Malware Analysis Report

2024-10-24 18:20

Sample ID 241018-dmhc7stcrb
Target f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe
SHA256 f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12
Tags
credential_access persistence ransomware spyware stealer
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

SHA256

f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12

Threat Level: Likely malicious

The file f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe was found to be: Likely malicious.

Malicious Activity Summary

credential_access persistence ransomware spyware stealer

Renames multiple (8206) files with added filename extension

Renames multiple (6884) files with added filename extension

Credentials from Password Stores: Windows Credential Manager

Reads user/profile data of web browsers

Adds Run key to start application

Drops desktop.ini file(s)

Drops file in Program Files directory

Unsigned PE

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-18 03:07

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-10-18 03:07

Reported

2024-10-18 03:09

Platform

win10v2004-20241007-en

Max time kernel

125s

Max time network

128s

Command Line

"C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe"

Signatures

Renames multiple (6884) files with added filename extension

ransomware

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1045960512-3948844814-3059691613-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NeonGPT = "C:\\Users\\Admin\\AppData\\Local\\Temp\\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe" C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\3D Objects\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\Movie-TVStoreLogo.scale-200_contrast-black.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.16.xml C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-white_scale-200.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\[email protected] C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\vk_swiftshader_icd.json C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\server\Xusage.txt C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Windows Defender\es-ES\ProtectionManagement.mfl C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-125_contrast-black.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.DOC C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\msipc.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxSignature.p7x C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxSignature.p7x C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2018.826.98.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraMedTile.contrast-black_scale-125.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-256_altform-unplated_contrast-black_devicefamily-colorfulunplated.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-ja_jp.gif C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\msipc.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL103.XML C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\AppList.scale-100.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\Describe.snippets.ps1xml C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CASCADE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Lighting\Light\Studio.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\turnOnNotificationInAcrobat.gif C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_auditreport_18.svg C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcor.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\lib\deployment.config C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-30_altform-unplated_contrast-black.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sl-si\ui-strings.js C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.123\icudtl.dat C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\notificationsUI\notificationCenter_light.css C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_close_h2x.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\8080_36x36x32.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\SaveAsRTF.api C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\hr-hr\ui-strings.js C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN097.XML C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\REFINED\REFINED.ELM C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-125_contrast-black.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\StoreLogo.scale-200_contrast-black.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\es-es\ui-strings.js C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\zh-cn\ui-strings.js C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieTextModel.bin C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.scale-100.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-64_altform-unplated_contrast-high.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-il\ui-strings.js C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\ja-JP\wmpnssci.dll.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado27.tlb C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1036\MSO.ACL C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNewNoteWideTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\ExchangeLargeTile.scale-125.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART2.BDR C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\Weather_LogoSmall.scale-100.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-16_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\pstn\PSTN_phone.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-white_targetsize-24.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe

"C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.telegram.org udp
NL 149.154.167.220:443 api.telegram.org tcp
US 8.8.8.8:53 220.167.154.149.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp

Files

memory/2108-0-0x00007FFDE12E3000-0x00007FFDE12E5000-memory.dmp

memory/2108-1-0x000001A1FEC40000-0x000001A1FEC64000-memory.dmp

memory/2108-3-0x00007FFDE12E0000-0x00007FFDE1DA1000-memory.dmp

C:\vcredist2010_x86.log.html

MD5 b2b144adfb2eec70e79e31d48bf08358
SHA1 da79d50def0e9970fd4bc4a3b82cce63dd3ec360
SHA256 080ae6cbcfe125aab0226caa6a9cd1b8e0ce9dec7e75dd9c9f63eb8efb6a365d
SHA512 827cf3ad5093c2cfb23ce3bde8d96bd043f585ed711ab6ba01d04d30def0a28b971df6db383a21083bfb52199f10e74b6e6934593bc02c1c8e243cf6b5ee3784

C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

MD5 f00e1f8c26bb0667d010ad60600d7ba8
SHA1 fa8c018ee155bd9ebbb6e7677c431d7f05052fbb
SHA256 baafc36a43f397088297619c73ea0a2b954e249be7ffa6bd3ea94a89c12d1fb3
SHA512 f00d9c21997a888f5192eaef9bb20bf579b2f536b3c0d5dd800480ecb644829e7580d1d79ef52cc443c2464d2e8cab1d61be092f4a5d336d462d4fb38a4758d2

C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

MD5 72b3707bc221db7d5b6f40962a990e8f
SHA1 61a69199e3b851d559d74e21c58dc5ae499da7f5
SHA256 a8dcd6333303fdf54e872a176cf32d24bdf232563351f72983d4b915d5a5358b
SHA512 588f05cd552d330193ad4039c089cc9edb4e378e6ff55bea40849c1f56c7f54be4f7a636b89b0803f25017f63d3421e6afb8db93c1ebd70923b120859db9c1d8

C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

MD5 bd7b5952c261c3a37e530e1b5af5344d
SHA1 3b1cc8733f4c362143d09494400c8be1dd985440
SHA256 57c0966d57aeca1ba0371c52b29bc8ffd62413c5d94fe67e85aa0a21f8867b44
SHA512 a11b89b8dc985b8ec29ab14c9093e3467c763293797fbac56c8be71250f9fe2088e364904695428e76ed3a076a4ff00dfa071a9b82d9b143b6ad9ff68e060f21

C:\Program Files\Java\jre-1.8\LICENSE

MD5 9874bfe8a2af6fa1d0b31fcb2d59d586
SHA1 eb70a7bd684519318a6a8e4ff3ec9fde5dfb704e
SHA256 3b3c424f8cb2e97db08c4bdd33caff4faa336b4ee02ada9802bad6d43b95bee9
SHA512 03835b113d7089975408fe25db2b4965f63847ad4b4b2ceb659fff2c819e0dd2f072fa2f9be741fbe17cea7dc94f418eb38488d676504fc4d35b4b8359306c07

C:\Program Files\Java\jre-1.8\COPYRIGHT

MD5 1ec51344b3a9bb0d67ed5763ffef0170
SHA1 cdc600553f17d75140c77b93f6a8afb8e4db2186
SHA256 f5628f9c64dfaf57024aff02778f5be66f634e90dd38597fff3858e11cf22743
SHA512 2d52d3c94e567e302a9b6cfe4bc3e7b613cf9e16b6c46ad07c29d88756045014ea7587bd2640fb80c07f959ffd3ed60bb627652079795226cc27ef8eaf385e7d

C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

MD5 b72203688d6e1f05e293d4e80eea8ec0
SHA1 dbad917d4354b39e81e4b2f08ca8224784d096ca
SHA256 7a9c6c2d4ea29da68fda0baf2b472fdb9c5381be572d0ac1d3c74dba7f76225e
SHA512 14d83301925bd9bcfb8d2113dcccdf400fdb2311c7612b8d179ada0d18c046abf0b17cbdabc0a8fe87377db5b29946cdc7652f1014fd45b861318f37fadca9c1

C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

MD5 c5c4974a3baf5109326c857bb4fd339e
SHA1 45c6e9581fdbca7f55ecd1fd48110fb15cd0d356
SHA256 23b1ab6feea6a9ad64df369dd926bccd06d7f3ebdd6582073d9d975004a6c0d9
SHA512 9d84665204fd356b2ea44ad93c9710fe1c0c3ecf1df96616663e5c29f750a99e4bbda4ead6ea5045491d0b7c0294ec389fa38cd0ed46da318fae639dedc2d403

C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

MD5 cedefb82323c7da8af7f62d2d8ae98cf
SHA1 dccb50495c442e34b672590a22fb37104a2cf2bb
SHA256 5af4de4e5b723e54dc6231b64292b2d6ff410b954e2b9e5e0b8ba105cc643100
SHA512 aa7529537858847199fa5e80ad21c9e93bd9e40b65dc514b38ce3142fec52dd5a98d7382255981f9f6197a418ef82864fb49e00978d72b1d5485192900ab5c40

C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

MD5 d356699e1e04d15a23c2afd2baf011a8
SHA1 3ee96e4448ba9310762502e3015fe32e90f08bc9
SHA256 cc0d8d1356e1194cf0ac2c93a6a9204622ffa46062ecfa4628ebf0001acbfc27
SHA512 19d685e67776e451e099cc8fbe10dc0b287fdcd3925d18161da3b3769b264dcbdd94f60a7933a66cc2ea2dfc921e7ae1a7f1668d660b496e7108059442a0b401

C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

MD5 e0f8eb5d8175e6476468f052bad59be4
SHA1 28d8b561dd5d6fc8e42d4628e146133be06e2d85
SHA256 da1c3b04acc2b7776cc4ddcf6f948d9c9f628022253b8c4e82056ab9f2651c1b
SHA512 c750a1e05c99514b956ac3675df6c16c42e334403edce6e0be5703aedf85dca45d86590d73f403f29dd0991b4bd0ac51df805a7017c0c41855075f95f1a7e193

C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

MD5 d0ba1ba52ca2c6cc9caf0afc38a4ff90
SHA1 58c16e2fa8ae90d2b3591c09016e5dd1a434119a
SHA256 074b7633ce8259c9056a32830d17db32e0dc79790160f5d3be47db7b4d2d41ef
SHA512 8a639364f8a32239d236678f662e8ae58fd08c07bc967ab91651889b9b584c37584df030d7b9f4bd1783c8b14b135b041dc0c48b0390dc9b5c5631f0d0dec4d0

C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

MD5 ef4931774b7147f9f226470e8f29a3eb
SHA1 bf50872dad52487a2639b280249f02c9ba8d89db
SHA256 9fe34f7192415ab69e4b49247b3b0f7cf864d30124bc121e07d6d8887adad8cc
SHA512 f3620a4f691c8ff2dd2c50e43f0b73c270b55cf56d84f2cb48c9e31bb268e003a8d392b4641a7540ebc71d2649595b4a70afd3911e7794dfe52e7f617891996e

C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

MD5 a119460ab5980869055ef83b25b5add0
SHA1 66c9d3e569bcc71ed910cf138e1b9a1c00a7c31b
SHA256 ac9c0f0877683f57d11ebad8c6cce8723902b7c8ff329a55d8279c0d6155a902
SHA512 4ae773e7dc6dcf1518865facb36bee5c0ffa93d294ad4e1ddbf784fd3066ef28c58028b35cee3524fce54af9260ef2f8b46a7d2f9fb343147ca933ef946b7ac4

C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

MD5 502bb79c8859e15023c19facc2259daf
SHA1 7dbb620009e875128c753e59d44f98adeec3837d
SHA256 f614def6599a1f2ab92c2716056089a0584075f558c256e2261aa6d55609a743
SHA512 ba804d434b66ca4ac2d752812e70a59f223b29a2b4a70bd45d4ad7656d72502bdc5ca2acd5a639d15687e1eae4415ae154fcaaf5f0e9619ad1afe9fbcb307bf9

C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

MD5 37709a4922d571c864037be5fbde86d7
SHA1 9e821b8c2be23d0f276a731781c15a128584c7bf
SHA256 5e7902e7366d92dc8e22448072269d050d0605f827f4952fb2d80b84ba9fbbe9
SHA512 b60434303e94d5c82e96ee630c58a8572caf0351b77d017b0ef3426185ee552874ab5d48ecb5fd2432b5ed3864fff71e5f6d7a02740b59be33d79d5bab87745b

C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

MD5 13a58fe585a2fb06b5d2aab6eb06f089
SHA1 01b383e6ebdd3eab0b98ef33a804d042c78430e3
SHA256 19c9cc7c568f725b705b80a0acb3851bf5052203f7f1d0af944cca95c53fb9d3
SHA512 6a8dc337c4060e42f2e57e1aad9c8b7a301443534c551d5065e833bbcf746eb6fa4c049fe4a4afe93d8cf786da916f280ddd30299bbfead8272a642a5ff6009e

C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

MD5 122160ec8cf836a24904e72cf5edc273
SHA1 f64d790f0ce7293efcdaa8bd7563c0c6f207ae9e
SHA256 4df81bf0f3c6a51009b65234d7d7f2a84bb2e158ba82241e844855f1bccae5b2
SHA512 6bdd554068c8445251780c788a8fad3bd7440e3a267c19fc54a60995467e040a881dbe4bc1cb495e29042bd933ed747cc6fd847ff739620f0a8c156df613fc28

C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

MD5 ae62cd69f8df1f48ade87ccbb3dc5e11
SHA1 101191d48bb4476874e07e5bb12c62044a7dd5e7
SHA256 c9c1701166b37450095f2503c1bebbf3a06bff6a1471e075ba95d244d775ddb2
SHA512 dc281763e51023aa1c1defac7148597de8dc974eec89469c36c38650f956f88979adf9d5fbe82e710173aca0a711308d596a1d3c717ba135bdfe1241e3acf44d

C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

MD5 f063638ad2a025b8adbf9e0f8590e55f
SHA1 45298123fa56637632045c05d93ec3d2651a7aa9
SHA256 c6c74f5bf7e836cccfd14d1fc746ac07ad9ac6d22878772e8fb57043507fb3d3
SHA512 6aa2329f1bc40e33cb43b0f72035efa5c2a0257f7a695ddcd407c05eb6398f83151539fb70c6b0b11e14fbc8ee4dbf42305fa8d09edb7669965add3a3cc28fc8

C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

MD5 3af42661466ed5325db6ee5655fb37e9
SHA1 0b61aafa180ad7cff314de374cc741719b866a31
SHA256 933c714ee5d09b60619f98bb1fdb8566e5e7f92e90665d78de5a54983f4b8432
SHA512 e64a0e3e240676716898767cafcd8458ea2e948e6b6d6d4b2a893184149034d75826e040ffc2187566d03cc9e0e1e385b85ba47c6bafa2ada60eb0a378457c9a

C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

MD5 f08dedde604d707c9db0e8b231719dd3
SHA1 91886f1944401cde9752d07b80dcbf7eea7494fc
SHA256 e4a35e3cd3909a7fcff7bce7ce124350e8f4fcd7611d50992b9bdd04f1bc698e
SHA512 e5e0a3dd210abd46ce9787daa0b441e56590a1889cc34d68deacd6d23af92d965a51500323d66339ee97983efb92c5fd14ad7c63df16e19dfc5129c5899ce4aa

C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

MD5 89da0ed329e8afeb1e213fdf930f5a78
SHA1 5745c5465b53087755211ec1d4dcb2ee43cd459e
SHA256 4215b73b9766da9d188bafe4ef2607a655d3056bc4968abf449fef876009ee3c
SHA512 1f1d0abc7c07a68bcef46433ced1b3a928cdfdf71d7101f1d916568729dc151deedbdbf484a4db902b590d8cee158ed2352c88314af4fc97b00ad524f5621f76

C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

MD5 0b99e7bef54a1cbaec523a67cf415aad
SHA1 403af988ef0243215e5c232cc82ecaeeddb4d8a9
SHA256 be6fb22c7785f89929705338cce3ecb05f1cadc09843cb252ed4f483fa2febb4
SHA512 4cbcf0c86ea154453b9b76ba9f5e9269fa96e345738d0c86edbcf0e8ad79acdc38054c4d982faf495595d8c33886ff15f633cbe988eda6c9d231cea05715f0bc

C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

MD5 2b40388b1070564f62e9ab2c13a60da7
SHA1 7cd703a6dbff878d9186bbbdff03ca46ae199c42
SHA256 f3a8b6cb30fbb274f7796f68aa0d5836053f29c469411b02aea3ad5fff22b4fb
SHA512 4042a7e1cb84e0eb40a0e736e0f734b8d9354872e0793939e824da75600cc8805cdaa964d027ba8db8033886af5c14df3bd6e003ec273c2e26af7626b414a293

C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

MD5 4424a3e9760dd884e7cad7cbdec729c6
SHA1 19d67c149ee199ac3a1276d0a1ffb0d2e7c2d772
SHA256 64d2876c0d765c0029c67d57f4c1c7f07544e8d8355da463df051a2b5da48a52
SHA512 992ed8aa6d10a272c6a7b52dce32c9ce27b4a944524dc336f5f841f127b6839a285b2307d6ac3c8a3f1749eded7b133f06562e27242cf99f1131e57d2fb93e0e

C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

MD5 2e9e4f3744cc7d8ebc1a583aac9c9fd0
SHA1 ee4d740d8cef6f840d59f55c0afd14403a8e85ce
SHA256 e92ff98c4aefcd845d9d6cd367195d680d64c23660f2ca1597ad9b73d6491252
SHA512 d3c03e49f6e84380a55907d16f469c1f2fd6bfa196265731344df26768fe1879fff93eab20a982550db515ae2d267954108419bbeff3fc1eda5167df9e5f624c

C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

MD5 af4af7b2598cabfc1c97d4c884169f19
SHA1 09b2c52f61501ae02a0e7de7cc0b79a18b33e513
SHA256 df8562b3e607e507460f1b1961fde5fae3b897d761bbc21abf744dc863805d09
SHA512 60e9a0279a84efea56bda6e104411542179a309e744f6a9fc7835a17163ca714e3d2650c1e7fbbbc33774be550c25e63d60b1c045bf4e0d99ebafb8ba8572783

C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

MD5 0d712140bc7181222e60352609ec8206
SHA1 a6e9ef8f0c20044644c78ef6df4d7892b92e78ee
SHA256 bddb9d222f1bfbcbc3fb6d2bd322771c77d643bb7cb314027f3e8f718b9dab83
SHA512 1b2343da1d361049d317528a41a5a36ac570d68e501903aeb9d19cff30e7b6fd6be25aae684e83fd19008135ebbdafe998761778e598429b48aa3ce715bea032

C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

MD5 d4b435416151b5541190b2966a85286e
SHA1 a45f22ed95dfd3b11caee5ece5d4486b12a02a50
SHA256 26b17b436a0cea910fee870cdfd551f40429a1b6cec7af1b737ccc2d1affc7dc
SHA512 be5f8ca6e2810931094281dca5ddf11ffa454e6bfc257f07dffd51706fb52c62936034f6ca5989b9addc5c2641d129006955300a41c6b304121d440b32eeda3e

C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

MD5 39df575fd6af4368c3d66685fad6f46f
SHA1 e9c705a2131acc6738dbe3315487e80e1d19e739
SHA256 bd99e592e3cdc0fa958324c84da9837d5f03f3b70599d18c4c1c379b506e9c8a
SHA512 f90b2253fe144d2cd28748b35fb73ea07610dda6a3257d750918d21e4d93aac3b135d87814a56d55290ab5d65c6c47836d85a0693c62bc0327aa094cbfe11602

C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

MD5 cd1d57f10bf31a079800c5d064521de4
SHA1 bc1bd6609c5207b8bf0e31c52fe59634cadb15ab
SHA256 78873e2cad9427bdfa3dfef69e46264345a7ab4b69a0f5f07bd87236cdcc4806
SHA512 690f4e6c326388575c10a4b96e305bfc0d48a8b32700928811c544a477fc30eaf51068412689ed72d8cab78fa9bcc7b2c026f4254826ce30d1d79dad3974e14d

C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

MD5 f2686de8faeba0a1d88d31bd3025eedc
SHA1 fef1da1a798c27be91e8ffa16c616647398850d7
SHA256 2a647d3f8203f4656fd04aa280a6c183dcfe78ef7ff688022045c5d2c6d176ce
SHA512 0fcf7d556140413a28dcea4c966154ff1e0bd8739e17227cb032b4ac405f8cc91f29d0b56394dcc20faa2b4f4890677377504174edd7d5927c0fde82c86551b3

C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

MD5 1538106468bccadd2011f7b27b4a3a1c
SHA1 bf4a061f762a4fb88bab9797832cdb86cb449944
SHA256 ef07ac873b8d8557731d08661f55e43adcae02e0431f4c2712b9a09cad4ad078
SHA512 358a59d67b8cb9e9bd699a6ff2965b8124714fda1a14c31e05b55a3cb7919f9ca4d6c285ee1b0632aed0bae945125b499a065a52cd46769a64ad11bcaddccbf0

C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

MD5 5134e2f3eaf7d96f247c976b0fbdebd2
SHA1 81b1520a9eebb8d32d3b6334d881b693135766d1
SHA256 bd39fc6c9c334fac83bad3bb8806789bdbd7d0ac470633cc8f9585d28ed3b16e
SHA512 e7332c9747bf1a2550799698493197488189d3c9a492d982a1edb9745881384f9a25473ff836e530248ed850978728e49bf51e16ee9138d86f9beccb491519a1

C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

MD5 5b437cc9fb991fe8da69c1c346ab597b
SHA1 bb6f8bd6538aca64d9514f368dce4f28bd15dcb4
SHA256 0c5287d698844959ddf156e4248eb3d18f2e645d379a31088c0f35bf5e185677
SHA512 6a09bfb341e54144e13e4724db47599343c94562f5bdd39985651d17cb2128cd03859b4b58f555553cc08969217543398c3f9cd8e0e674325d6c0b1216b1b962

C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

MD5 90ebe8ed000153dc9d5f735327a952a7
SHA1 0282f55a6eb2f67c81f038a9bb2fe8ce3857d4e5
SHA256 ccd3ec468f5351f216438ed79773c6683e8f86e987fe3c4a8e784eb5e2ef9123
SHA512 512fd667fb7e3bf23c80224320317eff2b26c29a7dbf5bdfdfb10b5b9702db3209acbcdbb09dc2b18387671470a7dc1e0d48332c8f8e4a3ea9f10c93822ab1f7

C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

MD5 cc6af3587794f9879cade30ec32d1b4a
SHA1 452d2d94ce580e03ebe6f99a5584ea2a7d5a7bba
SHA256 21278589bc71bd81fc35dbbef2974ddd0b1e188bb9466713c7bf98a6730dc062
SHA512 0c247ede062c49ebbccb8f1fc71d487761f8ac4fa6cb5508f58130831a6719048caed7617596c4ffdc5e3534812057b1930d5aa52a58f2cde92c95e70dc9889e

C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

MD5 20dcabc807914f4da113f2e5f1e92919
SHA1 c36be096e1e45d17838ec034386e9a4dc8ed5ac4
SHA256 3fcd238cbfa5f8710192bf00d8c007b1da49b8a10fbfe49e22ad7bfb63609034
SHA512 7db558a8d2a2855feafa28ed27f1e6cc1312af960d8292a6496b0f234b9caffe7c13fe6b97bddc38be76ebe4ddf1d35a08e72e68391b0224480ccd2d83389bfc

C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

MD5 5a581fba4023054c9e64aae582cb30ac
SHA1 705601aa12a25b3b846f3a9d88b30d5e73c8004b
SHA256 cc38295394cceb3c78c3ed8fbc35975b97ecaa7b1f6de6709197ac0615b8d28b
SHA512 a6050b629e92cfa4608f551516c8d4908d4aa2d4589ad4f0e8c848ab9aec8a5b5cb51d1bd78d07946da912cad0e474a31012e89ce44bbcdbe76bf9f8a8201c13

C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

MD5 29a3cff32ef39818b8682a148e1bd290
SHA1 438d71e61765384fbd30d97d9b0a53b0a726122a
SHA256 43495584bf6d3a5718b3cb471d7fc499c0a254d377a50121ba8f947064ac2336
SHA512 2ae791e4bf4a9f28c22647caaabce4a43aeb27575922f0d9e4e8fe0a13e7985e2cb8ea785831d5831ec41f34552a29dc714e98b9504946921875bf9965562869

C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

MD5 b58788e60df581af50104b02fb380d61
SHA1 011e07479fc5b829b08f8fc5ad825b42eb1c39ae
SHA256 e1f9328853cf8b005ec187f43a853979902d774055e8bfd4e9d2e3ee0ad4d61c
SHA512 1991908329a55dd4bdb4e9317219373a0847f21e9604e615464dc3cb16906e4ddac52388d48ad975095be40fcbd5b7a84fb0869690d00c38a7d5455353e9ad69

C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

MD5 85e18528d0375d9fcd9731eaa2af7912
SHA1 650fd17696fcb620c705dd17c8da06dbf507da0d
SHA256 f797d0e572af20356dc2eed833c46a0a09d8d4f5843afd23bc5cf32b7bfa4479
SHA512 51bce29ffc1a07bdee34d7580f34b3d227511a66b181f496420df6d80d7202aa19de0fedf0193eabe6d7a29b8911ad1adb70f7c8ee45849e17d67dfef1aa29e3

C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

MD5 a24d38ca2d0ab27d88cc03775c3f3a90
SHA1 698fbff14cee5745793656dccc28733706d52c11
SHA256 7821ffcb1a3415e1bf43cd8d462e9de94140e07c3eb450edfba7f0374a37faf3
SHA512 51971cff7821f0316052c420bbf87effea8c6dd2a9c8804c567fe092da02c66b8ee975b14d8c3de5276424290d0b4c0752b286e8e48dbf81ae3659a682e9ac8f

C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

MD5 9711069afa059c148079bd77d0086cd5
SHA1 c012725bd63ccc2f23fd84f33ce9c71400a52eeb
SHA256 9a803276ca5afad7d2c8a06b4aa4118478fbfa8ec4049c0176e9e0d6154cb9fe
SHA512 d63bc290f51c13532430c8f1dbcf31dec5e57e3547d8c08e3bd7e0612010c6eeb0fe71cd7989dd4c2cdbc6d8a92c6dc4f5667112f498d0f81d71de3fa870dbeb

C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

MD5 75c1f249e9305758ff01ba09ffc0d833
SHA1 c2398b3ddd70deb7338fcfca95f3097a521a8f6c
SHA256 c683e359cfa3fccbfe739bea118096f990eb9e7ad382a0b276c9a34949fc9ed8
SHA512 3dd3912ec4954dee3bce165e0c2459fecb06f1f060be92ee47c11597c8fddb8d39bc22d97035f95ca0c335bae6bde8521d43ce15e9a9043fabf2fe298fb58e76

C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

MD5 94e80e676a50e10ec86ec2df70c7d6cf
SHA1 28747761792263daaf9c18f914c29bad58122f0e
SHA256 97ea7338fcc553d8fb72bfd9c98a81e29a25894685d08c1a1f7795c8809c97e6
SHA512 a29aa4262bd0fa48701e86804d157a383127a97cd6158ac0c599ad2820cd4d59e10d3257b7ea3c4d069b2c8eb1f0f147f244624418e60ee2853e2e7b06dd9eca

C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_HK.properties

MD5 c66440d9a16e0aaf4bad510f330e70aa
SHA1 06669a84dde6a596667663cc3213fdc9d759576b
SHA256 b7d5bc02d3f750e0ef532b1884526566bf1c612b13d866527a4e99b8f617e9e1
SHA512 257545f0725f7b7663580d4475e6c310e4067a0dc20184de058b3f7429033dcac8850dac4ef17bc8af54eea08ec64697a749ab12a035006ad3043771dd204f21

memory/2108-1232-0x00007FFDE12E3000-0x00007FFDE12E5000-memory.dmp

C:\Program Files\Java\jre-1.8\lib\security\trusted.libraries

MD5 1d8b81b854c72de45d3f94a0b373fd9c
SHA1 6036920733483a7267033c5733eef91a91c28076
SHA256 36046a5bac11cbd8244661d88af26887ea4c97eb801e63514360d6655b06503a
SHA512 b456bee176b680debd15d74e0f9fb2a222ec9b7a3d9ad77ed6569e4f492f0c22d4e0bd39ea24c55f2f89320f70da8bc0f763fb366b8c7e050e71ec6141794afc

memory/2108-1766-0x00007FFDE12E0000-0x00007FFDE1DA1000-memory.dmp

C:\Program Files\Microsoft Office\root\Office16\pkeyconfig-office.xrm-ms

MD5 8a51fc413ec26dc53f1fcadedc80c14b
SHA1 fd8a6e760324555560a7fa234fe2b9abeffecc81
SHA256 21d49494f81fe4dc85459d4380dbb8c8d39ed819236328029a547b3aada81940
SHA512 0ab9b4434700944c797b31e46f62c853bd6e1a34a010bc156e021aaab83540d90aaa60531c5f5ec71d8578c40c42cbac2ccb9d7bd016421bb23a601db8b8c26b

C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

MD5 f4cd703608c93761726b65e7406639b4
SHA1 774bb8afc3549edbd5504f1dfa8e5ffa19687d5c
SHA256 3d46ac1bb6a6a08b1806552fbf0a162cf1c613520cb4b2c106a96de26b7c98e2
SHA512 266bdbaaf26dad598d2d44a2029fdbece45f2c32f43401d4f511a658f9e36900014a26649dd2f08cf3ec658ede71095b5c00488b96396c528c9d88384b6507c5

C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_K_COL.HXK

MD5 48cc197321c2332192c142711a2ee659
SHA1 7b93b3fac7c2f0282daa44d3e5e518442e3ccb7c
SHA256 5d82193a474cff5c33595b754d7296958f2cf8ffecf0291af51158af296c998c
SHA512 1c19b8a0e583901d99e4066807d5c5774400c1bcb2ea65481a3adc55dc8067d56008ed4abd64d05f18ff4586e02100bdbe5800e5171f9521b117e0e2223a3ae3

C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK

MD5 727f2cda95b3e16a0288c4730361ba0c
SHA1 b444a84f30809100af1611dc4cb56c34bbb0b87d
SHA256 3224554583e1e4acb36817bc68a1c3fdcd1e858571069b02dac587541345840a
SHA512 b715b45555502ea538308b379c0dd67c961b18c273da3496d27129fdc9ada4b4c3b965e62ed2ceff46f564d3d8a16343c65a04dd73ad6e88f7975aae0e4926f1

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe.config

MD5 de88199064338b6109afb26f6f911f30
SHA1 9c5f1baab0783d14592b11df60dead67bfcdf6ac
SHA256 02a6f10873274ee4af45b61e80cc88c6007f8383f8a4fd6c34361b28e51be4a9
SHA512 437f9ae0fb1ad780602c5943c43486ccda8d16d5200f1cb91cc3e1585c93ee9b2e2522aad165245ec5c5db7b7e9ff050afcded48d192549b799992b66354bc2c

C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL

MD5 4004dba58890e9546a0c698d8bffda6d
SHA1 24738c6c414426701397e99746dd6deb4e548897
SHA256 d809a93efeddba619d1ec9b9d66b0ddec4adbb439e4738394be013c9945687ab
SHA512 e91d2a33710edf43a74dde8819c3ec3dd566370f3bf8caf209975f56ebee16fc89783389834a3b61fb9112c4f15c5cf0aa0be215e2f8f32747975309f7d38523

C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr8fr.dub

MD5 fb0ee515858b456d5eb8a8fa579111cb
SHA1 5fb81d1bb421e6bd74d5523371d7f753f908a3af
SHA256 1c61d43d4109ca269d5beb195fb77efd1bce405ca10b233df1083f2853e4016e
SHA512 8f97f3dc5fe4a4a38824e7f6770132d234238c2c7c8bbec79ae2f1bc7b2f9fa315bccc7fc0a71f837b0e2fab9396d6919249872da829f4c04dc0c7e11e40d419

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msjet.xsl

MD5 6dbcd4fb472625e339175cafbc8bf182
SHA1 1dfb79621f7fc7910b4f655a9bb751da8ba1042f
SHA256 b5e27e4e20c6480e9b43af3e7f0fde2856dba12179a54ae641d1376fda7220b4
SHA512 5ad2e1b34995ae1d1bc56a127ee36b060e46e3de4fb1f7110030fa0d9731b2518cb3f22d607834082a92d269dbf9bc2fb22a73d4ebeca9f5b1d6f5a15fd12c65

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql70.xsl

MD5 d93875be7cf819d703d488efa3207e01
SHA1 4808df56ceefc016ea26b7a45e48e51e9b641f84
SHA256 e612ce0726a47f35b0fde65cfc7bf6539c1bc396de5a92f400458d358f38f110
SHA512 396748e6fe6e05c67c36678c79b0512a4976957ab88fce09891b8ac0b6d9938612059c733e3f44f853f918ac05ed82b83e7ab5b38eab304b02dc6ef7cb2ad3b0

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl

MD5 51a8dd161547ab7236cd6560335710cc
SHA1 eea777d1c719dba27c89f81dbdea356b22859513
SHA256 806b930ce44ede99b609f0ee837950062c7da1af25320e411f2bb97898034ea6
SHA512 fcac21452b39b70b8f957f03fd4138857b73de8922a24a9a2e49ec74cf3e744966734771fa56aa19dadac2b900b6f3c0270f4bd694dfdd2ec1b16cec7fddc3cc

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Sybase.xsl

MD5 f9ea78d1392d77e31722575686d639a1
SHA1 b4b373f5172ba127d8739c2c811341f14f398536
SHA256 ddb15afc4fbcf99ea208db07a5f7f6281866dd07a1c4b5a9a8fbacf3f5b5ead3
SHA512 d5ed1e5be7acc1ae299bcb513b70220cce7e24659e6cc623561af126af5e0516576c2ffe3f0b0a61ca2748e292b016b59ef7584681cb46a7f43fa3b074888802

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Informix.xsl

MD5 9f62d7c67b73b92956634d4c98ea0ddb
SHA1 9e672e5e187af363ae253ad0aad9e5385e941076
SHA256 d00444f8e211c225a47357126ae503c200b06123e0bcb4cdd96445392edbe40f
SHA512 40a84656307a69c233465bc5dae1ec572ac3a5a3e4eca7404652bfff4691b4d6ff530e1b21c91784bc584c6e83f15a79bf4bc2cc80fa289771c911f3390dfeb1

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl

MD5 0a0828929d049b2c98bf23744ffa5bd2
SHA1 383d132d58cdb4f63c7f29a806efb6a897a998fa
SHA256 ff5b6d53564f01f25337930c56e851c4ed5d398a33aaca3dde130da47e77e51c
SHA512 0a706abcfc6640fcbbf0e1a5063699c590b3a535396c51ee4f338b1cc3dca066eb0ea769516a6822ad29f38f43812830ea315bd32e9e79188b9df402a3971fa9

C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo

MD5 4b996204ca813495410445a36a81777b
SHA1 90382cebd8b364fa598948931e88af4526cd5edb
SHA256 eec6494f05a0850be75b21d3ede6967a6b95a7e9c1dab6529cb4d03a099f84d3
SHA512 be69238b2fa4493b7941922aebad7796ca12b6a78a8c6fbb57cdbf37fe7d81dcdbbe2e0f9be1dcb27f79fe5dc82c8383ee8c04ad3531b5023b82d6b8810fe8a3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg

MD5 f837f3555f7c30ff23f3f90ff23d7855
SHA1 eaafb4cc08f3bacc12ca46efcf94538fee412600
SHA256 e6ae741f9ed4a31884bfb07351d5e60a40cfcdeffba8349468e1ba11a092300e
SHA512 db476b9ce604067e8d4b572fe021e2d3be87e719bf12c40b6e2ec9fb600e513e13deddfb2ff73d8094b3ce9ce804063a51f5a58b7e36795e0d7e57aa76365f32

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png

MD5 d5afc55a3855b4e366b63b2012763e7e
SHA1 f76e5173aee63f497c29bdcede90b745d726de43
SHA256 8165d428e742be039bef09fe6b1f8123ea0403c8cdf45b9efd6095e9172f64bc
SHA512 f5a6542500f267b04f2814153fe2d68df7b2a2792b45ce892a250916ef62fc145b508440b54fd3596dcf104040b95649557e8c9c4aeebb8e8c7e3c1051c8d5b6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png

MD5 226aa3e087a49ecd0efad5e052c08d14
SHA1 ad232b5c3158b98af071bf5db36552daa0764d24
SHA256 eef966e7d830e3965776c76b8ee360037cc4c0404a66872302ecb0e113e3e8b6
SHA512 4d26a22d52d2ebd31106a2396b70e8c226ea4aaf8f49475d9ab5b0401d80420d994424bfbba1d95c23ec7563f06279db4f0aa37c877b27232088d22c7ecc4a68

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

MD5 45f1b743c063143229f4125e549fb428
SHA1 4fb99e2235a096d6bb8cbaa08a615d1e6c6b7e3b
SHA256 3bd7b7d102c6b6c3c7984ad81b72d47a68d7616035cf3387dae59d8e68bd40cb
SHA512 064c87d7a5b6f2bd01df7df70e74f9840a9e94345c058390cb5178e66882ab4b3fcd2b6e2c9ae64c19a484855544cbd7c5398c4143fac127396ac3a90ad74f16

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg

MD5 0b78bdc680caa4521f27362512a684c8
SHA1 aaaafb918ae50ed080957df399d844d2358a26ea
SHA256 9367676c2b3c2440d1c20c985d85382d66701d84acc28881cc912809d0df8fec
SHA512 442778dd7da6030cc8440ec364c4bc95fa16f6133f4a3a60693f324e59878dc75832a48106f6a2ed39e3f29c96fa80d72af8847e82f3d51fefe3d1d0b2d43e96

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg

MD5 9dc43a54d3916140ce7115c89ed9f190
SHA1 2a44dda93d62c9276b3736012c9686d4055d96d9
SHA256 297bd8f9fe2b9156a59260787172f22d644b4785f05e3434099c54c813e0d454
SHA512 0d65164e2b35ccf112368f37653cea3aed2e2dce0b63272d5013c896c02a7b6c0c4d0b23dd7767163995147c37d69bf7a6590c68bb718a4e11d517d5c5dc9c28

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg

MD5 ff64177a562d24328bb4d83c1375f574
SHA1 f1c4cf401bd44c3516db5663bcf52a5550288dd8
SHA256 7a83d7bbd6db1a567497a359a1c5e5d1e60caf2e226b90cc42cfc02af5d59c8c
SHA512 ba46e826477af2695e08451195a1b950bf8ef4e0b45e65b6e8935103ccf570a72b444336d93842cb6c28a16c104a5d457a9ff1d317634c498d367230d70e42f0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg

MD5 53494a262ffc005309ebbd39b5b1865e
SHA1 5b8a650a4b42bf08e1f74baedfda00209822ad43
SHA256 35b3717154dbe22a7cace334ba98d476dc14bd5c3cd08b612b1280e04d86afd1
SHA512 3a9ab3d5db01033a24cbd16a93d791cc05afeb325a8f4c16d9971cc54ef467783779400ec075049bee4d5c27ade8934a64eedfccf28edf4bb27b5ea1ee2cb7fe

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg

MD5 e9b3cd72bc7c7edb42a86a6f7aa12e64
SHA1 f5a7f2e9eaf1a96e9a9192cce55e2f2ebb3a6050
SHA256 eb5a0e3cc2c1dd740911baa1f876a629b9f281a95f1fd3b58c11dbfecd1f844f
SHA512 7a91294646e5bc19cf7ec76cd88a3d019e9dd80b88da770faad80bacd6be695c72ac956f0c0374d2d09433ce87ce699531276b14f5300f549f3968b6254a36e2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg

MD5 5b60d58c538069fd0c4b64587a1e35c8
SHA1 7803422df6996b0e76bffdc4b60e4972e969b687
SHA256 5a62bce1e7f19c5438c825e36a20289ae5807e919c25da6b04bc60b6b36cb297
SHA512 240625582842715d92c1845b86e66bd0e71ce913de492578b144a8bf3e660b0951ea7b0454aaa73e91800105009caf9cc336793098a0fe419b206c336562dfbb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg

MD5 90c550591505fcee9b65e1b69306e215
SHA1 1660be5dd2c7e4480e225523bf69cd735942f109
SHA256 15681b8a63a6ce0488a54a95054d4f6429d11105da43f5e1cd96129c17cc02f3
SHA512 5fc30cb38ffd95d6a01e3cb3128e507e03ea7800d361ce8983ee8467c3104e85b26d11f4b30b800221bfe8db0afec435ab977f26153f7683e6b373ef14c161cc

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg

MD5 ce427b1190a86ea7d883af31c8aa9b34
SHA1 7bba87c50a4f16a4f9834751434157174fcc2ff9
SHA256 2e47328d1b3db6f3aa2a4ab9bc020f82c3738e1493aa74d4d661512f0e369f40
SHA512 0608de36370650b55e4b739bda1c1803f9b3b11a192894bedbb84c97c6e78a46fb77abd45e17e65aca8d88376e86bb671c30ccbbb1f249bd95d26b1b2fd22aff

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg

MD5 812abd94f14e45001711e95cce741320
SHA1 83898e69fd1d9a776f573d4411ab698410f4ade2
SHA256 3bcc3f4da630ff9149cb6da290e43a50d2c5f94ceb9d99dc6c7e2d8ecbb79db2
SHA512 09dcfd21049b87f83e5fb5cb37d9057b2bf21f6ffb2528c3b09098dabe976e729e6c3906548db948dd2189b520d908db5f99b61bdf3d9827f8eebae95f7c7a1f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg

MD5 d90c97ee43bc92e7c1d7263034d61679
SHA1 3cfd4de109a8d04293ec509c976033e94227e4d2
SHA256 f31cf310b387faa378c7cfea1f64c92eaba71ebce427fd12195fda2ae01d4157
SHA512 f6f284c21ab65be90b2edea33239535480fa0c9644d2fc7e71cc695126af9c60e342ffe2e9591c6b0eff98d8924a84e9d727604621ce875ae5330174f007d1b4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg

MD5 9d15ba5bd3738a706712024a46d419d8
SHA1 7c444613e64481a581f5566e18305fd53f9bcc5a
SHA256 48e628ed0779e07b5e36177e8a745590a78ad62505ba0958842c759ae78ff213
SHA512 34a295d79b9f34be3861012beb8a9900c7743eaeaccee21a64eef973f737f988f66218ba253ba44ffbab6c123988ea257b7484022bea6a607212c18779a03c28

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg

MD5 39b91ab2fb2a515cd2ea4d793bcca358
SHA1 5130e6bc127e44ab35970d0d66c0eb13711dc6f1
SHA256 bef003eed266ac5185f1b470d47738b0bd5783e5822b7c0b3055b3f196869063
SHA512 8ccc0a58e17d25b02db2a910f1c79693c07939388b1c886ce550342bd8e115317923ef667f122e084f7b81ecbab2d8d5f106adf7dd0e71bfe8687c438f67afc1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg

MD5 8ed5b8781574a6b98f8b24374c94dfc2
SHA1 fbf6a8e1021dc5e738381b5a43f13f1b41aabc27
SHA256 abfdf4612143539c9cfe31af666ba68129b032e3dc708b0c3082b369078fd713
SHA512 a6b42d80609c9ada134dd238eef5e8e8295ce5959b8cfaca54ff5815d1dfbc69c28c42fe4df34f877874f7f76286bce02e763364279aed197c790aa76e9ff2b2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg

MD5 b6cce3b89ccf4148d946a7e182299734
SHA1 e216171fbbce0ad758ae5912e334cbc2b04bfce6
SHA256 044d27dd2ca4fcc48a6b8c996ee979433756f179223898a9ba687d28b99960df
SHA512 a9c56315dffb751d5952c3919c45d855c85fe4d51a307671fd8dd910d55e4f3ec3e6dc666d8633bd0d8a47d1c2ea029653a8e9226c10c0478306d27129f87620

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js

MD5 e96d594dc8d6026cc043a10c48bdc206
SHA1 0d3151452bd8d481613574d5935f2007fa011951
SHA256 4a4c6fa9d08c0f4b62e224db7ebe825ceb4b237308bc245c4dab6911426c7678
SHA512 f02abd878b22483055c2281cb7544940c3119a019bbf5b36ba1ecd24b88da29ebe64f1a1137bc524862a6390707e3ff39203530250c4a96bd23168ddb65e1c6f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js

MD5 34bcc272f3e2b8c9fbc37fd352aa6bfb
SHA1 3c44a538a562919b160c933ec5ceec6a37e9cda4
SHA256 e4043df8f10e789275fc77d90075bcc9f49bb2b51c37bd44dff031cffb6ec00d
SHA512 374e436874e3b1823a7113461a120a13a27c8d0ccd23f6caa8cede882e4b6af0bf091aa1e5892da7fe198ddd88e7d4d715a7e1e5ea7afa6f63e3bd10e11610e2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js

MD5 6c61c5737562cde01fd3c43a306e95b8
SHA1 7f3cf93661456e0c7871c41635a6c58f3c77e765
SHA256 f093d096185b8c09d7890b41f0ce85c5b8d186e974da7d8730b5aec57b86bdd6
SHA512 34253409f4d414f61b7c0b4976e99e3e6df2bccdcd9a0c2036cd19ec16479dea0ecd654f1634ce3ecf113f858ec5f17a5040158261d35a07370cbe2bedfebffa

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js

MD5 573174fb1a086f98f3db4e363c88e3d2
SHA1 639a68109321da5f1e9974e6be3fdfa634dfc432
SHA256 4c7f7ef53e5d921b7c93169831008b3edbddf68b7af621fdaaf116992beb7d32
SHA512 772f3d33033c612cc7a5a95dd34cc3a55f661201f24a87a2b29d6211910314540e7c260607c3224c87f3ba6f0838229542bb9cb086af0511f8f15428524b274f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\[email protected]

MD5 98a79d685cb59d67cd6527331f5a1807
SHA1 a94b42293511d1e0059ec14005bcff8f1e2c8c6e
SHA256 5636185a3c0cb18be94027a09b18aab5fc0ff11424b14f034921be8d42aec1ff
SHA512 b8582745074fe4ec30a58dff5605119c4df858f3ed1150d7c662c118888b9a5097807fac2dc79a93adc2ddae7f683ac8597e80c0b618b75e2d51e3d8b1809e50

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js

MD5 76f2f48c206c0f7c169dc5f75cd92744
SHA1 6d0a3a027168e9fb32d5e1b2d98a1ddc8726e7df
SHA256 cc5c3c124080828e9cbdfdd2be85adc92dee99313fad9119c9803c8c830a6690
SHA512 b927371eed21ab37f4788295a6471a351bbad6c091dc630549a34dadafbbb944cad9948ea4efec59148d025d7804fd45a73814bd56344b4a1ea50810755667b4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js

MD5 39d9a4e3cc4d76b8f52db9cc4679a9f4
SHA1 7b9f7142fe723d23e5e0205882b7fafc407b0729
SHA256 aff7b79812ff20a878c52372029e74f1d34391d909e220f17b7eedc2eaa7666e
SHA512 39ce37052ccd89b783219c908c15f2e504bfe215df2f724de77182793d5747f3e1fb6063a197cccd5112a6aac2137bd1e05ed1f35ac48ec9fed252440f4c7aee

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js

MD5 eda1aa79e4cd397bc2989813dc4d7f17
SHA1 9ca3330c1d990b094b25ba23d190a5f92ec6f904
SHA256 ecfad28e840214ff60faee33eba3daf5f296ba1869f86a3aa705e8b94f4847ab
SHA512 2d495781d612b52d17a123a83eff83bfe4b73fc02834da0f7eaedc1262750d212e0cbf7933bb6f756a1a935836ba952eca0365a158c8045f0fc56ce0aff67507

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js

MD5 0742e989939e051795c7cadedc7e0006
SHA1 a856bddc23d419da0db78713e8bd560ee7870186
SHA256 338d5603e622a89e82e40d20ec6f04fd0c807bac8c751b677507e5e09ca97d9c
SHA512 4403476d88ed88194ddf0880e49462e3e9c1ba88e0543b288e30ffd887b2b4f0c8d907cfbcbe01be3f1fbd85d2800eddd824a51e19bea707cdc3edc56aa82be0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js

MD5 e79f17997f25a4925cd239ceacd6ac62
SHA1 b757fbf459d565853a1b9a4ac8fd0846851a1e7a
SHA256 3a73e3d42046d4394cca26faecc0d13729c495313710981c3423108a5ff7194f
SHA512 70da1c416eea8e1f494f3f7c9297d42656b5c66368c10837ce59a58b7f5a8a4c8c163eb10df4d8c00df3ff5ed6fb256e58a8103428bb6a6632e5e5789149a13e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

MD5 05ee5b03a7b511109dd2d3077659c280
SHA1 23efd14cdf4116ea87c0bdf883382ec255bd8edd
SHA256 a5c5c55c6bc9628a36780f6116fa4a41a0ac87f1e8acfcc95426e7f6aeb497c5
SHA512 944f71a1c17ba0ac236f5ec3de7f923c5df173d87a34df43c37cb47820b0ed81c197e24c88ad6ee775b10ec77d73851bad5fedd6f626b12d5b7ef4594e2912fd

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

MD5 a70b81b6a18676b3000faf7ee31ae74d
SHA1 ba38ce1ff024e2598ec44e4a96d2bd606c802ae6
SHA256 2ffcf93a5b6c108e894daf7f4b190e974b71e5bbd02c8ce5afadb76a347b04b8
SHA512 978c858cdfc8f5a8bfdf41b6b401b879519fb66f76e57e3c50f51bb63f20ded002b9f890138d5e000cbc8ed853da6f83ac669155aedf6e55c6360b0189e354db

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

MD5 42ed5f51299fc0d726753ee7750e9451
SHA1 8d1ec8a783a5fc2201692372b5369f1cf181b766
SHA256 08df336b875819dc354498f7a0630e4dded059eeefe718c66dcf7a3535ea689d
SHA512 cb8a10a6df2d7be4a25a3f209026b49b631e80f50edefeb70549813636fe40f02e3c0c84623d1361fa4875d0e0cabed79fef388884b1e618625a2c1ef2c83b42

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

MD5 7fee072983014c0a8b3851df082aa83d
SHA1 2259eee62277739594639987b1be9bcc31bcad02
SHA256 07b0743a2c1c4313635fd213a17886a927410d38526c5c518dbffe537040440a
SHA512 425ff335ebd899b0834e3a281c52a9fec6ed568d3378f5dfd7ec6aba7e1b12bba30a0180c40cea6e6bceea34a5c8fc23a70647eb4fa6f4bddc107a00592f760d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

MD5 3548b69ad92eda6fd2eff2bf60e4edb3
SHA1 19c7d8a4e7d7ed64ea96ba51d98447606ea1a2fa
SHA256 a56aef299c69480c9b6e92ed70338e24317cf3bf459a0ba7802e2ea44ef2d2fc
SHA512 d5db66a1c6a8698ec5e789fb33ff2ecc4b1db4e10da44e7867e102ceb1cf725fae5ac3a38b0c6bdd5d8caa03e6771ce2f74d0129eb67a55c6f114d8140ac13af

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

MD5 eca367cd4c2d529fda4bb4a54d082875
SHA1 b18e0b34560c59620e647e97f3ea421235606985
SHA256 ebe1a433de6a2aeb45874b4c0da7f2e33d8b6dd8fd4c0822e6d258d39b082199
SHA512 814180afa404a315269a26cf849f066b08dada79c8c6cb985ec46601375f6354c212a16092f15fd9181ef602d99a0f73261a0173511c6a3c1b9a6a153ae147d5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

MD5 d9900a162ae7a902dfb4d0e9f4058469
SHA1 c0c50db5ce530f71f66a2efcfa5345346b38f60c
SHA256 d3b9a4e1e3468e4405a009e829530ad8450c0001d9d1013887524e42ce96ee84
SHA512 bd4f389a19a74236f1f35b7dc9b4af1760ee6ca8bd2adc4454e185ceae13af085ee800469038378d3434e64e820593f66c76b3f73ec2a0afa782efc95a3ab75a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

MD5 cc44d502c0a468558bd504b1923797b2
SHA1 aa640662fb6c53c54025d6cadb0fb7093551667c
SHA256 72bec1d2ac98c605fdb56f2785de489ed56320990814d5fdee73fa2ecb036522
SHA512 8c75d2325b92478c2bcfeeeaf2f445d830633ce9c38d82fcca8d825c5362fa7de825b65a10165990430339eab357c05e38b50ff65de7d83567e99acd4a19a87d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

MD5 41c8c214d6108fbc7b21522f4bbf6b7d
SHA1 4626c768d837f322e18d3458d71a078e377faba9
SHA256 788b49901d150e3a306375eaedcc6b81558242b1d2d7ae0b5b562c8a3374a354
SHA512 7b146171da51023c1e238c8628ea9dbc090b74227812f986bfa826fb53f209a297303a157fac1c45d10dd2a9d8dc1194351a73684d4636f141e265eca8ee2890

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

MD5 412574def8af8203ac5066aade7b994d
SHA1 a8717f3932185004ceeba7c4ae76acf49e4a35f2
SHA256 6d7b434f9322f8f0fa703e2fd94f1be1ce703c745cffb8d3af1f54d08342a390
SHA512 93522bc3f9d4f67237992e87da2eda186a4ab4c97ae02c7cbe36bc52226723e38411bd77ecaabcfb36d8ee47c44517ad9f431900ab11a9622cb29a09356eeb92

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js

MD5 06a56a69a1529817db19f658fa6d2c3e
SHA1 ccdb4251ded920a8ec43f8519aa4430b839d0d0b
SHA256 6de3337661afeaae923cb8060e8a1a25ac9969db5770b52bed530773e2bf2cad
SHA512 0a1b75f7d7c1b5969822ccad90cddcabb3250c7d28baad2666b4c56e8bd590eb11d17ffa82fc9bb3481436b217f47de10ade262050bcc576a1346b280d8974c3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js

MD5 546936978aa90f0a6e0732bd4d587938
SHA1 7a8de02a9fcb3072f9db9a663c76a4222d96acfc
SHA256 bd9c04853d9e832b90e3fa613edccbfcb0f90d573c0a4a17c9bbccdc16236700
SHA512 6f2363cd8857ad975cff78c4d78380993f40107bc82c1054ae928f8fdca8826e40d8505f86c8e4d6f618c4883b36e02ab25a4406aeb52423ad79e60bc321f0b0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg

MD5 f01e1ee33ec7c57128bdcc7618c687b8
SHA1 98f5a3be49a59ba31bad43988ddaab571bbb5aae
SHA256 187226681b76321ce2009fbf04cb0c2ba366f24fdd1e271a8d7501fa953c9449
SHA512 205d36a183fc99d6e2a5216217287182b6576259083354fa4dfec1e43133e4428b28238ef974b81ab7913ac2d28f536b9c554a24c0b9cc8dd090a4cc6fe99439

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg

MD5 a119872de2b1fe7400cb82fbadf13b60
SHA1 7f1087183a41112630e40b1d654db2eb47c56228
SHA256 a0aa2e89996ebe9a3ecbf947198eb2b594c14c3331786bd842ba8479b76ef822
SHA512 49331e41d9a49c95c9cb328a2ad0cddc0c060258878f9e8499621c100d1beca901e4480a04b43d20da0795801653a0de4dc5f254535a2006e756ae39bfda2326

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js

MD5 749884b4da78c7f55b79adaf314b91a1
SHA1 a1ad888e3d091b14dbf38dc586805d562cfb40c4
SHA256 ae53c9a79363562f82973af646030c554f44ffbaf43088ec0536b313d3b7ae27
SHA512 932b654ab463801692ebb0df78064326445ece18c94a3298a01af25aabaa987beaebf55dc6d9ab8f395a9b3078176e3a2133ba2162ae360f46f76dbf79ead715

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js

MD5 e7dc80cd983463fda52b3e5475835674
SHA1 65e473365e66c23306602547e203096126cf7fad
SHA256 a4e0f2f6791c1145713e1e80668adf4e5aa1827f9acc63ec221db8c28a2dd1f9
SHA512 8c92bcaee6007f77939ab040ed0bdcce5ec9161b4efcec7a063666de0d9102296e5576b90f8725bb2abcb18629bb2c3a8791522bad266c44fd99ac990e11fccd

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js

MD5 d9fbf0eb770c2ff178fc8015d3d0a7a6
SHA1 10ffddfa8542f7d430817e1855390400fae0b694
SHA256 0cb08f34482a04c9ce8cc088cded89a49823a1791ec55c7b0ab497722fd135e3
SHA512 f9bcee968f89f025aea4a5a3e8f1e694588554099b85136bba2dc785f59fb3ffd64f3a9403cc8a8a4aad55929b07e681da5d7b8a44d9f19dcb196d472adcc9ae

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

MD5 1ec2c7fba716ce7ec7f67605acf3c198
SHA1 13dbe265f206ea855cc5da893b0ec6ad75b1ec01
SHA256 a77d748c8c8ac5fef534127877dfbbc76c6a8fb6336f3327c1367a6c481b6127
SHA512 6ee32cc211cf04289f9d2aa5581b029343b6788ad9f53306cbfbd40a6a21003bf69f057799151e37a2026b1cb4ea67b25819929eab2dc73c8624632dbba4a405

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

MD5 883885880c79a369846e222d4627fddb
SHA1 de2ea747d8a5d1d281c9a420fb44e25c47b6097d
SHA256 6faf7e5eee789eefecfa99a46b834f660ac011740db8ddfe33fc96c993e50cbd
SHA512 ee0001b2bfffe2b1bde58d83baf7d83579aa2bea05733d549412a1fff46c172baabbb0fc588ea11aa459d0725cd8876a73f2efbe1ff76b08ca9969a315534749

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

MD5 574c0bb443faf7c142d62e9a77a28c5c
SHA1 2aa00af6689466e4716da4b70501e0180682099b
SHA256 11c295c0a05e80ededcf06e09066c8865d248b604cabec4f73c1306eb24de6ec
SHA512 8d5eb5ee324c2e74a2925b168787c0026475809d79447bdc00615b017ff5b071cc2b1174ff8cf2b4045548147e76486b7dc85363cc3e50e8848eff6aa345079a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

MD5 6e8ec42c87264fbebf1307bb0d3ad81e
SHA1 b1e10e77f88f886e755af35087ca480e6c0a48c9
SHA256 517a4715466faf57c15889cdd1af01c1e42c674e77647953f5d63597229e4eb7
SHA512 d0bc988d2989a07d0d4dbf7a4877cb692963ef314fff5b593885cfa63e968d95a82e35f2bd76afb8e8ec458c658157920448afa2ef43f0e35d62040d97dc7105

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

MD5 7e8e9bca51e201ccfbcadd9331001f67
SHA1 4695858d6e0cd18c5f7ed21a172844c314338c5f
SHA256 403f8839107552f81ecf60ac32278a29893f78be6345fffc68fe17ed4951b86e
SHA512 dd4570e935403d90fd2b211f59f2ebae496bac8949af5652e07243af13610df473365a733b9dd192a06ad6cc5f280c733afbaec9c2f223b9dcb6d98e16cc9e86

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

MD5 1b08b697e03a20eefafe3a0bff4da449
SHA1 b633b5e707f2c2e06a7657d6dd7be10fc7fda12b
SHA256 1c7d62dfea3e2805d543a58856d029d4c6dc986c87bdd1e7beaead7a7a434317
SHA512 1d84435b68ef89a8338ceaf5ca3f6d7677241867a527491757c0a3b8ded52404cc3d5703cd4de39d3eb8346c461b16adf4ac0a838f0fce0fc2217e8f3851ae23

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

MD5 593ff3d5e0805020b4ae812f644961ed
SHA1 66d6ca43f743ba7537a19b4f81e719cf47080fa1
SHA256 da1ad8815c82947515161428fc62083a92a9287b68bed0ab041fce437d4d1c8c
SHA512 8c3b7349475b9001e88fd56c6b6730fc6420c83e3d6df9b2a7aa38f7eba2e35767f9c9f56b92a2bca41bed53137888c76515a42a1c057e1834e9f54de0711f73

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

MD5 786c94756d352707b07c84d0d42dd654
SHA1 863056a42a1c03d6d98c634947df8e70726daddf
SHA256 c50c79daf1023f8874bba8dc9a063e2835b266ebf0ac2dba6105fd6849626b73
SHA512 8d45a44afd5f8311fa067d975ed51c79cd502e08a402d43257c8959c2407caedac7d73fff2ff84f9618d0d65db8d82c9703d4d78929d42a874df81602d15da01

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

MD5 071e5ac952e3be659b5b13d665eacd72
SHA1 a679b8ea75f29d83d3e4751981515be21ff27aed
SHA256 fd6474c8518c75761f186ac7c14977382fbd3c09529722277df81d16aa368937
SHA512 b054e71ebb5c00bce6f4c9ac618f889002d0c4943b1fd7b838f6876dd06cfb3829d5ba1d0540879fd5c11ff9f180aac2c46a90baaf5e32a9361cf7cfaf84292f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js

MD5 4f8dc40a1997aaeaaf1d20a401bcf910
SHA1 750ef664d27619372f6680207e9d1fcca1b14b52
SHA256 7f330dce72024acdcf8fc16d66f23cf374f1d16f42299cf2f2493ccb557faa16
SHA512 9043686e307b09c7741a9cd98efea9110048f3c1972c4ac0041c2ff577dad1839df44c0c4567357b041bf9d16dbc6035453fdc5f66075a5e32d831c71143fb64

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js

MD5 bad0cf7c5911648794990c8ef7d799a4
SHA1 20db8e36cd6720f78ac3084ce8d89726f40ff18d
SHA256 c5be5f78736855c6a9ce165c19fec7abee95571661be17183fae6007d146ed12
SHA512 e3a5d2ade893e61f8cfedf1dde5e16b9c2efd7473c06faef98881c5ce2c67c15570481b1d573a52423f04a9dee6b26cd96b81fce792851a37b11d530de842764

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js

MD5 8d8a391344f2776a4c6f2f352cae3e87
SHA1 0497b63f486d5eeef7d57a134da2174084426b39
SHA256 e1bb989b0894960f1b7057ccceaf01db53070c81961cd9cd9f3d5541b60e4689
SHA512 6de29ad9f3aed198dc67f83d0ce885455443ac5ffa572930bc72079ace97e8d123c2e8499a956ad30769e145dccb84ee6ca6d4f07c9f4f65f633fcf626416a0d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js

MD5 62cdb25ae05464e6fbc771d1069ece64
SHA1 5a3c966b55bd02c1f9518754f8b1793b7edbbcc4
SHA256 4a9e98baf581d58f2b0389a792df248ffcf1a00907f23d2a27993fc50850c090
SHA512 86be656789d5eba0b0f95f30990850a86fa8ae15217edb9f551318734c4bca3fe339b9f2b5300b377a320762983f54bf82cc2ba6b043facd230ecadb8ee1cabf

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js

MD5 bfc13f726021e9666b7ca4d30580ec79
SHA1 5795db6096c255f9bc0cff8a91fbb956afa8e8d3
SHA256 783aeb08853af423df350c53e68de842304ce0d1f74088e8ca3b3973475001da
SHA512 08df20e2949e37c91a178390373c063e920053c0d872b282efb1032537c826957a53625d2a794867b9ae2e12d8651c23a13b046ad06c91748a7f550b06029123

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css

MD5 8c0f758fbf3ed1b6e3508627f560b0ba
SHA1 975b7ae07e9d6575ff03d2a994fd8ace620408d5
SHA256 fe1169636da073b29b886afe2f07754dd86214afa7aaaeaddc1c14b4c0afbed0
SHA512 dab7d998d32705b0142d95522a6ed4ad53bf7dee67499ddbdcec8b598a843d7bbe2111b91f22c3118ff3d8b0329a7c432f59823d00686875fe4f94b02af3af15

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js

MD5 89cc7e9ffa2b782f261440532ef10850
SHA1 472102a4e8fa00b44f44d081864b11504675c400
SHA256 ced95920b6f505119e79b214d2907de8c373e43c997148da5a7220671d57a930
SHA512 2e78bf5ed450e7301bf3af9ae178fa1906c068a4ee574b2356a72d4aaea7f180302a06df262baf6ee09c665535b73e06738ba2afc0f2b317fafb08d2f6db1d78

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js

MD5 9011357182c1da18720875abebd00185
SHA1 2683b1b3fc6853e2b22847d83292e79f4c705fe0
SHA256 73ad03c0c285776a59135873ce4e634e1a97da12a4480c6467e37d85c024f0a1
SHA512 6c9a78088c8ccac5ded35ec04a7b40acc28162e1f300119d411a20c8c2a943f8917d2f3a02b096ac5b58ff3193c1c578fac624aa462f924fb9c2563935983f04

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js

MD5 6b5bc165a8bb9c05187b579e8daf90b2
SHA1 9d02204325ed5509884065509adb058bcfde9ea3
SHA256 e762eddf118862b4c8f3b2d05703bd9c5912b7306ebb5333fb40c4a549843ced
SHA512 27bccf028edfbc2d791ba5d1131994fb717a1fd5fe9ba7d6cb7828b44690b37ea9b7aea0cafbeb30b94f7d05bedb3529cbcd18527264e305876a7dda0abb8b80

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js

MD5 72e755a8290f90bb6deda85a4d0fca16
SHA1 344f86d3a67aef3cda06c01e2cb32eb14a55419b
SHA256 acf6d0c68f3fe0d7df076fc09ef99018c6ed814ddb8fa60aff3b8117aec83946
SHA512 69d9da6042ceadee196fc3cf947db7fd72681e4ab2b0c290c364e85db637d3a6e2a3953a59508ccb98868c69e625f80ebef1269722ad8b0bc4c32783fa06692e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\en-us\PlayStore_icon.svg

MD5 4b0b2be0406fd39177d47c903ed551c3
SHA1 ce2eff217f11bc404e8d6c630f79cb647315f447
SHA256 37581b3862f18d0aa36b87517aeafd3e47adf3bae9ee5e450aad73a5ab7d5393
SHA512 fa9cc3cc8939eb8959f445ed27ac99ff03b24f04dcc7ef51fce74f25031583bbb29042765a516bc6d6e9dc0d2a7628f4a03137de3e6bc5a4ff3d7ef66284a111

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js

MD5 d37e61fb8256f81658a281ed3f372d41
SHA1 3b856f61c30fdf7774b144d072a1a7e7df1782f3
SHA256 806dd96e6c251f8b3afe01a259efced8eda0b9960b268ceacbc101a0e1dbac4d
SHA512 cc670865c0407881e7784b1127273d9c02e41570fea36f0908b6b06afcb238dccff340d95113d5127e1ee16b1b40d7f5d72fc265ba0ff5354201c68009fb020a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js

MD5 bc5e7a6789dff5788d09f944ff817cb9
SHA1 d82f60a84c11a132fda2641082df5dc872440a58
SHA256 56cf87054e5da39cc61df862238367f3dbc807fad8956142da767866746a21ce
SHA512 72b013925db18c05122be3bf73833dfe6b1faf6838f78e0942e80b1cef1af2b98892e9f32197d54b165268b85f1cc0b2d0288c8aac177fea54fd5044be83738b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js

MD5 876274e9d20cbc5d9eaa8eb52caa1a17
SHA1 b2af3da8556a043cc93ba14c3d992307ccd18ecd
SHA256 c62d8100a25009145d0436b05267f6dc543ba95592e6c9a9a8ad66decc97dbd7
SHA512 259a46daa5e25e2cfe63a6fbab4e38f45bf6f31afaa008658d676022986a20a26e81924ec59f5640b45fa14cc7e16f11ab0031e98866ea2ad1a0d1da9d2effdb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css

MD5 837a593e84e136ed601c0debd50ff7cc
SHA1 a35c2860d50b2eb75d3337aba72882a891914a26
SHA256 2f91ecf3b84921337bfb2b9df0f35f404e2ed057955de1daad94f404f6e922e9
SHA512 7ca56e6d455d672428bac2466368524b09d7ff7ebea390ec8e7f6a55f7676a4eb0912363fa2c268085cf96f4618b0def45f5fb077a0f8b406fe5cd0ddb4ddeb9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_de_135x40.svg

MD5 d3f011d6f158617bc961ae85b75c9885
SHA1 f28397beb5cb50df6c797fa9b6c937136a5fa734
SHA256 091e490a4c3cf5d74397886d51ee72cdee3e7cfbc00ee231690477f3e129f7a4
SHA512 f2a08869110d8c24b1d8d10fa2dbfc3604fa7ddadb79fc7ea9e3bb92c00f18442d7fe64ea14bab5222a6ffa9b3aa97f28ab91d257685df7ff7d31be9edc181af

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_cs_135x40.svg

MD5 017289782cbb0fb358ccd02e74c8790c
SHA1 26f3224551070e18e3eb90a15fd087ec17f3ff8a
SHA256 35d2648e652220c52b0d727abf32c5d0b30670f295529863dcd166ad81b84a0a
SHA512 eb09528a7791e1f57f945097296b16dc4278f79352f86f3fc031b4b437f5ba38e468572909f2cfbf8933456852fe818758327583db05bd665f55b4f297f96006

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg

MD5 e15007ec9336b6f32f70a44760b95aca
SHA1 34ef7270a6d515d8d2431e6c3d8b6d7d283e41d4
SHA256 8322768351cc23a64780d59ce1af26da0f339acd512563c7220862cb765a5fec
SHA512 38c1499fd71ef3d8a71ac5bf17b4f035b484005fcee73b1fa860d5ffb7997efe24f104b686f5659b00bdea36718e8f01636f97bc515dce67660c0b94b9f631cb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_nb_135x40.svg

MD5 1d9a822c4cbecf997633a84cc09afb2b
SHA1 33ec18af0cac5e7f0fa433c8470f1bf24b4cbf53
SHA256 b8dfc0517578f09079026e60cff3da7908d2c68022b776a415d2293f3ee85d44
SHA512 3003f2cc082c7edcea62a172bb9f7ef67bb58d9540d4a7f4c1065141c88767290a0c55de2b903bdebad2fd52e28eec47bcc055532fedb1cb1a76016f477dc79a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_tw_135x40.svg

MD5 0dbe35090bcc050b3e3e47783529147d
SHA1 b3df9fafdff4c398bba75c5f8d8a44b18ce2b806
SHA256 de91f64e2d801262f73349669cd304fae7929343edeb96283f62a4170d34d292
SHA512 7fff727e865b6dc46c04f3404315a5b1e058024b74d6dd768c340de8400534246042d97352edd84206bcb77bdf9dbd06eeb0067a9d76a4c9133ea262b0542dd6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg

MD5 a2c94db8c7c101e15fcc1b279e4ac4c8
SHA1 18e7b1c62c1a56a3e58b5e1afed106a53c6f4d89
SHA256 e887eb27147e3d3687cfd7177a53053f5ce12bf735c9f1c098958961c440b7a0
SHA512 68d21eaa3f41c7ebede5dde7d3458fbd966d192078748bfe23201a7b1255a3ec6b051e2ad2c86a8b923ebdd609ff71de42e8c45d4c7933841fd7bea055eb5c57

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg

MD5 52546c0ee9bbc4cb8c5501b967c7d8ed
SHA1 6892bdf8ec90854593edce5cf30743c9a626928d
SHA256 dd4e7dea7722dddbac55267918d10a35f408e11b7679336ca1f8b48036b8139f
SHA512 609ca4bf37b01567f3ed1e8d35e1bf62fb240b433e36a79a013de787b95f0067c1b8e9729f930cfc02e4b7983dbf75996345434b5f17fda2151016682ebfebe2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt-br_get.svg

MD5 57f27ec55674e43b47f032a760aee47d
SHA1 330d959fdf0fb66ad41a3677e1bd3875ba182e86
SHA256 22bc9969c6cbc6805dd65bb0ea8056f45821fcd02306cef10fa6a2bc60e817ef
SHA512 25c91c2eff1c0eebfc27a261bbe90de20cc8b671997e45cb2aa0af74f96527e9c19a91f9363de56515eba82b9bb3671a53f924eabd82569862279318367cf077

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ru_get.svg

MD5 d2ce9c3bdc67ac52e478da7b3df06885
SHA1 14543f4937a061339180ecf00de32d6174220c05
SHA256 5eba5e0b231536239a498868fc9d2a4a4a956c4e583927f1cb8ef0b0ebbb7d08
SHA512 fddb70751022dca9ee61716471768ed0490c8393aaed0819d5290653fabd64018d3ee4e05e74ffbed8000a34afe03c816a9253c65c86c0c63b83771e602bc310

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg

MD5 3f2bcf86b638aa307ae034f6a88573ee
SHA1 cdc1bce70be62e93207660a27f49f74509257e5d
SHA256 662f2445906a8fe59ffc4bd9aa5e0130d6e0975b9b3a5c21a517a0153d0dc558
SHA512 143c2825f8862bf8a4d1b266de746a3ec7bb3bb16f82af1654d6b5981f64ba18b52ccee7bd5c7999eb68f2dbf4599dcbd732d38c1b48f8347c2ae1c33bf7fad5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ko_get.svg

MD5 de0654cfefe45604d5f1b3088e825b4d
SHA1 1724e946547602a2ee414504209f70f7fdf7b3ab
SHA256 051e1d1444ff22c6cca6aeb54f7e3c275cb0e42908a6c59c67320df958443977
SHA512 28a6f99ec4a20ecbe4c6dca6f5a83666eb9ea647fd86ea7d8b958a69eada48a45bb1096d82464c4a366090e6ff2443b50704df141157fd4baf5fe4bf2939cbf0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fr_get.svg

MD5 c9b3cdfd134e79d6eed8a0fe71bd22c7
SHA1 d17ff4948873d2461d83e6143e7f769392f45b0d
SHA256 5eb9c08f819ca74cf76e65a0cf4ddd1a3395119b594306739a16251229e0ffe2
SHA512 11d61aba473fddcd3f1946498d6bf631c27d1ea496b7522d3ef0c6826c3324f063bc788fa461dad0bb22f641a0c7ae8b1577b30884edab3b541b0c1f32f6656d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fi_get.svg

MD5 70958a3c1b06b69b5765abc9f59ba353
SHA1 2d471dbbe54b0ce746f55864a6f07f5a2f0c62d4
SHA256 51b857476dc4ef7fba0dcca34a3a28c6a47886dd2ab0be5f62ce82df4adb4317
SHA512 f7345d309ae0b9d14b0fd31404cb20cebd45afc2592afbdd4e09b77e63d36516f7554938381096d48c2181158055b168f2c1a071c38b00eaddd8a49ecb2f2587

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg

MD5 be6b86d0818d2845d19fe8decaa124e8
SHA1 0110b2944b3b2581497c8679470751d08c919240
SHA256 57cd62e995e1ac4a7814bf04f77ea79a97ce2cbf50cd21448aeb751e87c9de98
SHA512 f05a6e76e213af5b1725d589654db73227da8456d29e28aa84463eb23e6237d9d6b82d065fbc35bf130da0209d606dcd8be1f23a6c965029017ef0740c7948f4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\no_get.svg

MD5 5a36892ae6382a3a7b344e38b8ad9a4b
SHA1 8a256add0ab510e8934a2a666ecff6117dbc4f5e
SHA256 4dbbc10b4c5035732859651c5158e9a36095809436a815b88fa6d38f4db6a919
SHA512 45d53a411a8d8add741e00d3ad7365a28d10ff7a968b9254fcbab57cbff235667658f48aaf7aa21d37c6ec099a981cc6c8aecff76f97f256932911605f60486f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\de_get.svg

MD5 520896a7197a5dae467ab1185d8149f2
SHA1 b011ea2969d0855cfdc4cfe74afaee2b232b0bf7
SHA256 44f76ba169ffb0854e3129c494faa498c03b22a77c53d875e740ffece4b179bc
SHA512 199ecf472c3e679cc212453312fece95cf1c19e76c7817e1a3dc9f72d92d19499a9bd893706f70df9e0f1af6251919286597215668915145560bec614d8881e9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg

MD5 c621c907aac5d6f7e2533a58469c5708
SHA1 d6e2e190ec47f3957a0468b51936ed038991830e
SHA256 c93a3d85b45edcbc1ab3cb1739ff27f70b9905a99d875bfdd4a55fbf66bdee18
SHA512 de47e6808ad40acba91ac745b23ab0fda6e5eb20129a8bfe3e7e2614940fbce00c69522012e524bfb7747ebc4f51b46d2e95abab9d4e3eaa402d48fd930fc13f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg

MD5 f5fa086aa4fbe93a43afbf5c53bec7cd
SHA1 ba53f89a03cfc231bd12e6e8dd31d5e02de1d6ba
SHA256 2875108157991f5b227131e1703a4e85cd8e9a36fc22fd319af407e2804fa729
SHA512 c8d909ac9b88b2f089f0cf7102722c74ce64f8bd6f1cc7c270738a6764b2aac07cd277b6d34ff21831df7d08f1a5fd35b55536b5e92e497fa58ef64f68da246e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_tr_135x40.svg

MD5 82490778e44413ce407b8225428787b8
SHA1 366487154f8dc5a116b234934bbf80e80d06efb1
SHA256 87c875794ff21628a1344bc1c19fda7663ec37c181060fcbb5bfa4295ed3ccf8
SHA512 6466e5f83ecae2302e441395383117e81803d5f47d2fc9ebdae25e37f76b6aa1a68db1bec000b7333faadb226d5e99dc1ac54ea6d6458d819a82b005bb5885ed

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_sv_135x40.svg

MD5 185dedd7433798f5df91b9a60b94ee79
SHA1 c131d34affac656d72120e60b13388ae16098e19
SHA256 e2786277f47be8699de3259472d7d62dbd8f91c7a5cf8f45933c6c48f85c08fb
SHA512 dc799f9f11d944ab52566333fb029cbf4beda6b650065566ed08e943698ef40ace327f9437f1160854da176b78a52abf9aaa5ad18234acb751c87bbac78bc602

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg

MD5 5336787e4a539393a8e543320cd4f359
SHA1 e4bbfdcbdaa70f6f92c162a2930f76e57697a089
SHA256 abc6024caa154606b72afe9b428f2b5362d109acd70798cc5469fa0ed54d46ab
SHA512 ad40a6c276005c4ccf0678c958b1db15f30c7bf0a72eac28d8c3994825c875b026f0698b0a98897605d314655003538824b342c64bb16fd74a433a9f13bd574a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg

MD5 732606c41e129322ddb8a52a839e8362
SHA1 02a4a773d7fa5bc18737a7b459a6390a9ef78d6b
SHA256 223fbd614a3b2aca958b054927532054ab3f2b87618375838a2f367c7d5d99d9
SHA512 7495caec6d1f3f5a43471582a556923823c64df9b5e002dab2369c81d4f88ed27fe3e227fef40f209249518447fdbd375624b0b8641716d0262fc093b58ddb31

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg

MD5 60e97ce24d968ae3ce45e10eacf888b4
SHA1 2af5ff1b13a2fda5d346926b44e03f4c7f6513e6
SHA256 8d1698e0536c096fac366d46db9609046644cc45c2f958234a8d43669996db1e
SHA512 5bab84e890a09328c832b8f9114f6ed6f029578c2fc7ee11f0c95ac55a70befada3c24e757aa675fc1fc4cf1c2605ef5ccc5b4e17ac3d245bdbe80be248814ce

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ko_135x40.svg

MD5 a20be21e636d03c8a1e234ff7a26224a
SHA1 6ee57b3f1ef66f06c4f66017a48cb0b933ede603
SHA256 6f27be0581cc9b41e01047be3f2afbf76657c1a42ff495efad37b517bb17ddc6
SHA512 512c563074cba66763c5ac2928fd4118f7605cc95bc94701b96ccdf20adf5d2a88e732c380d91dd6808be7e6b8ee3b231bf398d9f16ebd322a1c523a1fac912f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ja_135x40.svg

MD5 f431706cf088130ee46947b962c62ad3
SHA1 0f61f552a889d69311a1bf284438b87409c8ec62
SHA256 7b6d51501b0e3fb8366c09b31d63ab9a15f0f3c8938fe18160d5c6ededd25aa9
SHA512 856e0f7da668cfe88dea3df756b15979f3cf3632092d30e0467d16778af01dc1144720ffae865731106616346f75cc494c476b0e8bf2b9716d68ab69ba014798

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_it_135x40.svg

MD5 d2cb786d93487d345ada2c642327244b
SHA1 4d7458ef55f2e5bbfea09d37667884b3a6684101
SHA256 96ce525e337881cc0283d1e4906eaefd09b73bb238510db458b0cbe6f0718bf2
SHA512 175b8dc76640381eb6c0d79837ef4a7e43532a5dcbc82d9f01b91edb6e6d91288b7d2c47c339a1392e060c7d0b1ee698ab994572ec004bfd0c4b6f03e87f57ba

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fr_135x40.svg

MD5 e2ccdcb8c488e9aa018e316fc7994e26
SHA1 60d1fa59d277e986375bb070420dd48f194b4412
SHA256 ba073d5f04a67def82107f841a7a779441086763728c4bf7cc2c9dcf3e46f882
SHA512 a7b07fe1d6f2287e58e999927c51458174e96a8fcc4e474a13a20486b0c8b3c7c55d932aaf231e8ae1deb5bf7617775055202583d9f9635bcda6308285329c14

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fi_135x40.svg

MD5 6d9aef8e9f256fddda7eb12a7e0c74f0
SHA1 a6bc2aea323e56b2064469548454561ab1389b56
SHA256 c6dfee72f2b7e8c5c60469607628a0cf4f3b454fc65de9db13ba1fef02aebbb9
SHA512 93930b2b0c72ef4e0c6831efc77ced918a1332e93dcfd5a66fef87c348a10bda2f5cb321bf03fd6844742db5f4a5f941eacf7848f01ead0bfbc79e15a2cd75ca

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg

MD5 7a4aae1e6323ce1d74e82e2a946f8956
SHA1 a8e681e3add4064618acd4ec9a7249319f33e4cd
SHA256 4bf14af0760de62e1257761db885423d80aac3d96976c1afae49ea429fc280d6
SHA512 ca12048ae270a4204a160a94f725c006d57e86f350eea9d2cb0f695ec13235d99971a17f414faef8e7d8f26b6419eb2b93528d56f084b8fc2a73d17d623a1f53

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\tr_get.svg

MD5 256ea694582650cc5a7344c2b3337e3f
SHA1 5aff9fdfe2bc4909f57c394d6b5c80a191ef55b4
SHA256 a8aec3d4821862e75b42dd94d887525892caa2d8143840a2827fbbb742c9ef2c
SHA512 72f027bf505c2047ce25760515a559a7b8e3d11943c98dd29f16a292d5249613c73fe51a930699498c422ce9675c9c0951836a4776aca3cb946634fed9ff2123

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\[email protected]

MD5 5943298c0b2b61edbb376296f305c0eb
SHA1 074ade1d19726e89dfabf53f0d96cdd3ff505ca4
SHA256 42426bbf5fdcf3c21471c21aebd2998743bb3e5137d8275a23f1ac1a433800c3
SHA512 a32b6a1e1a785b49f96af90fcfda3cf4e0950941e90465a9daa5e47f4270be2ecf40b4a46613a0814e77819ba0094a9a222cb5e3a79e58ea915e324e2cc5358e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg

MD5 5b2b57b26c44325cec22509aced278c3
SHA1 dba5f198c68123296e6e333edab2a8e0f560c142
SHA256 d0a35e11d37fe9e3da501297e9ba6e32655c8cdcf3ddaa5f3ca74c548e032de1
SHA512 2be6012d71708b441a4cab71578c069e4c5da69398b0cce42ad8aeee1983f680c6cee3f5f5eb20c745e3e0d9ea24b269c8c9c15aec35cb345f2cb52843f6166a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg

MD5 543e01c942b2e0e383a47550c3df4ffc
SHA1 30a0774726a418536768df347b6bfcc66c5de7d4
SHA256 682f125baea53abdb93acc8a2794212de72d1671f49f32968d6a02c4bcf8c21b
SHA512 e6501667f3f5e7f2ffdc112c279466e866968f7aec25a7f57a794ac993ef02eb0b4930a350c94dc2db2329de009f0ccfe6b0ffd432fc0a69d4128ae7fb2b03c6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js

MD5 390e4589e7be106b1a189660010df141
SHA1 5e1795559fe6ef0c6314930c3f47a3c1a4222730
SHA256 4aa5ca5437b738357da3244550df5bd6fd95deb27751a1b6e98e4084608f15c7
SHA512 2c4d47a75861cdbf204a397941126402b54609daebcfd2c77852482ec08c4e7087c9ab79674034679258720b5f78c6003ab7bf7e77f385c2b2ec921f7a0e3012

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js

MD5 cab0874c06cf5872a6651adc5baf4c59
SHA1 dcf94c135e7b7b2fffe88d65af3ceccfe1484cd2
SHA256 743b8b1e72d43d948ec5dc82bc3732419df745337d2b5897103e295680bbe587
SHA512 d6a814c5a519a37a2aa8245fd456858c674d40dca2bfac976f732ffa5d5ddfb3f4a89c63dc077d5ac52fa97031c4fbdbbc63815a78e15f8fcca55f81f64a8f94

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css

MD5 4b465b56480bb8a648f5b1bc44f6684f
SHA1 7d349bbc444247f8299b69c65490654afc7032a2
SHA256 d458700112e2338adcdeb4e828f572fbadc7fe2f25bfb5bd6f61a72e341382d2
SHA512 ffbaeca4d06e0bc9110eb876b88f2e12098456ebe774080912460c18fa18639b0a6d8e29e380538a64c397dd71270b9537589c62e44686e6b11a7b6c60a7e159

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js

MD5 d7d16cdc8a0a6bd90fdf3afd23c9c07a
SHA1 c4d191be413057725942aba95c349c94ccb27d40
SHA256 a934500c7aa15b21b40406766dd6c4036d2fb231bada38eb696129a4d3b907bf
SHA512 0a535a70e615f0da4bcb99979f149ce90b27132f8d09c1e217e31dab61a1ed5498c667236fd1d0b33dc6a228aa7e58905783b2b7a22522141c962bdb71745754

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js

MD5 6e5ce9d128be0fe9cb9be983834649cb
SHA1 160682d5829362091d44538ea855947e6b346910
SHA256 abf4accc6e67ce67ee8a02bc43918571b0f2d2a50db8708620f54262fd40d7d1
SHA512 7c32dc02b3d97e27c7700d8770e9567e52427b7185f0528a9d6234b8cba9fe5e1791686820ef0b4f17379ce46dfca5ef69384aea9f98997501b5412e523d4b8e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js

MD5 2af839935859e5d99243c950c772bde1
SHA1 6db9d07a083bc58b582ecf29c150d720b99d0037
SHA256 7fe0b06e3265972b698eefc8beb4fcad8ee256c04a0e017b587553c5404f4a05
SHA512 b30024d1357f2a4817ca721c9e232ccba0c32d4737a552104b431d52b9f9915790b986d78eaf6e7935ca642a09662aca0b7a7d5cfb4144b9a973e0c80f1d7604

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css

MD5 bbfd92fb45d4f8d0a40007607bb2c053
SHA1 ccde942e049253f9b05e07f10834e1462acbbfef
SHA256 d06c45bfa12e46bbbbbe3d03490c96f3dc1863fbf43173a344371c53adc23ef2
SHA512 d1db0a12dcf7cb5ec646719867cddfa8bfc6f4c156f7771afc224b6c64c4e6592e96bb6e2bc20b0465be84f642642d81fa14a6c3df3ac78f4104d40405281b5a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif

MD5 8e9389fd7e8164614e3d0e016e92a8fa
SHA1 e9b24da710f9005e0d00d23d7911e1b07b8fba25
SHA256 f94cd279024505946e53464b7cf2439b2edceb00e0f511e560afe96fbec84a97
SHA512 7cba549701f8872216da8e0bc96019a42774600e02489aee37df6780ccd4e3754d2f8eb0d853e150787095f892be19b1ad8077b915720e0b8cf34c2b81621d56

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

MD5 b06a779279ec321d09baec4b7d125a65
SHA1 b32223e61d945ed9a624470f765077406abe7108
SHA256 5031c56c2fde3e8e49fd1f97fe62c696e7e5a62c5e0004f46b14c4b1f493bf60
SHA512 9e1ca8cbecdd63735ee37f6b4fb97bca21f78745fca1b4c1e38e3053e7327379d9208a2dae63c3c6f700613aec0d11e2fe26454aa6a2d3cfb49838aa3ed89720

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js

MD5 808bc5abbf5136a828204f9299e651c2
SHA1 edbaaceef5248495ad9a995748821bca4b231634
SHA256 de364f24ff294d693acfbf16f847d3b506ce9e3d30e20c0192e1828dcfc9003e
SHA512 36d334c3d1e0d04c630bcfe19b45a6e84984988025552a68f3b6d5cc69b870469155373ac57c83970e79151881bea11785ab54d343cfe071ea1e0125a1e97b0c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js

MD5 6273a60cb8a2a757ef8b1f93bd84202c
SHA1 f7e38d60a38d3dd608278e82626b127bf8b92a54
SHA256 de3dc9997b6a9469c74d8d4c20d677413daee8c35aba75ee2626cfff5f15ca13
SHA512 9753ae857a554b7ae7c19a37bf54f31009db50c85af7c539262b76a5475c3d67dd32b0bf884b97b8336af6bfcd68d0707cef52ff907e30bbe1a3c37020cb8491

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js

MD5 2e81bb56f2ca0ae67ae649ea485cf310
SHA1 a00ca8379eef3a8e5a08aa3189ebe875d3fd8ed2
SHA256 3eb8065ab96a4e775c81c0b3dfd10282cfc19c4da49c4ffe3c5f72355747ecbf
SHA512 4fa49b4226fbfc346b984aff03db24f6c53db57eddb2a8ff19cb9c9f8db8db8da7b511b31f9381dc5dfcc8c1b8afbcf5d47b65c85dd9cf94d87c80609fdd84f0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

MD5 eb5feecf7c58742127e8a6ee5794b0a8
SHA1 dd23fd25d6ed4de69966768bfa5829a869164e16
SHA256 b995883899d1cdec14d0f92bbe7ac48257b7a7b9ddeb094e913eb2c2b099a1a9
SHA512 d20b9bcde30d0ff7eeafe731a373c1772a75b3f3c851da77ff02498e9a0a08074703728a78f66e28104b2e4bed27a65779dd0d63f0d622e497d0b2c046bd2fdb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg

MD5 92b4a5e051bcfdbdc3679449232295f5
SHA1 799ee67afbab0709dddef2fd9d33cd3475bcaa5c
SHA256 297915c88df69aec197c2b8f1870e51c5776ba5cc4f7a2c2c83a67557b1fb636
SHA512 28792a3ad004d7f3e3ee405f5f94f6607e15f63b3ce925f03158567e113a3b9daa4cda2a8a9eb437e85aab47d8b75698b04a2d51ffc1ca487f453cbd0fffe3da

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

MD5 2d2c150fc3dc598bc4094a129ae07095
SHA1 dd90f9dc31d73b36f22a6cbfdbfe58475ab7ebfe
SHA256 1191f0c5d010cd28efa892323d0c3f7003c66d7c4e71eab09b9a690285862e8a
SHA512 3185e430f2b320fa9cc043267a94d1f4e66a41553ebf1799209472b5089cf7619ada8dad3ff2b0bba21f4be494e6ae8225ac9bcef33948321625bb609b562437

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

MD5 3a12a941bcb2aae414980a4c0863936c
SHA1 2f2dc84b567e3d7dd201882e92d9b290361c32a2
SHA256 63d0a0dba2784546da314d45f788057e812c489f4e782f8d1a74b653b6e22b4b
SHA512 ba0076b0a5db990a87eb2740b1c663eb1878b1d67ac76b4d2561e4e382f5895eff61b771bf0cc22aabccf6275fda55c937770cc648841c1bc1b4f15a8009ea80

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

MD5 c32966dcee40eaedcdb1d79a83073ee8
SHA1 764a98ecfb0acda913fbb100b17db866afc05d13
SHA256 8c2abef4af649027d30b63332ee2d9443fb61a1b8de0f73876151646b7041b75
SHA512 5091ea6d34a3a294f3651ca6eb3ed0bb0551f2219e4136524f360e374eebd6feead4d9a8b2f486b4fcb6d0b189fbedc36ef3ddfe5cb2ebd453d17986e2c606e0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

MD5 f76ff9fa51be006dd4c643070d4b2ad5
SHA1 d4a9200a84462066a6c54d2bfde793359bb5c5bb
SHA256 bc1d1c9a21196d2c1edd72bc4de57fba7dc7e98cf93b138c1ee9d5181bec017b
SHA512 1f28e08548a5004e87b431a28d5719846c94f9a197907db3717e8e372577c94e5e9e70fc3d83ad8a2995611889049064bae995e45ec76692b38f3e16eb464b7a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

MD5 65b42d7ce4dd4a00570ae1f160015788
SHA1 cba4ee1151a66a0ef59d3feee28152246e270cc4
SHA256 39a5eb433e1942ebd87562057d5ddec4d4cd31f1f07c35723027898b1f7be610
SHA512 503578470d0f9131b50090285ed9922b2d599c721cee533ae83b6d9141824f661624fd3aa0b8c345e2e589855042a03e2aec4d4077a6b8fc735ed39772f7c1d9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

MD5 3161fe0f0f225c7f1327129bf25def52
SHA1 c7d2628a396f50493e3e6d157e769b49fd562ba5
SHA256 a85986c1692c4cf443b2e6e78ccdcf8303515940615c3c9a59d8b7b009c20089
SHA512 a316db7b49cc34f68132cb721d0ff66b3c46a6f6559e86e0465deb3a2eb9576fce19fe4e13a6c71ff55d108de41902006ddd23871aa1f197fa301a50af00f191

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

MD5 51ce74c72f7f22efb5573ee980a99f07
SHA1 53d691a1450e58316b04d9e9024020e0ca3a73d1
SHA256 4ccfd25bfa55de1e48cc0243054911eca8301264a8af2fbd745941ad3f7a7f28
SHA512 bcaee5858a2f0b9ccc05293603a3cdfd24765d7e5a130dad417a2cd7aba4d63be0392bcf6d0fcf5a8b5a7ec2a8404826fd9733adcee6b7cd9f28b8134b2fc862

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

MD5 f80ee1cac9654a649974fbb8c74619e8
SHA1 f900c6c5d6f227f710f6faac8eb7a0521bb144c9
SHA256 9b1ab3b4123692df18e4e060abd06683315943e19152a3a50144b075db276edd
SHA512 4dbd8b2a887c35142b060b6a9d6611740887f4467858f20247b519c84cae4d218b27e8da6d6e4bb0ebf6e44dcca6b95ddfe02343f0ad00ca4807ee0d4d3b585f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg

MD5 f1deb234949d07a496e1e2277782dadc
SHA1 820f3f26bf993ed30562b30a225c98a4de79752b
SHA256 0f048ca4e522545811f749eaa8e611d0d6ef84e5c846ecd5c0b154fab7391fdf
SHA512 ff0d39c93c2d4a7cd9fd2df4bee1bf0212ca6ec8526eb64aa022d77b6974fbb97868c79317ee015886b993b2bfd974ed18bb2e1bd497c3693dca7175f239851c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg

MD5 991976bd06ef32a831bde490059b468d
SHA1 f4fbed22841d28324a4d7c190a5272fb70056f56
SHA256 3a52664ea1b4778190f6e6601e1da4f9f436a1edf2ed0a8a16afbe23c661c2f2
SHA512 73fe52ba2564933772fd65efb8e824902f8acc89e04e97155ca8c5b952b687bf194f63b417c0551a65a1e30ff46621d9d0613b37f5a19154857925ce2f0c7c4c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg

MD5 09721b37722cd40bbf14ba3632aea8f0
SHA1 451b719d48da485415ab43572019f320cbc6e872
SHA256 3066a7b3dfcb430de77829d71441f557e410a427e22b2d4da6cb4c2c18863413
SHA512 3d497b92c18eb5cc91b0ea536937b8e911e05c5790927164f727c8ac48adf8ba31768e9d12ae28baa54838dd7806e2d79a23ec83f48f91d428a80782ef0d0a3f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js

MD5 092c3940e2d0c0b9029fffa6e9e58198
SHA1 889c8f2964ab149143eb2712ce42578d77ab8186
SHA256 0073e4e5079583ae986ea8c960994f8244d4ff8a3baf27c7c0b0bb9fb640dcc1
SHA512 1fb2fb49e6a9f432c94c3b506038d0a89641c7ce772542f57892df53622a13f1d466c93d88cf37c5198252e7f30084d86cb9a2033c033863b4b8c1d5693b21dc

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

MD5 55d86a78ace5190c48b94e937a779788
SHA1 e9c92b4e8c4f3f42cbf69f5185ff21f23b17e127
SHA256 73031be9ebce038eabe511711fdbda7ae09b99549a008ea298c046e353a93c6c
SHA512 d0fccad7c2f023b19895da575c9cdb42e1aaccb764eccd7bc5009e8669fcabb1b827858a1a46f25f641425fbb6953301a76f8e0b6dbb53866ed5f192a4817cd0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

MD5 840fffacd6fbed24cf9857886bb0c085
SHA1 3b84815b429bb05f53c327a1ae3d071498a3b21f
SHA256 b49b225b8b9fee8e76d3afd538ee4e3bcf2dd6529314a98fa8495c7004ab5245
SHA512 c74837c3b7215493c44d5a49cde85eb864a03208108bf69bc159924117d78d097b0b563f7fe6255e461e81fa0531e17c437b5159d9b761680c45ce543d369a5f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

MD5 c552a12fda5af0d06ef5996aaafdf177
SHA1 f672e358563291bdc321b8d7b90f494f7d626298
SHA256 4dbf2c1345fcefd96c1ae0539d9869154c295bab601c9f9ed7112f64e5e102cc
SHA512 1777d579221e21d247b5f3ecf1d1b7e4e0d5038b0e45f36ad84efbbc7ae2d09c9a5cea53353ae752db67cd4d1ffdaeebf79c4bb03a2bf03f97d4a70c3947cd82

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

MD5 aec6ce79801a024e0cb1c65fffa23843
SHA1 43acf54ed8c936ce82497db6db447303bf75bc43
SHA256 4ee8387f28fd6401234d3a9af65cb00b8e84d5be3ac11039a8aaf78ace60c42d
SHA512 1998eb29385b2e43b203a076846adc1d546f823b88da6d4282fb6da2c66487a7d7955543e061f66fc9a00c39ed94abf28a2048861ced00bd19c475c620fe051d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

MD5 f969a24e696bda47d1df6d7f0fd7b95f
SHA1 40526d1592de7941870da40081beaca8e670c69a
SHA256 ff3411b74e491ecafdd0c313b8b18d26d7ae456e238d0dfff935d1839ce88611
SHA512 1307bf9583502f016463d61c96f1103cbb17dd1e8cd15227b830602116f51a0989a784d1f1fdc02c153862ae79a88533516fdc828028bfaf0296eb5db3e9229c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js

MD5 d013a47e7213b0e3c58edefe875c3ddf
SHA1 98649f542892d1712d3e1f92db8dade687f91827
SHA256 3825bee1f143b32550ade9076eb7efe933afb639134ff09c85415173fdcb3ca4
SHA512 fb40095d0d6639c0bdee85c2b32270dc7b232203a98099589d474253d15da7472805af28a0ada661a04e2f860c60edaea0c8f9a69231140625d1efcc9c552903

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\[email protected]

MD5 8b8ea5c5658a0f9249a3cfda96946f76
SHA1 cb754d7a5da2b693a53e5a9b50b4621857ab2428
SHA256 53138fc3666f7a069fde8f98d87d593963f572c524f7b26109c51d5aec464078
SHA512 f8986b3fb953636ab207f6ef210086112cfb01b1bec3479d6152580919e8a0566df644efb02231441909d8c30d17b0e7146ec7e06094162eb0697e5a80c051a8

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js

MD5 0863b424c562ed10f5f46f00813fa40d
SHA1 4e3d7d8c3f2248730d1e5559f593b9e0b7df37a0
SHA256 830413656e15acefebe43ce1601de3aba38cb0ec1ff8b3a20ac5656390a8a1cf
SHA512 b7761d6fb91074c8c66e9e27fdbbd252f288720ae63d770777c6faa8a48949b678762f4c157540367acfc8ec6cc42ff5decc18a572b98a0538304daad1556baa

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js

MD5 fa5c95873be54d8cf2e62afdd0e97b15
SHA1 3c14c79cf10be8d349d17fbc62ac14fbeb56a22b
SHA256 98b953cf56ecbde8c2d9511d2ede9bc187cf1eec75b0bf69a48a95e18e7eba1b
SHA512 a32cdfa8237f9e3993e78151e9f9d7a839b5ef44075d5c2452716ed4621996c3a76cc10707c73ff7b06adf8747118a8f100f658fb658050877d1bb618f02b152

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js

MD5 cb144047f65453fe5f02b4cdb0e55c17
SHA1 6298396e0ea964bbe54e7fc3acbfa1c11198a47b
SHA256 61e7d0cdf57ac9fe5f7a50df184d96247765681e5a19d14b9d10431b4af933a6
SHA512 9c6b983896e36a6cfabf7d057c0700d5ac23f4b54a40215403aa5da775e8f767cf2e60fcb21f644a30329fb321588500d795c4ace73c8ec7fc33d030661816f5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js

MD5 ec6dc07bd92942c0662e5cb691f60d9b
SHA1 58655010d5decdb9fe34021a65c61ecf726c0ad1
SHA256 5e1779b3f5ea1e726b5bdc93540fee203a2105aaa2cf65603fde8dcb3534f9f2
SHA512 302d50fd9b0b05474a71293792dd90062575cbb3329bb47a7481ad625a85a2bb14e54d98d074ea2e0071bbec21330ba6306f817143c1b86f2d307cdb1f2c6200

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js

MD5 9d3bd79387357af39ff3a7f83a24aca0
SHA1 83526679dcf00ca6065fa91d4694d10344796169
SHA256 d2ddec84453a5259b388c3bded5b1741fcd8e9f135ca336a5f96909ef5de0067
SHA512 9aac88cb9abe7b17878fa2d1f7674956056da5dbf135af11a61400b70ee86bc975e2b37cdfcd05037a0256dfd79a4458f7b471007270a4763a7788800e28eb6b

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

MD5 d3ac56074dcb2a7f945661d812a2ee82
SHA1 400524732724279350a29eb7b34abfa0bcaa64f0
SHA256 c146c49c850d1b85b5b05f4ed8538b47016560796665cba8887d587e59ef3215
SHA512 b7feea5f59d95527b5b8846a7701b7c5ddf1a2416bdc169915e9503ba9ce9e09ab87a7b0af2119818b407688c3d1bde13499bd4e66b532ac614a9c3d1cbe3a20

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\stable.identity_helper.exe.manifest

MD5 cdc184ebc598c36f7ce5c74e9dcbb8f8
SHA1 57b5ddc4ad06727dbabee51d680360eb245f66d6
SHA256 e87dfb8c1f4e6de15565da0a849493b5f9d7ccaa68a729c0351f7cf8ed7aefcf
SHA512 ffd82e7cd3d75d8a00ed4b8b201b87c8fe85f29ea3602e5602597dc8694f21ed254ccb01f84daeb07bc4ef9f6b2d2da52b829b5ee4aa5c22a400ac8c3f728307

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\external_extensions.json.DATA

MD5 f3e18f2211613204145de51151948805
SHA1 59ad356fb3b98e86c4b5d49532cc3fe14aaffa28
SHA256 4346310bc30347f7099dd1f209f042ec90b292c376d14939db04ba14c788104c
SHA512 b320a9e31abe0c38c041671689d6944e74b8c96f99177e475b6d63846e58e836de9da6224d1a0b5c2d28136caae40e1feaa79c60720956ba683d50d4328cca73

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Internal.msix.DATA

MD5 c4f0695ee97bbb02c7091bfcda01dc55
SHA1 c0ccf2e260fa539fce8420db5e472a6ad56dcb67
SHA256 94330db3c707893ff0b44237234f741b10e29f7e4cd0bbf5c36b20fe6fd3e55c
SHA512 4e3c1976214c6a1c70ff200ce5dfed356eda8362ad8e6d9cd2f2d06a429a9197d41ab503a43dd453ff66397e3cf4f6c87ad809403347a5cf37d063aa3fc3f513

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\vk_swiftshader_icd.json.DATA

MD5 b09b013a083bc0eef4b7136d15f257c7
SHA1 6f6db2c944d432f3ea82b141d40ae5aa69f84c37
SHA256 b29506c693ebc0011623ab9b92dabd82528c4d11de9641fc3c639b9338d2d4da
SHA512 8d4bbf8f18873c159fa4d22f45574fdda7cb65e19c11db65b0cc910c297f0b2a201eecb7fa3ed4cfb56273671b8bf52d34614c72a106ccdd0718fe813a743e79

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\de-DE\MSFT_PackageManagement.schema.mfl

MD5 70240dcf014c3bd9e91bf1c88e59ccdd
SHA1 f6fec110a930c979870a37f84587f46184779e47
SHA256 c067a6a25a041b11d4cc3d48f46dae0707acf3dbd55c8206b412598b3b75f710
SHA512 0d86276bd37f00b8b926e47794e4b4328ed8cffafd8344eea454e607ba70485c91757086a4b582c3f6f2e8238a0353c92a646c680ad79175cfdd4b69215df1f2

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\en-US\MSFT_PackageManagement.schema.mfl

MD5 95a11e062aa9cdd0dea5a7b4f9cc8073
SHA1 746db08fb799f6647f91d2ead56ee5ae91ca9acf
SHA256 5606a087800ea00b17223b726555ea2ba9f025235077ed139b8740689ee93495
SHA512 faa766909d168a642c716a023c5088781616a5876324c5e866a00cde2c2a3126effbccbf2f367ed2d53b23771dd89b7d2b5538d3d98de27381bae1bb13d497e3

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\es-ES\MSFT_PackageManagement.schema.mfl

MD5 896d35ca05d60c3097aeb713a0d6ebdf
SHA1 fe01b574ff83cf1fae95f1652a55a9f7e4ed1789
SHA256 09b24f57ea01813938793d41250c1117179a9432d2ba0c586791322f02ece70d
SHA512 e3e86ea32531e41868ed6d636dc240e24d3be59b6b250a1d32eaf9853b7dab8f5973eb1bdb361765055ab1d84d457b20a3dafec0676f6054847b23e6ef4d6fc6

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\ja-JP\MSFT_PackageManagement.schema.mfl

MD5 79291344a011867088e4082fc793142d
SHA1 9bc385e34d3d3f3a98eb03eb6e8e1462e6cb8be1
SHA256 0bc37bcc43997818c1fed6b564b27b24296fe21c3549a974c2eb8f3e8fe049c8
SHA512 d04fce673ebbcdd1d4606e1fb8976de2809a273850d8303348ec6fadf3d4d2142c831e1b63990f24af4068140dca1f4c06f052aef8653d94dc11fc3b5130c6a6

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\it-IT\MSFT_PackageManagement.schema.mfl

MD5 9295158ea954030a08da8fdf23ecef61
SHA1 710e35ee42c3b83f5d80b5bea40148072a3df9ab
SHA256 9db4f129eb28d2080b57b25204c1748b68164df8f7a58656c3f4f9da569941a4
SHA512 13696d639ca2bf3db16ddbfa04f0930f416c7c068e452743549ca278797be58eeaf0f2e35719ec56648af2d80562a5bf2097a6237d099db915f5e6baccd62d91

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\uk-UA\MSFT_PackageManagement.schema.mfl

MD5 167cb02a66e98a21bbb226fbf52d76d1
SHA1 676ebba79b23e1aada611a003e84a67832bd5f9c
SHA256 1ccfec3dbeaaa13f609a11e8099b24144abbb80abd80cefb6f827541c22bff3a
SHA512 1a0966f4462973543a9ad2f72b34dcdb8478a75862b4fad78a4e62cbd6116fcad53268773f3c3fc4df275f3cff890e08a62f709c71a31f6dab02f2bd25ebe288

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\fr-FR\MSFT_PackageManagement.schema.mfl

MD5 36de28750702e64c63d477bf53664a73
SHA1 a3d9d044014a445920fc442c4f189a8a168de66f
SHA256 a2300436ccc0013fb5ed950268986ceff2ae05a3f003f35b318c66a6d54007e1
SHA512 68adc308d1f7940d7b590d9d46bc3ba7b25e931c2bc25dcb3d685064131148c3ca11ac549bf2f70d9370b5b7a937bc96723be22c441f4031449a7b6d53f5ec0a

C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log

MD5 4c3d8066ea95eb6ba4b626ce4765f397
SHA1 78e776e27e7d7484f5536be7bd159f10db696455
SHA256 1115658f7c1a1e628a197cb23ed1bbf32a4e73d86707f9755aea3da5fa743131
SHA512 cccf7935a37c49e95ac78f20f2aef91c8e66b7b51281bec3d7a016a6a6a6106b059fbc76f31aec976f740cdb0ac0a72d0cf725b0e2405aee56eefd5cdf469f0e

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-18 03:07

Reported

2024-10-18 03:09

Platform

win7-20240903-en

Max time kernel

118s

Max time network

119s

Command Line

"C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe"

Signatures

Renames multiple (8206) files with added filename extension

ransomware

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Windows\CurrentVersion\Run\NeonGPT = "C:\\Users\\Admin\\AppData\\Local\\Temp\\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe" C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Recorded TV\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Ringtones\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Chess\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Purble Place\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Solitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Hearts\desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12 C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01066_.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECS.ICO C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mazatlan C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14983_.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Lima C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-execution.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\de-DE\gadget.xml C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02740G.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752U.BMP C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielReport.Dotx C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_fr.properties C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\common.js C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.CMP C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749U.BMP C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183168.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01839_.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS9CRNRH.POC C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00308_.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\README.txt C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\42.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\BASMLA.XSL C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18215_.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.BR.XML C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Khandyga C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36F.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145361.JPG C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02208U.BMP C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.NZ.XML C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mip.exe.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106146.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175361.JPG C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0185604.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\ja-JP\WinMail.exe.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\47.png C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\currency.html C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\he.pak C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Windows Journal\ja-JP\Journal.exe.mui C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosecolor.gif C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Client.xml C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\SplitClose.dot C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285808.WMF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14882_.GIF C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe

"C:\Users\Admin\AppData\Local\Temp\f53ac28e9b0ec8535333795ab9e0e52b17a77ad5eabc7b5172bd7e7aac41df12.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.telegram.org udp
NL 149.154.167.220:443 api.telegram.org tcp

Files

memory/2144-0-0x000007FEF6123000-0x000007FEF6124000-memory.dmp

memory/2144-1-0x0000000000AE0000-0x0000000000B04000-memory.dmp

memory/2144-3-0x000007FEF6120000-0x000007FEF6B0C000-memory.dmp

memory/2144-109-0x000007FEF6123000-0x000007FEF6124000-memory.dmp

memory/2144-153-0x000007FEF6120000-0x000007FEF6B0C000-memory.dmp

C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl

MD5 8fea3d682fc95583a267ebf71a3b14ae
SHA1 fcc8920219b81af7b76b156d52be50652a2be3a9
SHA256 70aa7f0129203228289c26a56d4f59cb3e009a1294613c8e0e7d874139f86167
SHA512 431eea3fc44810f6e35979e5249fccea0a605230f9b1d8a4ad1ded629fe68a000f6992d45666e961e4f9be4a9c5198387bc25b318a55cce0f6af4d42350aeed0

C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

MD5 b8c94f284ed645c97aee2e901f705ea3
SHA1 ff27fe3b5c61a5c5c816f83a4e3741413ea3f3db
SHA256 02bfd45d5db546d612a69160831fd001838bde1dfa2b4fa47eb5ec2213bc194c
SHA512 da40c1c0ae78b455fe9550320e26c180f726fd04ad0cbc48da4f63907f01e0a8597ef5eca813c99229b4671aa2768ca2d17d8060722b30b192840a30e569803c

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UCT

MD5 69eb16ae30444986b142d75b61824ce2
SHA1 105145dc51418ac9fdc856d1cb880efa92eaca43
SHA256 0017c1c0924f6479a08ffc7640642a84c900a92f684dc56525f126578b85a854
SHA512 ec35ea5c00544f75ab1e489091dff77c56866fb91857cedbda48006feadaa657b1c9d315b8e58185db1140c97f309d665cb7bcf4cbb2adbd25c13a731ce5f5b3

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7

MD5 3629ed2daf1bdedd0d1bd36c4cd55faf
SHA1 6ebcfd2cc523b9f5836db6bcc5f28d59c043479d
SHA256 07ed84c73e4c0852e76b9648276cac6dd3496e3f230f47a5fdd0ca6a19663ce3
SHA512 8f33aa574901337e5a37b937db3ed5e8787a7fa8d6cc8524b9e61fd029d78d97d5634ad91b9cbbb09b63d9272b08eba1e028a8fca77b12bf2dab04ee9674de5c

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\HST10

MD5 ae6f6b482ed69c2a167484e866d82636
SHA1 2a2f0af6dede76bf2dcbac62d3ce5a7fe5204172
SHA256 1c52459545307648a001c99c01dd3a2356f3449bc86e068d17ee2e680a815276
SHA512 42300cce4e7e6ac780a31b108f499372bed891bdfb7b554f7ac3579cdb9f693c2d0b5a95b67b0091b47149fc0b1b351f31f532509defdd033e81b7441997b714

C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5

MD5 b752e8070b4f56f2c09d7d682c6a122b
SHA1 4ea288e1d9423ba9c7c5482963efdc569e3c5833
SHA256 e23aba25ec317b51a985b509f35ffc50db7b7d6bc76435a2c7fde1a9ae53f10e
SHA512 da646b787b97c62097a78cb956fbf06c9046fd241f0ef730dfa673a9b7f18110037d848f6d248aa7ab87f407dbca5f65d9421c86a263d9931b694cf77a3909c7

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

MD5 a2fb1e9c43dbd34252d938bdd4828816
SHA1 9f7d39fcdcbec7ac643ec0c289b9b2f1c28b4000
SHA256 e0b2517a32782ac4857a286c56de2137b4de319d2817e6e0152e5c459cf28a05
SHA512 e463ddec9d9e018020731b2b7066317bcddf829a8bacdfe95f426854d27e49e0acbb12fa539d9c3157cc9d13639873e7f2358b3adb5229b2e007772a37fde587

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

MD5 03913959693c1f7a1893826d23c5c29d
SHA1 0e138da1bc096b63dae431c39ca603278a7c4287
SHA256 b8dc8303fc89c32788b030f8230d9599c65ce632864585119074587b9530a626
SHA512 ab5b809c6257fea13a64849efdb0bcf8248e781536bc87621d100c5007b3af15464bd3633eb8fb7694fc41e23cc29d653468c5310ce8fff780954482c91f0c25

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf

MD5 b1cb09fdb1a2543d060a58ae60d809e4
SHA1 be762d7a1b14adbb2e779df3e40b9d162a02e77e
SHA256 7501c55b9ee5fc38939cfa59959d71c5fcfeaf4c88136aa076d9516f13d0df1d
SHA512 9c7443e374c68eacc1204c28854f895780c708f9fef34e2666e8cda8576e6ec2f0129da6c0b029d3112acdf537b2e9901406085678220f592cba7f1f29aa4797

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt

MD5 808c05e030a10975ee068200dd9ec970
SHA1 0dd168e8ccb82fa4337fb28708fc581e1905a56d
SHA256 4df5eb4370b320ad44a1af8c5290b27fc0af458847b63f3eed707b8b69a8d214
SHA512 a21d4f60164a19f987da57562d30d45d58bb7a4960f1a5e956c14c50ecb76432ff04df20da3bfd7ce9afd108dd2650dabdc9bd1ffb60f21946c5e9e38a023391

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA

MD5 bccc6009149b6023ca079999e6cfe5bf
SHA1 df7e84e7f099e693ed31c7fd63fce4e962b8ae2f
SHA256 c40e5c7df17eafc9dfdc08145367b56c456dcd59c6d4ce19ac0a08cb41fb4f8a
SHA512 d56b19320575c10db92afa090016d1c7538a8bfc19daced2ca1c6f5189a019c16e80e916d02719aacbbd6928c04235083fcea6ffe819d32e8dc7400e1c216023

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA

MD5 f024f8a6ca01d17dd0049c10d5362f3c
SHA1 b875588a623ca293b84b5b887f14ae109b4c6b70
SHA256 46ccdf95665d93b3ff620a96c794d1081c30c022f635fe9d75b17813495ab112
SHA512 920f087db27c2ab12b6f7781ee8c4024438f8bfd2b175b964985e3408a23a1b97c92419f0760429d4c3c64147c0a1b8c1479c74a4cc60428efb34c981d287cc0

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF

MD5 c83c12c1c9f553e63a558e0f84cb3a44
SHA1 ede5f23e25d073a8c4e90300551e59f58d35932b
SHA256 a2647498ed2288bf41eed3f04050f38035f8f31ec8dd09cc01520259286d8a03
SHA512 4fb1e9be1e5fc4e5e247928a3d120b81b5ed2d7a031337c0e210255ec3b18a9c3389a6bc83f24ee454060960102784e7147c45493230074753a79e4c4b747441

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\.lastModified

MD5 7b20ab5ea026f897ad14081149542bb0
SHA1 d2278607b3ed52dd6644e038e4f7eac49633b496
SHA256 4fe2329b663801dc8530f2d0607ac5cd89439e735842dbed3c9c53f4758aacff
SHA512 73405ab994ecb775c772da5c47243e68232fb4837f8fd237e6f495b31ea162d812561fe7d1156cd157b5f6e1b96fecd06435d656fb956e1d3735fe91d36e75b2

C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

MD5 5a0e9f79ec7383ea9598df91cc67d8a8
SHA1 43b96bae7e62d2d8e4834521eed825fea02d72ff
SHA256 4581d9695f6562fde84c70da9850a70f52fa5c1d8aceb13c69d05e1964eb7ff7
SHA512 5ad500011e0d08a1879d552722a63d42762a7fe073cfe916382d7bfb1c4d8cced23d7fe080253503bb1de38fbda3b3fe4c5899b13272b68003a3339e9b77beab

C:\Program Files\Java\jre7\LICENSE

MD5 75ddc721550b004768b9f0d69ee4640e
SHA1 dec34612228abe9f4fe68ddc7fef385b19d4ff7d
SHA256 fffe57138e0674ff31d3e52b746d6471abd37247e02dc085d299a91cfa5fb551
SHA512 ab9973a552fcdcf7ce626c989fa97e0cd283c597a9b9611673d67edd4760b4fe634f6a06778b982fd1a97d23ffe6b9d75788771e25720a9f0fae769eda1286f1

C:\Program Files\Java\jre7\COPYRIGHT

MD5 3ef7309ce8d5e1047950ca4efb0b37ff
SHA1 c829a7e8bb64732715fb7009abcce69e07efa0fc
SHA256 b93923fd6c263a344b7b8afdc51d67d68c1c7fd1b6b54acb3ba9ec25959f1841
SHA512 f50152c2181599d1d05efcd6f5e38b67a39ae2b8ca70dfbd0ce4e2c1db78120f3fb83ece9b6b04e71f8139d6c27713e5c8cb696c58f88df4d94a33a98cba27ca

C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

MD5 77c201d3478ff1defef8c95673aa1be5
SHA1 8d44bfde73543db399d1811efd66fda13fe7095c
SHA256 f33fdff3073697e5d6d9681dd66e26030c676fcc9eb5b9be17e5ac32407a2afd
SHA512 f6efe4d72dceae147720444a6337c58625665ab3b381a91ab7ea81c3ab98c9cd33b63a56e4c13fdf415fbc0957f25336a459300186ca3b6ec424e3f0448d1dff

C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties

MD5 34f9001fd22cf40a4a2f2c9f16d85a31
SHA1 444e81a04ed845da1ca04bde4b38c517d26c8ece
SHA256 98bb3d4b8def577f086349d5f9b62046ef93221b496ec397d48351cdd28d24b4
SHA512 143a7f3abc9a1b6160c8dabdf42fc39be55c8bb92ba9f9625287bf4dc6c8d1f37d7bacf7e58e6bc8aba2064ab4fc129d479131da968292b3379ffab3fb6ab530

C:\Program Files\Java\jre7\lib\zi\CET

MD5 5e396a1aa87142fd8c6451ecb0cb1348
SHA1 24bf4cd6772b4cb96d247ed6848b8d4d2dbfb660
SHA256 9edd51570e8fc801569e57ab533136a408dcec33f55327da2bc27fabb4aad157
SHA512 c1d99a75c343fcb7f9b454552b68a9cdf8b44bf66572d1d843dd009beca622300cda69cd7599fee46bbf16ec884647dc9dd803d52d2f016fcda953100857540c

C:\Program Files\Java\jre7\lib\zi\Atlantic\South_Georgia

MD5 3db84d1006d7dcc9e98d19cc7d5ddf6a
SHA1 1d5be6d9949227e3b8a1c452779667ff5c6fb97d
SHA256 fdf871eaa35f80954d23fb389cfb42a6f7ab1d70804b5cfaea29632dcc06c180
SHA512 0c85c0adc49b29307ff33524184e2174018db015f18c94ae3288102ca1d31d6b63541f3c134a78306af704c44e61d54b291f40c5c2333f852e8e5de86227e416

C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7

MD5 3ca642a0f9eb1724dfca61a8eb5bdffe
SHA1 d728df913b065884761395576016685f041388d8
SHA256 0ce1b50fba8af5db567d9707f5bae33ad7b388f46d898f71d0a1d3f90f4f78b7
SHA512 7b592db9e41c0c19db8312609b14088ef079f0bc273d9012a9623660830e1e59d144e43073adf53290fe59b59aabada9fb95d890341bda4bb3279b537cf8496c

C:\Program Files\Java\jre7\lib\zi\Etc\GMT-10

MD5 554103c10c3f0c1501ea712935479581
SHA1 bb636692388f2fc82d6d57a81c8161fb4fbf848b
SHA256 8165d6f7938b802621e3637fb07f06ab85875fd143fc1e57c5a1026613917ac6
SHA512 e508d88c4110bd30c8f991e11e534f44742be7f9781e9fe716a8b8c1d68e23efcdd426575becae59637bb5bf2a620861b4f3eb917ca1ffbfa754830ac9fc9c7f

C:\Program Files\Java\jre7\lib\zi\Etc\GMT+9

MD5 f722604fd24925239d2d52fa76841c91
SHA1 0ddbea6d7c4b25fb7444990237152c3665e94b10
SHA256 70dfd22a65c730c7c763e3da8dd3850924e1493cb8ba3b6af126db6dc9ff126f
SHA512 794290d3125ad4b7e40f507223fab93d3b5900382ff4d03bd0e1788a162ad4653de205274fc7315da2d1b608ce598637790fdfd882bbd6f4646ed86300091649

C:\Program Files\Java\jre7\lib\zi\Etc\GMT+8

MD5 79b00258efd64acc63318cdf6ac373e3
SHA1 4694a41be6013af18ccec630b2d3e159f542a9a8
SHA256 0c1160a4a3f9b8ad2b42a2a395d1fe705038f808518ea171f695371a7c811760
SHA512 cc1bed4467c7527c6d574ec13c6e8af176df9bf8054af0d531d08932c476fdedbb579acd67eecdb9ef96b8258078e5d20b12cd2377a73ffc9b2ae2a452ca0eb6

C:\Program Files\Java\jre7\lib\zi\Etc\GMT+6

MD5 4a6d5652a4ea79dc44b1d74d5c4cbf8b
SHA1 45824597ca7502f3acc1bf9f77a5d846be80668d
SHA256 6da3b1f330b03b319df699f4a719ae5e5ed0f320d06059bce18eb966d5b4b39c
SHA512 dd3e40af0ca7ec9fd2347c772759d99597c6078307f7eefa41587e7553a8e4ae9d28ac107ca281d8c92982c144d0000e783831be0425588118d3ed2fccf201b5

C:\Program Files\Java\jre7\lib\zi\Etc\GMT+4

MD5 71c4f23aa6e0547ab1fff11fc03fa3b6
SHA1 0617a09586bbee0f9272124a79d816997c1a0bf2
SHA256 ea0df969a8f80e2a4c7767378b5eaf5cc08f9948e1a255502834a0b9133c208b
SHA512 8befb91b38096cd9a74574dcfac33a2e75b7c4c955e6fe7d385d227601cd41d29f0e12b54adf44a3c454eb76ccab612cf6a51a1bb7105cc30aa6cf9bc73d242b

C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo

MD5 ba8b421f129d71b5631cb16a62cdc5b3
SHA1 e509c6e811dc2f19b086159da2334bf0c46f4f7d
SHA256 cef3650afafc7e1599f03460e69d08ffb443a558ae9e00f7485db6291647ac19
SHA512 fda0b8fcd9a68b3f7833842d456e9c3f7a9647b7ff8d17abf1b91ae4625f37d5e415a3fc29c86a71e895229d79bed87056a334d4dbacd81e51b082218513901a

C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

MD5 49d2fd75ce5536aaf24988286e23c68e
SHA1 e6a6e18bddbab0422e1d1bdc5135c7b68fe6fde4
SHA256 b259b41298629bdac41b3f5f9de9d8b3943a5ec2344778468d83fb3b8c5f2597
SHA512 ae94c2157444f28228faa1b9b57e95b17500a64c2f4b5c2d49a33e96c7f282f16e80b8d840ac72078d4e536059565fc681cd65d88a22f697b3c26e1cd7a8552b

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML

MD5 19942e9bae50eb8b457a420d026acbdd
SHA1 77518db27c45d372e3a12101ebd63efa95898a36
SHA256 7cfc5bf062241371b9d4fdf3f69d2378658e293d7004a7c62ec1a9525481a2d1
SHA512 dc0b10e8be31b6e54105f02f6cfec85fa58d58afe312ffc54b2996e55bbb5e25bad62c4eb2c65ef48870b5f59a2d7b69ca7cf5263ea26ed797fbdb3b42cab61b

C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK

MD5 9f417eb19292feaf61c8341286d4987c
SHA1 f82efb37d12a295882a9ad6c9dbd500144ef65db
SHA256 4cb05cda2cf1914d57cb4a26e80088e95291800df9223979c1be4dcc9fce1e6b
SHA512 3bc62f9edd792c2040e4f0bc87a72ccaca30af3ddc9e9212187e898845e2e4d0ef3696b9f9bcc5981da71c313ff51ca3c47068ad18fa1044681a61eb1ee510e3

C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK

MD5 6a02acbabda6064dc80623f4436d5d8e
SHA1 49c5261f535705b0e8bb684c2b32410823b62fad
SHA256 a7a2dacbb2b2ad652f00b3f4963f9d0a62886305c3032933395eab34aa7dafc1
SHA512 81b894ebe08ca65a26cd3ba65d1a35c6f3f6a392f253f6283ad7fc641b3100192e30eac3ba05d484e27d2b67470714c4da3fc6c4649b8b96b7ef5a1aac098e8a

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

MD5 a0741f75c3b6136c75cf4e331b83afb5
SHA1 cd048b7277ccf92607a26d880be6ce7e79ecf886
SHA256 2f97557f7573c27a4d1201242262186485e0d790d9702d16c675d4fc12f59064
SHA512 abdcae30309cd7e2caabe2bf43c3d7a45576d9439f76913f3517ab08c07e3cca9016ca3dd6e3fb347286972494990ade4f2a030343e075d6710c3351ccdbce9d

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

MD5 067fa9e8ac140ae0c1a426352684f1df
SHA1 545223ab3409129b4f65cf5380136b0e9c367966
SHA256 6628ab4ed132a3bc1868fb52a5e2588607389d7d0f74c11c4430caab0b7d8532
SHA512 d6499afde45e92b922467e48f1dfa7f8d87a039c73f0ad9698a1b041f74f5207e5ad40f4a869c30c5171f5d0ebe5105011ab303dec67089d21e4242fa3e0df08

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL

MD5 93f9cb58229b053cdddcfd762568f2fc
SHA1 3c9b46a02df4ed443be03d6f03217f8c554c9c23
SHA256 cc9855b9383c0c348cda60a1089eb1516e6278594bc85b6b33e6d11391bfa469
SHA512 94a07c3843641ecdc45784c2a42d7e04257f6f290a16bc424ade5beceb8869c448ab0df25406b932416879dba399376ba7c059027e5c6aacd47400be91a7bf3c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

MD5 a0d562108e340e3b16c8fc965d75fd4c
SHA1 18ef0d5e94f3438fca6278bd31c39ee266cf3b6e
SHA256 b91d6f6afe004237ea898d875f067489e4fdbc0b4adac58deec7b804d177906c
SHA512 22d8cda21df62558f441d1da2de325cdc7b6f3972f10654089bd3b35b9b63c6b79183c8b70d8bd567c247782e23ba74f1261fa985ae46c25ff61366ea0549e03

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

MD5 00097007de53531b15ac4f10f5354fd6
SHA1 af61e0f822883c0a69f507ccd479e90742b60d1c
SHA256 26fd72e3586cb67f2084c944c50188aa452dc924c933983606113d20ed3211dc
SHA512 caa0a0d3cebe7ff7e80e025d3f408d9ce3645a88a70c303cef2f299a374f01f2c392ae28b7aa7bcadfdd0035b6d3c9f32a3d293fc09532e99809c8dc48e8866f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

MD5 8586f3b4c5f1c54ed029e13f1eb4b2e5
SHA1 10edcdc48abcb2753878d517558fee0a7d5cdbf6
SHA256 69b179ef512ba6c3236e2f0f7d3e0bd9a813dac8122d42a2500eafbf94d6c798
SHA512 c16bea96cd7b7964d055789b7d8a00cec52e89b2ee1d6beaa2738bf2aa121b59481d9f96713bb5218f8990c470533f953f3d53096233c5534b6c7a1d30da0f8e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

MD5 a5c9f548b3efb0874840eb0056ee665a
SHA1 d83d32f98e31c2f0e9a27955490942d16a8725bb
SHA256 f810fe3f9abb0650e447a964c423dc4390ef5b34ebc5206c0c27994361581bf3
SHA512 4479d4b10dcdef6b93b1e08353afa9ab7ee812db2da4c594dfa1a8ef601dc335a686cd1ed677971eb5112e208da59f8df686b4cea45eab73377fed2ad3d83f44

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

MD5 2cd030c70aae9657964eb198a1ff305f
SHA1 f63100a7d23fecb7a3f6f6c07f6932d004a6015e
SHA256 eb16c1839669874e3044b5be4e9513e76b8b7b4e17c301d211df30230b80144b
SHA512 41905f90741d69eee6158026f9ab5509e37b66239f64f604fab4080fd109f1cb980ddd0fb60ab6c928ed594e424d8cb51fb2cdd8ea3342c5a39cae99613979f8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

MD5 6648d589286c0d3be69e5bb43b697e79
SHA1 73f04633d68dd0726e2d0800ad0697d63c7a0ed9
SHA256 5b0459c1471ad8dfba2dfe3be0edc497d8fb6a0c194da2c19dcbe11ca8d596c2
SHA512 6d55746ddce2dbdbac9927edfa23aa4f6a6196ba4edf8b10dfd519c5c468b2312e715ecc9ab3138b4b1ea89b4bf8fb9c8462f093785f182c40811b2e011577f4

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

MD5 6ff61993d3e4ef83f1f84f6e0ee78cda
SHA1 d8a58bb7a308d9541b8099fa9203768393926442
SHA256 9d3600b1c508751be5568ef185b966f0cd2cc549881bbbf62a04dde5e6a8dea1
SHA512 bbf295962bdbd2a423e78d9a6ffe771ee968de5771155d797d8e2db5c9fe51746a642f8c8db6dc00f1462fe1a7830128823283a535a9ecea4a635569fb412ccd

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

MD5 8c6e8a11fdc14e713f21bced27e20210
SHA1 e57309b9fde1c3f2d8adfbdb4e3f7e72fe06bce7
SHA256 11a8bc09519b04a8f44c0fd5a7685d76092ca2a9761383c512bcb203436bed26
SHA512 275c83a93f0fe572008b6b88bddd3c0bf61a214d563a35583e25799e4d54edf4f834df0647e1f0c95377e0e503ec066883aa4c95959f8f8b8a7b2c0e8ccf13d6

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

MD5 6778282707acd01a3b5ca5aa38f7469c
SHA1 d8c69948fe3eea8602e8f57f52179014c7fb7684
SHA256 ecdc4382b913a59e93910e6ca3f778325f866ed05520832e851f2dd5909d1bda
SHA512 ad2af9b7a507a261d38212c3656aa806c48df9a40c76b9753de2c09413d09f73f5c287b4dac656756d72edbd7ef3d561afea590049717e22d21479929c315b73

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

MD5 54c8d31fca2a08ed93a1f95d64fc0853
SHA1 ff829555edcca44e689c04074dcb7f65af80ac87
SHA256 7f7eabe5f2c4053c28dc15f625a058c5ae9a2468723e166cdbeec53b26674ee7
SHA512 a4948d66eb6f4a34a4cea66c30fcdaeafe545dd42313f0adace668a422543b643d7d3c865028bb42fd0c4718f6eec48ac2d8bcc53b90d3dabf2e61f7066a86cc

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

MD5 6088ce0d2999e05f0c6de0cf1ee873f3
SHA1 eab33b48bfcbb2f25e527b77d70caa1561709b9e
SHA256 e5d9e5f7e7992acc10b6357cbc32dc50e44b648b7bb8ae8effe1c2371261d4aa
SHA512 ad733901ddf755dacd4e0086ccaf9603ecb92f37a061fb576d1e64da995521247e3f8b146be16f981f71cb850575733905ef00b9cd8b7e2dd1401dae846072b5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

MD5 ed21c4c2c1588b2fee82d68d282a06b2
SHA1 aedaf8824c985f3b6b475090d96b1805311d0ea3
SHA256 aff88ec606dd6358406a2405165cda5d8fbce17c042c30628aff58504c8a2e1f
SHA512 51de5b7968c55ba646b41a6c1989b7bee62ab0709936b5387b58a4c06f72b703e05eea00517ecfb25ed89f0c6166921d49f31e0c67485a69ddf3c9dfd04c6cb5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

MD5 11115df2643185c66cf41c937617fd87
SHA1 9f8b3c8d6cab5486d6c65d4c7a6c1ef53318086e
SHA256 dc383a7741f7526e6302303ec0181c09b36af2148d527968a2e02d5649d535a1
SHA512 509a56839a9da2cb4f6b120ce32d3c7330106dd92e4a740c0febe8ca80ae307504aba7cfef78c89925cda24d81c3196d34b826e5fbad75783c5f8926c7ae497c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

MD5 34f5344c3bcc51c080c192db868b917f
SHA1 d77d5eda00c1be51dad48de625cb298098dfd6bb
SHA256 9744014728e0f9738aa1be00b0132c54e5aaadaa42221150289c7020553e53f7
SHA512 98d85621643c14ed51bd5fd3bd3d5fa1e6e761884cbb927b4014569c48d8b0a0566164eeb0ee7cda4a67770a7024ee0b1b165bab482e7a10d145a26afcf555e1

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

MD5 fc7ab7635ec6f9cca352126863aad435
SHA1 83c8eb652dc48851877082d37633e8d67c3d4c47
SHA256 d71130625d73cff3c31b5ee64d923f885c8f8f0202d850c10dbeb3421c82bf58
SHA512 14cf956b0a06c6fb13d99b88141ebad2ea48104b83ec4d35fc2b5cbad410f6f4f006eed85cf010e7e9342837af1629754b3055a5d23767157eb628e7a94114f2

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

MD5 71a5e9d75a886826644aecb25117c5b8
SHA1 8dd1f3dde0904af547705041dcc1c44b1d4fbadc
SHA256 5fd5aa601ea58dd4d40da44541c1c9c1084b5274f1ec8f3b49ea903d74567c3c
SHA512 595b58ea3a27c4b5c3f5c9e5f4991e5e915d92d4c4e113c75b6bbd66a60f07f8f5788a2e46cfeb61b7a3f29ac2167bf063799d14649c9e92ff1bb0a3828c2130

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

MD5 192843b70c375f9925d207fb59335f76
SHA1 8ec6ca022294b61867d694315b7da8b69d9425c9
SHA256 514ecf38ea1e05e5f5e4dc1254d3e37fb174db910e3dda0094e2c23f4f119c4a
SHA512 45b848727550f747684ca1fa91583ff5cf667c3805c7a395b45f1f7d624259462ee23f2c7c6e4523e97b72f24c4c53685a7599697a9df06108dfd3eaad31dd10

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

MD5 35e47937bddcf36fbc56463309eb2132
SHA1 54a3cff00edd5860f44c77d5953f600561080ae4
SHA256 9fb24d35b70adfb5fd9a9efd5d5052bc2490de9fad9fec43df7b4de275ad85c7
SHA512 96e5ebd810e843eff67285db3bd054ac3b52562fc4d2061321eb7f8b23ad4cc5a587e96652ea73fcc4946e871d08903c29924fd5e77fa0dbc7fb4b5b554c33b8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

MD5 de9f9af6be066f2e03c69c4a11b93c07
SHA1 7fd232502d637ca12d18fef0efb9a90f3b70434b
SHA256 90bb46de87f4321a0969923a0da616e2cf1bfb74d079d9a49b810b6292028ffb
SHA512 f30bc22dbf9c7f9ef55e61c36688d73e1ba016f6c73d49f54bb68b90564fa79855416a5b9fe2971a0c4aee75cafc5f587a31cda334de0f4a3c98f2c9d4c652d6

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO

MD5 68378a943b04c98b89935327bf86cef1
SHA1 5ae62647a6dd08daa8ef4d516dfc668f97987a22
SHA256 fa2ec56d42d5714d33d02f725632fa85461a80a87458ebe6d0356dcafb3ec110
SHA512 e93c5d1a9c529a4caae80329153c6253eea2b638fc0ae466a64e7cf5895c9382c984d52bdcf297cb0b5eca1e8a5ddb14f9022dcb810048d60fab23a38333e338

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

MD5 6e6b37693ab81582762fd714c9677d5d
SHA1 0a781ee460bc8f1252c4bc4b5392a09ff482c7d6
SHA256 a9c7ee80dab80300f999f0d80a8f2f61eaf6a7b62ca76d0cd7bfbbe8f9f05cf8
SHA512 a1c2e4fa11ac1c2d9f2e1ebc73b16b9c0ac7f3cc8e28ecba7418d1c98163d08f27a8aec55bb5633332bd97fd01c0bdccad65bad953cc6bd4dc1986ff696ada4a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

MD5 b5c8e0fbefacb679b1353fe22b2865b7
SHA1 1b749eda53027e0455225c0288bd97c824a7a000
SHA256 c5056dce29deea38b02e13970b06e518ec87a74b4ee18baa4d3c40fd982c1b19
SHA512 6f8af40406c4ce7bbb03526eaa620878f490908c450078d37ae8a3945f3345785a117739a86e186fe92904a0e9aa762d15d3f7c2339b87980c3878bdb43ce7ba

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

MD5 b0ec617172078714d3c3a79a045ea38e
SHA1 49e83d0c32a12bb753929ae26c9b4d76715afea4
SHA256 1db92cc2a6f7efee589451e40986dd69c6fb8a641b8ffa4d460d78f9782db501
SHA512 553bcec5673579a90d2cbff5e478f7809667c2a180f4766ceb5baf0fc8a3424d90b9bfa97741783697cf25c492bf5e118cd530753ff2b81364a30f258d8b0ec7

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.ICO

MD5 856cf9eec3b8e9420144b79ea8af9474
SHA1 4e5d66b85212cbe1f102f18d25755c516f821f53
SHA256 933e53d6f1c7a7d3b6b7b79ef19d4143f2286db55243e3d53825df161e4a6d09
SHA512 44fc90074a6359c3a138f7914026c21393586ad15b8fc9a065624178e1ab5450d62f6537e1b9f2fba8e595451d1bed3add1663cbc685a083b3733e39985bdc38

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

MD5 f72ed889f79ea0b328ee4a918a3972be
SHA1 f3cdc150e1c4d7f8f5b37044297f33ab2d1cd47f
SHA256 50a020fbeefc1d49603be89857d3d7480e2a556fe40c5768c785e36c40d866ad
SHA512 01c105f5d583621a7e244f87a1b458d4f6dcd26adb03ebbabcfab3c8d29f8d11876c18bd70a2731af62981b0388d56d22c665a342fd631cd7a70a187bd76c762

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

MD5 18af971fe8821ab010600cebdc722bbd
SHA1 8f616f098232b4836b0902cfe8501f162d995b57
SHA256 865914639090a4136cfe6fbb08ee265f431307d8338d81463cb1a58ac96d6545
SHA512 24d3c550f216f2d6e154a3bff005b409d85673bcf1fbacde6c2217c9f997f828ba7183ffd377cfa7558d12d8585e2f6c330f613af8181c17b3822081686827a9

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

MD5 bf6f9572b202741f59c454368ffa65ac
SHA1 918e1dbf7bd79d62019037872c95393f551f72ca
SHA256 b841f47e3bc96ae6e5605540d7ae7c8dbf04d7cbcef4499b2f932f691c063a1e
SHA512 0882989971f2ce66ca12303967e2b156453dc362a24bbaeb215f4a5c1bca047c759224b94f5846cf400cde5c2f3aa7d1b39c2ad1ad182d2f4366d8e55b1c928d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

MD5 98914f079148e4982bdd1abe9d274969
SHA1 1260857498ef972f6a5e44fcc51800d344b382cd
SHA256 2e43a7cfb3ae51f29a6dc89083a0ccebffa2ad0ec4505d64aed09c2c99869614
SHA512 08fb9d5310959c71e353a5ee1fe84aca82d085d3260c20f038ee43034c69125e5656c4b103b9a0f0bf8e0e6fb416a3745f07089b4fbb99be578d84a02a889f25

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

MD5 c8aa25f3b00863e9ca1f828f464df053
SHA1 e72ec78ea81cf035196a780bae537e9a42f030df
SHA256 94581be9663907cc56dfe680d531f11aa27761a174d0ff8661c13ceafd7318f6
SHA512 1be19eddbe3cba56db8e6aea4f63938a868c0797afe4376d0a903e04bab438a00af2a554ae781d1964ac2c43da01287d0445f67e425836114570610b4eae88de

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

MD5 14305efddfa9537a733223a637b20b3d
SHA1 d1907c760682e29e62ba52ab7f30673bd96f19bc
SHA256 184deee562b283c2190f7b3e505b19b91c44891b7762b8fb95eb36e1eb6272c9
SHA512 a35e5fc0e9646708c8a40fe8836aeed13b70700bef8a5fe808a661f10e887e5eae2da84ce1cc570c18898838e7cde45dc57834ab06be42e1fae0b89513e5b049

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

MD5 cbb37315a81a51b7d28c2ef1e45361f4
SHA1 6cb7ea198ea2eed39e724e4ee77698ebbfe14c86
SHA256 ba5f067c2a09594842ab4d45adfe595f5446311cd79ac44d5d6a04a986b95407
SHA512 ec9475a04182f9df7f2fa510f4493af3fec88df71ad94dcc04f8bc38e95e62341b64d2d9b956f332cedab590559dfbcb26dfcd6ac5708214fa8e8e7de0777e09

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

MD5 f1a1f6bfaa60552e25c92b22c06ab86f
SHA1 169b2fe67bc96f2f02ddd70255b4b41a6d1166bd
SHA256 66cadca9a77c85fe2abdb8050dbabba5850333c232b04f22783463257bdd449a
SHA512 d0be7fd542a0902ffb64816fd3332356adfd3972a2a1a8c31d53b6f914d1c9b34140f1edcde22dc082160970c12191fdc3c38eff1d1e6e863c3ca4ba237ccc0e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

MD5 8f9ae423f6a54a19ec85cf916a006618
SHA1 eb61e001b145ab54815ed94cacdda3cda8a73103
SHA256 fcdf273ff6b6a90af991765ba3c54cca41492ac1a12d6e3406e10da4b51ad55a
SHA512 2ffb84c2dd6f1968fc100ce310a6cb0d4f309fb1c28543254828aa579c636fc7939b0f727e9f89b48155145a2f3ce8c51abe6556d578c0180cd9f3eac9360428

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

MD5 8a793c7d4c767d0326a7804298876407
SHA1 31fa590e909a6ecc7bea71eeb5c8e515f11fdeb6
SHA256 f49aa016e8f35a5951ea7362acd57abf583f4527c0aa3c537dcaa8baae5912c7
SHA512 8dd19eff957142dfeaead7bfc6ef8788ee937f9759a87419a533b96d37deae3831deb040d45182f0793be39d14abca20d2b21e9401c73fedc81cb5a49679746e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

MD5 08acb5fffacdaad819e05dd9c37e9d1f
SHA1 d3011b58d4ac7df5c7b4cea01e39e88ef8c80cb0
SHA256 05ab86342577862dfd9232d40fd5048eba381c1baea29216df6792c650f20e72
SHA512 fa317082f198180d3157262320d48169581a3b0156a31c897ee8eb11f639988c0d74ac8767f5e725fb51351688ee40be5e29a7a6da4f5808394c96e089b0b6aa

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

MD5 f338fe6cdf150b8cf86f8c3906269e8a
SHA1 1390887e97a6d9d017c57d7af05508ca4adb0c30
SHA256 033328f94724953c938519efc91885b662faea8997816540b3c99594e7b11a65
SHA512 00be32b83de5d17676e64f8d59c4c982431b4ead6461911312f854ab34015939e27328810a53f41e8376ad63b38bf4bbb5cdfb8705d780a325ad2f7f1667427e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_ON.GIF

MD5 6cbf77b4fd9942646b2e7e459bccde97
SHA1 06eafeb5f974dc11032ca20b0982c87bd5598992
SHA256 3c4872657753718fc21693db4df9aac0493f078be5e229358ae183c705ce3f33
SHA512 791c2c170be2a5d1ab241e1d5b4304b6611f2e7bc8e809dbcb9ed7120ade7d32d0759840055ba2f65047f94bce271291909e10c30a1fb67ad83dacc860c89d83

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_OFF.GIF

MD5 6669134f0c8b04166e0ee209bde29a53
SHA1 eef5a5e0ba85d6e1592004285dcc87f865c656f8
SHA256 aee5da59fd8af37d805c54043bfc2dad1ec274871c6823081553cfcd47abd037
SHA512 cfc95f4c6f2fcdd9ae2f2d1a2d64398ae83fd4e5b5511b30e42c284c789975601e687dec223031ab7d4032eb12400fbf5935a95a78ee35d1c51c4f2bb4f53094

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\HEADER.GIF

MD5 b41bc3a3d81e63263968872f7813a3db
SHA1 1661bc91a33138d29ad6c5302100516116e49b50
SHA256 47cfff6848077c4514d97e3e354f82bdf6b1cf04c1bb0cdb4dc19f5079d6c4a6
SHA512 5dd809434ee520cc2bd289d621fcc62c443f80a05bc1dae6f0b4b50853042ec272c50f89b816b9053c42b83098d5b7c1dc2fa9f00006c49715b1334bb0606482

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

MD5 8c3508edc0b057d9058fff2c2cff693a
SHA1 5c1d081169121a27127be18a5f24bfb16364b702
SHA256 dcd18cc11a93028f3736620f993daf197766b012c2c7c9f6aebef3f3d8cf3521
SHA512 af7b4acc93f0dbc1a65fd782977de2f6fcd6f2ad552a89043b9caacb3b8b1f054392ac946a7103b86d105c571255563d703f84589e0a1db37efa7e9bfdd1e2fb

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

MD5 c17b8c9c2bf9a42a19037dbe0af61090
SHA1 7d0d356889ed0cdfdca8c61445835f086bf80a48
SHA256 af1c463e25523a0f18f46276275f6c1065b2d92e25238a9db0cba02b134672fc
SHA512 3dee0dfb54435ea6be7bce63d815a7094d2917cdcf66370d709d0e3d53acff614b9419a3f5c1d16cd861bbb37f30ddff6f0ac9302f62e791c9a9f748ea9e25c6

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

MD5 21c46fecc3f60054a4cf05322353f771
SHA1 2d90e16e9bd9289dcedc92fdcd9754c1c5f9bf85
SHA256 007859eea8ca90fbcd25143d15ffe23afe237249a702fd787de900d858bdef0c
SHA512 e1a2a32add9597a5de282c7b613c38e750ea1605f006590bb952438cef43a6480dbc065e6b314c1117082082b887fda76bbaf6c9b1d9fe74a55c8a00b3f2bb98

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

MD5 032eb64e9b6cc5d0487e960720ea04c5
SHA1 b44dd59f766811b550b62d593c5911937a43e020
SHA256 9b57777766393fe12bcd73af9f6cd396e5c7d12dc406dd4bb46f9bc6a1408de2
SHA512 42c04fb9650b82c1332d78946d30b4bb45956dfb8a09da35c7078e0b632adacbe5a52b39db90e6d168a3b8ba5df0f00454373936d4dad1f17b7e55cbfc7ba127

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\HEADER.GIF

MD5 2b40a73f361ff6d17678ef422fced8bc
SHA1 e118b9ce5e98e2aa6389a8cc9b5c227f616f140d
SHA256 546299516a644c6528f164abc0d77011ea62859afd857b2dea8b44e82c79188f
SHA512 e3d2899eb15818ddd063f1d3feccb0301a9e6dcf695388f7023d8a008c15f5980c0d7c5f4a2d0a184b47485ce7ca2be5e2bec048581cf6f1bbac4ab57e169865

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

MD5 999d9003a41bb559802da86add6aa709
SHA1 f3222cd695bca3fbbcbb130d554b38209846e845
SHA256 39dd72a49da80c9436ebf3b9591fce4437f3a1b87455de4c42fd0ec05d40b844
SHA512 975eb4d31a2d9f44483553a7f48f8e615445d454cc2beaf6cc9063538f4fde3726c85625737d86199722651e83561d711a7199066fa0cd863d51ad04fa398957

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

MD5 c6dd497468139dae8a47a1004674a4ba
SHA1 391665485df86f4fd21ba201ce2d8c340cf54e20
SHA256 1e63d57b28c7fcd9dc6c40765cc5bec11f6307a1c48e2a57d636d60f9cc659d4
SHA512 95dea06174d029a9224d9508f0372b678b26d105d5418bdacddc6e2ffb3f8a798118a5c5f606adb351ff2ec3d7c2198255be765aefe7b1f31f57e3aa5b15d266

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

MD5 1a8856366e70692b42d29c7e68d71dbc
SHA1 e1de768d8fc8cddf3a1a59778b4d0dae74597d1f
SHA256 02f501eb942d408ee8f566f92013f9a3aba3802452142f205f4c3df01e621d00
SHA512 9beb9082f283342e5f3ec5e248a196c5d2dcc4ffd4fc3294800f89c278f4ec455bb306b0e35a9866775039771601bc3f71c3887009e978d118a2786d0e2cdf6c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

MD5 89df7e15ade228639ebd461fe3624beb
SHA1 6662e436c8a12289d8cbb632b095e7442e894c1d
SHA256 a714ec34509df5cbccf1c127e86b9ec5a6b06162a46e2566d21cf2968a242cb4
SHA512 3df060353012a35ae1b1cb270bbe55ec97b6e7fcf657ce193c0b02cc96ce81de317bceb3b9cd351f2b5b6d085889cd4187682379210ccc9d9ee8a00c7e8c39fb

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

MD5 74508323537acea0e36857a0d98247bc
SHA1 962ae02482708b3876c208d044f22171b5f8c15a
SHA256 131f0060fed7a8492d4b1729ed5d58befdf71fbb74a4c6e22c2cfbb91a0ab119
SHA512 32b3d28349fbfb5e7c581e6a37e95541a3075d6b76c1959691dd7b8e788ff09c11a51725ad5f74b362f45dd84a85408124b7ade398a0ed45c7d0e71b5b2fd393

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

MD5 56f146b892149980b4e073a2a105a026
SHA1 c271a7677cc60278b574e59888a46f0819320017
SHA256 2a32633132d4fb0a2811eb14021b05b1ec9ad73d2a0a04665d63963c3d7e3008
SHA512 8fc1de98098bbcceb2b3ce5e36bcbf96bf2a775fa632fbf5dadbf098e81c69f204f4945b677be01e35a78b0b9d8e5c3aac322d0293445dca39701b4d29b2fb3e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

MD5 44220eeb4d1f1a86cf3a263133382c8b
SHA1 a3eecde02f02c8bdce6f615b33b1e79eb808dfc8
SHA256 42578f1f1a3f7b94df8a6ece622f4c968beaa6d5e7d258de0bd47a63ee0d3e67
SHA512 964d7ab32c28895fb5be74f7651daa94aeae095b37b327402a3df146a63a6617bf5290bd8fbb49a5b14e6395a6d993def8b78069e46d1f8027d3509cda887144

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

MD5 d587df118876612424e786981ca966c5
SHA1 06c5f0288ab98e65381567f1a8a0d1d2eed6e712
SHA256 2d40d96ed519fb92a3474c2cf0dc86c7f83835db0bd44059063a97ac1cddd9d0
SHA512 11a2b0decc9fbc236d78f9ea86752a936b1ed44726df3f7f979b7e5e4fe7334af3c4b1f48b7320db6e9b99951292495e5628f48b276ed0f24c2e88df1077b48f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

MD5 6edebc6f7e9b4b7940e5026a451047fe
SHA1 4f25106fa3eef903dcd04b3981cba6e809e62f52
SHA256 c1a6e2e8b42c295557b7474e238767cf4a761cf517063555b7a9d828628a431d
SHA512 0c13b00a3aadafcb1412a595a2d0bc3b8ca5370ab3ab9407b9ee6ee593dcac1d9482e45319d2f521e1c3a86eb22b26dc131b51d4202a9438fb9b6c8fc5f3fdef

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

MD5 f96d31f95323fd5452ee525c55727326
SHA1 12a8e1a80f7070589ca4d18cc41066734ad0df8e
SHA256 aced99e46319116160845fa9c73b5744b8b5b87142a18cfbda367eadb2626a12
SHA512 70dfc83e86fff4a7fd066177dee62cb8ef71ea99d232ba80c3a7cc9e3e0ba79a477e0200819cf43fa35f8fac07cf298f98ab0360ce055e162b1f650a451e7fec

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

MD5 3cb353f3a0598bf121ff1fc38758c08f
SHA1 fe3d7391313577cf377afcb5bd018f2191181151
SHA256 960a37adb7dba41a25433eab96a5d4d07e5c809d543591ebdcf660386d63c570
SHA512 34d93106986a03f9a31f28bbeebd90d706f62b9f249b5f5c33502ddf22e3b7fdc6230569b7a12f4e729a6d1cfe620112d72657c252c7bf1b7b9eaf49d909eb44

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

MD5 cc343b392cb4416ed5a8ded614c7d0c8
SHA1 d49ce42b2cad4dba5c5e8b1b65eecacc01a6f47f
SHA256 95ed7f0d75ccfd336c3f8c4a41987c157afc49064f8b3b44c239004c13b3ad5e
SHA512 6e5792e09300581a3f4a421eade82279c5151bcd2f0bcc89b1be7a8d9e6dc2b6d9007f75e5c14ea3e84324490f04805067357ff522fdcf813475b39834e01039

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

MD5 ca3ffe914a4359dfb8b6911188bff2f5
SHA1 377a77f75ea1fec1888a88063731fe3ecc6f4f18
SHA256 b6b3463cef556554f7e9f75bac13d6c5b0205e07c1d44f82facd30a885aeef2d
SHA512 449c2d66f95fba7cea87dce0bc27b50aa930be4327f6035b5ff832142e589b6f9570d70c96259f3d819bb43bb0d16d239859c2ea14416ee65e9e539d9ca6f931

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

MD5 45bfe010f99bb7e6f65c5f9a290534d8
SHA1 a3039e573dcd6bda2aa30faa762d7f0ea681f1bf
SHA256 330951546f21367d54cd35133fe59fafd30ee7bf2ea6c0dbaf2ad7d447e10dbd
SHA512 5b5af2efe5303cec509e81174fd8ccf82e4c55a209e725afefe1104c0e95fb906db57c6c6706fcbc7f015289015e3f81c245cae6ca6929199f5eec4c7b9118c3

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

MD5 ef0ee9b9c455d812396fd5664b8b7acc
SHA1 78353dbe66fbf5bc3edb8d0d0e4b77bb4f036848
SHA256 f40da5178b45a842a6da898966eca49d0a849ea4193e478e14645c7324a78f24
SHA512 75e5f668f42eb8f460f5976e6b69cf008709b7301320e9c1156fbcc27d574d88ac19f18de00fcc5735752080dd8da3b87d038d367406f30a382f459c6eedae29

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

MD5 934930d9122c250f60dfaeb8f9c730f7
SHA1 f6afa669e51bf5e78a2fb7701c5462c357ef79dd
SHA256 1aa301bbebf1500dbade11127a852e74bf7d71f5e6deadb5a4d8062a9dcecc56
SHA512 5d3ca74a8224c27157683ee4913ceab0f7030328a5319cbde12d63b901511620f622dd02bab04e7545632946e2c24332fbcefcb487d51ea625502652539245a8

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml

MD5 252be6d5d0a0002b1d0b5ccf76392065
SHA1 75bd2971b054c4219a7f23fd18be0aa424cb2477
SHA256 c1a175ab5bca0f3dd0608b67ba9b886e6cdc58aa0e3519a0b2d96b0fdf38c046
SHA512 a837e1965882ba13b017af0c4bbcf8a4a8775065b882c99f87565e7b53a78749a6970f41512ede898cfc7eb3ebd1d1774eb30026f6be4e60459e67333949a4d1

C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\TALK21.COM.XML

MD5 0dd5e069a6aede66c91f1939a16452f6
SHA1 ac5859a14868af1f8f0f2663ba47ec93b369f6d2
SHA256 5725c9787de40df2bf553d70d84bc5b7b73aa022fe0525afea9a240b7c25fab3
SHA512 d25708ed19870654b1349b18280a0c63d8b655f8c36994baeb833db778b3d5920d53b1fcb375647bad92494d0fa3a73e547cd695f3e350045bbe295c574b74f0

C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.XML

MD5 1ef9b8e2f271697ea7157a2813919f04
SHA1 cebc3d52d355a7c3e779f753e306d742d5de3b64
SHA256 8e7b43cb3c292378af5f5ffed91dd31749fc77f03d7af60f8a4d141cbc0da619
SHA512 933cacf9866f4bdb6b2685a9f98d0629526360e3f4187ac31baabf4b38490ea1a8b20a1d300b158562f2bd5a1d0db3d53a064b6ad2a633c9925b9d503ef45a8a

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.Lck

MD5 8c653f65a6e58d800e9c24d5480e5beb
SHA1 ac0a9708057d1594dee06bafa83c7f93d96eabd8
SHA256 6f41f483bb303c82feb4005618dc0c97a44944aac5882c971837d2db53148207
SHA512 0bf0e972a243b26efa6d797999cbab0e6865af198142ba97af4a592f261d9ab2bae5de2201ea400afb7ed4872c1a6ae4cc4dd1194e1d49bd075a4112969ebd74

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0001.000

MD5 985ed20c23a4f242ad889050eb0f0697
SHA1 53f4aef6ed8f5735c78c240105dd45029f0ab6cc
SHA256 df0cf5a453f5d8466b4b128646d8831f3347a7cda52a65d25260108f1a4f4b55
SHA512 606b76fd709ae76e3e7b989fece2b5391f97207d768897a96b14fc7a14e92d6c3b10379868303b581da37c0e91391b579e952a6be96943bd0d02187efbafafff

C:\Users\Admin\Desktop\RevokeUnregister.xlsx

MD5 0db04676b9fc86fb4106cbc22b8272dc
SHA1 f9d2a9d9497e9f19a39ae82443cbc7c0a53dd05f
SHA256 9dcf9137d3674e09eee241d23555fecf6b5fb6c28a30f4ea57999d4527db893c
SHA512 775513948a731034103618759ff40545b3488db87a2cd743a874047f97873aa332937209656b6fd3c9e75f8ab6e0eb7f733861b4b68a56443314b9985df24b1b