c74411b897ffe28a4037584ad3f1b2078f2cbadd301b78f2761a2b9e7da16a0637738564c1caaab9a8c9a6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
d3dfb8996f7c9b599ae0bcdaa063516a

SHA1
502dfff937e4330e76285c605c21f8276c49df0a

SHA256
2fbaccd501ec69df1a1601731e4aa9b589479c509fa5d77d3252e256e1cbcfbd

SHA512
4bde6d8db95fd4e44a1b93f69ed5a02acb1d9ba617816836e9d7fc4f3b7909ced863f6121a50c4fb3183a15550d30bf7fcd79446e63440659f4706df9e1db8bd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
5300ed1c6d0549bdfc2341d8b56e5452

SHA1
ccf0dd14c16e1543c4637fbf20f3f1e531eee08c

SHA256
14ac09d47168dfb79e083dfa74c2914b2c47988ea5176bfd6ede7754ca0f8179

SHA512
8c91eb6e3033b0dc621524aacebe9d66a8ff6c80328175e0c57ee23ecc52154951955dbde3163dbe7866f0f1b70255b5e83e1118945a5178b75b302183d8113e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
142133d18a51f302a04cf4c94b88132d

SHA1
14ea3a05e3c2d3f5f71fb91e52063345c75aaaaf

SHA256
1f171a36fa40fad115fc187e0ffeacdbe5f983385efe8bcd77e8b480505cdb83

SHA512
e7842ac3290206c16f8fb77f3e255cd0019e35f2489a5601d44d17f4a165e5efecb734d6ca07b9c4e2feef7b7ac0e2219216976c7797e5d56b0c3063c0ece504

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
bd75ad185089dba84a6d9976347b27fe

SHA1
c90ddd32b7d9b51887e3cc88be7fd46fc4ef4677

SHA256
29c7fab2890c00f7f018b726995d87dea0f02e1ae72e84f27c361b3c4a21814a

SHA512
0f50c538bfe8c92f635a899cacd497ba42f4905c6d64ce8593e0d5f26a83a26eddaf9c67618534ba02b65e304b8cf22d5c839cbe6426eb97222a2ee1f21f6f68

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
b71c8f68a0ea03797c79e18c32d0ded4

SHA1
70f4e274bb4d92550416e32fc61e74ecbf9772f1

SHA256
e4821912554d9858ebd6a0b878afa2d88ec8e81ec99850c49259a6cb3f6b535a

SHA512
80515a0033cad8c42725095518a29e29be240f9b3c420b23110932df16fd7cbe614fa641efe774fa1d18f98f4dfd2871ab3160d8a6eab978c681b795cf123793

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
40672197e5fcba8035230e3627c934e2

SHA1
820cf766541fc7aef4cfe6c008527b4db22db2eb

SHA256
bcbf8b70c3ba15d1adc6be333a7777df2156b43bad0648562b96cc4d99014bd6

SHA512
f2a64c63bebfeec1142dd5f79330ef6a1a0545ad471b1cd43e5f2d512e4d59757ddd8c9f0d88ca9343f50429eddfd3f8bacc81d993eb871da4d0aa4fbc4563c3

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll

Filesize
274KB

MD5
ff3d2f9059922a063f2b9d5f48b8f385

SHA1
aa6e0600d22e3e619b583f85543ab172e7ece75a

SHA256
f0ea7e36be7a26ff46b7de4757643a381d21c792bc244cc203d6926881b02150

SHA512
1d0c585aec591bbeff42ee2eea25f6db41c149b2cbb5dfae6ce66d7f7df19f1ca7ffde2b15afe2e5290c14f1e7d7a1313d6cef76c453b2e612764a91f39f84f8

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
17e9692b8ec75eb2bfa525cdd839100c

SHA1
bf2e19981b30bff11d2e99cc5d7bed3e711c2e8f

SHA256
ace8544b98ed35b06ff890a8da8026aef2788b5349d0290d2b450350c260108d

SHA512
d3998067ab8d65766dd8b4a5271342ef82253ac285223490de48d9d666f113c17f71968ae81a26d53ec99516b08f802dd70ed279a41043e50d63bfc6a25a4fb6

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
6e5e52a1977cb5211644e25f366043a9

SHA1
19908d3028ef5e916acf0d25ecd428f81af6f889

SHA256
99819c31706314b4512ee87536ea78f0ccf7bc99f76d6cd253efdce31a4f9f0e

SHA512
1b1b19e63a7ee087483bb9aa82a522ed34aa574ea7ae8ebc28b02680cc3427c5f975e4596cff7299ba146a298a07fe8126e86e078d2c9fc45836abc7deb94002

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
ce3437006f9dd9dcf4990d3ff08fe815

SHA1
49ee6a401b5e5d82360e0b1b500db34b9d4fa86e

SHA256
aa4b3c30d5e52dffcf1f20d315997e2f0bce80dba720e7fa22b68eb1154b6af9

SHA512
e376acbd6b2f1c10c2ea66d73cb01a8ae3527382b76e685c0e52e2bed318b0ebfe51d6a8435f32c942622b934b75948b63fd862ae38f55419ad9deb31e0c7db2

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
559e0683d59a0b3d0b98c319c81cc9a4

SHA1
cb401cc384cb4788339338a176a4a45be6e4af9c

SHA256
cb4202499dc3981606a7a885f6239b6ff58174c28e66689b0043323f2b7a91d9

SHA512
5ec93abb0c79db817f77b6e86e4a9166e2883e367a50831084a24f03114e7b847a296b294715414e65dc33b25ec4487812d22357a262bb34aa5e582a27dc7c29

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
192ceebd13d5bc5ad399db7877b86a2b

SHA1
69fc1d476f78fef3139d366b2dbb9ef25c4ec046

SHA256
abecab77fee547ca2f0ba69b3050c4f1ca2716f73e8818784c0f3ae4bc590ec0

SHA512
82ccdc3053b34a347a39562cadfe9e60f93e0c30b818525c8cb41ccb83229a799c44ea936fa56af1c316cb971d49e5842b19e6e596b811c02e43068867ce8cf5

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
ce61403e1c0755ea2b166e7d1f56c3e2

SHA1
94184368fe05bfe6ac54f248744b817a0d7f2fa5

SHA256
baf2596f485ffe6d4ff3e228e0c02ccaa39b232965ad8d596ab99d8d7f4bd795

SHA512
957603309405ad3294266c4a6bb210301da0c65440d3195906cfec5b2003169f3f96138c2ca10ea753c505035ffda09fa59aa15c0b29e0292a870eb2c8b4d9a8

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
7a38383973c7bfab45d4870e01d7fd8a

SHA1
b212bebb4ff17ab058b9961460aa30ff0cd09b57

SHA256
dc6440d6281f328b892f58e5b203c648b6c3099aae47e64a543d6ffcbf9c0664

SHA512
5c3a754ecc918047c2d1c43bb96b23075364bcd7dd0387ad4e4db464986c0818f4ead50adc869c2bb718cf62f351775ab686be0faed1a71695d9cfc780c68cd7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
a44bc4e32a5dbfe4ebf08f2c4c13ee74

SHA1
141aea8e47c78578dd9b0cad4f93ee50432e4f7b

SHA256
4d46c6d2c3ea3380a7783e4b43d076a809c05ee95f57e7242f83c9d5cfd7ec41

SHA512
87356a87b71d16e79bd3bd8501711e6e49eee466cd43316d50bfae9e71f940f68e7e147149f08689b0fcbc59a60deb27b547bc18010788ddcd693b28e2ddd97f

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
20f8a7691a0696c67f791eb942b4b90a

SHA1
13c42059cf35a84ad3914d96a2325b14af92aa08

SHA256
ff22946b3718308baf46e2848694969484975e8653d788f59c4e5dab43e11499

SHA512
e37ff13635bbf60ee71679c8a8eac77a563220916dc155ed168e907f4722fa0f115d277b3d1509380f2f5a2f94572fc5535e1fd94bafb3bf999b14991da0994a

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
4c45510e9d07625a3037230b30676518

SHA1
dda995c253d78cd2a3245af17175d79cf79b1508

SHA256
777d9de5b9b3cfd32881bf650e4412ee395c767fe9b0fe2d18df883625167a73

SHA512
b41597b17670550742963db29298c12fff1a6b2cbc11f5928a4257922de01b186251d98b357696aef91b1c46a8dcb58dd2e28d748e405e7d8fb62abc1142a63b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
7ee6cdc48d8af5c8595f4b0478614d70

SHA1
473323f6f3c4b864e783ea96c84dcfab9a3d5044

SHA256
114fdc03d10b79a1a7daca7e573b865010f5452cd0aebd3e798507616edd2f42

SHA512
e31d05d7989c2afcdae30a34c7ec7b2c040c8cb17cbe22524d0532162f3032a93d26a7a1c0e76502d45ec1bd769d4f3ea2805f7ef6e49c310400d09006557d4e

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
ab5208b5b8d2b21b4d87c951f1023dea

SHA1
2e7e0e11b50501b058e16dd50d44c720b65bd743

SHA256
d5d7c29c615dc82173f1b85031bfa2f9bb093900f4a65b46aba19f286c9e8889

SHA512
680874359b9aa91d0b019d7c97aa75f2b3167fb54b960efb6076b81111c5e3cf0cb331f969e2ff6235c49caca440225d1d74233c15ad578d60af39a50bc64671

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
a4996b3ef4c9850927a54af129776fad

SHA1
f8bdf7a29aee7aa589624f05af349db2b8f87221

SHA256
8a27f2922896e5c2d4a47ba4333b284216e413564310be121516463e3d48836c

SHA512
82af824e7fb4063a4295c35d6747310bf35eef5e65640272499ffca7c6f8c30c5e1511c0d4cef5dec0e3a58993d2093395104df4dc439e893dc2f19ad1624eba

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll

Filesize
27KB

MD5
13820b8fe3b439b1217b6960adfb12c0

SHA1
c278ede0a96acbc6367d7eb4ae3e40eaa856c066

SHA256
54fc33ae440fa7522499941fcc939a275a4194e2abf80de78a7dbfb1bdfe8d76

SHA512
3bdb0fbb267a699bd610207c2f89f23c7e87c506198c0aedf660b4ded6749a43f52c40454ad807593aa4e43bba5ee9229897935b3adc642db0b578567a867bd9

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
8e128b181e7d412ee1ea7624d818e5f9

SHA1
d900e2a129dfe87f0c50a483cf0c8ae3629daf02

SHA256
c27f39525669b3863a7f1ad5ec03983da74f48eacff10530908f6ce861e56cab

SHA512
13d83c6f02c66888c132d686896fbd7f3145710c8ccb7474df087792e3a3a8f13ac8b2b2c916a4304de1f4d56436f56113c0c31c5417b74ab898721d97ba255f

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
69KB

MD5
7a232f90a8b29c25c18deed696edbfda

SHA1
1463a603a05e1fd23b0df343bcdbaf87025ab193

SHA256
2f7692915024217f2508b1fcd38206b9f0d0f9f8abb0c6a13ce17bf956161184

SHA512
c0ea44b46e2b53fbeb853e56378e7df971420c0e2ac03e30426ef1a3536ade7e8b9f51da63ecfe0a258de68c28fc0a528462890ba3e3d8e1209c73d9c66fa9a1

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
1665b840ddb567ae3308595d529c1807

SHA1
46e4a1b44169c942f69c0d3e3f7bfc3b49f0c9a2

SHA256
4215958363a2eda1b1fb5a489d331c8677412e6e412472575a2afd39d385bc4d

SHA512
e121f9f68dea767a944e500df942106418c89995b7eab1792289ce5d4c5f3dde777c0e845658b72255277d11b3c125cd6a528341d9e0010fd5d3194482b46884

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
f2e645b7b291cf51a1a278212d7cb829

SHA1
054af1385f7f1404c15dc2fb85874699746b1e89

SHA256
f0ec143b1f8bea6fa5dad714e6725b862f2ccd8a4f38d47c1dbf73e2fb268850

SHA512
de2a52ba5e56c56f913855d5df9d607100f0ffcb976083592c50e731a90d521c150ca314a25cff86f6745cf805cbb03b25233cfe1b6b163fd02618e3ca19882b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
1329e50d50bef174f3e436df65de5141

SHA1
163114f3df58c61d7df1471922dd3062625f7ce7

SHA256
4ee3b7a4bdf15bfb5c53e5d214c2801be70103534f8a09d2770e0a5dc47d9caf

SHA512
9efc0d3e04ca18092892f272db9433b5ea3db5e8861a3c9eef4ad8faed65ba8078fbaa254bda92fabccc22d5f0ee584c9ee75e6eaeff8949d625324a0bca1bd0

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
cae4c20a58ad91706fe31413ce4d86bd

SHA1
5d3f8fb6bd1e510f2b685117a531785db1bb941d

SHA256
27bb209fdf2bd92cbc134717cae7dd450826b823a3c1ba40de127bd952f55ad4

SHA512
e3020241ae69e999a225d7efe2c470a4c9ff3d43faeebc334200f6953eec10b4793b30a1cf3e56aa73b23ce997229680d8e2b1b3751df0957124a843a2b02ec7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
6cab92e74bca40124a9a31d6c4fd092f

SHA1
05d3bc032b31ae9c11de8f1eefd503283f64ced2

SHA256
79e63264e1946b324abdbab2f5d3fcfba4d8914bcea66fbda89c50a9e2820dbe

SHA512
06a6cfeec31b945e957ff86eb920784f78fb42d07dbb0a667e4695fe91425649377f3f784d1345ed79f5dea75b673f18ec688d6c1d1b9d361bc5e15571238a82

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
2aac3950424bedb857ddeb694e1fd95e

SHA1
cb1e907fe236b45ddbf6777ba296d876fcf7576c

SHA256
195e2229c06888bbb7fe907e35bffe650db52e01f3ac3332a528a432412bc4f2

SHA512
a644eff28a603fbbe7b191cfcbd7a185686e98c41b6f60a19b7c9c0bfa82ebe904fb3df7de4138dffb11d07a231e4ae3208f0ec5802d40bf1b3b1b3147a20b2c

Download Submit
C:\Program Files\Microsoft Office\root\Office16\concrt140.dll

Filesize
324KB

MD5
93472cf5a2bddf2138cbf991b8478c72

SHA1
8a111bfe9571c61a8dcc592210d4054a74dd3006

SHA256
ac6e27b49965eab9b90b472bd32c8631e314c447f28a7d38318ebbc8133ff8a3

SHA512
1048b57f39aa173153cabbdae7247ddbf427e49415dff3d9d4f22799958c2b37e58a4b416a7cb5794ffccbb5972d305bd622a58bee4a86ca754eb88d5350d2bb

Download Submit
C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll

Filesize
358KB

MD5
954e83596dc9129db9a7bc0fcc6bcc6e

SHA1
7f4ac85b14ae2f369ba3e3e275cf241bae87f7bf

SHA256
8f377357e029c7e6b2dcf8a8d3ab6a19c15bdd201fb1898350eafbe304d19f87

SHA512
667585b861b12361d53be7865851838bdef5ade030e66da8fd69d954ac3b55865ad8177efb20da79bcc4dba5c26d7c8947fc9697e4047751913a84e59b007b83

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll

Filesize
5.6MB

MD5
a7fc689224224c7971f06912b3650f23

SHA1
4447e903a92a38133de47721a20b422feb29a408

SHA256
ba9f04cbcf2f7cc8efa073e1696120996cc42878e9d2251d18918f129367d398

SHA512
77ec356da1bdf5e090f53b6ca1176b0da0b70d3f417a53bb1da34fa2a917ad619451830804b0e0ef192aaa33586d21b3f2260d21017c5d3dbbbf93d71c4fed54

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll

Filesize
644KB

MD5
60551d00f27f02477ef094d272fe2c97

SHA1
3da46f868be85d59256b87d09a6f4145decae947

SHA256
4f5a9877bc053929344beead9191f856a8c5bf0fbadfdd2e1266c1433f7bd500

SHA512
913ce83d2c9658bf0f74b348ebf2735bc28cc272994f79512c935bda5ec86910198298a639070ac3fdd1448a5a44608c291e1d879ce7cd2ca1dae3a23c6d019e

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll

Filesize
613KB

MD5
880462ebb4927f8d556a5d6588683a55

SHA1
5037b38d3969faccc36e67bccb2712afa2017b8f

SHA256
1539d24d3e78de8b6ba0d79f0e957f01a1a9627250a65242548051ddb14a8381

SHA512
6f0829a784e9fff322e477e4e6a4e0ae237e0d4563a92d7d1cdaa679b2c2fc8445eec1f8ccdc1578915e90433c978fe659aa8d2c1ae587f94550c28e6d9e1d2f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll

Filesize
940KB

MD5
4cfd6d3240fe7800bc7909e3fcd0fa95

SHA1
f6842dfb10cc6e19d8c15cb5048dd874c0eb0421

SHA256
2433085a788ed8117662411d5e9990ae51c1442d6dd3fd5b87ffea3f036a11a8

SHA512
1fd87ebb4bc3551e14e7761608be39a9f9a13d097144e553a7382c9c0653f044d87d8414842a8c1972a515097f1f7e18a5ff01f079b95446965385c707f9ae33

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vcruntime140.dll

Filesize
83KB

MD5
a5bdda4543a2f28d493a58d246a413ea

SHA1
26b44cd43cc6c0529ca540d3000b49b7f174e23f

SHA256
64b9af7413b719b94507d6d3ef12d48f8fe811e877e2d62ea0af636a7f506718

SHA512
3a59952b6cdc9a6a38f1486af9715059889730b4b639ea37b620c0dd66e840270311d90d44709c7a77cd0b5761cb56a560737691de07e008435f519f3e392ea9

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
1e563ac21c6db850d5749a91efaa5b82

SHA1
55d3ab558b46acc97a7a64b1b60d29bcbd49e562

SHA256
1fece556f0190e3a3887bca67dbd305b4a2e85ffb19a49527df20e50f5e96d82

SHA512
541164c76a818a9cb760923c09c19af819391da8255b49a8a25ea5dd28a971ce6be9e07d5aa224eafcb5db6d5b986fc0451659e31fea04a1f72d20583c7e1c86

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
bbb49dcad3a9097212a5272cf2057679

SHA1
f4e9b524c2f92a0089597a22defda307469cb65e

SHA256
96414a77b436bf3ba5f513f42ca4af13ed2d5b6959a74a02e05228ad7f468ede

SHA512
840fe4a9b44fff8a06417e917238ef87fa70e887f6598064e022da86f491b0939ac86a187267c9b789217541f7a236d0763bd0607fdb7c3aa79c60e523ebc1d7

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
c505af163c3645bbc95d8ea75007b121

SHA1
791b74544371f75be8b191ce6efd0be7989ba01c

SHA256
809ac9e5d0840f8ba13d7c4681bf29b9090e2b5a5dde39e5c754b9370c3611b0

SHA512
1c0d5f7f409cc9576605d15cb0fbb0cb1d3d261b80d17ccbcdd78d5e304ada2489ead0135a346f8b274ad4bf2d5de2b2c881f7b4c3c85fc1e788f392fc3806f3

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
313ec47c34b8fe12294896c5fff538c6

SHA1
c8002b3c48d3918d342b891d19ca64b5cae66a1e

SHA256
f5df742615e3cede7b4acf37bafc534b9611d97d2e7a52583b78aa69bff74e8e

SHA512
df639bdcf38dc73df9452e6f33b00d161a23516ed6700cf792c83d22ce6b8a88c23c8a35b1c58b8e8d673a9c4ba625a79bca048d3273d01a14b3935e70f3f701

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
74931db1b50e9626777075491ceb8061

SHA1
29a220b4fb9a60dd2d1ee1df5b6a7c08f4fc0fa8

SHA256
cd5f5b43ef9346f1ea2e4ce0a5ff678704eee36d24c8289fe63e6ef5066f592d

SHA512
4f3b85703edb7496e4757a34d11b4fa6b3bad7018250cc773d1de8ee29451581d7088f3ab12e54803679bca0686995a33c503c5d934c74decf7174e31ca298b6

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
d3823f4c782d8ac22569b5dffe305b79

SHA1
532452a02d07d15eb187a0610586215d17501718

SHA256
63ac91e43bc2446f90d6671a8956c4181e75dce09766c3f6d6831eb13c0fa148

SHA512
a7ec7ba4003b3db63b221908941c9646885f9eaf1f2db5fb957af3db0cd4058a775efc2fef8314cc3e26926cce5b842d2219e88af36fd98b99e17326ac05a483

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
caba267d78619896f2b76f3cbff61a58

SHA1
b2a43ac5e41f17aae9b94ab42f59d430040199ec

SHA256
d28f18c0a27c1f837bd96e866140ab4367e0963befc5df841e458c6ef707492b

SHA512
2482b4c4bece8a9c26cfb23a6a3d706af51ced345ed423073671009f8670bba9d9fe80a12b801567ecb47e1e7fb0175545ac5cdc9ba7eba976e8da975020ec95

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
b44f904da1a7a972e3bcdcdaa20e3d8c

SHA1
702420195bb0358c6c6bd535f13ee43937fb8d30

SHA256
94e6c89466a9ba2db9b9c4aa25504028973b3b129fb0bf508b98b6e6fdddc1ea

SHA512
756556fdccca6ca09b2d4b341cd00ad3e0846b5c82e6cb46ef7f0f53f181430d363256158b62c47887812c953484c58bc653eeaa46761c6e0e11af335078c7e7

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
81bffd96157f39eb3e96699330e268e5

SHA1
5c93d5c283230111c0f6e78c301f0bb3f373dc61

SHA256
b1cffbf1fd11c4129bb58c15f27c69a8965198613546ef819ac31408836cb8bd

SHA512
be10b23c9f0df5da49f858ff1f9db51b486fffdce493892af0ccf80a66fc1b3785d4b7e5d557fa85a7c8fe5c5f5371d71b24e0cf76121fdf341559ecbcb7766a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
eb1e88d5fecab2db7cafaf5ce8a979b5

SHA1
692dfce28d3f4c16fcd0b9143900a8c17a8548fa

SHA256
202d0e075211b3efbd9dee5171b43ac6468255f7b77fd21fa0fa4d649ea95e01

SHA512
0ad72400b05e09b7ae5124227cebc125250f5e37bf96908748b0e9e948cb133127ffb6b699c30b5634165f9f630fc4e4fffb64eee2ba6b91dc021446d3f92a58

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
18d4c2075780a4f7fba3d8841d176a36

SHA1
418ab77322954b45dc96129c3775445a6a7df7ba

SHA256
c82b676e16c0f2749b7b34ffa68eeb8dcb403be5bb2d5da037f0fb5455c19a67

SHA512
2a8449acfda904a449c496b4552b1930c7797bc502c31d5b7f895611e8c240949872ceb51b9151f8b010074191950fe06efc74fbee1bf709fe349d4a7b60c672

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
204b2d78109077af632a8936006cd325

SHA1
d9712917a44ee44c4b6892d2e00a7d6589590c54

SHA256
8928761b4338bd26298819a677ab6122ed69c1af6d8cfc79f91c65b1c000f95d

SHA512
63815ed11a9dfba4fec0ed720660efdfa6d7093e038de84c8093ff167378e4a580d10525926730bd3565fc4feb54bc7a9aee392fbc33e4b03e0e0dc64ecd46b0

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
cdb11955ccc5f7d1a84dbb191b5d5ed2

SHA1
5fd01e62e822a414bff177a76560738759a12bd7

SHA256
2882a859b042a8ad5911e59ad7ca65de3ead5c1ab77e84a2d01cea2739738664

SHA512
5f00199c5c673a811be5d63022d277aa3d16c1699aebf7c6f85f64fa021d1ba16b47edf56ae41d82645981ed5bb9149862d176d465d57c9030ac69ec253c039a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll.EnCiPhErEd

Filesize
28KB

MD5
47d5ac07eb771546a65595f0d54aac59

SHA1
1cba838974b20a60eb034c0629b83369a20283af

SHA256
10bab3e50ed6322d98e37e06ac0796118efeb738f97f9ca0d684d004a39b4f52

SHA512
0f2053d2eb12e5d1bcd7a0eaeb2bbe0ef518bbbdb0cd9b56ac5a8fcb937e33ec8a0ef9d2cdfd9a1111a9267a69736ce76c03030248ffb56f78861efeaaed580e

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
6f789e606f65312bdaed7d3c6fa17747

SHA1
667d9f9cc1f0fbad7f9b27cf6d4686b3a732de00

SHA256
def8206ba4433cf26cab3a60380731e60e7a0a1c572be808be709300aea5f3d6

SHA512
6ca92da2a2e9bb7b2e95ec0a38c6099ef23fd955c59ab207bc907fa5ec06477d097b773110ce7dfbfeaf46d5d814cb1ddd9082f3585131216d33d3ed5986555b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll.EnCiPhErEd

Filesize
71KB

MD5
e8fa103e2e7157c4204c1c69d58dcd2e

SHA1
0aa855d9b89dee60e34810c31b54ae8577b55ae4

SHA256
f74b9e329bbdf8d0675ed24904380339fc5b45e4666f4561d1bfed097d0adf48

SHA512
f1612f5962ba0a82576231b38a1dddf433ab1285ebe866fbe7ae3737cec62060840c545d9772f627423971033f0c6a5cf0a014e4888c5ced223f4502126cad7a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
55e903ce040333b0e221c19db55656e3

SHA1
6cf2df9030f2a3b191900c1fe808d218ae3343dd

SHA256
f88c105a9f5011454ccc1ba70feaac2e315832b8bbb4045ada794204f5f9906a

SHA512
174fe0806f0afb20c155eaf5a01e2730c76d62ac1369c10f6779ee64f34ada1e8fa8df49b870f544e226b1dafad01495d1117b25bcd2b17393fa165031835f77

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
1de7809180f88ea71eecf0f70365f2b1

SHA1
bfa27b68f110016d3dbab292cbb29f911b5ad180

SHA256
01999c6141bd16f052d3f933102cda6d84c3d91f483644a9ff8525e90490ea66

SHA512
0a500bdd9dff149bd300db61d8668e1ee67bd14aeb0982efb018ac5bd617e7f481797f1901534b338129d143713ae9d8ae1eb4324c3e3c2e02896bfa3e1ecb31

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
be65c723e2829f3da4390f2800d639e2

SHA1
c5b3f1460e63bbe9119dd630b1412b18c55cca20

SHA256
7f157363a8b0cd3170b5710aa05fcee0fb285bfe8f5df29f3530c487bcd8ff82

SHA512
333f6bdd11548c014ac1935692476ad8924fc558eb7a78271402df1857821ff376f286b6ad879d0732d3ada6f6089183b2f2f480003a29fab0799f4741d9c01e

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
e190fdf93de79abfe8c685b4c93b1394

SHA1
e6743de0dc1783b0664ee9ad95dc6ebc6c198022

SHA256
cfae6f7c6844cc8186872d0a5866944f23e640dae19a33800cc96fd7754e29c6

SHA512
7577d1a16e0daf6b2bd5798cb68cd0a8a62f53b9404ab69254b45957db3467b55d8718b98ce567f8821b07ee61efd28ad3d5caa9867701056dd4e56b08fa9c31

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
4d29c89f531a025f5b6d7d2161344ba8

SHA1
2778d8e95e44d43443eefb45bf47420717b62504

SHA256
29f3c25e50a42d61ba31b9eed4895722323446fd7f27d322ba76f671faf2245e

SHA512
01dcf16c4198e791a7ee162e81030e6e03b3fb41295edbb8171712bba55a31b9384ce7b69c87a119efbd9b660d3cb5aa539b7a2d55c4170899cf0af130c12f38

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
320bd53ec686c7250e229a8f63c4a887

SHA1
fea2b6743e055ca56e765991e330d2ee284bc9ef

SHA256
17cc1d21ab4ff303166db238942547f44c56a369136d4046361c31c202771045

SHA512
e5e2c611b54aaf74fe938856cec9f2b4d8a4db43e75bf96b891b868ab63f1b308052362309b26e582ebad89be00e87cd1214aa8fd38e39a6dfc5f5c829038154

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll

Filesize
244KB

MD5
98d514ba7161f48b42c064f4989f110c

SHA1
bc0baffaa11ee4b62e288e7cc806dbd12428ac59

SHA256
7e64aa63b08b484a361e7fcc4f138a5640a632c6a8083c356782c3635a362da4

SHA512
ffe59e96347c9e266a61afa4b7110db74bd1b51acc86440342d59a3260453df85fe5ab38597fba09f24a8cab3554e9497dd595a8557dd0a74e60e30dfdc01f63

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll

Filesize
4.8MB

MD5
57affdc8b628547c02f5758a45c0e79b

SHA1
38e448a734b32685f85881b91445e29af4c516e3

SHA256
88525f48ae4dbf6a20a81043a2fb16d42a224bbb9f3cd52195e32a9ac321be53

SHA512
4f1eae9faa44c1ed6f9f59631a341b7b74915d9613aad0b29b6cc56861b67b5183e08c0ec176bd7536232112208f3281b4b7b54e48d27272089cdbbbaaec925f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll

Filesize
444KB

MD5
94a63f4faf34da2dd4e8a0d23b65cf89

SHA1
519a68909df7d4997e275166c7cf95fbe3e6c636

SHA256
087ae88d42fcb0cd54f80f76fbb0e882e3e54cd6845c09e4331973cbe9346751

SHA512
becc8870658c39112be1945d6056b54965a2a5d8c8be1c34cb484d5eb5f61f528ae91605d1e70e0ff1c9ed8784f1645f712aa099f07b520cd10477f71c2a4d8b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll

Filesize
439KB

MD5
14a1f6549f134211be00e5ab97af9437

SHA1
8c8b7ce7b50caeda3c7e24a5dbe825e25adbc5cd

SHA256
328c9cd97a4a204a9cdc9f3d52af802572d65e32e95b4d1dc5bfe10fe62fcb03

SHA512
d8f5628f8742b622cd5290d1d35bd2005a4e149e16932069a5215a3d570eaf131792d1b1d053cc8c1e63bae54a7581f6585f9870c498603b308269b8a4b1487a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll

Filesize
946KB

MD5
16a54fc71e1950022a1a48a172441657

SHA1
267e77851f1a4684e5f1e53d44fc8cff2c251d97

SHA256
62da9816c6a92defaba7f27aee478bbbe3e42083980a7d202bcbcd8ebfb3e72c

SHA512
14ca3adffe77437123acb3213f018702a323cc5a846d23c61cb1cf542ba6a55d838469b2f98900525c5f47a02daa8d4b2d9ef6c032275e6a19c700832fec6dc9

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll

Filesize
879KB

MD5
7d3484f18a6918cbd79874c495f35aad

SHA1
4b5eed65f3d492fa3b031b97d7e268121f59e546

SHA256
842d5869e9f3e82c8581cb1dfb65af846b02b9a19d4485d6be69d0318d2e22fd

SHA512
749246f460071249b240c8d3d4352936c904f8df42379dc1d797eda01213bcc0f975306402cdad4e4f3483cd8f5c90ee078001308fa9eec1133458e40da61dc1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll

Filesize
263KB

MD5
84aaca5cf7e2400b279cb34534fd88b5

SHA1
ae2661a1f077aa06ae1c99d3ced9dbedd0bd42e9

SHA256
c826fd8521de4a8635ad95c0bfc15407656395bff0f88c446c35f1284c615a61

SHA512
362aca63b29c3d0640e8471d9e88951c10e69959e63f95768a8c7bf702cb7096ed63a9549633f3c900ff3fc386a0cf46c793c123c002a3b10eca0fb26a21225f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll

Filesize
78KB

MD5
63e03c37f7d8b4276172aac5f979b67b

SHA1
91e6da7bb2305a36124e80c4648bde589d1a8e9d

SHA256
ce52aa94d8dcb27261adfd2dcb6af19f045338c6b717e043036258587b060916

SHA512
c014cbc1d03b91f94d2f3e1a88af35fbb0de528250c3657e6facea28672cd0d5a9baa26dbffae4d7da87c21ff58f0a62ad71f5b8635d5f0a9654e791ebfda4cd

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe

Filesize
1014KB

MD5
6daf43fc92a2421769289d238603d3ea

SHA1
fbea592ccca6c90fd974f51e360ead7b02d25280

SHA256
4ecef047da282b0aff8f5146189ad46d6a7b19abf609221190b530060d7e3c78

SHA512
893b7cba1898ed3cc18c0913534da67a0dad1b2db025ab2803905d4742cec09baf00ba4446213502d75be8430dc50c5231ddb035ed4f841598d377328e1ecbf4

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll

Filesize
1.8MB

MD5
2a24074f52ad6906256e9d73d757d4e6

SHA1
e538aec0b42e3b6e33afcba138caccfafbe61554

SHA256
fda026e67372a0080631adc2434835aacdd91b71b68c7529cfa7bbc768067f0f

SHA512
04421f58f79270ac4b857cad0e9dd77ad48664768f271c61bfe82e0f764fa083782bb0bd85add84bc6822766a1bf5671fa9c6a6331ead9919a168a8948d503cc

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll

Filesize
4.7MB

MD5
e29a98e3111b7e157ec7a4901b740f45

SHA1
dbdcccc05e6e6fef1281b1931f34dfea93cc802c

SHA256
a13ca8c9a4609cc47b909148bc9faed4a1e9eaa5f5c504d79653b359c40d4134

SHA512
d58eaf4cdb672a15fe06d9e27df0c5603148f4c1970c227f5ae6c19eacabaecedbd8c55039b35723adde4332e7e9c4335371690f64b11c49889f3c464faca654

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll

Filesize
116KB

MD5
73eb32fb1693e6b009441292e96adb64

SHA1
d9d84bc64503958057cc61f132838794a3115f24

SHA256
0632ad6b50cd17eff1ba82b32bbdcab2268f2266ec5f9207cf908fb6c9d5c78f

SHA512
f2ca331bba8d2934e387a534a9b17c40bdf8f41301cfd435718bb1ddace0ede0aa09e9eb7d7d577f3fd62bea15222b956a9f0f55e4fa7ced56b3aa0893e7c3f8

Download Submit
C:\Users\Admin\AppData\Local\Temp\gX3l02hO2C0d6Y9.exe

Filesize
16KB

MD5
3aecd251d296551ec8827008796244e5

SHA1
2b225bcd484f71b14e3c4792cb0c5965b26a830a

SHA256
9be38b91de4c97f277b1cf221e8a3e8b95141e617e82cfdd5341faba775dcfba

SHA512
ac2a5f2ab6173145e02c07e52a423a674ca9a1da309c3027e52dcd1c0302186f0d1d124c6d89302f011bd945dbd1f92b0e44a9bb7d2ccf081f7a58859f9fc975

Download Submit
C:\Users\Admin\Downloads\UnregisterProtect.txt

Filesize
333KB

MD5
f94f648eadc57c3733d002456a9bcdfa

SHA1
f760c997164952f39ad9c10b68a29d2062a6b1c1

SHA256
d9ed2ffcc49824544d74195037bab9572fdf594469d7744f8f454a8f5ab44b30

SHA512
846c8df154a5a446413b5b46539b9828fa82cf5d3aaa1ad263c6e2b91f97cf5f2188beaaf6c3a87f77896642066b94bc22f53091d7a39e030acfb070734d2d7f

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk

Filesize
407B

MD5
5988a2fdfc23b72d4556879d2794b8b1

SHA1
c395d5271c1b3db5b0830ddc59943a746cd12455

SHA256
51f722f41741d4abb845a0c3c638ad157f557a4d67ab34b93acb7aeda0cf6f79

SHA512
4475ca775d64529db5105d7f00d6595687baaf4b57b5e48d4c757dc285a9ee3a373e239b266b5ff9ad11e8732ec9617d7e336a05bade99752fdec7590f8e3b5f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
fea5f4e018dcd46832d84530bbfebf88

SHA1
b877b6d3eeccecb16ee3701bc060d107cfc18a95

SHA256
2abe992f82005d31dba0b6acb701699591d37676de930def56c10db4d727f136

SHA512
d2e6debd96f9415136e20641e6c555c187acb80d5b0c9f8ae88bcb950df0d2c5360b4aa25b9c5056a043205ef5a70cdeb5927367ba76e58d92c36f647d7b83e9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
09c0150a966eb5780ba88908dcf05c9a

SHA1
d3f16c6103e67ee4ca8127969785f2807eaac0e7

SHA256
647dd6deb188bb1687e7753cd2d59d9d1a7c7dfbbc360238124218967b6663b2

SHA512
d091b87104697c16e3ddb796d3f630d701e0a3792eab0f8a48378a38aaee7ceccfa21908b104e7c2660cae005e26304715b997f3b0e3baa563afd173791c839c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
b26f5cfdfc5868e02a1aa60e56a797dd

SHA1
0fa3b12c2b7937e5d50977848aac42ad4690675e

SHA256
9ebad899a2d09e3d568a3cdd72bb406d9886f5cead19d861fa826f8006d4e900

SHA512
448ce77d138d1316e4931dcead2451a06076f6cf16e2e405c3c48070ed9815b7199d7ffd9f4e7eef08c0ae9a998f82b48702fbd5af1a998993f9e139329b7585

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
ce1cc010a7d11edf83334fb9be3cea0f

SHA1
3598413f3da7a0dd5db3e22e71a6d4f997530853

SHA256
c008fb53ec9bcccb6b85dd66b55796c11782d2b9bcb495b76a31b8c6b7b5afa8

SHA512
d46a409cbe527b4da421dba110c0741a61d44aa6e30e9c62b98308862fc05e668f1deec891772c3d585fa922031232be2f4dfc2a711f139c809a73302ab446ae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
53aefc70b990c100cdc42747fdafa267

SHA1
6503b7302d76d3d91ccf22e335a91de9995f8de1

SHA256
ae914e4e409aa6713b575d5a6e0bc68211b88930f227367949fb69d56a965375

SHA512
8185594c459cf169c229e35dfabc234e130ff0344eb5dc4a261223240182a88a3708eb3a282f862a333545d234fa26d2b8008de0a13366f9cd9b5f722e9c3cbd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
dced33eb1546832abf1afc07ee0edbbf

SHA1
20c7c76ba557d10b04ff95a895cc46a717684edf

SHA256
6923601dbef594c3620d496d4fe87c6baba237b6dc120dab1484fec18e7875e4

SHA512
abc2c37f39e21a75b3adbdcb2203e3a725acf68e85bfc2451478051c3fe7de72190d586fc58597b51043150074fc779e8ecd620378365136ee0d11141f0a519e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
c0bf4c8ef969ba5dc302c80333d23a00

SHA1
093d91d0ed97a16da6628799be74dbae10dff547

SHA256
782e1475824a8b97047a9574d8bbcbd41ca0fb0f55a3f0a8f2ae2d717deeb095

SHA512
983875ff800e329fe618dd2a18c62c09a9b7f11548c7f2542deab26b486cbdedfd19b10acd721ad09e448024a7ae39746ee32281953b0f1f6682cff7a5cfb23d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
5f072d5a44d7a28ee69bfe62b8bccd5f

SHA1
d12ae22e7510b9b9c53a679d09825dacc3363a05

SHA256
87c90a5d721669f108cf6d9bf885b7568e006825b407b8624fcf9a0fe0f7d9a6

SHA512
e17a2c7cc73ce21291b755711ff9637beaca052ee5a3f98a00dbc7ff172071cb7f1fc7ea958e4d0e603c90aa609c771ef97f224bd6678f3069a5b616abd10849

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
04225f85f08993476255ea5e584e532a

SHA1
d7b1fc518a6949e5554faaf60bdb6c391851a7c3

SHA256
4cc5414b1d976aaf9975a9a6110f89fdd9be6afcf0f1e4016646ffdd82128244

SHA512
d874a295bc6228aba1a505488476eb26a67cc8a270ffa9e24feeca0c7c5a02f5e65ac7ca2d59dcfc62e6f499819a4496b2736a19dc3efacab9acdcbe6b1236a7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
47fe08f9da249e60dedc62a3210e2373

SHA1
af4b7a7106a057c13b2d09032613efa073713849

SHA256
1bdcc5c9230c6caa6caccebbec99799781bad1b02085eff30a4aa68645546566

SHA512
1a3e31ad4a346cb70a199291fc077debd4534fbd57c966abb9e41e005f70b30c1a7fea6222390a1111e6a9f9afbe6b57f05f004c45ac020e7a4814d61ecf8757

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
41ca268b51f892a122163d2cfdf58602

SHA1
6b216769ac4fa0eaf89082298afba84ce410d7cd

SHA256
e7621e3b7376e8705b7648d88f44c92776fe46274e0bb007758dcacc82596811

SHA512
741f51c08b5624c562fea757307ec175e0c3ed617d3392921cc77f9e57b9870b9bfa00d34444e8420b2adb60c22e0c25409c1c9fbc12194a877684dcfaed20d8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
86754a57724dfb3e4e1ca4d7f189c98c

SHA1
7f3b28a7cd24c5c16c5a85ed12595f7e34fed781

SHA256
92db3df798a0305dcaa5bcee7c0fa10b606015ed3eab8713d72f4b91f6d6250e

SHA512
7efbd2ce2f07dc5b1e7ffeee9fe43022876b3c81cca36ba5cc226ac8bdb2a0521d88f78fa5785fbe0ea96997eb10baeb6087c1a80cf7e6548a48ca5f541268d9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
f26899f476a9dcc01a76ed2d598a0662

SHA1
704d0aaa6dcce8aafc57ba2474b3c6b06d19c074

SHA256
759c36a246c1d534bd7cc27add067f8c8baa3f15a702bab9f8dff2da86056372

SHA512
32571b540c65fe4f814c9257800b5639583a82c271e844164643d0e160b6aa2eeaf819530f86cc58a6ad1a48417b5c302d1d55902fd21efe09147dd6a61bded1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
726e33f3c6649a0ec07e17837c102d88

SHA1
eee070e1b1fa48300fe8dbaa66af84b0f783e57d

SHA256
fecad4dc87e18602498c4654d69131cae767a565f69ef80a05d0ac753b7a3b17

SHA512
f595b6ab76c329874c70affb2f637d77ff985b19a9ade53af78e03ebd0b3386b0682b729f2f448e7788eee5b4c318a1555c0d0443e049806b80c26a02f4f667f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
7a66a19950910136995942283db64252

SHA1
928fbc790823b6828c31918d3c5b9495121f39e5

SHA256
573c341525779dae6ad7bfa6fb6f815026a240a30bd9b55da06a6a0be013a9f0

SHA512
01c06c60f8572da1027256bf5e26d2b1849358519b7dd07361c75814f505b25591c8fee7fbc28039099f4dd22c503169f74c5abb1a655c7954d1671cc457ba98

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
6d001d899b261908dba766050090f8af

SHA1
33f67f7c73d2574040a224ab2dcd199d5e5073a3

SHA256
8966955b7e1ead2b929b7565dc27b4f9961eaf4467ad87417d13975fcf58a69f

SHA512
9776cc55d9da86e233dd2e2f212b5d41a64633a8fc2e76e82bedef4420f25f492eab756e0fe77f594c8acc447b462de6a789f31cc8a916e50f0f5fd76c9e75c6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
cf1815e82e0577bc3ebfa5fa86eaca25

SHA1
fd9b82e0adf2ca1ec0bdaa4693885ea6cbf46199

SHA256
69d52efcdabf5784d70bb1315a9835e463ca37aef3512098ac297fd10c5d6c0c

SHA512
3ae0852d4d424b9c47198a5812d84a425738170d932e8139cb9967708ed30742bbeb411bddcb9a72dd7797baa115c5ecc8aeecb5662c2fda31a167de24e4ac94

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
5c19e21241f14cbc64d8f25e5406280b

SHA1
acb236bebed64ef318bce29752d81cad90f31755

SHA256
8e53a7e03f1da2306e9d617d742645fc17ae2d813604a4f9851f34c6e65433ba

SHA512
900239f01c421e1e3c86091db07b4a471e1b60fa3ff954c461c6daf6af0bb4217b982b9ba9e1480eeecba9d0a2585f8f6698ba120579f75327efa6c770bace9d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
66142f98a0ee75fe4f32e4dff397d835

SHA1
cd633ea20d31ea7c419c93c9dfdba13d22017a27

SHA256
40f7ec06495857c1e13bdbc5fa5fbd0750ba827807fe3f2dbe20a2af98be7333

SHA512
094d591efd999240de3a9e7c8847f086de9968b327c55b14d394fbd0660a205caa361556b5508b352b81b5fbda229155503fa6f5bfb034f4fd617cee5048d735

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
1665355d2db0a6f8204018937cb9731c

SHA1
ad7b24007f892242a7e0dea8ae12304a1723a1c5

SHA256
9f72c4e9d0c036cd9affae1967490445c917f0f7030ddb20aa6348061416f47a

SHA512
58d60787bd98cdba301cc59178a9f45aa6e099c338723b16886232ccb322eeea7e257deb35d9377ed5594e4c30e00d202893920304c24175193ca5d2379fe8d3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
7bfeeac8d3193a7e42eef062c6a8e276

SHA1
eafe5708f53be12096b156d787f53a75cd076492

SHA256
fe78da834463afd7aa356aaa98fa9ac40cbaca69300c53d58735b9d8c0975b04

SHA512
ee1cb2c759dbf5ec4df3ee560101edcbc06a4986d57655b673b9d9d237c7f88dcae4f9050b408223caf94b3df52f4622167e77923fe19db8191b7ea89e090ccc

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
590d8aee1cf1d39440a9613b5a37d405

SHA1
6c82404155ae16fef86845b4f01dad2e6c9aafff

SHA256
e1cfaf9c1bf22990f2a34a911e6486e002085a6b2a81cd25cefa53ca20c7036a

SHA512
8e38890164000dfc6e0206f7ecc5d782bacc3fd3b5662d3e09d9ef71b06e1bba7551b555d5db9132df987f8e7ade141772067576c270bf6807d7b209604013a5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Windows Terminal.lnk

Filesize
1KB

MD5
798b26142846a0c5ee5c3f04adf3e278

SHA1
b444fdb5f2548419106dcfe0c660b73cd57ca87b

SHA256
2a1f824c0cd18ab242af0a56ca51460cd91c0bf5f8712e5ed0619ed53fd641b4

SHA512
003cea02950d9f982fbb12905bbeafa72f1b6fd2c4963e7a1bff4d1d159eb363e51fd5488ca3233047229a3eba3f0ec5fa5f3637363f60f59e58847fcaf92940

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Windows Terminal.lnk

Filesize
1KB

MD5
79cefdb1a13ad57a262a497fc7c99d4c

SHA1
1a2d921bd7459a55f1762d9d0b16cae2fcc16377

SHA256
3a45198404d025fe94613a8af497c7b20c6413612a109b96f29afc9d78305848

SHA512
4cfa11bb0f5e35dacf444d464548d188aa1ba74e5d29afdf18f02312388e06e68ccdbe67daf6878b1fa8971626497dbd9890ed348ecfc96e12420992ad84741d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
3fc5f06f9c722a9b857586c68a65c8d6

SHA1
5289b8d2ad499ad0f032a4f8bf88596477084240

SHA256
05d86c48fe305384b4d6e1120615f1455e7186b499dbda38611eb226cbb12208

SHA512
ff5a41002f445dd5b7acc889021679566dd2cfe095095398f8356d8b341d07bb6e18ef9550019303244c26935280319261d5a67b7ddef5c4126271a8e5717867

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
c7537afd70689752235787a7226639dc

SHA1
c128a9960e01abb7e3825a0bd29b715970fc076f

SHA256
819a4ca2fd805346f8ab46ef20b0f59965bb80711c908038115f6282607e6593

SHA512
b0fa4178ea95e1a9e83646e4c18b0220f10de8eb962ad1c972afb879aa06aeb752eb553f8d76c0f0c94ea36e8a2f2d57bb90bf810dde4264aaefdce300a23397

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
641931c9e50a704b02df7276bfe0a4d7

SHA1
071a465187b61a23634e1e4b888783e86df2c021

SHA256
7a9eebf27bf0f0a3a2f67575d6b82a44e31a6cbbeb065169fb2a67114a6904fc

SHA512
4ce2bae235794d4447ed1ec9f5fe5110163f701a45416f5a1d50648637ce6fccdff6499411524fd5cdde12de66e4d5a4996a6e13e785efe16cb4724d86ad3d66

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
1cda5a835f473b5d89160edf72e5fcde

SHA1
804baf16386b203bc165e58d8ab9c8de82ef1c32

SHA256
24da08d84a700a878523e6a112af590cab5572b5e5488357f9462f28c883b9c8

SHA512
55e7b31d2b39ae63009efff74303581253088246858f1d28599526fc08e2573fbd01c78ee0bc8e72f9cf9a5e271ae03de4ab15533fa466d93c1eab8cd1801e5d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
e92a9733c156e693d97c9c718324c3be

SHA1
c2c398df31bfff8749fe471c27040a0c684114b3

SHA256
7c20e913fc6caf611a97269bec1ded19e8bde6c6d569a68cff1b8c3d2268ed54

SHA512
332852c5520f009fe936ec128430f657c389d90cf12da96c3a94328f4c64295fa5126cedd6129569b79dd76d68917e98d5d2d42f0b7b0a8acd23c046b05f0bef

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
b6c117f52a099ce4018dbb67b40c62f5

SHA1
784ed2ded8b36d99d88fbb03b8e70b298e54167c

SHA256
b57eff397c3defbf7db7b90237eb0a557f6eb5216325a8cc38a52bbe1526f3bc

SHA512
2d95c3a3a40d90affcc27dde535820ea0e61704f417c63925dad453ab15a83e6effea9762c6115e638998bb377b0342fbf3c543b3714fa18fc292416cc801164

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
9fe5226dbc898a81c26ea6524c5f9bf8

SHA1
8ccd59c26f6139bea212e64b664ca12ae2968113

SHA256
c76b9e2c914c026b878dc2722563bb22c2d65ba58ba8879bc2d748d372be24b4

SHA512
69750d0567d53b7e62bf8127c0c1facaeb917178fdde97818bca971b493ec27921e42c40c70f368d6dded0757ba1b539f9b44873249c37b2598591b9e113bb96

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
9978f4b24b45416f824b436a66e38ca0

SHA1
944425e2019e8a888119a379b7239ba6d3a4bafb

SHA256
1fc921f48a0661360d6207b740500a8ff725af4777ce80190ab98085624805a3

SHA512
fdd440d000a6f3888850d3fcf1d1698f873eb16223acc41e4a275ca231c9aadcb1951c7b24b9f3068672a2caf2c7fa13e98d33586a9acb6887b6e27e8dba53d4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
92af28e45f80db79e794bb07cb2676d2

SHA1
cacbb263bb0499261fa80df27ed70e9ce85700a8

SHA256
91b6e6073d2039909c14b28c869075f64132a2c687624ec8fe2d00bf1656fa97

SHA512
2fba638f075af5e79c6c470976a565a64ef280b27ed6320d697108ff7b4de420ea3098d9c730b5d3c70992fdc4eca40b8a49c8498efc0491b82fe03f0511286d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
234348c00377c101996f6c3ff3eca56f

SHA1
6d16b1583ef0680783622b970b5edc0391af6410

SHA256
0921f6ed8efa80a1ae633166e924c4edaa0c3b0d7cc00d9739f701b5a531d4c3

SHA512
eeb6c914a172bdba9f4be9159ed44495a0e23f6fa6017aa3d9de035b564c3b4498c31040d8f64a1c5c72b5ce9275a5231252cbd6e191336b146e3a42d466c89c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
60684cca914b84188d69f124eb92ec0e

SHA1
80b0c1bccea3f953581f9be6f6244c19d37a9784

SHA256
42a11a41f706b25af46a43b3aba7dc3ed55badf659bc29eacbbcb0d8b9143223

SHA512
0dd842ccbd1fe20d54f73b5d4eea6c645fb8bd3d2de90bf6c2c610571c864c45b4a0717227d55cb4ccea372b64747caf71d8da626878e19c22983d600ebb66cb

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk.EnCiPhErEd

Filesize
1KB

MD5
2d50c6a78296edc2f62bfb18440e41a9

SHA1
c5dccf6ed512ba8e79d8706855dbde162a6de777

SHA256
bf06e6edbc828d5d332da218b5d9987ab6ac3da1cc5e52135adecbaa3ba13b31

SHA512
db0270c1c2d28f64d4dd05f885a61ad8d5b1a9e1ab52e07843717d4ad24317201e9eeba61f3522d3fcaafca02f53b59fe0cf37c03eaec404bf2c3194d0f29bd2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
558ed49b2c0c1029d7684cdc955e4792

SHA1
430b70b071e0aabaddd4df8c012e3ee27b9e5b0d

SHA256
fdd0a781e7eaa85807627ed1ac40ce87bc670d1a33851793df15503f56daf8ad

SHA512
15891ea1e36610db0da86834a17af45bf328efa632e4af88f8ded6e157e4491ed22d8fe3bf27a18cf22be01a5e4e16f048962bf13ed423e32c104f3d756ad6e7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
c2433f3f4bd8932efab7d99fda1425aa

SHA1
f24472686fcb3dd7fb18fc8ac08d1f4c36786367

SHA256
377d4600be64b8c92e2ce30b285d04e6a0dfe71bd8daa1fb83764c762d84bd25

SHA512
a6247417c5e3295a5d23be36ee1ec6da2b6466111494ebd2f9d7e04dacdc06c22f9872533e642f5acd86909d7a81f99d6d03edbc342c42bcc994f0b555c2c5b5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk

Filesize
1KB

MD5
16507165b38ee620470a997b3e220188

SHA1
4e16014b5263d9800c1d03b28c085f339ff378ff

SHA256
6af0e7e68ad8390ae45fb67a2bc881d8060bd0a8bc7471291d1ab77c58eba5bf

SHA512
9c60a1c9019e927f38f7f1bf6a9561a3b4b0b6061544b03d607eca2b6ac624e650499081a69dbb967cd637b7e56776652c25ed4b6f19078bd5892e8d6fd6406f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
cccf64ae455fcdfa5c4a652eaabfa969

SHA1
6680b2406d166f4f01fd60b9dba79210d7d03c71

SHA256
e5e5f9b52fc44fc5b3e85c78ce4b76143dade7f453b2f586fd71c15865467bbf

SHA512
c974b447d715c82cb9e9228ac6bc56f911ed5b547e89e9bc0a610c7ed335f671861de92bbf1a93fe0a015a51c2e0f79a63399c06c68c0720a870e96b68a6b60c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
6f85d6cb8ae5c6a7287885d74bcfc8d8

SHA1
f92bb810a15ed85dd84531e301f7d83880dde402

SHA256
a261bacf7a2030344219fedbdea0a59c83456e27d9a2b9298101e4d3aa938a38

SHA512
b32d63f7088eb8a4773ec84f84d53c7e55f6f5bb11c1d2223065b07b8432ecb767aac91d8650a3bf1e593fd305c775f7793ea579b0f04d52ecfec7160425bf6b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
e837e4fcd3c735efd2f7ed909af389aa

SHA1
68e9c1eb0e19f7cc0746313499234f2dfea2dfda

SHA256
a58035c206e42eaba10ebb176f8499ec9d9d2fa698effd6c26587ea96b4c9e69

SHA512
900be7bf6e281792563fd504a9bee1c9eaae85f8396d66b677c9503d8f831eec762e522d443d9f277f81c399ecc06ce62eb2489a958934bd6ef0437b5b480501

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
a86af71ede8ebd7221322c366b33ac57

SHA1
d498760d6fb78efcc3470b0d7db440242aeac124

SHA256
a37d69dffc152b7d1c69c73a53f0030806d7b79e45e8dccc5a2f7b3150135489

SHA512
53f2e93351f41836975ce2069c747000e47b8a2f0c650bb5777f03e648fc6650aee1babd3fb9193cda558aa87cb8b9801b28d2c4db415387580ab82f155a734b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
90fa5a193d78a40909d902480c1e4f9a

SHA1
eb26798301a938c3871420aff398ef408fcfa079

SHA256
601f1d2e6abb9b709bac172777234fbe56ac2ae0fa18ce54ecb6d7a0e725ba8d

SHA512
8895af276dcb36372a4c0b5452487a876eba6e96d966b2e6f52200e9ca5f5392f175d6602fcbb7a351f6fdad5e63b589b3e8be5431f780467dafb4f0bebc2e5f

Download Submit
memory/3160-4863-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4824-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4862-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4864-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4866-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4867-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4868-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4865-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4825-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3160-4822-0x000002907AEC0000-0x000002907AEC1000-memory.dmp

Filesize
4KB

Download
memory/3664-0-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-6172-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-9703-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-15532-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-18157-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-18582-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-6169-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-19514-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-19722-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-19724-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-19761-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3664-19762-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download