Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
18-10-2024 03:07
Static task
static1
Behavioral task
behavioral1
Sample
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe
Resource
win10v2004-20241007-en
General
-
Target
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe
-
Size
120KB
-
MD5
164a227bb84d636200be7f0505212c4d
-
SHA1
81c85b5a33cc33beb3cbf9ff753abba7142310a5
-
SHA256
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12
-
SHA512
4a0b41dc22c5da592b2b98f12a890423f892e6600be56e2d3acee308dd784e2409c5e8c7b64efa31e36f9d8ad977a7e5642e8feb6155c3a4be7f30a4b505f0ed
-
SSDEEP
384:wQ/iIqjBnLdN5knAJ0KDD8E7xhL0vhLip0CSqKwiT90vwkawZwq6u06MGDlRlj6d:tiBLd7kn00KHwlEPzKHTv4EnzsbQU4n
Malware Config
Signatures
-
Renames multiple (8206) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Windows\CurrentVersion\Run\NeonGPT = "C:\\Users\\Admin\\AppData\\Local\\Temp\\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe" f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe -
Drops desktop.ini file(s) 50 IoCs
Processes:
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exedescription ioc process File opened for modification C:\Users\Admin\Desktop\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Documents\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Music\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Saved Games\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Music\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Recorded TV\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Pictures\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Desktop\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Downloads\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Contacts\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Downloads\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Links\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Ringtones\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Searches\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Libraries\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\Chess\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\Purble Place\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Videos\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Documents\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Pictures\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\Solitaire\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Favorites\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Users\Admin\Videos\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Microsoft Games\Hearts\desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe -
Drops file in Program Files directory 64 IoCs
Processes:
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exedescription ioc process File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12 f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01066_.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECS.ICO f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mazatlan f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14983_.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Lima f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-execution.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\THMBNAIL.PNG f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\gadget.xml f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02740G.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752U.BMP f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielReport.Dotx f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_fr.properties f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\common.js f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.CMP f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749U.BMP f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183168.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01839_.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS9CRNRH.POC f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00308_.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\README.txt f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\42.png f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\BASMLA.XSL f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18215_.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.BR.XML f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Khandyga f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36F.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145361.JPG f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02208U.BMP f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.NZ.XML f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mip.exe.mui f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\THMBNAIL.PNG f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106146.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175361.JPG f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0185604.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Windows Mail\ja-JP\WinMail.exe.mui f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\47.png f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\currency.html f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\he.pak f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Windows Journal\ja-JP\Journal.exe.mui f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosecolor.gif f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Client.xml f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\SplitClose.dot f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285808.WMF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14882_.GIF f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exedescription pid process Token: SeDebugPrivilege 2144 f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe"C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe"1⤵
- Adds Run key to start application
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2144
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize27KB
MD549d2fd75ce5536aaf24988286e23c68e
SHA1e6a6e18bddbab0422e1d1bdc5135c7b68fe6fde4
SHA256b259b41298629bdac41b3f5f9de9d8b3943a5ec2344778468d83fb3b8c5f2597
SHA512ae94c2157444f28228faa1b9b57e95b17500a64c2f4b5c2d49a33e96c7f282f16e80b8d840ac72078d4e536059565fc681cd65d88a22f697b3c26e1cd7a8552b
-
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML
Filesize582KB
MD519942e9bae50eb8b457a420d026acbdd
SHA177518db27c45d372e3a12101ebd63efa95898a36
SHA2567cfc5bf062241371b9d4fdf3f69d2378658e293d7004a7c62ec1a9525481a2d1
SHA512dc0b10e8be31b6e54105f02f6cfec85fa58d58afe312ffc54b2996e55bbb5e25bad62c4eb2c65ef48870b5f59a2d7b69ca7cf5263ea26ed797fbdb3b42cab61b
-
Filesize
128B
MD56a02acbabda6064dc80623f4436d5d8e
SHA149c5261f535705b0e8bb684c2b32410823b62fad
SHA256a7a2dacbb2b2ad652f00b3f4963f9d0a62886305c3032933395eab34aa7dafc1
SHA51281b894ebe08ca65a26cd3ba65d1a35c6f3f6a392f253f6283ad7fc641b3100192e30eac3ba05d484e27d2b67470714c4da3fc6c4649b8b96b7ef5a1aac098e8a
-
Filesize
128B
MD59f417eb19292feaf61c8341286d4987c
SHA1f82efb37d12a295882a9ad6c9dbd500144ef65db
SHA2564cb05cda2cf1914d57cb4a26e80088e95291800df9223979c1be4dcc9fce1e6b
SHA5123bc62f9edd792c2040e4f0bc87a72ccaca30af3ddc9e9212187e898845e2e4d0ef3696b9f9bcc5981da71c313ff51ca3c47068ad18fa1044681a61eb1ee510e3
-
Filesize
352B
MD5067fa9e8ac140ae0c1a426352684f1df
SHA1545223ab3409129b4f65cf5380136b0e9c367966
SHA2566628ab4ed132a3bc1868fb52a5e2588607389d7d0f74c11c4430caab0b7d8532
SHA512d6499afde45e92b922467e48f1dfa7f8d87a039c73f0ad9698a1b041f74f5207e5ad40f4a869c30c5171f5d0ebe5105011ab303dec67089d21e4242fa3e0df08
-
Filesize
224B
MD5a0741f75c3b6136c75cf4e331b83afb5
SHA1cd048b7277ccf92607a26d880be6ce7e79ecf886
SHA2562f97557f7573c27a4d1201242262186485e0d790d9702d16c675d4fc12f59064
SHA512abdcae30309cd7e2caabe2bf43c3d7a45576d9439f76913f3517ab08c07e3cca9016ca3dd6e3fb347286972494990ade4f2a030343e075d6710c3351ccdbce9d
-
Filesize
239KB
MD593f9cb58229b053cdddcfd762568f2fc
SHA13c9b46a02df4ed443be03d6f03217f8c554c9c23
SHA256cc9855b9383c0c348cda60a1089eb1516e6278594bc85b6b33e6d11391bfa469
SHA51294a07c3843641ecdc45784c2a42d7e04257f6f290a16bc424ade5beceb8869c448ab0df25406b932416879dba399376ba7c059027e5c6aacd47400be91a7bf3c
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF
Filesize24KB
MD500097007de53531b15ac4f10f5354fd6
SHA1af61e0f822883c0a69f507ccd479e90742b60d1c
SHA25626fd72e3586cb67f2084c944c50188aa452dc924c933983606113d20ed3211dc
SHA512caa0a0d3cebe7ff7e80e025d3f408d9ce3645a88a70c303cef2f299a374f01f2c392ae28b7aa7bcadfdd0035b6d3c9f32a3d293fc09532e99809c8dc48e8866f
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF
Filesize192B
MD5fc7ab7635ec6f9cca352126863aad435
SHA183c8eb652dc48851877082d37633e8d67c3d4c47
SHA256d71130625d73cff3c31b5ee64d923f885c8f8f0202d850c10dbeb3421c82bf58
SHA51214cf956b0a06c6fb13d99b88141ebad2ea48104b83ec4d35fc2b5cbad410f6f4f006eed85cf010e7e9342837af1629754b3055a5d23767157eb628e7a94114f2
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF
Filesize512B
MD534f5344c3bcc51c080c192db868b917f
SHA1d77d5eda00c1be51dad48de625cb298098dfd6bb
SHA2569744014728e0f9738aa1be00b0132c54e5aaadaa42221150289c7020553e53f7
SHA51298d85621643c14ed51bd5fd3bd3d5fa1e6e761884cbb927b4014569c48d8b0a0566164eeb0ee7cda4a67770a7024ee0b1b165bab482e7a10d145a26afcf555e1
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF
Filesize1KB
MD511115df2643185c66cf41c937617fd87
SHA19f8b3c8d6cab5486d6c65d4c7a6c1ef53318086e
SHA256dc383a7741f7526e6302303ec0181c09b36af2148d527968a2e02d5649d535a1
SHA512509a56839a9da2cb4f6b120ce32d3c7330106dd92e4a740c0febe8ca80ae307504aba7cfef78c89925cda24d81c3196d34b826e5fbad75783c5f8926c7ae497c
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif
Filesize5KB
MD5a0d562108e340e3b16c8fc965d75fd4c
SHA118ef0d5e94f3438fca6278bd31c39ee266cf3b6e
SHA256b91d6f6afe004237ea898d875f067489e4fdbc0b4adac58deec7b804d177906c
SHA51222d8cda21df62558f441d1da2de325cdc7b6f3972f10654089bd3b35b9b63c6b79183c8b70d8bd567c247782e23ba74f1261fa985ae46c25ff61366ea0549e03
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif
Filesize31KB
MD5a5c9f548b3efb0874840eb0056ee665a
SHA1d83d32f98e31c2f0e9a27955490942d16a8725bb
SHA256f810fe3f9abb0650e447a964c423dc4390ef5b34ebc5206c0c27994361581bf3
SHA5124479d4b10dcdef6b93b1e08353afa9ab7ee812db2da4c594dfa1a8ef601dc335a686cd1ed677971eb5112e208da59f8df686b4cea45eab73377fed2ad3d83f44
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif
Filesize4KB
MD58586f3b4c5f1c54ed029e13f1eb4b2e5
SHA110edcdc48abcb2753878d517558fee0a7d5cdbf6
SHA25669b179ef512ba6c3236e2f0f7d3e0bd9a813dac8122d42a2500eafbf94d6c798
SHA512c16bea96cd7b7964d055789b7d8a00cec52e89b2ee1d6beaa2738bf2aa121b59481d9f96713bb5218f8990c470533f953f3d53096233c5534b6c7a1d30da0f8e
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif
Filesize21KB
MD56648d589286c0d3be69e5bb43b697e79
SHA173f04633d68dd0726e2d0800ad0697d63c7a0ed9
SHA2565b0459c1471ad8dfba2dfe3be0edc497d8fb6a0c194da2c19dcbe11ca8d596c2
SHA5126d55746ddce2dbdbac9927edfa23aa4f6a6196ba4edf8b10dfd519c5c468b2312e715ecc9ab3138b4b1ea89b4bf8fb9c8462f093785f182c40811b2e011577f4
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif
Filesize112B
MD52cd030c70aae9657964eb198a1ff305f
SHA1f63100a7d23fecb7a3f6f6c07f6932d004a6015e
SHA256eb16c1839669874e3044b5be4e9513e76b8b7b4e17c301d211df30230b80144b
SHA51241905f90741d69eee6158026f9ab5509e37b66239f64f604fab4080fd109f1cb980ddd0fb60ab6c928ed594e424d8cb51fb2cdd8ea3342c5a39cae99613979f8
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif
Filesize8KB
MD56ff61993d3e4ef83f1f84f6e0ee78cda
SHA1d8a58bb7a308d9541b8099fa9203768393926442
SHA2569d3600b1c508751be5568ef185b966f0cd2cc549881bbbf62a04dde5e6a8dea1
SHA512bbf295962bdbd2a423e78d9a6ffe771ee968de5771155d797d8e2db5c9fe51746a642f8c8db6dc00f1462fe1a7830128823283a535a9ecea4a635569fb412ccd
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif
Filesize15KB
MD58c6e8a11fdc14e713f21bced27e20210
SHA1e57309b9fde1c3f2d8adfbdb4e3f7e72fe06bce7
SHA25611a8bc09519b04a8f44c0fd5a7685d76092ca2a9761383c512bcb203436bed26
SHA512275c83a93f0fe572008b6b88bddd3c0bf61a214d563a35583e25799e4d54edf4f834df0647e1f0c95377e0e503ec066883aa4c95959f8f8b8a7b2c0e8ccf13d6
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif
Filesize6KB
MD56778282707acd01a3b5ca5aa38f7469c
SHA1d8c69948fe3eea8602e8f57f52179014c7fb7684
SHA256ecdc4382b913a59e93910e6ca3f778325f866ed05520832e851f2dd5909d1bda
SHA512ad2af9b7a507a261d38212c3656aa806c48df9a40c76b9753de2c09413d09f73f5c287b4dac656756d72edbd7ef3d561afea590049717e22d21479929c315b73
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif
Filesize20KB
MD554c8d31fca2a08ed93a1f95d64fc0853
SHA1ff829555edcca44e689c04074dcb7f65af80ac87
SHA2567f7eabe5f2c4053c28dc15f625a058c5ae9a2468723e166cdbeec53b26674ee7
SHA512a4948d66eb6f4a34a4cea66c30fcdaeafe545dd42313f0adace668a422543b643d7d3c865028bb42fd0c4718f6eec48ac2d8bcc53b90d3dabf2e61f7066a86cc
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif
Filesize6KB
MD56088ce0d2999e05f0c6de0cf1ee873f3
SHA1eab33b48bfcbb2f25e527b77d70caa1561709b9e
SHA256e5d9e5f7e7992acc10b6357cbc32dc50e44b648b7bb8ae8effe1c2371261d4aa
SHA512ad733901ddf755dacd4e0086ccaf9603ecb92f37a061fb576d1e64da995521247e3f8b146be16f981f71cb850575733905ef00b9cd8b7e2dd1401dae846072b5
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif
Filesize15KB
MD5ed21c4c2c1588b2fee82d68d282a06b2
SHA1aedaf8824c985f3b6b475090d96b1805311d0ea3
SHA256aff88ec606dd6358406a2405165cda5d8fbce17c042c30628aff58504c8a2e1f
SHA51251de5b7968c55ba646b41a6c1989b7bee62ab0709936b5387b58a4c06f72b703e05eea00517ecfb25ed89f0c6166921d49f31e0c67485a69ddf3c9dfd04c6cb5
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg
Filesize2KB
MD535e47937bddcf36fbc56463309eb2132
SHA154a3cff00edd5860f44c77d5953f600561080ae4
SHA2569fb24d35b70adfb5fd9a9efd5d5052bc2490de9fad9fec43df7b4de275ad85c7
SHA51296e5ebd810e843eff67285db3bd054ac3b52562fc4d2061321eb7f8b23ad4cc5a587e96652ea73fcc4946e871d08903c29924fd5e77fa0dbc7fb4b5b554c33b8
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp
Filesize2KB
MD5192843b70c375f9925d207fb59335f76
SHA18ec6ca022294b61867d694315b7da8b69d9425c9
SHA256514ecf38ea1e05e5f5e4dc1254d3e37fb174db910e3dda0094e2c23f4f119c4a
SHA51245b848727550f747684ca1fa91583ff5cf667c3805c7a395b45f1f7d624259462ee23f2c7c6e4523e97b72f24c4c53685a7599697a9df06108dfd3eaad31dd10
-
Filesize
320B
MD568378a943b04c98b89935327bf86cef1
SHA15ae62647a6dd08daa8ef4d516dfc668f97987a22
SHA256fa2ec56d42d5714d33d02f725632fa85461a80a87458ebe6d0356dcafb3ec110
SHA512e93c5d1a9c529a4caae80329153c6253eea2b638fc0ae466a64e7cf5895c9382c984d52bdcf297cb0b5eca1e8a5ddb14f9022dcb810048d60fab23a38333e338
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg
Filesize7KB
MD56e6b37693ab81582762fd714c9677d5d
SHA10a781ee460bc8f1252c4bc4b5392a09ff482c7d6
SHA256a9c7ee80dab80300f999f0d80a8f2f61eaf6a7b62ca76d0cd7bfbbe8f9f05cf8
SHA512a1c2e4fa11ac1c2d9f2e1ebc73b16b9c0ac7f3cc8e28ecba7418d1c98163d08f27a8aec55bb5633332bd97fd01c0bdccad65bad953cc6bd4dc1986ff696ada4a
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF
Filesize256B
MD598914f079148e4982bdd1abe9d274969
SHA11260857498ef972f6a5e44fcc51800d344b382cd
SHA2562e43a7cfb3ae51f29a6dc89083a0ccebffa2ad0ec4505d64aed09c2c99869614
SHA51208fb9d5310959c71e353a5ee1fe84aca82d085d3260c20f038ee43034c69125e5656c4b103b9a0f0bf8e0e6fb416a3745f07089b4fbb99be578d84a02a889f25
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif
Filesize336B
MD5032eb64e9b6cc5d0487e960720ea04c5
SHA1b44dd59f766811b550b62d593c5911937a43e020
SHA2569b57777766393fe12bcd73af9f6cd396e5c7d12dc406dd4bb46f9bc6a1408de2
SHA51242c04fb9650b82c1332d78946d30b4bb45956dfb8a09da35c7078e0b632adacbe5a52b39db90e6d168a3b8ba5df0f00454373936d4dad1f17b7e55cbfc7ba127
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF
Filesize368B
MD5999d9003a41bb559802da86add6aa709
SHA1f3222cd695bca3fbbcbb130d554b38209846e845
SHA25639dd72a49da80c9436ebf3b9591fce4437f3a1b87455de4c42fd0ec05d40b844
SHA512975eb4d31a2d9f44483553a7f48f8e615445d454cc2beaf6cc9063538f4fde3726c85625737d86199722651e83561d711a7199066fa0cd863d51ad04fa398957
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF
Filesize160B
MD508acb5fffacdaad819e05dd9c37e9d1f
SHA1d3011b58d4ac7df5c7b4cea01e39e88ef8c80cb0
SHA25605ab86342577862dfd9232d40fd5048eba381c1baea29216df6792c650f20e72
SHA512fa317082f198180d3157262320d48169581a3b0156a31c897ee8eb11f639988c0d74ac8767f5e725fb51351688ee40be5e29a7a6da4f5808394c96e089b0b6aa
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF
Filesize448B
MD5f1a1f6bfaa60552e25c92b22c06ab86f
SHA1169b2fe67bc96f2f02ddd70255b4b41a6d1166bd
SHA25666cadca9a77c85fe2abdb8050dbabba5850333c232b04f22783463257bdd449a
SHA512d0be7fd542a0902ffb64816fd3332356adfd3972a2a1a8c31d53b6f914d1c9b34140f1edcde22dc082160970c12191fdc3c38eff1d1e6e863c3ca4ba237ccc0e
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF
Filesize464B
MD5cbb37315a81a51b7d28c2ef1e45361f4
SHA16cb7ea198ea2eed39e724e4ee77698ebbfe14c86
SHA256ba5f067c2a09594842ab4d45adfe595f5446311cd79ac44d5d6a04a986b95407
SHA512ec9475a04182f9df7f2fa510f4493af3fec88df71ad94dcc04f8bc38e95e62341b64d2d9b956f332cedab590559dfbcb26dfcd6ac5708214fa8e8e7de0777e09
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF
Filesize272B
MD514305efddfa9537a733223a637b20b3d
SHA1d1907c760682e29e62ba52ab7f30673bd96f19bc
SHA256184deee562b283c2190f7b3e505b19b91c44891b7762b8fb95eb36e1eb6272c9
SHA512a35e5fc0e9646708c8a40fe8836aeed13b70700bef8a5fe808a661f10e887e5eae2da84ce1cc570c18898838e7cde45dc57834ab06be42e1fae0b89513e5b049
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF
Filesize2KB
MD5c8aa25f3b00863e9ca1f828f464df053
SHA1e72ec78ea81cf035196a780bae537e9a42f030df
SHA25694581be9663907cc56dfe680d531f11aa27761a174d0ff8661c13ceafd7318f6
SHA5121be19eddbe3cba56db8e6aea4f63938a868c0797afe4376d0a903e04bab438a00af2a554ae781d1964ac2c43da01287d0445f67e425836114570610b4eae88de
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\HEADER.GIF
Filesize3KB
MD5b41bc3a3d81e63263968872f7813a3db
SHA11661bc91a33138d29ad6c5302100516116e49b50
SHA25647cfff6848077c4514d97e3e354f82bdf6b1cf04c1bb0cdb4dc19f5079d6c4a6
SHA5125dd809434ee520cc2bd289d621fcc62c443f80a05bc1dae6f0b4b50853042ec272c50f89b816b9053c42b83098d5b7c1dc2fa9f00006c49715b1334bb0606482
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_OFF.GIF
Filesize464B
MD56669134f0c8b04166e0ee209bde29a53
SHA1eef5a5e0ba85d6e1592004285dcc87f865c656f8
SHA256aee5da59fd8af37d805c54043bfc2dad1ec274871c6823081553cfcd47abd037
SHA512cfc95f4c6f2fcdd9ae2f2d1a2d64398ae83fd4e5b5511b30e42c284c789975601e687dec223031ab7d4032eb12400fbf5935a95a78ee35d1c51c4f2bb4f53094
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_ON.GIF
Filesize272B
MD56cbf77b4fd9942646b2e7e459bccde97
SHA106eafeb5f974dc11032ca20b0982c87bd5598992
SHA2563c4872657753718fc21693db4df9aac0493f078be5e229358ae183c705ce3f33
SHA512791c2c170be2a5d1ab241e1d5b4304b6611f2e7bc8e809dbcb9ed7120ade7d32d0759840055ba2f65047f94bce271291909e10c30a1fb67ad83dacc860c89d83
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif
Filesize240B
MD5f338fe6cdf150b8cf86f8c3906269e8a
SHA11390887e97a6d9d017c57d7af05508ca4adb0c30
SHA256033328f94724953c938519efc91885b662faea8997816540b3c99594e7b11a65
SHA51200be32b83de5d17676e64f8d59c4c982431b4ead6461911312f854ab34015939e27328810a53f41e8376ad63b38bf4bbb5cdfb8705d780a325ad2f7f1667427e
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF
Filesize368B
MD58a793c7d4c767d0326a7804298876407
SHA131fa590e909a6ecc7bea71eeb5c8e515f11fdeb6
SHA256f49aa016e8f35a5951ea7362acd57abf583f4527c0aa3c537dcaa8baae5912c7
SHA5128dd19eff957142dfeaead7bfc6ef8788ee937f9759a87419a533b96d37deae3831deb040d45182f0793be39d14abca20d2b21e9401c73fedc81cb5a49679746e
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF
Filesize368B
MD58f9ae423f6a54a19ec85cf916a006618
SHA1eb61e001b145ab54815ed94cacdda3cda8a73103
SHA256fcdf273ff6b6a90af991765ba3c54cca41492ac1a12d6e3406e10da4b51ad55a
SHA5122ffb84c2dd6f1968fc100ce310a6cb0d4f309fb1c28543254828aa579c636fc7939b0f727e9f89b48155145a2f3ce8c51abe6556d578c0180cd9f3eac9360428
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif
Filesize6KB
MD521c46fecc3f60054a4cf05322353f771
SHA12d90e16e9bd9289dcedc92fdcd9754c1c5f9bf85
SHA256007859eea8ca90fbcd25143d15ffe23afe237249a702fd787de900d858bdef0c
SHA512e1a2a32add9597a5de282c7b613c38e750ea1605f006590bb952438cef43a6480dbc065e6b314c1117082082b887fda76bbaf6c9b1d9fe74a55c8a00b3f2bb98
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF
Filesize432B
MD58c3508edc0b057d9058fff2c2cff693a
SHA15c1d081169121a27127be18a5f24bfb16364b702
SHA256dcd18cc11a93028f3736620f993daf197766b012c2c7c9f6aebef3f3d8cf3521
SHA512af7b4acc93f0dbc1a65fd782977de2f6fcd6f2ad552a89043b9caacb3b8b1f054392ac946a7103b86d105c571255563d703f84589e0a1db37efa7e9bfdd1e2fb
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\HEADER.GIF
Filesize26KB
MD52b40a73f361ff6d17678ef422fced8bc
SHA1e118b9ce5e98e2aa6389a8cc9b5c227f616f140d
SHA256546299516a644c6528f164abc0d77011ea62859afd857b2dea8b44e82c79188f
SHA512e3d2899eb15818ddd063f1d3feccb0301a9e6dcf695388f7023d8a008c15f5980c0d7c5f4a2d0a184b47485ce7ca2be5e2bec048581cf6f1bbac4ab57e169865
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif
Filesize816B
MD5c17b8c9c2bf9a42a19037dbe0af61090
SHA17d0d356889ed0cdfdca8c61445835f086bf80a48
SHA256af1c463e25523a0f18f46276275f6c1065b2d92e25238a9db0cba02b134672fc
SHA5123dee0dfb54435ea6be7bce63d815a7094d2917cdcf66370d709d0e3d53acff614b9419a3f5c1d16cd861bbb37f30ddff6f0ac9302f62e791c9a9f748ea9e25c6
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF
Filesize880B
MD5bf6f9572b202741f59c454368ffa65ac
SHA1918e1dbf7bd79d62019037872c95393f551f72ca
SHA256b841f47e3bc96ae6e5605540d7ae7c8dbf04d7cbcef4499b2f932f691c063a1e
SHA5120882989971f2ce66ca12303967e2b156453dc362a24bbaeb215f4a5c1bca047c759224b94f5846cf400cde5c2f3aa7d1b39c2ad1ad182d2f4366d8e55b1c928d
-
Filesize
320B
MD5856cf9eec3b8e9420144b79ea8af9474
SHA14e5d66b85212cbe1f102f18d25755c516f821f53
SHA256933e53d6f1c7a7d3b6b7b79ef19d4143f2286db55243e3d53825df161e4a6d09
SHA51244fc90074a6359c3a138f7914026c21393586ad15b8fc9a065624178e1ab5450d62f6537e1b9f2fba8e595451d1bed3add1663cbc685a083b3733e39985bdc38
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg
Filesize3KB
MD5b0ec617172078714d3c3a79a045ea38e
SHA149e83d0c32a12bb753929ae26c9b4d76715afea4
SHA2561db92cc2a6f7efee589451e40986dd69c6fb8a641b8ffa4d460d78f9782db501
SHA512553bcec5673579a90d2cbff5e478f7809667c2a180f4766ceb5baf0fc8a3424d90b9bfa97741783697cf25c492bf5e118cd530753ff2b81364a30f258d8b0ec7
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif
Filesize2KB
MD571a5e9d75a886826644aecb25117c5b8
SHA18dd1f3dde0904af547705041dcc1c44b1d4fbadc
SHA2565fd5aa601ea58dd4d40da44541c1c9c1084b5274f1ec8f3b49ea903d74567c3c
SHA512595b58ea3a27c4b5c3f5c9e5f4991e5e915d92d4c4e113c75b6bbd66a60f07f8f5788a2e46cfeb61b7a3f29ac2167bf063799d14649c9e92ff1bb0a3828c2130
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif
Filesize19KB
MD5de9f9af6be066f2e03c69c4a11b93c07
SHA17fd232502d637ca12d18fef0efb9a90f3b70434b
SHA25690bb46de87f4321a0969923a0da616e2cf1bfb74d079d9a49b810b6292028ffb
SHA512f30bc22dbf9c7f9ef55e61c36688d73e1ba016f6c73d49f54bb68b90564fa79855416a5b9fe2971a0c4aee75cafc5f587a31cda334de0f4a3c98f2c9d4c652d6
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif
Filesize896B
MD518af971fe8821ab010600cebdc722bbd
SHA18f616f098232b4836b0902cfe8501f162d995b57
SHA256865914639090a4136cfe6fbb08ee265f431307d8338d81463cb1a58ac96d6545
SHA51224d3c550f216f2d6e154a3bff005b409d85673bcf1fbacde6c2217c9f997f828ba7183ffd377cfa7558d12d8585e2f6c330f613af8181c17b3822081686827a9
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif
Filesize864B
MD5f72ed889f79ea0b328ee4a918a3972be
SHA1f3cdc150e1c4d7f8f5b37044297f33ab2d1cd47f
SHA25650a020fbeefc1d49603be89857d3d7480e2a556fe40c5768c785e36c40d866ad
SHA51201c105f5d583621a7e244f87a1b458d4f6dcd26adb03ebbabcfab3c8d29f8d11876c18bd70a2731af62981b0388d56d22c665a342fd631cd7a70a187bd76c762
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif
Filesize864B
MD5b5c8e0fbefacb679b1353fe22b2865b7
SHA11b749eda53027e0455225c0288bd97c824a7a000
SHA256c5056dce29deea38b02e13970b06e518ec87a74b4ee18baa4d3c40fd982c1b19
SHA5126f8af40406c4ce7bbb03526eaa620878f490908c450078d37ae8a3945f3345785a117739a86e186fe92904a0e9aa762d15d3f7c2339b87980c3878bdb43ce7ba
-
Filesize
592B
MD574508323537acea0e36857a0d98247bc
SHA1962ae02482708b3876c208d044f22171b5f8c15a
SHA256131f0060fed7a8492d4b1729ed5d58befdf71fbb74a4c6e22c2cfbb91a0ab119
SHA51232b3d28349fbfb5e7c581e6a37e95541a3075d6b76c1959691dd7b8e788ff09c11a51725ad5f74b362f45dd84a85408124b7ade398a0ed45c7d0e71b5b2fd393
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF
Filesize912B
MD589df7e15ade228639ebd461fe3624beb
SHA16662e436c8a12289d8cbb632b095e7442e894c1d
SHA256a714ec34509df5cbccf1c127e86b9ec5a6b06162a46e2566d21cf2968a242cb4
SHA5123df060353012a35ae1b1cb270bbe55ec97b6e7fcf657ce193c0b02cc96ce81de317bceb3b9cd351f2b5b6d085889cd4187682379210ccc9d9ee8a00c7e8c39fb
-
Filesize
640B
MD51a8856366e70692b42d29c7e68d71dbc
SHA1e1de768d8fc8cddf3a1a59778b4d0dae74597d1f
SHA25602f501eb942d408ee8f566f92013f9a3aba3802452142f205f4c3df01e621d00
SHA5129beb9082f283342e5f3ec5e248a196c5d2dcc4ffd4fc3294800f89c278f4ec455bb306b0e35a9866775039771601bc3f71c3887009e978d118a2786d0e2cdf6c
-
Filesize
880B
MD5c6dd497468139dae8a47a1004674a4ba
SHA1391665485df86f4fd21ba201ce2d8c340cf54e20
SHA2561e63d57b28c7fcd9dc6c40765cc5bec11f6307a1c48e2a57d636d60f9cc659d4
SHA51295dea06174d029a9224d9508f0372b678b26d105d5418bdacddc6e2ffb3f8a798118a5c5f606adb351ff2ec3d7c2198255be765aefe7b1f31f57e3aa5b15d266
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg
Filesize5KB
MD5d587df118876612424e786981ca966c5
SHA106c5f0288ab98e65381567f1a8a0d1d2eed6e712
SHA2562d40d96ed519fb92a3474c2cf0dc86c7f83835db0bd44059063a97ac1cddd9d0
SHA51211a2b0decc9fbc236d78f9ea86752a936b1ed44726df3f7f979b7e5e4fe7334af3c4b1f48b7320db6e9b99951292495e5628f48b276ed0f24c2e88df1077b48f
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp
Filesize1KB
MD544220eeb4d1f1a86cf3a263133382c8b
SHA1a3eecde02f02c8bdce6f615b33b1e79eb808dfc8
SHA25642578f1f1a3f7b94df8a6ece622f4c968beaa6d5e7d258de0bd47a63ee0d3e67
SHA512964d7ab32c28895fb5be74f7651daa94aeae095b37b327402a3df146a63a6617bf5290bd8fbb49a5b14e6395a6d993def8b78069e46d1f8027d3509cda887144
-
Filesize
624B
MD556f146b892149980b4e073a2a105a026
SHA1c271a7677cc60278b574e59888a46f0819320017
SHA2562a32633132d4fb0a2811eb14021b05b1ec9ad73d2a0a04665d63963c3d7e3008
SHA5128fc1de98098bbcceb2b3ce5e36bcbf96bf2a775fa632fbf5dadbf098e81c69f204f4945b677be01e35a78b0b9d8e5c3aac322d0293445dca39701b4d29b2fb3e
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif
Filesize864B
MD5934930d9122c250f60dfaeb8f9c730f7
SHA1f6afa669e51bf5e78a2fb7701c5462c357ef79dd
SHA2561aa301bbebf1500dbade11127a852e74bf7d71f5e6deadb5a4d8062a9dcecc56
SHA5125d3ca74a8224c27157683ee4913ceab0f7030328a5319cbde12d63b901511620f622dd02bab04e7545632946e2c24332fbcefcb487d51ea625502652539245a8
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif
Filesize848B
MD5ef0ee9b9c455d812396fd5664b8b7acc
SHA178353dbe66fbf5bc3edb8d0d0e4b77bb4f036848
SHA256f40da5178b45a842a6da898966eca49d0a849ea4193e478e14645c7324a78f24
SHA51275e5f668f42eb8f460f5976e6b69cf008709b7301320e9c1156fbcc27d574d88ac19f18de00fcc5735752080dd8da3b87d038d367406f30a382f459c6eedae29
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif
Filesize880B
MD545bfe010f99bb7e6f65c5f9a290534d8
SHA1a3039e573dcd6bda2aa30faa762d7f0ea681f1bf
SHA256330951546f21367d54cd35133fe59fafd30ee7bf2ea6c0dbaf2ad7d447e10dbd
SHA5125b5af2efe5303cec509e81174fd8ccf82e4c55a209e725afefe1104c0e95fb906db57c6c6706fcbc7f015289015e3f81c245cae6ca6929199f5eec4c7b9118c3
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif
Filesize848B
MD5ca3ffe914a4359dfb8b6911188bff2f5
SHA1377a77f75ea1fec1888a88063731fe3ecc6f4f18
SHA256b6b3463cef556554f7e9f75bac13d6c5b0205e07c1d44f82facd30a885aeef2d
SHA512449c2d66f95fba7cea87dce0bc27b50aa930be4327f6035b5ff832142e589b6f9570d70c96259f3d819bb43bb0d16d239859c2ea14416ee65e9e539d9ca6f931
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif
Filesize864B
MD5cc343b392cb4416ed5a8ded614c7d0c8
SHA1d49ce42b2cad4dba5c5e8b1b65eecacc01a6f47f
SHA25695ed7f0d75ccfd336c3f8c4a41987c157afc49064f8b3b44c239004c13b3ad5e
SHA5126e5792e09300581a3f4a421eade82279c5151bcd2f0bcc89b1be7a8d9e6dc2b6d9007f75e5c14ea3e84324490f04805067357ff522fdcf813475b39834e01039
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif
Filesize864B
MD53cb353f3a0598bf121ff1fc38758c08f
SHA1fe3d7391313577cf377afcb5bd018f2191181151
SHA256960a37adb7dba41a25433eab96a5d4d07e5c809d543591ebdcf660386d63c570
SHA51234d93106986a03f9a31f28bbeebd90d706f62b9f249b5f5c33502ddf22e3b7fdc6230569b7a12f4e729a6d1cfe620112d72657c252c7bf1b7b9eaf49d909eb44
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif
Filesize864B
MD5f96d31f95323fd5452ee525c55727326
SHA112a8e1a80f7070589ca4d18cc41066734ad0df8e
SHA256aced99e46319116160845fa9c73b5744b8b5b87142a18cfbda367eadb2626a12
SHA51270dfc83e86fff4a7fd066177dee62cb8ef71ea99d232ba80c3a7cc9e3e0ba79a477e0200819cf43fa35f8fac07cf298f98ab0360ce055e162b1f650a451e7fec
-
C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif
Filesize896B
MD56edebc6f7e9b4b7940e5026a451047fe
SHA14f25106fa3eef903dcd04b3981cba6e809e62f52
SHA256c1a6e2e8b42c295557b7474e238767cf4a761cf517063555b7a9d828628a431d
SHA5120c13b00a3aadafcb1412a595a2d0bc3b8ca5370ab3ab9407b9ee6ee593dcac1d9482e45319d2f521e1c3a86eb22b26dc131b51d4202a9438fb9b6c8fc5f3fdef
-
C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml
Filesize247KB
MD5252be6d5d0a0002b1d0b5ccf76392065
SHA175bd2971b054c4219a7f23fd18be0aa424cb2477
SHA256c1a175ab5bca0f3dd0608b67ba9b886e6cdc58aa0e3519a0b2d96b0fdf38c046
SHA512a837e1965882ba13b017af0c4bbcf8a4a8775065b882c99f87565e7b53a78749a6970f41512ede898cfc7eb3ebd1d1774eb30026f6be4e60459e67333949a4d1
-
Filesize
816B
MD50dd5e069a6aede66c91f1939a16452f6
SHA1ac5859a14868af1f8f0f2663ba47ec93b369f6d2
SHA2565725c9787de40df2bf553d70d84bc5b7b73aa022fe0525afea9a240b7c25fab3
SHA512d25708ed19870654b1349b18280a0c63d8b655f8c36994baeb833db778b3d5920d53b1fcb375647bad92494d0fa3a73e547cd695f3e350045bbe295c574b74f0
-
Filesize
816B
MD51ef9b8e2f271697ea7157a2813919f04
SHA1cebc3d52d355a7c3e779f753e306d742d5de3b64
SHA2568e7b43cb3c292378af5f5ffed91dd31749fc77f03d7af60f8a4d141cbc0da619
SHA512933cacf9866f4bdb6b2685a9f98d0629526360e3f4187ac31baabf4b38490ea1a8b20a1d300b158562f2bd5a1d0db3d53a064b6ad2a633c9925b9d503ef45a8a
-
Filesize
5KB
MD58fea3d682fc95583a267ebf71a3b14ae
SHA1fcc8920219b81af7b76b156d52be50652a2be3a9
SHA25670aa7f0129203228289c26a56d4f59cb3e009a1294613c8e0e7d874139f86167
SHA512431eea3fc44810f6e35979e5249fccea0a605230f9b1d8a4ad1ded629fe68a000f6992d45666e961e4f9be4a9c5198387bc25b318a55cce0f6af4d42350aeed0
-
Filesize
160B
MD5b8c94f284ed645c97aee2e901f705ea3
SHA1ff27fe3b5c61a5c5c816f83a4e3741413ea3f3db
SHA25602bfd45d5db546d612a69160831fd001838bde1dfa2b4fa47eb5ec2213bc194c
SHA512da40c1c0ae78b455fe9550320e26c180f726fd04ad0cbc48da4f63907f01e0a8597ef5eca813c99229b4671aa2768ca2d17d8060722b30b192840a30e569803c
-
Filesize
32B
MD569eb16ae30444986b142d75b61824ce2
SHA1105145dc51418ac9fdc856d1cb880efa92eaca43
SHA2560017c1c0924f6479a08ffc7640642a84c900a92f684dc56525f126578b85a854
SHA512ec35ea5c00544f75ab1e489091dff77c56866fb91857cedbda48006feadaa657b1c9d315b8e58185db1140c97f309d665cb7bcf4cbb2adbd25c13a731ce5f5b3
-
Filesize
32B
MD5b752e8070b4f56f2c09d7d682c6a122b
SHA14ea288e1d9423ba9c7c5482963efdc569e3c5833
SHA256e23aba25ec317b51a985b509f35ffc50db7b7d6bc76435a2c7fde1a9ae53f10e
SHA512da646b787b97c62097a78cb956fbf06c9046fd241f0ef730dfa673a9b7f18110037d848f6d248aa7ab87f407dbca5f65d9421c86a263d9931b694cf77a3909c7
-
Filesize
32B
MD5ae6f6b482ed69c2a167484e866d82636
SHA12a2f0af6dede76bf2dcbac62d3ce5a7fe5204172
SHA2561c52459545307648a001c99c01dd3a2356f3449bc86e068d17ee2e680a815276
SHA51242300cce4e7e6ac780a31b108f499372bed891bdfb7b554f7ac3579cdb9f693c2d0b5a95b67b0091b47149fc0b1b351f31f532509defdd033e81b7441997b714
-
Filesize
32B
MD53629ed2daf1bdedd0d1bd36c4cd55faf
SHA16ebcfd2cc523b9f5836db6bcc5f28d59c043479d
SHA25607ed84c73e4c0852e76b9648276cac6dd3496e3f230f47a5fdd0ca6a19663ce3
SHA5128f33aa574901337e5a37b937db3ed5e8787a7fa8d6cc8524b9e61fd029d78d97d5634ad91b9cbbb09b63d9272b08eba1e028a8fca77b12bf2dab04ee9674de5c
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html
Filesize12KB
MD5a2fb1e9c43dbd34252d938bdd4828816
SHA19f7d39fcdcbec7ac643ec0c289b9b2f1c28b4000
SHA256e0b2517a32782ac4857a286c56de2137b4de319d2817e6e0152e5c459cf28a05
SHA512e463ddec9d9e018020731b2b7066317bcddf829a8bacdfe95f426854d27e49e0acbb12fa539d9c3157cc9d13639873e7f2358b3adb5229b2e007772a37fde587
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html
Filesize8KB
MD503913959693c1f7a1893826d23c5c29d
SHA10e138da1bc096b63dae431c39ca603278a7c4287
SHA256b8dc8303fc89c32788b030f8230d9599c65ce632864585119074587b9530a626
SHA512ab5b809c6257fea13a64849efdb0bcf8248e781536bc87621d100c5007b3af15464bd3633eb8fb7694fc41e23cc29d653468c5310ce8fff780954482c91f0c25
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf
Filesize64B
MD5b1cb09fdb1a2543d060a58ae60d809e4
SHA1be762d7a1b14adbb2e779df3e40b9d162a02e77e
SHA2567501c55b9ee5fc38939cfa59959d71c5fcfeaf4c88136aa076d9516f13d0df1d
SHA5129c7443e374c68eacc1204c28854f895780c708f9fef34e2666e8cda8576e6ec2f0129da6c0b029d3112acdf537b2e9901406085678220f592cba7f1f29aa4797
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt
Filesize11KB
MD5808c05e030a10975ee068200dd9ec970
SHA10dd168e8ccb82fa4337fb28708fc581e1905a56d
SHA2564df5eb4370b320ad44a1af8c5290b27fc0af458847b63f3eed707b8b69a8d214
SHA512a21d4f60164a19f987da57562d30d45d58bb7a4960f1a5e956c14c50ecb76432ff04df20da3bfd7ce9afd108dd2650dabdc9bd1ffb60f21946c5e9e38a023391
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA
Filesize7KB
MD5bccc6009149b6023ca079999e6cfe5bf
SHA1df7e84e7f099e693ed31c7fd63fce4e962b8ae2f
SHA256c40e5c7df17eafc9dfdc08145367b56c456dcd59c6d4ce19ac0a08cb41fb4f8a
SHA512d56b19320575c10db92afa090016d1c7538a8bfc19daced2ca1c6f5189a019c16e80e916d02719aacbbd6928c04235083fcea6ffe819d32e8dc7400e1c216023
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA
Filesize7KB
MD5f024f8a6ca01d17dd0049c10d5362f3c
SHA1b875588a623ca293b84b5b887f14ae109b4c6b70
SHA25646ccdf95665d93b3ff620a96c794d1081c30c022f635fe9d75b17813495ab112
SHA512920f087db27c2ab12b6f7781ee8c4024438f8bfd2b175b964985e3408a23a1b97c92419f0760429d4c3c64147c0a1b8c1479c74a4cc60428efb34c981d287cc0
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF
Filesize144B
MD5c83c12c1c9f553e63a558e0f84cb3a44
SHA1ede5f23e25d073a8c4e90300551e59f58d35932b
SHA256a2647498ed2288bf41eed3f04050f38035f8f31ec8dd09cc01520259286d8a03
SHA5124fb1e9be1e5fc4e5e247928a3d120b81b5ed2d7a031337c0e210255ec3b18a9c3389a6bc83f24ee454060960102784e7147c45493230074753a79e4c4b747441
-
Filesize
16B
MD57b20ab5ea026f897ad14081149542bb0
SHA1d2278607b3ed52dd6644e038e4f7eac49633b496
SHA2564fe2329b663801dc8530f2d0607ac5cd89439e735842dbed3c9c53f4758aacff
SHA51273405ab994ecb775c772da5c47243e68232fb4837f8fd237e6f495b31ea162d812561fe7d1156cd157b5f6e1b96fecd06435d656fb956e1d3735fe91d36e75b2
-
Filesize
3KB
MD53ef7309ce8d5e1047950ca4efb0b37ff
SHA1c829a7e8bb64732715fb7009abcce69e07efa0fc
SHA256b93923fd6c263a344b7b8afdc51d67d68c1c7fd1b6b54acb3ba9ec25959f1841
SHA512f50152c2181599d1d05efcd6f5e38b67a39ae2b8ca70dfbd0ce4e2c1db78120f3fb83ece9b6b04e71f8139d6c27713e5c8cb696c58f88df4d94a33a98cba27ca
-
Filesize
48B
MD575ddc721550b004768b9f0d69ee4640e
SHA1dec34612228abe9f4fe68ddc7fef385b19d4ff7d
SHA256fffe57138e0674ff31d3e52b746d6471abd37247e02dc085d299a91cfa5fb551
SHA512ab9973a552fcdcf7ce626c989fa97e0cd283c597a9b9611673d67edd4760b4fe634f6a06778b982fd1a97d23ffe6b9d75788771e25720a9f0fae769eda1286f1
-
Filesize
109KB
MD55a0e9f79ec7383ea9598df91cc67d8a8
SHA143b96bae7e62d2d8e4834521eed825fea02d72ff
SHA2564581d9695f6562fde84c70da9850a70f52fa5c1d8aceb13c69d05e1964eb7ff7
SHA5125ad500011e0d08a1879d552722a63d42762a7fe073cfe916382d7bfb1c4d8cced23d7fe080253503bb1de38fbda3b3fe4c5899b13272b68003a3339e9b77beab
-
Filesize
172KB
MD577c201d3478ff1defef8c95673aa1be5
SHA18d44bfde73543db399d1811efd66fda13fe7095c
SHA256f33fdff3073697e5d6d9681dd66e26030c676fcc9eb5b9be17e5ac32407a2afd
SHA512f6efe4d72dceae147720444a6337c58625665ab3b381a91ab7ea81c3ab98c9cd33b63a56e4c13fdf415fbc0957f25336a459300186ca3b6ec424e3f0448d1dff
-
Filesize
3KB
MD534f9001fd22cf40a4a2f2c9f16d85a31
SHA1444e81a04ed845da1ca04bde4b38c517d26c8ece
SHA25698bb3d4b8def577f086349d5f9b62046ef93221b496ec397d48351cdd28d24b4
SHA512143a7f3abc9a1b6160c8dabdf42fc39be55c8bb92ba9f9625287bf4dc6c8d1f37d7bacf7e58e6bc8aba2064ab4fc129d479131da968292b3379ffab3fb6ab530
-
Filesize
32B
MD53db84d1006d7dcc9e98d19cc7d5ddf6a
SHA11d5be6d9949227e3b8a1c452779667ff5c6fb97d
SHA256fdf871eaa35f80954d23fb389cfb42a6f7ab1d70804b5cfaea29632dcc06c180
SHA5120c85c0adc49b29307ff33524184e2174018db015f18c94ae3288102ca1d31d6b63541f3c134a78306af704c44e61d54b291f40c5c2333f852e8e5de86227e416
-
Filesize
1KB
MD55e396a1aa87142fd8c6451ecb0cb1348
SHA124bf4cd6772b4cb96d247ed6848b8d4d2dbfb660
SHA2569edd51570e8fc801569e57ab533136a408dcec33f55327da2bc27fabb4aad157
SHA512c1d99a75c343fcb7f9b454552b68a9cdf8b44bf66572d1d843dd009beca622300cda69cd7599fee46bbf16ec884647dc9dd803d52d2f016fcda953100857540c
-
Filesize
32B
MD571c4f23aa6e0547ab1fff11fc03fa3b6
SHA10617a09586bbee0f9272124a79d816997c1a0bf2
SHA256ea0df969a8f80e2a4c7767378b5eaf5cc08f9948e1a255502834a0b9133c208b
SHA5128befb91b38096cd9a74574dcfac33a2e75b7c4c955e6fe7d385d227601cd41d29f0e12b54adf44a3c454eb76ccab612cf6a51a1bb7105cc30aa6cf9bc73d242b
-
Filesize
32B
MD54a6d5652a4ea79dc44b1d74d5c4cbf8b
SHA145824597ca7502f3acc1bf9f77a5d846be80668d
SHA2566da3b1f330b03b319df699f4a719ae5e5ed0f320d06059bce18eb966d5b4b39c
SHA512dd3e40af0ca7ec9fd2347c772759d99597c6078307f7eefa41587e7553a8e4ae9d28ac107ca281d8c92982c144d0000e783831be0425588118d3ed2fccf201b5
-
Filesize
32B
MD579b00258efd64acc63318cdf6ac373e3
SHA14694a41be6013af18ccec630b2d3e159f542a9a8
SHA2560c1160a4a3f9b8ad2b42a2a395d1fe705038f808518ea171f695371a7c811760
SHA512cc1bed4467c7527c6d574ec13c6e8af176df9bf8054af0d531d08932c476fdedbb579acd67eecdb9ef96b8258078e5d20b12cd2377a73ffc9b2ae2a452ca0eb6
-
Filesize
32B
MD5f722604fd24925239d2d52fa76841c91
SHA10ddbea6d7c4b25fb7444990237152c3665e94b10
SHA25670dfd22a65c730c7c763e3da8dd3850924e1493cb8ba3b6af126db6dc9ff126f
SHA512794290d3125ad4b7e40f507223fab93d3b5900382ff4d03bd0e1788a162ad4653de205274fc7315da2d1b608ce598637790fdfd882bbd6f4646ed86300091649
-
Filesize
32B
MD5554103c10c3f0c1501ea712935479581
SHA1bb636692388f2fc82d6d57a81c8161fb4fbf848b
SHA2568165d6f7938b802621e3637fb07f06ab85875fd143fc1e57c5a1026613917ac6
SHA512e508d88c4110bd30c8f991e11e534f44742be7f9781e9fe716a8b8c1d68e23efcdd426575becae59637bb5bf2a620861b4f3eb917ca1ffbfa754830ac9fc9c7f
-
Filesize
32B
MD53ca642a0f9eb1724dfca61a8eb5bdffe
SHA1d728df913b065884761395576016685f041388d8
SHA2560ce1b50fba8af5db567d9707f5bae33ad7b388f46d898f71d0a1d3f90f4f78b7
SHA5127b592db9e41c0c19db8312609b14088ef079f0bc273d9012a9623660830e1e59d144e43073adf53290fe59b59aabada9fb95d890341bda4bb3279b537cf8496c
-
Filesize
584KB
MD5ba8b421f129d71b5631cb16a62cdc5b3
SHA1e509c6e811dc2f19b086159da2334bf0c46f4f7d
SHA256cef3650afafc7e1599f03460e69d08ffb443a558ae9e00f7485db6291647ac19
SHA512fda0b8fcd9a68b3f7833842d456e9c3f7a9647b7ff8d17abf1b91ae4625f37d5e415a3fc29c86a71e895229d79bed87056a334d4dbacd81e51b082218513901a
-
Filesize
16B
MD58c653f65a6e58d800e9c24d5480e5beb
SHA1ac0a9708057d1594dee06bafa83c7f93d96eabd8
SHA2566f41f483bb303c82feb4005618dc0c97a44944aac5882c971837d2db53148207
SHA5120bf0e972a243b26efa6d797999cbab0e6865af198142ba97af4a592f261d9ab2bae5de2201ea400afb7ed4872c1a6ae4cc4dd1194e1d49bd075a4112969ebd74
-
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0001.000
Filesize256B
MD5985ed20c23a4f242ad889050eb0f0697
SHA153f4aef6ed8f5735c78c240105dd45029f0ab6cc
SHA256df0cf5a453f5d8466b4b128646d8831f3347a7cda52a65d25260108f1a4f4b55
SHA512606b76fd709ae76e3e7b989fece2b5391f97207d768897a96b14fc7a14e92d6c3b10379868303b581da37c0e91391b579e952a6be96943bd0d02187efbafafff
-
Filesize
13KB
MD50db04676b9fc86fb4106cbc22b8272dc
SHA1f9d2a9d9497e9f19a39ae82443cbc7c0a53dd05f
SHA2569dcf9137d3674e09eee241d23555fecf6b5fb6c28a30f4ea57999d4527db893c
SHA512775513948a731034103618759ff40545b3488db87a2cd743a874047f97873aa332937209656b6fd3c9e75f8ab6e0eb7f733861b4b68a56443314b9985df24b1b