57b5154145d8c804ecf3adced8ef78549ded43b567c795aa1690a714a5b55cd6

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2024 08:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Size

12KB
MD5

69a4edafa563fbca38e1a73190b63718
SHA1

95c3cd4c13120015dcc0574b7f546524c2cb90e5
SHA256

57b5154145d8c804ecf3adced8ef78549ded43b567c795aa1690a714a5b55cd6
SHA512

f5406e0a97bcd68eb9a3f3a4828243d2d29705064bc2d4c84f111f0d1b991f54a995ce204b3a2886b8d39bfc72c320bd60c02d0f81303ee9401dd9aa4a2a232c
SSDEEP

192:J/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMSgiIDh031O:JebFNw4Pk1itKkpAjjJs6B40WSgrDKk

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2392) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1045960512-3948844814-3059691613-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcxhv6.inf_amd64_f1a7a2fbd6554d60\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl009.inf_amd64_3bab34655afeb7e4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmzyxel.inf_amd64_1edcf626fd489056\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MailContactsCalendarSync\LiveDomainList.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\oobe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\Common\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\iscsi.inf_amd64_c089962740ea1f84\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\Engines\SR\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsvirtualization.inf_amd64_078671a0cdfe2870\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_printer.inf_amd64_cfb2c47c5677c442\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\IME\SHARED\res\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\SpeechUX\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmti.inf_amd64_bcde2913bb6ccf3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_1394.inf_amd64_cac08af12caec647\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\oobe\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvg63a.inf_amd64_9f5493180b1252cf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdyna.inf_amd64_d89605b6b478d768\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsier.inf_amd64_3ae2ea3a55ec0279\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_bfabc750039f8ac1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetConnection\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetNat\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcxpv6.inf_amd64_46a3b42507e9d29e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\lsi_sas2i.inf_amd64_b4e933c4540ad3cc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mstape.inf_amd64_3e2c4fa2d4cbb487\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\PerceptionSimulation\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fssystemrecovery.inf_amd64_aa57df1ffa9aace0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcomp.inf_amd64_bf289615d063c627\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netloop.inf_amd64_762588e32974f9e8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netmscli.inf_amd64_b39ea5f4658998de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\smartsamd.inf_amd64_2238284d493e89f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech_OneCore\Common\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetSecurity\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bcmwdidhdpcie.inf_amd64_977dcc915465b0e9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsquotamgmt.inf_amd64_5f092e2a496f61af\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ialpssi_i2c.inf_amd64_8e00e1aed7fbdf70\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmke.inf_amd64_b83f029888180def\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tsgenericusbdriver.inf_amd64_bcfa5f586783921d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_firmware.inf_amd64_36e4e17f210128ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmts.inf_amd64_bc07e137c52c529a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netbvbda.inf_amd64_06bc8afcd2617abf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sdflauncher.inf_amd64_1ea082c6cf8f6982\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\F12\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAll\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcpq2.inf_amd64_2115846fffc22bb2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\whvcrash.inf_amd64_1173082afb4becfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0019\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ipoib6x.inf_amd64_ef71073a5867971f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\stickers\word_art\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\reviewers.gif	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\es-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSectionGroupMedTile.scale-150.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\en-gb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\ko-kr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\WidevineCdm\_platform_specific\win_x64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNotebookSmallTile.scale-125.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppPackageSmallTile.scale-100.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-de_de.gif	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\adobe_logo.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\hy.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupSmallTile.scale-150.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\SplashScreen.scale-100.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-256_altform-unplated_contrast-white.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\core_icons.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\123.0.6312.123\VisualElements\SmallLogo.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\123.0.6312.123\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailBadge.scale-400.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\IC_WelcomeBanner.scale-100.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.targetsize-64_altform-unplated.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\FileVisio32x32.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxAccountsSplashLogo.scale-140.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarLargeTile.scale-400.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-140.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_MouseNose.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.targetsize-72_altform-unplated.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\avatar_group_large.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailSmallTile.scale-200.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\InsiderHubSmallTile.scale-100_contrast-white.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Voices\beeps\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\sq-AL\View3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-48_altform-unplated_devicefamily-colorfulunplated.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubMedTile.scale-100.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GamesXboxHubLargeTile.scale-200.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-64_altform-unplated_contrast-white.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-40_altform-unplated_contrast-white.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-black\MedTile.scale-125.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EXPEDITN\THMBNAIL.PNG	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\30.jpg	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionMedTile.scale-125.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppCS\WebviewOffline.html	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\msadc\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt-BR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarWideTile.scale-200.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\br.gif	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\ja-jp\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected]	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml\Assets\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\Logo.scale-100_contrast-black.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\eu-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\ringless_calls\Ringlesscalling_25more_360x120_2x.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\InsiderHubSmallTile.scale-125.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\ZviewOverlay.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_en_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-id-connecte..t-provider-wlidprov_31bf3856ad364e35_10.0.19041.746_none_1d7b3edde1954a77\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_wpf-presentationhostexe_31bf3856ad364e35_10.0.19041.1_none_c9c6a551071df37e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-g..linetools.resources_31bf3856ad364e35_10.0.19041.117_en-us_722d861e05188bb1\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ipxlatcfg.resources_31bf3856ad364e35_10.0.19041.1_de-de_d3d414e9400ec4b1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-lddmcore.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_f3792d61a860ff09\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hyperv-compute-host-service.resources_31bf3856ad364e35_10.0.19041.1_it-it_a5d0c7e714cbf257\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeWide310x150.scale-150.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..ncredentialprovider_31bf3856ad364e35_10.0.19041.1202_none_dfbb9429d8183336\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..asconsent.resources_31bf3856ad364e35_10.0.19041.1_es-es_5b2f2a8cfd6a78a7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient.resources\v4.0_4.0.0.0_it_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-cpfilters_31bf3856ad364e35_10.0.19041.1266_none_ac30c50e935fa5b3\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-n..tion_service_iasnap_31bf3856ad364e35_10.0.19041.746_none_61c8b5a8e8547fa8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-shwebsvc.resources_31bf3856ad364e35_10.0.19041.1_es-es_f1af456e7a4dbf05\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_4.0.15805.0_none_646d7347043be71c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..ent-xpsgdiconverter_31bf3856ad364e35_10.0.19041.1_none_c8dd830d8aae4e04\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_et-ee_c4ec55767757de0d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.5\it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallPersonalization.sql	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..setup-compatibility_31bf3856ad364e35_10.0.19041.746_none_4e1b852ddd390c0b\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ngc-tasks.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_537b33b876a0cfee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netrtwlane01.inf.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_8cd48ded78b8e139\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-internal-ga..forcefeedback-winrt_31bf3856ad364e35_10.0.19041.746_none_d2aae18668d5ad85\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-a..esslockapp.appxmain_31bf3856ad364e35_10.0.19041.1_none_eddf8132c42e0857\Logo.scale-100.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system_b77a5c561934e089_10.0.19041.1_none_9b78698aecf8304b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.0.19041.1_none_ba07e7d29d116fbb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..entory-data-sources_31bf3856ad364e35_10.0.19041.1202_none_ed0a39578d5fbd69\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..riencemem.resources_31bf3856ad364e35_10.0.19041.1_es-es_b54603029f6f3d6e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wlansvc.resources_31bf3856ad364e35_10.0.19041.1202_en-us_b285b6e44b513a4c\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.workflowservices_31bf3856ad364e35_10.0.19041.1_none_3dc1b394afa03a9d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-s..-binaries.resources_31bf3856ad364e35_10.0.19041.1_sr-..-rs_3c7b8ddb0a8496f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare50x50.scale-100_contrast-black.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-ipmiprovider_31bf3856ad364e35_10.0.19041.1_none_df7f622f65287420\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.19041.1_ko-kr_8c5761d758a6e4bf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-ie-f12appframe_31bf3856ad364e35_11.0.19041.746_none_89e4e793c493457c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-netman-mui.resources_31bf3856ad364e35_10.0.19041.1_it-it_c99014750db36e98\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_multipoint-wms.coll..lecontrol.resources_31bf3856ad364e35_10.0.19041.1_it-it_4adec832b0a3be61\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-photoacquire_31bf3856ad364e35_10.0.19041.1_none_8e08d696f3c26b59\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\common\DomMutations\images\domDeleteAllBreakpoints.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..er.appxmain.ratings_31bf3856ad364e35_10.0.19041.1_none_ff46bbc9afee54c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_663cdf6ee0476498\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-o..layfilter.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_2a1af523dbdb6378\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-systemmanagement_31bf3856ad364e35_10.0.19041.1052_none_d66f8d1a8186f994\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-wmi-filter.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_b1caf9dd45639661\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-h..nt-events.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_369423dfa6bb1795\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..35cdfcomp.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_3424e955efd79eef\SqlPersistenceProviderLogic.sql	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_wwf-system.workflow.runtime_31bf3856ad364e35_10.0.19041.1_none_1b0beb1d3f648059\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-hwvid-migration-2_31bf3856ad364e35_10.0.19041.1_none_2027648826bda8c8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_amdgpio2.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_a999fa077044a374\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-fax-service.resources_31bf3856ad364e35_10.0.19041.1_de-de_e7ec241ca624202c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx-wcf-migration_31bf3856ad364e35_10.0.19041.746_none_3531a4b299a0b78d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-w..codec-dll.resources_31bf3856ad364e35_10.0.19041.1_en-us_41caac310a838eed\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-web-http_31bf3856ad364e35_10.0.19041.746_none_e2aba4764359a06d\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-e..mgmt-mdmdiagnostics_31bf3856ad364e35_10.0.19041.1052_none_5c29d3c6f976adc3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\INF\TermService\0410\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.1_none_03928ee4a9e5894c\Icon_MMXresume.contrast-black_scale-125.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.build.engine_b03f5f7f11d50a3a_10.0.19041.1_none_f989a9899f80e362\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-filetrackerui_dll_ln_b03f5f7f11d50a3a_4.0.15805.0_none_fe69e989bde97a71\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\common\Grid\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..andprompt.resources_31bf3856ad364e35_10.0.19041.1_en-us_3572ebbc3147b987\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-spp-main_31bf3856ad364e35_10.0.19041.746_none_c240418e0bac14d2\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..icesframework-msctf_31bf3856ad364e35_10.0.19041.1202_none_ea83dd03a3fb7134\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_mdmpn1.inf_31bf3856ad364e35_10.0.19041.1_none_aa3b7bc79aeb34b0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare44x44.targetsize-96_altform-unplated_contrast-white.png	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.BlackRom	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.BlackRom\ = "QDALZBCHJGTVIBN"	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\shell	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\gR1Du2FK52JpPx7.exe"	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1045960512-3948844814-3059691613-1000\{D33BD399-2239-425C-8AFC-22817E60EAF3}	explorer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\ = "CRYPTED!"	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\DefaultIcon	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\gR1Du2FK52JpPx7.exe,0"	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\shell\open\command	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QDALZBCHJGTVIBN\shell\open	69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4968	explorer.exe
Token: SeCreatePagefilePrivilege	4968	explorer.exe
Token: SeShutdownPrivilege	4968	explorer.exe
Token: SeCreatePagefilePrivilege	4968	explorer.exe
Token: SeShutdownPrivilege	4968	explorer.exe
Token: SeCreatePagefilePrivilege	4968	explorer.exe
Token: SeShutdownPrivilege	4968	explorer.exe
Token: SeCreatePagefilePrivilege	4968	explorer.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe
4968	explorer.exe

C:\Users\Admin\AppData\Local\Temp\69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\69a4edafa563fbca38e1a73190b63718_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2344

C:\Windows\explorer.exe
explorer.exe
1⤵
- Boot or Logon Autostart Execution: Active Setup
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
e95eb00e34e73b1806c715f966dc8ec3

SHA1
7d57c7a2400ecaf258cef6311a23aac7c2473374

SHA256
ae29e56da71176475b20f15c00b0b7ff446216038917065f2d6fa030dc33112d

SHA512
7d08178c783c6d590c21be67e811850f9052925ad331823a5aaf2e85439e03ed9dc92568d3550da9ac1ab10e91c98dbf58248bb919ef3556b30ca8256ed7b562

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
0e79e2f2a61cd3adce7f9f9565a3f711

SHA1
6175d281a103aca6e039a7f8a53188eceff61607

SHA256
01ca6d6be47fc4b4867d6dc935e718025d266aa5c8696965c0f600e0e0e08e84

SHA512
f557c74fce7b428a3a6862e072800126c8dc4ff4993d455ae1235f09b1797d0b4cc5cff771d72aa3c83b23ba18726d1902bd6816f7c7d2fb20cd861b9b8aeb49

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
0ead64a7e2a19a9e476fe4f8d5367520

SHA1
09c65bd459428b1cb986a35341b6d3168719eaad

SHA256
ce74c7173b4a89ef397efa73b345b460c068611315395a68ae64fe6d3db4c044

SHA512
d553188a417ea52007fe5c0f960fe56db792014bad3e4129a02d1143bacea86e42f5c750197981194803d55846eeb6600f51a44e46f3b38c4b15b25f4dee0429

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
4f934f6f8f7a1d6c10b707087ec082c7

SHA1
f861f983e459f60b1d9a350a6f821a1018693913

SHA256
9804a74aaa08511658a95ea9a473fe00d9f45838c1cc57e77ef6491dd5675971

SHA512
cc5126ffc4de9b3e110129ffe926155e6ae645c59195eaff44d2df330259c7b9874d1a50645781ebc89dbebebc893eebcb16335c0827427cac979e3848360ba2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
0f2d09b43890689870521a2edce741c1

SHA1
7e53c93cd588f00d194659dc72d5140612de207f

SHA256
b2680bee80183c7584e5eb539691e40bccf6704082690caa7fd64f347638bdc0

SHA512
8607fbd3d128a13d07db92968b4fed77bf180d55161efce07f5a7888ba3cca246ade4a03daa0c624e3863841d8ee38d586406e3f94665f66a60a2b39d08f483c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
ffc67fbe009f6aec484c8429aaace15e

SHA1
a7f4d4823f9921c3848e0831b91c9b189ccfbe44

SHA256
1dd33fb55e562a90fe7eebfdcd3b6f0db6ed8b74ce3da2ffb520a27ac8d55041

SHA512
9baf6482810193efd022e6c768b0869a639a0e5a05406722bc680309a96c2244324949818c0239072f02d6c264d0a637867cca12c947f86048a9fbc0dc97aebe

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
cbf0af727c7a3e38c009699cc8eddca7

SHA1
67136ce38dafe166ea00b5e6d5649449ea6ad7f9

SHA256
a742c9410ab3bdf41baeee292aa7144e4934684ccdbada8eb046c2f2a9a9ecb1

SHA512
78d14b5b7d8355b466a195c07f61c4afb942c0a0a9a1ce4520c0671882cd496fc5ebe55b116d4a83f8b42783e25bbca1f55d53236803f12ff5462e7fcde83682

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
2e85ffc47f7c03f722060a0b8645b26a

SHA1
33077c3dae5cf474cbe2b61040e1f35039ae995e

SHA256
80949a88021044bcc7df25c54960add098afe6c8402b5b45b6e7ca55115499d4

SHA512
c1180f924df9fbba5712bf67aceeac45a3e3f2c9e1d1b6ce775a1ac12134421e25c42c0248526c5a637f2d4c327bd1ec67eebe6613fb0c1b0e352135a02c6d26

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
79496d4f80165a1118a836b9cc65e723

SHA1
6587a40933f8836b3ecc35edc1969dc0ee1d76cc

SHA256
2560827f03ac7fd7387fe6f8e0f6f92ac05268135e940e131d37f351f6af3863

SHA512
d457853001013519b11f43be1b0a1cc88fd4925b3c1dfb5dd884e6274e8650a7c9863bcab29e4228fc145249237393132ff13b3c632dcd59dd1c9c67e3a7d86e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
f46bf7c2ff8bb449449ecf4fab6e5df1

SHA1
f5f7cea4c6ec740db117e8a5d113286cb618119a

SHA256
ffce58c90ba9abeec09b34058ab7fb11c94862222db84dc1501242e5101f8371

SHA512
31f3f375374464118b5b5960f53cfcb95efe2ff5874af23a0be10ac1a9d87d6a8271f060d01ee1cc97c45bbc75616a5e877e94eb9723d5ba2ab8aedeb05378f0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
da35625a8491549e858213f388a67a80

SHA1
7ba5ef01f95248022cc0cf00ce251f1a6949f3cd

SHA256
945c8c95ca6719589242c00a14254dbf4f3070fc57b889faf39784cfdf2623a4

SHA512
648f7b04861869dca8d3d4ec91118beefea91f63ee325062e80603d54897be139dc7b30dbce947ed281f0b963921ec200c5c2328651d08e279207e8d8b775aab

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
645e938436cb258a7051a01424b37e25

SHA1
da41a673927eb9f12c83efd5b6a466b91bf58940

SHA256
efdab644a76b6d0425cafba82c3e688fb5469d0de7350c5723a6636a48ed5207

SHA512
cb1ede07037b24612d5a6334377d7164dea8e3512dd2556fe907abd458e070231d403e28af8c282c7b10e1ea21ea3b1820b195446510185d7eff4efb95ecfdaf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
4b3d9a5bfa2a47d40b1da5434c6a1dd4

SHA1
81c314240ee7376737cb1ab7021f882699fcb2c6

SHA256
27d6e03ae1e83b98ded88be11ffe1187942f73c11f6df58ea02738328a68b661

SHA512
adf7967aca18425f8ae692ddb7661e428cccfc7e80a67782a0da0c6ab67ad514bd6ab5541a616f52e98d11017029183bce4859d77c4d411cfdc03599c2d97072

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
6ccce8c520cf65d91a0cdfa670b844ed

SHA1
19487c8efc637af4d0de874f6911dd5f2fc5a7ae

SHA256
264e0fd90d134f4ff1933bc651a8642bd7b816e2df6c4b609576e137f4028d65

SHA512
ea85a70bd4ba7f68ece70ab1fbde35b3b95328f77a9647ae1626889cb0bb2cbdcddd3efce2c586e84bf37bfecb49bf5bd383ecf997be9242d9ac9c93d1eebfc5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
c5ddf9d92e0525c670edfcd456fcab02

SHA1
c2b7ea9ed206cc801dd8e257d8ae19a7d29c255b

SHA256
0fa4536afef99c045f8637a5c0e7defb501ca6e6700b6c6b04d2c449cc0c87ab

SHA512
2bc65e7c8090241f2face6a9f65e21f0f3b56ebf419f2058af1bf52b32e2531d3be27b8b21807b76db5d6821840ce329559b27289b81df3f2dc278a808d2cf7e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
53187d7106358916cbca3865fc42c38f

SHA1
2b01cc402f7f29d473f76aa82270c8cddd25ef25

SHA256
3dbe050ac5b3b6447257e914c67adf9dd61747bcecece326369543d7a686ee39

SHA512
b7ec97529bb3cacf739166d5c4d716e19cf1dad09f3ebcb28033443bf9aeed28e10e5cbf9d12a21cdc6f0e0ac388fc6cc1d078ece4e73e0172d7eb6f9941b734

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
5bf03bfc54ed8a2799680553b7d5da6f

SHA1
3ef88a9d179d00159aef81143ff77ab890257af0

SHA256
75edbb9eb6b62b88658e8200124fd68f7e3eb1e8ea8119c9f3113c0cf05ea018

SHA512
758de032d255d41495f0df9036f4d655ccf1db712a97ac3652ef291be4776482ce58c0a9c64bc4637ac2e5de1ef3b999f0c09916f4442854bdc51191475b982b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
dea5a664b4836951c7acb6fd60aecee5

SHA1
6ec3d3eecad6c4e32d8a925b2802ea570af499e0

SHA256
651e3caa8bac6b43888294e11f23cdf1c5a8d9d0adf0c52676052b44608fb423

SHA512
a988c9d3a5f6536e2415f5f036387056a41fb9c789fc0a7ca270b034a4dc750496abfe72624c306e815d2fae0e00dfc9092cac72a1b8ef5627f60232728eb181

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
b0b9780d4589430fc4ed43ac9986aece

SHA1
e2efd0163d6043ae4719a3b75b4c2587c5564589

SHA256
6aff2d748dd29d998f1f09d9600672e1e564f1b7c37a1dd865ddd65428e2d8e2

SHA512
f489c0c372d020e3652ca2c30b01c4eba7d128eb81c1e68dc230acaf85e6630f6cade25ccb7ce2435e73a0782311aae25f7392e25ddf76871a3333dd02753acd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
7516a521d006c36449f915fa22d9a664

SHA1
049d593bfd8506809b2d1e8cdb44542fca53599d

SHA256
0b569da5ffc2068348e776995f66d28422c2e9a387d0db67423236ca9848f1e5

SHA512
90bb613fd3600d87c40417a368bd12666e7355301313ae1f73829d7d1aeffad8b745088b23f4fd27fa252365cc315b3d95125660f3bbd7648a388c1791377e54

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
73889037a6f180bf5e2b73a8ac86d8ab

SHA1
b4405ffa423135a3db245913a0f83b9a5cf8d438

SHA256
e3081ed09fc24bdf2ed27b9f521285b080469265e10590d590b8289a6dc5d801

SHA512
0a5832b53e38cf9f34a658b3c2dbf156254e6ba8c1125d33d2d1d05febf700c4721dc4e9997b290529e0c648de6bc27fbb1035015c7274fc3b10cfe2a99b921e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
d24d1c32105681dfab169a831a5fffe3

SHA1
f7dc87c6fe2472d06f032a92c2bfacb9d30a3eb3

SHA256
002096071dfffcc3de31caaed01887dc231b9a38ed3f84ee422d2aea703eb67d

SHA512
05e3fa90cf23dffb139bb623277104d8fb88db784c7137c17447b5a4506ad8524b11ca1891743f40f66e400fd90c1a8310164e7a96295364c15f7eb8b844405a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
4f860524f48157c0784436965bb57a7f

SHA1
c226e86e1ca6114d11372dc7f3bcfb62676b5470

SHA256
dcf7efd7da6f54f32f7dba6cab56e58a011c216147a2aaf923598f77dda007e1

SHA512
5a6896c7e05f9401b8d0a963d4c88b70b18e332051157741d02965c999b366ea8b164049a75ec73913b7accff0776136b81b718ab7d29f63ded4b0d36fb94cc2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
441e13e74d9bee2f05d5420374abd7e9

SHA1
686c2c15f61281de1f00a303c481afef044ade90

SHA256
6833c76ae08c8ba1c073f3248b8ee2382e0f8ab5d3510bbf2dfb043ffa4c30aa

SHA512
eb1067fcb3cc89cd070015548a5421c3a87ec08f7a99fe0ed3a7ebd68c1ee2dbadc361ffdef9f80cb7989029b0abfe25700706b87af63e9c9070927f7076c4f7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
ae0ec312fc9e145aa2b590d9b25f4a3c

SHA1
ed333d2db82d403c65d57dbdd2d68ee16c0f2aa8

SHA256
1cfc2878a667bf5f22b6a9e6c20d448f0f3125e70133beaec461e22fa67bd099

SHA512
94340f12e0cad0460a4e59861ac9e79394d39f563609472204a94b4b1ccc5babaa6149f5cd7ef74f0347366c1baafbec7b5528f7e6981d8a88ac5c9137b66fe7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
1761bab7919a8600f7fbd533814e5ca6

SHA1
c5b0abd2dd3ff8fa114dbdab56aab1738d75e9e5

SHA256
cca8e09029cd08cd30366b9b030f7cb37f416d51306bbeb5cf899d1585c5b7b7

SHA512
9790f6d605bae0f79d00656e9a72597eb50c5292e5a5ea9da9154bd098d57842f4f787cd19cc40591963d5ab67be9e0382b13cc0d91e8f9074520ccd23abd98d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
15efaec48ea9fa65701ab0eed84979dd

SHA1
e99e4fea3fa115a803e02c980d6931fb18fdff3d

SHA256
f982a92ecadd04bd1c8d9e80c3e0bec86591cd07c07a2c7fa7450f1aae8d99d8

SHA512
4715373f4de74ad7b25b98c2ccf55c55f1c67f2819c4453e4d02794a209fe4f57588d06d79084ae72b5cefa78c226e1caf5721dc9592db61b4ce9ef28a2d3d7a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
f4199c70e50de135445bfa8bc7e15ab3

SHA1
bf3154d17e74aee5f836ae974af8628f7252cbe6

SHA256
f4e1516a00334d111748324e2c1b166d34bdc705378d0c9c4b8f49e685135d14

SHA512
fd91623a63ce5bb1e0e2993e2c1029249ac606be6795f6ca1564f14c08984500034fe8626c173f2cc3e5977d4122dd4c7ce5546283435280c068d205e0234a6d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
169c75dc6e097196acb775347233cd71

SHA1
a4e5bd849e900e5bbe873a4555dacec60e5b769d

SHA256
23bcb391fc27e6f2c7d494908f2634ef1ac92438c069c7e1cfc70e2754f0cd78

SHA512
3277712e35fab6c6ff2a6d586ad64dbb5187684f2ba7bd83919df6f46200303cc5d526e6deb77fbe8bb8eb95e43c5bc0514113a981af4fb23b50683f4a51ac2a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
5c3c776ebaa2ac99b6108a776af37f35

SHA1
90cd041d9dd568539412d1d8c6ee4b8cba0ae577

SHA256
9a4cc929656170a7c270c3fc0c8d1411d5071f0aef783091938ed6add6faebf5

SHA512
8b55b174ad03e7a9fe3f2eac066c11a1b21afce34548feddf46129796a6afa6b9c0e69988e527416bc811ec127f9c91941a9689071276f35212f0ff063cfb5fb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
f279451086c028e9476baec71e14c02e

SHA1
0a185511a11d0203a41f50aef1c08a3a73a8ef3c

SHA256
fe0e96c88438c9e4c491bd20051c9a7b5946afff0cee5c4652e70104ef08460c

SHA512
20fb5090b3c79d7b48960bacb4216d99dec8212fb175e2926a5595f41e831db5481a300133f7d5b025db8a8088426a119302f30518ac06376882911fecd0a0b5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
1cf602c5fff7027296197ffd44e6632a

SHA1
d11c5dfcafafbbf4a46e4ef59f25ce52f6fe90e5

SHA256
3defba7f563ed9cd218c2ccff6aee368a964a9c6c83dd55e0aeb58712f13e806

SHA512
17bb209cab0a44457841314415d155ac837b9699b3e84be4d1a3610545f79a032b879a48de70a602d7dcc57a3e91f91800c1126605f6b1be2b4d17fea62d32c6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
be6659faae14184ba536f88e2cc41dda

SHA1
fe396224e91082445297a043bfb277cea37416e5

SHA256
001e749d8fac3ac675e370aa5bc13ffd61d8506cfc9be1a09bfaca6d02305bde

SHA512
320582c45fd98ab255aa3d0e211f086e89405f135f5424e9e191f421c97731d50411fe8a90bbc4f17dc6850d351038c27f880a5ba220856aaeb65ab5916df2fb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
b70d22b9d1129817d65e8142adb703e9

SHA1
2273fe43198472be9c9623b927316cff448b4221

SHA256
c6478976fe218a71a3d209c46806c3072e857a61f044b9056de1cd3c25cc10de

SHA512
54eb1b40090056eca08bada478e82fa4a8d814266607c1cdf02bee49dbf6661284ad73d551aa9526d53459d3c6d8af0aa27adcb1cec8608f70f93a31d150f761

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
403e60e14bbcba261afe73c22a775be6

SHA1
454a0d5f669da23032f665f049ed64d0189ef295

SHA256
964879f28c996e62eef7c898030493690db9be8298830802d264ed5ee80c5735

SHA512
372ae7b82499bf54aadcf123feb4f8abe5bb3fdbbc674c6fc61303edf2568eb6299df760b82462c2dc2d9869ff5dcb1e772f53875a1464f465d208479aa71707

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
86e1240deb8a1dcf10a8b648ee6cc405

SHA1
962a10974a077a4e7ceb18eba086c7037c2238a4

SHA256
f9ce6c7c2ab8772061576c9a0d0da402efffe7139b596e371ddbd2a3363106c0

SHA512
48d0869c9ea6eeed8c8089a3a72b72aa843ab93224dd4dde58ba8de4fa1cd76cb4d2ecebd0c7abe7d29ac8f0a3a34b653d3c35602597205dd37d79c74f59db99

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
c5a087798b0eccf3be9f3be50267bcbc

SHA1
3bc2157d484f8fbcbda9853427c280a7d06f69cf

SHA256
c5ca461100c7eab592f08e94e928811de9da55323ab08da224e3c5f8de6be660

SHA512
1b5a94f6343519fbec8caed94582b8993b69b762e3b5e322cc5f1dd3aba34da1bb0970900c9dd17fd56f61085997672dd0914ed0f6dbee9e9cb712a396d268fd

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
55e45e171a2cd1d34d538c7d0c2a13d1

SHA1
b4bc5d5f9815eb34695f2a2a01af8a502082b30a

SHA256
af5e6181e39d977d5cc2ae49d975f1f68f52b5a914f14403b8c20cc6ec2c96db

SHA512
f6cb05908dc6514fee695542266b4ec82b80f5b06d8eed2c3d9c8a7fb4bc5b1c91c0798d192b80d82fcbf1dab4ad36f6260ad7913c6924b6324ad54f7a886156

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
633B

MD5
e913624ee150c0894d6b42c9f1b363b9

SHA1
69836370f2e7489564c1fb8a3f87e7d1c7003911

SHA256
cb9ca5237f9ed9a02bdf97b20cb6a3385a4fda8f25ca931e99857f650990e6e0

SHA512
19572e9df9eee03a493f32682925f0a6d3a22d7322cf80c14f2aaca979b2dc6f66a0208290e0231a572ed2f1a9e24f26718ba83887a36e05ccaa01197e9c5df4

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
8db5bdaf51654fc325df34ec406e35b2

SHA1
832d7449e6307253ca84680c8a6c013351fb6af3

SHA256
cfb657a0caab534b47af7960a6d11dc475d6caf04423bf804080a8aeb30ba68a

SHA512
b4bd4fd025dff73c567812cac2480aaeb6f2e44516b1265ef9c0115a648cf527ae9e0457183335d1d143d8328011461f1f7059e3015a2d6d857daf217b265b19

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
0b87e3d469901ed438a7c2241c1c7d7a

SHA1
6a28a037fc42bf5f1c64138e4174b226f47c3d3a

SHA256
59a10006663afb202e6d56d92b23da4e2166923f30b3b16107e6364974e980e5

SHA512
e3f5491b38715430a9d5c6df2bdc83d5f6b0c03fc3d83994f2895477f2543b603f5ccb4e739ddda154fc2cb904a9cf881bc096524e12d462f117fe66282f3214

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
0eab78e6dcba07aba0ae00b2f9095a0a

SHA1
7d6488c6bf584bc590d742e3b66ccad3554968b0

SHA256
f2aa0d75ef123c703879b27616a6c7c0019dc543173aa5bd469d652246af7856

SHA512
e977abefaa4570cc3ce3bfb91ad85deaa356067c1a60bed97fd0e0ef873ab9fedb812aa170cdd9c68470f15e29a203db53dea964007377f8c718a6c862d7c789

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
5d68dcd54725f9580eb552416c602fff

SHA1
91f9742dd4f1a016acb0dfb535620e0ee3c0c7b4

SHA256
443cab3dbbc83ac9ff8f1f3a2f6a854ab917a9954fdbdbb7c4d125d45ec53832

SHA512
fbc7c2adfdc833111e91fdb4a77c7abe0531a3accd03b1744c4b68a2aaff8e172fc71ba662c42e67c42b186791e78b453f98c2fb13865e2b2cb8f6e563ffac39

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
01a3af38c40e9cf61bd8aee80a3b3a4d

SHA1
d6441ca805439edbc5fe1fd9e1ea210fa80b2fca

SHA256
eb2b022dca65bfcbebf08f936956fff4858a5a6d3ceb50f195d62bb7008c4de9

SHA512
0943be8b2aae7f2d19e30a068ea943f63f32b74aa4a5a7054995f9d22b058a380307240ecdd8d61bf08f75d41c15e6d1681bb154fb1adc076d062f00b3315191

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
3105e9abe320a0409950ed632f5c9816

SHA1
c8bd2ae7f9550d3da9b25dec58a4b0996551e978

SHA256
54f059bf1d1fb2777372a1d3f0537792344a27e2498e91291dc69ac2fd639c5b

SHA512
529cc09d39b9a42ce8b4fb034ce6258c91eecc2c8a744125615c780e7a04693e7f3b92a506785714e692eab2e2b9e416625b1618cd338ebac4465e3437c346d0

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
2830e1d8e762a4e2fa0c8df99ac52e67

SHA1
54a98b03be6b57de94aa3fc960e9de5c51e9346d

SHA256
63da554d4bbabe8d4b6f7d4f69d6938dfa703b4aee2e16fca3288a335324a14f

SHA512
816e34bec92729acde9f0c9f54fa85460f0bb8cad4a81291054382a364f2b834ba5d95f1b3735397646b9256c7cdfafcaba720c9ffef635425d58484ec6753c1

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
bb31bcde1aa6f6acdce628851c142d9b

SHA1
54d57880d5276a3f2aa68eef421e16f9dbb14677

SHA256
810a7a42e041976307e1ab686d3c38d8f4728637a46d65370411789685c16507

SHA512
af4297494f6e0e60f053f2408594fa9006771eaf532ce87739dd9e598c67f0160bd05f01b9812efc7cc178f3f9d85b545e3a55f79efb778e5234f9938f0fa154

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
dde42d76e42a32aa2ad939416ff3bf39

SHA1
4674f490d605df012f4caff500659e4d10891233

SHA256
575547184d04208290fb3bdc4321c1845d5fadbf68811ea06c4622f2666ec0d6

SHA512
2e248394a7a0b15267b7168b107124e45d5c47c4f4555644e47fe207d05ee5032b090e60af7d9db3e75b0283e32a0a03c8d9d7b0dbfb750ac287f1271467a705

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
f46f0367ff17bc1c8e9327bfb1db0d05

SHA1
cd98f70cfb5e4b5e39e85d8152bf5635832115de

SHA256
9c8836d4dad8d11953958cde23d530b3083055095275a3fc3e3569ba98e431ae

SHA512
9d93064e52eb1d53d52e09e3a68aefa93d096654d3b97dd1b4c7b383f4a8bae52864ec8e01fd1d86dacf3e8eb06b8fca62b85e2c94d5866e72005c62290f60e7

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
381ea9f8fa58df5fd688f22133d44ba7

SHA1
843338b20b1f0dca01df8e1e1f0889cda33eb063

SHA256
cf82b255a0beaf71cc8202e3054995f03f11e6df3bc5891e3b78921b3e7dd8d3

SHA512
08f3b762f8df5aa01b2a6ca9ddd3d03b52387ff42e6ef1494c5d8c56f7e1ef3fc1221ebe1641a237e2c63f05299c29aeabeb37c4b5ec7043425074c0e0e90571

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
b180450ee8c6157e3a67d3916a7ebd58

SHA1
a168d788410c056d2b760ad8a96fa03adb7f7892

SHA256
1c746a07e9431512f5f9072bfdb8f46f92792720de23d0f9a0ecae217b2ab6c8

SHA512
57cf8e19d37176177cfddcb96ea424ca2738db294aa07f8940439965aa3c590062e1a4cb09af60138cbd2880072b821f348dbc269a3521be6f00c5da7570dc28

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
a1932abcacda546d7e2bd679f6e27c2c

SHA1
2ce81466848281722dd9962eaed1ca36716e24ac

SHA256
39b871be66a42f90ef0ccbacec257c31c884e37ea23492365be2121b14cdf6ec

SHA512
f9303f96df1b3d3b8222955b6990603586935c2405eb4d43772406afee805493de632511f2d61fe2fb11667dce7620f63fa0d27cd9938038f5f199e5af181c1f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
ba1f420b3fe3ffbbc20c65b37060c836

SHA1
d1d5c9d87803c3ff12e61569b49dceb9dd9f4791

SHA256
bf526677967552d648014d34f374fce4376d87bc1c374cf28194edabfc3552ed

SHA512
6462c40971e6a8f304a286d1ba02f96f6f7ce22a96eb3633edda6c59c8d308bde0d2bf01d8fe279f65a929d4a6bd9b1e9fcd57c2227a683e5798ec44d57079e0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
7485a8c0a73907b023c38fa6becc486c

SHA1
726db672ab90a46a8f981c7b00e2bd8c55f8fc3e

SHA256
17dd611017aa26f0cb520b07ed9c1f6f7ad864b2de7808db895a519b90648520

SHA512
3867f58223b0eabe3a93e1f8042c04c11bef76c526cb423ad1517a8c329837dd6c6aff2b96814fbd0164e935c5eb0c859e49694e77f3a0eeff2ae1ac3edcf6ef

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
7700682db1fa2e647f76e8ebe8e3920a

SHA1
ed03fbdfe7924241b695e4bdbe73c1cabff6a007

SHA256
e61f915927ec22093f4fa493969cde44ee2c199cd0d1c95b86678b20336a2ca1

SHA512
0b09e73cb20fd41e9d4abcdd7844fb8ee07a7b4f3e9946321737aa3662418775df0ce984252d805db9de775f42ef45059c99cca30dde73b2c4f3a98def21fd1e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
6c547fadb2d26de2a3bf5fb0f7ef9459

SHA1
9e666174d538297199ce5274ce359a2c3bcf2d11

SHA256
32b965e242153f2b7fe8377a2aaa6b7a62d7e03dbc1721a6e1f2b6b44a553afb

SHA512
ff26db9053a1f5bf210115f584fd3c86d9d46888d8d93d0c5f866e6d1508e2e882d565941a7b82983221b92eba441bd100ccb224df7b4722752419b15014e4a5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
5f2e4b4fbccc02fe0a76c0881cfa36f8

SHA1
748543e6a5a36f4addc633b050e3c5adcb5fb055

SHA256
6e1157f609d3fe4b54aedc5d543fd11fb21bc50fd20acbd55571089eaecf482b

SHA512
e2089e8c7dd53227d4ec2a433fbd70ec0dbd572bebf3b8b392f1b3f765811d58217ca67034279f722d91009a40eb20f29f9a665c69ebf6e65a080fd81fb96c76

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
c4a61a9361ba4d78dadd801e8f9b3d5a

SHA1
abc504193245a23cafd2caae5eedabb77c4fd5f4

SHA256
924288117862333b97ea2963ee16e271dc0d0a5ab1ff7cedcfc823567acf56d0

SHA512
6ae53d29af6d815cd83949420e2fa9c864d5d811d15c2526b70464cc827f15a07f5e5ac6a0b3e32dd0b4d3074edd08b89223370f676b155c0dc59c07d81c84f0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
3cfe2e14be7c5213ab82eb59c8cb8c37

SHA1
3e61d7526d7f0fcf6318ff3eaa71e0e62367ac1b

SHA256
b87f2e612eb53de6410ec6b54ff48fc768a622316802efc811d8b08ecd8a9dd1

SHA512
651968881d5b183e7c18b30dc00a85fd4239cb5c7aa36bbb5e46a8d9081055a7a12cf552be031157026c2b3fcda48fe3bdd62dab987212d078c2c4d4ffef6537

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md.BlackRom

Filesize
1KB

MD5
b222b2fe803716a90fee9b01a2a448ca

SHA1
242c5cd860cb9c3777bd684aa7b7c2b0d075464d

SHA256
450029a1d3ecff73d56b5dad71d8648a1e445ea475ce01f794bbe1b59a3af03e

SHA512
a7d8889806bbf1ddaa1729b164964197933bd4fed46ed4865955483e1304dd8150f5d79a418ec6ffad35eb473435c02ee2beef84103e2a4483f267816e27f852

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
3e4a17f613b81013864995b62bf5c81f

SHA1
c8b5280b38c715bbc73ab42bd91c8a67211cc112

SHA256
32a647fea85097c40129dc86b9c9edcbd62c24a5c5db3810f25ff3d5ca84378a

SHA512
7963423cc066712aab23beb32bd963c928e9fde803ff9b7b9a8b5c8430f5dabe64c1b3d6f2f20ee389142fabb813dc1c98336a1d1ab4e4c005a87f9b71d4f13d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
4a93474748e327fba8da388614c18309

SHA1
69af734b027b82c4c6efc91317520fb7594e28fc

SHA256
a449148833671872a4403a8bc3192e773857c535c921eb70dad91f6c28e2b326

SHA512
258cd260eb3d605fd4a0cbd1cadc4dec32c7ef3db356df818845ce94e058ed32bb1e4b70ffd066475af5ec00e2b44a7b8f41a75ae443ec78d53645b95a9e2934

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
7debf71bbc19cd792d51f42f3f8ecf60

SHA1
9d630c2c7cb098d2bfa5ae364517f5062ab28361

SHA256
aa7cd82db7b4b411232b0fad9263322e715b64f0245e4b90eb58e6ec28dd59a0

SHA512
e8cabc3ff2479bc80b8681657d593cba609c6e2e1c504bdf8f982f5624631c13ca588457f5394c4a143f5a3c3bc29d20f103181eaad8b586d8b6613d8435fc01

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
5c4262140fdee6aae1f8e9f4cd1f492f

SHA1
64b303cdcf6401e35081fb7b258f9ae05391c4d0

SHA256
8b33935083775dc995fb837e7f802868f8c1d073a7463c63869926e87e257ae9

SHA512
c62da86dc11cd00d767f21e06d6693cc3960cc162aca39f7eb447486d11c52365f05067b7c062ef357cac632ff1793f7df85c061c105d6d8fee1561cfaacaca0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
3e58826ea19e7e18a3386c678ef6c544

SHA1
391a6b18988ddd7de114c07469a461ededaa459a

SHA256
04d8974e0b9cf5641fcc09c3b69603cdf79fe64aa492bc15f1b4b5842832f249

SHA512
986c87d22e24ef5c41ebcaa27aefaf89e48012e6a9cd82161ef5b01cb75c065266f5ec57584f7954b67e1c50727528e3cf7b297845f86c8712e8e2cbc7812e9e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
2820e17bb95ef27201c0564d26b8afa5

SHA1
259f28d4fc34f569fe72907357e3b0c1f2630a7d

SHA256
681fdd8edf389c72596948b56ec0aa0ef008ece1520f46a6e4ca1817baee51e4

SHA512
b2fa1af1e59c74816cb8db0eed611cad9b1d50741f5cc288e594c4cfa44deb62ec5a472c7d922fd692bcb7fdb5338f0974450a4219dca79fb707f291886b1d3f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
2bedb987bfbcbb58e910af5bb6de55b8

SHA1
04bdcb57c776ffd6d71acee4efab1d5e53ae86e2

SHA256
8e1769d16042639c21c7c01c1d298fd663397a3a3b883181d9297a0b50935292

SHA512
68fcf5580599833dc3169ec29130a0bb78022517935061086fe712aa3a0972c274c274dc6b4553b6090e2b8b83573de58dacc7d68637133e7f4ed9c8aa756099

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
4ccd2c4f30a1ea3667e1696df04461a1

SHA1
b36d5461fc21176bc499a6117e64da2eeaf5dc17

SHA256
c0e5fa4d78a4bb021c64e5048a01713a1e7c8db49c83116ff390759d19cc3a45

SHA512
baa019b6877a4e66233c1bf96b71219439bd0055ef584cd9e9ffffcf11ddab3485d73fa744c144a6d9f2b2858fcca14c393aba8416cc0cb6bc9d12a55df0ffb7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
124c6623a2476206459de50fa580a6d8

SHA1
b93015b377825d059d7c0316e8dfbc7522323530

SHA256
ffb203cb5c64339a687a6b971ff9575c31df6627609ccf25e6671f974d4cdb8b

SHA512
b8b33dd6bcc46db0dd922776418ee17c5c5354becc256183e2f330c266783fcccce594560ba62d1d4aa2ead7a64a631340aacb3b410d0007c8619afa6a1c43da

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
faf1395cde3af404b1d1337b45511ed3

SHA1
9b269b6e1c5c624b9d4210687009f5cb34d714fe

SHA256
d9bdb5001a0cbb0ddfbcfefe90a775f571ec0353699e9c418c9fcf42d3aa472d

SHA512
ef5e9e232bfc937da3570fd3727482bedacc112b3ce59d42afd8c61529b7d6ecf26259f21794b122b9909d89493cded5a80d1dd1e7520f75b25116f83cda0502

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
245ab5cb847dfd113c912883047a8ffd

SHA1
d57aff9a7384e27a287a9dbf293d13224c7d4a2c

SHA256
1499a2cc240d3b07a48f917ebf39551f6dc21df02eb99d8dec07a165e9c528f5

SHA512
e27c9576c10d4b3be5eefeba35d30c925ce16a084c8c3bf1fc3e60139db72e7bf2b57b4887b8aee57bd4f919b86e48dfb736098b2afd4573a89e6a36358b077a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
28b760ee740fe333e7e8f7dd24e5577a

SHA1
57f869e7d239069af8517021ce48b4c367b98980

SHA256
57012f43bc44ddaff747c4a7930150cc52a36268a9a273e2938f85776d85c76f

SHA512
288b5dabe5577245ea2a30d2b6dee62475e2adf5f69d646f395454da36c2d7d9a897c13e775bc7c8ca46f319f853c7cfa1e8e22693713a814993370654b1775d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
35d4ad4d28ab8a565e21ce0b0994b4d8

SHA1
b9dd6958324b87b5fc5984d45a45c8508111e7b4

SHA256
a7dd8b1941c21587111a0ce89f199f81300874e1a4b9d9b8fdfd251bae378095

SHA512
679d136d8d936864e9b634ed4be6c7c29e2a65de6fc262f021d688aeff51b43105298ee240282bdd7a9e19ce52fc0e8790ed0603218fe2805c0d42d4f58cb23e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
1163cc38852b6f3fd204c6dc5ca0820f

SHA1
76931840466a56c78b65553b828cedcd2117a399

SHA256
71be8542e5337739c0b69a109dfab0a6015714d60ff1eb8ffe4eeb3e668dfec5

SHA512
cfab97a847d558e2e6088aba461c950435b592f28a740fa055c1c536e1e07bd420b71474252307ccabef10c2c92422565767bdb88c028811b8ae9dea0fdae439

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
c3be692040f274a72801297e1341e358

SHA1
9586af08c2affb2b6395ee57cf80a0e1143a36d8

SHA256
0123e58cc90429f4ef1062ae020a20ce9ffca487af887567615f07946abb9638

SHA512
c50656232904ef00f4be225d99c592602c43fb5e24c1284f39e7f7ffebd7a12e1c485b46f6e399ad7c77e5cee21b3501064638e19193f65dc617fc0d3d0070e8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
ec47662036b63539b1ee151aaa54e667

SHA1
0e9e775b33a966bae01d1b6026344a646edfa4e7

SHA256
b4805395739b662da5f8138a69389a423d52dc479c6da0a5c541dd77b5970051

SHA512
08535fcd2ab172298aef758c11418e25f131f389fd9d445b8c3ead39176a0046ca8d966d6d8d9e27231d132f84c7ffb367a346bc60462b6bfa180e3c06e0c34c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
57c9cfed90decb345458d6d8ac492618

SHA1
b948e74e863a156159acc20113a1512a4499fca0

SHA256
8c7f9c79cfc2bc04405c13179af9d26d16ee2842706653c6620f7dc6d98c569e

SHA512
04eed83e7781605c68883043ea7b95c39246c7804990f16b90438ad5433a794072624ead3f04defcb61fe29ad937063f1458604400c86d36740dcd48a326e75c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
74246b814f1409e13da69900b54d84df

SHA1
d00ec1f946dec3823d6b3367bdcab8d6994d9f2d

SHA256
0ad65ebb9d1261d6f844d01a149a6675822c55c384360d6f869722438fba8c5a

SHA512
02fd9316c79e170a841ab1682c02bc3ef4d1b6b334f88b21977a9af0fe2b5f1af0f92df969f066848ab8853d4f39a3b6d65ddde10f5235ddefa52ac79211ca22

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
838c6a5012bd289b843382da597a7865

SHA1
c371024b4d5f564de743f80b6b85978f57f07166

SHA256
3e3802be326f571f8eefe9059c1fc3c6b6a6dce57d5fe584978e72d62de956af

SHA512
9199e092212fc673a1a91d50c15124780d1d4b3dfb8b14e1e0271db6e0dc97f218566ea02d89f6431b01c6f418363e3ec5064ff43eeed66ffc05c65e1b786ccf

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
ac5fd0dc6d8cd1ed80120b45c22e3e39

SHA1
4c2c4779fd065a821d3e32a73a9a6d1ff21304b7

SHA256
baadcab6933c79a917cdac4009807261a345cc7581f40fd5a75b426a720e3172

SHA512
5fb1c430ddf1984ae46609268cf3059f09fa02bf5f107fc00210d0d1a84a798ab1d582dc32964083b460309f20bc48c2a25f65c5a9718548178d69279922f5e4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
3d5884de968031074cd92faacef39545

SHA1
5a9bb53415dfbeefe171eeab105118d59cbd5dcd

SHA256
3a4706a1da69a81b5643ea13cdc076172a6ef079136c4dd5e252afa2e41cb8c7

SHA512
4a5f91230103b8059f21770591437e0cbba4eddd8e339c3a8098915a40de3635d0d4c3caec94579a747b51d704497ebb30c7cd685babb53b6ba244eaca118f83

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
441de4c4546bb9a1d99d2d05746ddb96

SHA1
fd21fdec14d0080fc2ec5641bb87b2de390c4873

SHA256
b50ac3175b16a1d5a964edf02679488a2a8c75a982e83763b9770631c03fdd01

SHA512
334f5dde45e02d840818e0b76e4bc55476371c9edfecad29d84dedbf2ff11e208a4670a3baceda3bd1da05b326ee61bdc4bfaf2068125bca1578c1d7046d3f32

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
aa0886f9a17cf945ced9f2b2bb1d60e9

SHA1
50bf2d98487732acde1ae7edf981a9731909329e

SHA256
eb7dfc1555b61d3ddc0658983f2a94bf16fd085ac706b2f0ff9c6d1fa5a62493

SHA512
9aa720b283af41ed4ea6ab4fc95f6968d20581495ccc1f7bb0bd332672c9603560aeabce1e2a5a407c8573e64cd920cc56bd53a8742d46189e188cc887e47199

Download Submit
C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.BlackRom

Filesize
622KB

MD5
e9927c262185ecc6186bbf458422f5fd

SHA1
ed898964c77c7c854a8f3c60c12fdcdaf81f962b

SHA256
1c81811c36590b6ce1c769686e81ee4b1bf9bfb6ea5f5b0b9f725e8497bc1daa

SHA512
550a8b32416233e6e280d02611ed1b95a733a3fce943d454a14e90e51ce12701e3191423ac6d59243fca994742ef63039de9892c912e306900a4ba5f136cf80a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727661992394667.txt

Filesize
77KB

MD5
7beeec70e8559ed9b56f161cd7aee708

SHA1
1b4a1502ded07ef607c594e06e6dd68213590948

SHA256
ae73efba77f19c723d7113736d3212b854e90b139cb6228c1991d0988ea78747

SHA512
afee1308e4df105242d3a383f7b153d154119edfbbdec003fd78cda4410fd78dc36b6411813dc4b708bfc19d98b1cb7dc6bc2c17dcf563768a7b4b61bd6d308d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727662487357744.txt

Filesize
47KB

MD5
b2ff4debdc47b71ea1b5644984409f32

SHA1
7840b717b48d8bc9d646a9ab5cb4da024829d4b2

SHA256
b423de95e406dd6aac401893c68075dd6cc77769fa7aab51693ce6f407dea405

SHA512
b923926efa8774903e5d06c955e1d582fe2b848301235a10a0ed8552dea70c2325ae4f53294623ae4bf939fecb05df70e84aa55a42add6512eec9083336f1cc2

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727667722373689.txt

Filesize
63KB

MD5
0f5b393106b21b04143fb43d32b4e8b5

SHA1
9aa66c7aa5ef7ac395b422ca27fccbc9c0fd5350

SHA256
7c09723761fc8cf55a3feff2ba5fbda60b86053f51e9f9564d00b8f6b895dd4c

SHA512
a5ed6491dd814d11a0852384b1e54814f0cc8e94e74c6e01ca39c7efb1ed8c8f53ba7c84ce23edd9c76e6535f40689034339339724296fcde00f00a3f73d5dbb

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727670771168387.txt.BlackRom

Filesize
74KB

MD5
8ce1c9721234c6634d20081340ef6808

SHA1
cecf6dd87a885f187042f1b269f981eecbde46ee

SHA256
1fbfb478d543f012dfd1f7b334fa7c2ac6c9a25fdab940e5e6e351445e946846

SHA512
09e1789817229dad69b879d468c30b75321f8101e2185a99365b7512102a0ba12713ba5b1d19253b0aeb62758c9a0114914ad03f7bad657d4f295009a31d6d8b

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
c3e7bf211b3864f30365cb4855179721

SHA1
b0a5626f90f89473f046b5a8635b1a6212afbf40

SHA256
873c4fe3621ca6964e0ecadf7a754f78d064c24870e9bb369b71c1c9a4e5fd1b

SHA512
989841b85465896a6517ed1ae88be58bf79d87bc73e04f09b4a6c857aadec592d9a36b95da9b10507d03805eb8d719c17bcb790aaf17c283cd24e79f18e56e93

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
50e4d02594ea2408291da778f9b8b563

SHA1
adf8fc90f74c140e9ca81d176dc2db517331fb1a

SHA256
0d69880ab1c66245e3ecd3297b4b7e413e3ece2d274bded9dfcd382d30a94cca

SHA512
49dd529a535620669fd4e813a89b1dee4420c3d792199b5f69f83581cf9b95fe222e524f5e9953a3f887df6a2f1b6a94b2e529ef5f57ad8e60baa1ad3db92818

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
c1f89e5303588b445e8e54269bf9e964

SHA1
905fc38b167a5eb144398880e7b689148b29217d

SHA256
fcfcc79311790c752aba77f3c329e7f688b8f779ce9d8d11257217ecf2dba1c0

SHA512
04b0e65cb174ad20ddf17bffbfde3a8762b32295ae866dfc001716340504971f03a4c686556d19d902a46369cedf354a80018120026da6c6dd9ba7d9ff32dc88

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
8d54ddb1d9be171a7c5792d6228347d8

SHA1
f108e9d06ec75a8d433d2917e3053508a7a8e918

SHA256
f21b15d4b51a4cbe13f47809d23626dc9b8c3c3ab08a76acbd8eba5a7e894442

SHA512
b4bb7be5afbbf5a5b0237cd9b3f902e04c8081c26db01b8175ecf9617a373fd83c9c41fa88c7217aba1bd0461182582cc490abe06b5d789c076a14307f4103b0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
56eac332fa7829b7c6afc6f3f88db86e

SHA1
752ad69966357ad4d6d928625cfba21f8f692d49

SHA256
c06dbdc33dff6072feba4426daf3c60d5f928be1ec19354125e0a8228fdd25ef

SHA512
38959b8d201e38e5e75b97661700008b5341b06fcbf401008d653e2ac7bf7a4ffefd7e2d198e5af80aff1090e8754b0f04c4737b622fcd7f96469fde3e9d4953

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
d7bf9568fd67634191e4b5b83bb341b3

SHA1
294effa1e88166b1a8952caa948c83691236398a

SHA256
de31a5390bdf0586a538087207254e07736bc8a282b9d23dc4565d244d4adebb

SHA512
8b64d37fc13b91c718e617b3b3070bf1a96724056b63702f50decbff48c7d8698982861bb37716a5507a264ea8c4e1bc12cd847af2f23f55fde5723889700e19

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
2769fa25e7b6e8798a7b999ff4f57a16

SHA1
fe0c08c490b89329ea19fd7adf7ee16830f30b5f

SHA256
904102f1ffbb4d32f9c193906ada3b719726bfa4f43437a17c1cad18e87620c4

SHA512
4062c3cc33d115ba94da4d7d9b5f8ef2f766b9e7561e0a682dd2b9ca09b7ed13d5bfab337e051210dcbfaa64b4a1a35f156610a69881c02436404bc0e9310015

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
0aff3296a595953113554f32b20ebe59

SHA1
b8954acad8d32358883f436642638af9bc717b9b

SHA256
74a61ebf9267ba2dece04b81dc1a802cf9a9fbab5b350974d07b0c938a6ff23c

SHA512
d84e81c1abef3054b41c4abc785911348319c56a7afa0be4306624addf20c76859bc8fedf58d1b4fc142fe2065f6e62fbdec0fc2a684802476d928e7c24bafec

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
4b28045c62b1c19ddf70783ebb7fd0f5

SHA1
f3ceede30ddb2fdea581dc94352bbef17a2846e1

SHA256
8df8e1dfbb7ec9d42231dcc1e6308ee66e684f9789b857f8a59ddf21c4d5a8f2

SHA512
cbf6c57626376497d6550d40b8400df0a31cd4544ffd999d3aa20b4b3e00f25a63c01391cfc15e21b1cf6f27851bac5474860130654b7c2c15f7ab07dbe3eec4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
61e3160affd48c1bc930a9635d8b2882

SHA1
6fc8c8e5799f07305866cfee1411a43088dc02fc

SHA256
1f814bf22a9ae75c88e887c95f1de862e11774c20f861b96064a1c4a336c630c

SHA512
6c70bf76e33747c0d717f10c2dc1cfd89bf5b885dccdc5c3c7ba982c40d9d7c8d3efb940d82faef7a9d997a203d28433d4c1752b741c6ebe407d7d1e4d288722

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
9b485ede221b4b7379d476fb1bc806fc

SHA1
924b1e0d6f7c2f40483c9e5f10865b1e0f6fb423

SHA256
f81227a7c0a1aa4773f783a271e327411f30b972a8f95c2b86d2b504fc6e81ed

SHA512
d3cc0b2f477a5eeb2375a7935963f84f910c26caed9aeddc73c2bda3803ebfc43b6299956014edec551d3c1a652f872cf30838612a6a116222aceb300c8efb11

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
98d80140e3d67122d8236738aea72703

SHA1
086bd867cbaff2701945149181a89549bd46abe9

SHA256
e5892552e704411765d06ddc536955fc7d9a30291985bc2ceffbd010ba87cdfa

SHA512
77f41e298de521bdba79bef14d1efaee321f99f4d1d0c212af75c4ad467b7abf039b57f8a2b3e8e81961d5cd2368bb486fd45e53ce71452b6893855e088c3e26

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
f3312f9ffb92fef45dae7f8373e18b70

SHA1
30f0d056342399e2af9d61c01e295071a7a4b371

SHA256
fbb929c6bd8505f62e4b094a7786908adc072b99ca14efede534bf06cd52baa6

SHA512
d3b739fb0d27b1ce7f326f28e66e31ed8886563c7c864d9c1f7a385f400d0454eadd500e0a06141e96ce074788a2015adb937338f940ac0697c093d6552c4692

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
84144c780aa74934911c5efd20082d1c

SHA1
2981b58831710c092784777554b59c06051b8ddd

SHA256
44a4da346721ec5b4fc5a5c590a6214330ebb481ead0c461fd5d3bb9c4571bf9

SHA512
6e92af351f302ba73a9f83d1bf17da91165504c3602089cb0eadfd907d1ab438640718c6c0e35f78dd4b172e03055c681527112e09d0baa873422f55f8f19276

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
d96c6fe2a7f6adc628e26f8fb87744e9

SHA1
92b2c3798ff899eeb513684f3cf6c17b62b63878

SHA256
c6b665b1ec3b60c90f544bd188e53140ed993823fbed4e09b21039a76e61b7b2

SHA512
b674a8b237466faf5e0dd1fc735e98b683f88df11c659c957288477ba17b71520c090de798b4f7812037b542ffbf3fecc1fe08954ea51977f5d535d8a3a88ebd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
2a7dc140383afed1fe4dfd2585863019

SHA1
583d889f0dccb56c5091960945814633b6a44649

SHA256
bf742d3e514085cc3330a355ff09d8fd04de34971608c63882e56b4d026af3ac

SHA512
3fa2f8a2b8f165bdeb32205ff230b8337e3073f71e39f363ac8132187e1d13948f77c3fe4a791acc3e24cbe31b36acf5428392b8a5f8673f5a07435d8b512334

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
4ed47691630dfdf845fa06926e9c456d

SHA1
630bdd2d902588d9ed3ad7353d8e2d97ebeaab8f

SHA256
95b0bc5f473b0fd9a1070385bad5df8effac28aafa9584482308df829f899b05

SHA512
02a79c67d643ec5cc3d1eb82cd905cdb3c6865de655f42b5ebabf7ed505fe20a8df864460cc9e5483df38f011db1beb712ebec666b9c377fc2f550058a35e1c3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
816f04d5b19ad95817f3eda4254ad31f

SHA1
9e4c900bd36748b227a0f44437bb9f8e54219389

SHA256
ca1e9fb2fd31dd187470360ec3ac6231423d6714286c97e5fed4b15af5c11ba7

SHA512
00a1d3b5252a8c37248b1cc5a150bb02de21430b71072f3fbcd7f2bead723d8ba57b59ce2f2810d5e3e86c42512bbb61401775394f7cee0368ec3d7c0bc057ac

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
1e2246cc67a06d675e889f8c43a694e2

SHA1
58b3ff08f3b254f0808c7dafc6bfc1c2af16d962

SHA256
2b1ae029583a4c248fcdbd0f9c0da7be601c4c2e0496acf37aa232b185d17258

SHA512
4d0e35c0632c80f8dfd08914febd2f00f70c8006058c8aae0176cfbff1cd7dd93c0e1669b8c3aa39237d0634b79a760200d315a819e09ba4040e319fd3d307f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

Filesize
65B

MD5
f46df929d6424a43c9e40673c9ad37f9

SHA1
b04d6e4b787e8a98fc67744a56f71c6876e47a02

SHA256
2587a7b9fda1a96ef113856bedf2bbf3daa03c3ff12997bb54207c9ba3412073

SHA512
66a77128926fc745ae6d7601cb364731f044d45d43a6803cace568c97c8226a9008d4f98153ff1e528a16f8fe2f5a5732937958cdf884ae845417fd99df4ca11

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

Filesize
65B

MD5
a2333f9a05a0cda8ec1fca873128651e

SHA1
d689fbecb6f2ef1e2905fed3f2ecc696290696c9

SHA256
2ec912e6a40c7ed48be28e1ed0ba35f4001e4db0d4b33fcddbff69fb60dd7b10

SHA512
778591769f1a777f162b328f6298b854fe4b03ce438616c96e274f0def2d2479003cbdcc8b3022b7a663d82e33a2a154952f06ac9c5669de382dfd74a428bbc2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
16b95e2710d994b9c9514a3ef388a396

SHA1
3dd0af08c3557b40aa0dc4da4422466296861c68

SHA256
cc0c3ac7b27b0a542f93070ee076c542dc5a1427f1fbe1ffe888fcaca22d1136

SHA512
3a2ce4ea20a107f575a6129b37bccf5b6efe8811e8bfcc24cca0784809177bb412f86ece0238a1cf404316be5a28c60471b9978a0a264ad63c2fc5934bf5b8e7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

Filesize
24KB

MD5
767474ca69fb4a0afd40a442a87ccef4

SHA1
0f2fbc63efca967e1886ed979cd083251415380c

SHA256
98880ccbc87c8b371c1f39c6766cdf1aab724a6e5aab3e4afc165021e6949428

SHA512
7db76081e32c33fde3ed0f0f4ce3eed065e389574cc053e01fc0306e022f565281b76423cca7f0e69bcd2346761e75f900d06d7e33ac747862cd87ef2a069e53

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

Filesize
54KB

MD5
3279be96262d922f6866b0591a50abc2

SHA1
a3121bd888c467b8394c4f6fa1d0ec42eb5d0238

SHA256
2715c0064d90cfbccffe80a72e5a703a1159f6894e5f3a863dfa238b688ab162

SHA512
cd1257517aae4091941f178f3e67ee76dfc42bfc8e7b97a9258786c54351ce865a21844a2f8c6d3cf1ba11fbfb2e332e087258e630f3cf8ba71348efc725db55

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

Filesize
51KB

MD5
3cf302345be0b7c76bd3604a68215285

SHA1
5d601af01bed95062335d480a4d8c82651fd5fc5

SHA256
e257d9d42fa9d24d3d785b7d8ec02f4d04b8a8fcf855a69af27e9358cd48264a

SHA512
cfe1ded8d3adbe75796b211ce400c3fbb427b0b6cbcc10bfd97f99227a92f6ab196c6f30e6e503c3d3c3d972577f57d7b37da1ae09de8ecc658a465314deec61

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

Filesize
34KB

MD5
463668d5138506396d6d9edbb0f1c2d6

SHA1
4a90c8db3f0f87ada7010f1d26960c366bdc90d3

SHA256
c4acb7448882c4bd286dde3e430aa063ee0adf68a0efbbc60b039f3888e117d5

SHA512
80d1eaa87352d6e703fb135f1b6acce248d52c8e8bf23e8dc1a334170a184b63dbb755d0b888028a69a20a5b97e82b5049f014617d26511d9cb2313145daafc0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallProfile.SQL

Filesize
20KB

MD5
6d8666f8703ee2dcb59f7632ef861b8c

SHA1
1d57f05f20e94d4fab88ba62e63992e6ce181997

SHA256
edfeebcac865fab5fb90b0e238d523c3d7b1cd966b1be9779d649ada66a7e36a

SHA512
09a80872f05c8e4eff2ac7831d2fb8280cbfbed9bafe562c9facb158de86ed73dc45e31a1cc58a9346fa2fd8ddf2a125686f8eb02337966b69b204fe6e786391

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

Filesize
33KB

MD5
056df48be510753e0c4550e063e795d1

SHA1
1cb0ad2e34709f061b37da4573825e86b4933312

SHA256
026e44b6022c966dcc5b28d8a1bab27b5dd14074b708986ccda5d06683cb26b3

SHA512
18dce28df0a1ccd36caa5d5ad3b9b293552a20c9267824bc171144b940564a02f605eab5793c32aef729c7d908794fc12ec38fc4fee14b38263e9c583ee853fc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

Filesize
50KB

MD5
6f490793d70d6559d14ce9e077e770e7

SHA1
a9e77f9f2d4c350e29cf5a064327e125abf4d10a

SHA256
fdd7c1a48bae2dfe16a307d7c203ed5d2e93b8e55ec178ad85488b60f2f482dc

SHA512
d6705f913dcb5a0c6f444e0ddf33083015929e11607924565eb9108ee9c38db1ff3948c5aa1de169cc93921d38e30137b44f40194f0c6bf76188d88c1731dbe2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

Filesize
52KB

MD5
e3efa507188e53d5d2f9bcca13d038bf

SHA1
e32da375592dc620e0b905ea795126b9ea3dd14d

SHA256
fa36a3dc135c07d6e323fa7fc7dd8946203658925058b44d9e00332b6bb06c4c

SHA512
fccae5c09f45238bee513d9303897c6803b5d134bc128be118008c8ce320ff4273642b7fe55032c4502abd2e3f7ee6e27c7c04756a7c767780ea3b5f9c129d2d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

Filesize
6KB

MD5
e133c3bc15f80b6065f25cebaaa4cb6c

SHA1
bac48c5f0cd0aca1ff1cc242e3f8ecbe5e9d9d70

SHA256
2ad67b5c2bd4d0a3fc03b5106bc07511959e2076b8a2216c93507ba03feffd67

SHA512
6f88a8aa5056a8be703b9faff419aed5f45b934dc70b9866aa18eddbdd6261c73c8a4c57cd9ff3cc884859433ab1eb839710df19e7c02101dc79b6b1635cf828

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UnInstallProfile.SQL

Filesize
4KB

MD5
adc771f213ae7d4368991125231d8006

SHA1
19120a5fbe80ffb60cbd6f4b0a91b7b7139e2fa7

SHA256
8166fc60897f82980d5857b56f2984177c0055749517f42d957bd60676c007d1

SHA512
d66cc443befebf9fd412a725583e311f893e2aea14fdff383b414ef03464b18e0ae22814b00d0e5a515a27e5b5ac3231b32944e06139a1aefd5c46b5819488cc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

Filesize
3KB

MD5
40780c124542aa20b4c1ddeedea24951

SHA1
13e67b71a8f0b6ef43453c2cf29d9a037d299d55

SHA256
67a63863534a3b20e809ad775c2c8280cedef0570c0bfe4d761fa216d3385206

SHA512
d529429b7c7d817f160f30a04ee65b5ebf0221fb513357eb45f721d313be86243de442a3e76cce5dc967a3eb8215ebc8023de17029a36770eca61bbbd288bec8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

Filesize
6KB

MD5
c421c65e6a9680a8203c6caf605348a2

SHA1
f388167d0997b3d621f386cddd0c5b65ada3d0d1

SHA256
a0643d09926a726f07350e285e815ae89578bd6483d75ae21e45ad371fbd63a9

SHA512
16b516b4a342833e86e064a803ea2e9a3ba4e8c32a644da5480f2323b1308f478484237916ebaed3633df69e982cdb158388d5f43b2f6bef5eb1b76a5d2a1abd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

Filesize
9KB

MD5
ff184cd6431f8d4df01a863c41fc270a

SHA1
0a0293cfe664757ede81852a9b46829962dbb02a

SHA256
b905f186918458c79c5191e4f74251557bf111752df775a1a141663a34408c50

SHA512
1b3fc6f1ea063911faa5039870ace12dfc3af7c5e7d995f597b2e9a2dbb4deafd84cd267351e87eb7ce0c01d54705d2cc658944a02d1b32f82d7640467d6711a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

Filesize
7KB

MD5
9da2c531aaaf9518b5f9296b734339c7

SHA1
9534e04bfd26a7efdc6af31f1ed2e1895337aeef

SHA256
ffce6bda85b2e268690666c9e64bc1470782feef2c67fff202fdf102197df371

SHA512
fd1a82c34a6ffd8fe2a1ff8f77d41f377917f0e2862ba79a1d2513a08c5a9d97258d2adf88aba0a4610d385f7a74a09ac84a674122f54eaf4e59a4acf0a9ff31

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

Filesize
5KB

MD5
8ad542f5eceafe799eb27e90b05d6598

SHA1
fa8c90965c161c868eaf48b6fa7f3d58e8e4e798

SHA256
176592160386a27730a792bf18c11b284334363833149d9e00a046665c863ac1

SHA512
edc3f2cd4aa7b34e295a38652b6542e124b73b146c94752ec0af39372370ffe78aa8518730b7a923f5871c3daedfb533ca1a0ac2430ad6efe0d3cdb9fa970754

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

Filesize
9KB

MD5
ccd1f33aaeb57b1d3436c3d5a92ae307

SHA1
0c93755a1a76231709c084e7b1d272e2713a5f58

SHA256
06d7a0a4491217d4f2cc57c83e509decdc70edff73a0a028978dce4d22332250

SHA512
8eaf8fbbcbc8bab5443b1de56d713d63b350f1000b6e3ed589b5ac1ef71262389aa186981f35b9dc1f412d32f0987926ac83fb14a60b76c8818fa0255433dc88

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

Filesize
11KB

MD5
096bb99b9bc341a467ad2a30289ab4bc

SHA1
02b7d8f8c57e3e14bd11db0631a8e8e6f031e7d3

SHA256
cc731bbb4f0bf805e46556f1ba3edb775aa8dfbde938a2410e364bcda77ce215

SHA512
b68a7f70fc7d982b9587efc2d28338c92513e1ba75fbd4b24f3259b91374b30d1c7077636f3de889d8f59059c7266b06ed1b4e6fdf952c2f39f83657994d6faa

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

Filesize
2KB

MD5
6f1789eff8f360092aaa6ee2d903fd0a

SHA1
2a252738f23f4b346e97d9130192b02b55557a6a

SHA256
b44f4dacf3b8acba9c8c34f4b3722d2e5a692e393f9723b077eebeaa73323c54

SHA512
bbd27f61fba6710f256aed464be28709810f7183dc028cefeccd013d7e22e7e55cbdee2566e4a845fd687d48ea96964e59b702996bc6f20c606527cb0d672f12

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

Filesize
23KB

MD5
5b1766b4402e19285a1aadc283b5302c

SHA1
663a9c7aba08353f11ba1eb9b1e2601c41503d43

SHA256
555ba55c87977d35ef4214f4fc83ef7924f18452a95ecbd70288a79f13e76a86

SHA512
0dd04566c5572d72b027c7a1c62c920ee4e4dca03d4974c589b210273e4b6a76741e38f4dbbd25b3d5c1089dec52fdac83eac7de7bf431a7880a8ae8b687597d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

Filesize
4KB

MD5
a0b64890e04b002f2ef8df1524092d9e

SHA1
416d531958f5a9f14d5a9a35ac11695d8e514a0c

SHA256
1c81b5766da7fbfd9f687b3317a0949c6fe1f412a8c2d095527af26591e56423

SHA512
ea20581874f070199c46e2dd1763f781ef2d905d25448a0b2b77782488c81b943dad223fb5cfa3675b5bf05432547c029551a961ffced89824b3afe9ca600b98

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

Filesize
372KB

MD5
2e541e0321a0fde825cb8bd7ef297541

SHA1
9122da3efd96b3bbf4f46b8c716f83a0b75fbc5f

SHA256
1e5495ba9a243aa88e819864afde235d69a628f3125eaf1b708fe9871b6fa101

SHA512
29e4bef5ddabe1825afc2b580ba9aaaaf0e232fed189b6bfd777d2dbca66dde1df89b0b01fb540912adfef2a2f4c67e9fc266b74b29f104d47998ceb1f71285c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

Filesize
49KB

MD5
122811dad852d1ba2379a6ce2f70768a

SHA1
4d84ec319f274d24de267e47e222e8f3f97b461f

SHA256
77f0f152884c11ce5015d1bd34bd2234c7cc61fb60b94e783fc2131d522e07b6

SHA512
f82bf07f081597a8c05ae9b339ec9f819777301908524647ac6f5f88edefdebd7335e48af83a1ec8d9267b54d2de7e5d46b765acf2448a92a53ca19a15fff565

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

Filesize
2KB

MD5
979f27eb57e970efc87a45969d8b03b1

SHA1
9ef27d650ce81056d2e4a7993cbec343adc8e868

SHA256
81ce0463da923b1984f8fdb6866fe34756deae8a3490b4f621a508917bfac7b0

SHA512
2a87b79bdbb151011eecd2b647c298d6ccb5ee7fbd5aebcf4e7081747429a98560a1e4c09bdc1734ac7bab7ee571fdcbdf3bf5ec2cf15ede646fc7f3b5640c1f

Download Submit
C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

Filesize
13KB

MD5
7a8844371aaf33721d44a9965fdd5bfc

SHA1
c22ae0a7d790b3f50ea07995b5d2bdd8dccaffab

SHA256
95d8f8e298c04256cbbb4fa1cf264092b6b452cd18e2fc7f7c0f8b9df27a9b18

SHA512
1c89caa6cb7d5693e1fb85b302a98917a3849f40d85596365f1b4125827bf1f634d994a15e06f74dcfabcdbe7ef3d7c62f2ade458df08984781a43d2f73443e7

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

Filesize
49B

MD5
2fb408fa4e066829075e6dfb2619464f

SHA1
70c0f86d13275c907454c37bac1299f3034d7bd0

SHA256
18d2e0ca13e6b8d7ba690d203b3cd2fce231301b59388de6da59cf697c331450

SHA512
e95a3ba73a2a432e51364dd4dbac30f568ce8b39022c120012ae7fefb94e0a922a39897c8b7861b8cd5ebcb5274ddfaeb1d18ad9c67b7eed8721b28417388a04

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
f79ad1ce91486fe57a40bfa29554a8b9

SHA1
2efce897207ef24393028ca1d5273153afc6ad02

SHA256
c379ebf00e3bbfe448653e492b87ca04b566d6fe8b3ee0e2a2d7a7b49c9df17f

SHA512
9c0953acf2ab908563023f461d8e87c830ae59d256c866ac45fd75a7036636d8f72aca0132be5bbb881efaaaaa1e54879a6297ad2382110518a8de9b461587e6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
25b38afbe650286e26b1fe205439c6fb

SHA1
1c73456f2bcbc568f6ac288df6b8a25b867e847d

SHA256
71a24b1b0c42d2704246d6a73af2a474dec3a9edebb27ce41afffb4f36dfc11c

SHA512
ef70d0864e88961dde6dd961144391163e5d9493e3e003b2b5dcb083d8109b6049280cd0295f0c3690a1df13d40553c839b236e19f4e143251d26cc44cd91114

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
0289fa5028e4e8fc42926368e7ccb007

SHA1
9ef3952a71ace72a385e5e1b16874f620e012cb2

SHA256
0991c3a6fb51e0a2ad263fc90978e52bc2588526e48a7c50ce998ef29e83b35a

SHA512
2fc3ef7c3ba03ec7b571090513f189b7bbd511ec0947b180e2c8612c8488af47bae34fec5dcfa38de024da545f50da4bd9a1ff748f2d97b92614953d8735054e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
bfeb24b899573abaa60be1968143f7e7

SHA1
39e5604b730a4913e0a4c30bbf1f2c20ac3b9036

SHA256
dbfc6548df4ff578589098c594b14269763bf1f95a9e1acf8cbb22f71bd3360f

SHA512
fbc9e8234351f1cb9fdf6bbc548932da461f60cc542fb95232d7e26b2f3171d3ae34d950940e4807f4efc2efe5f7c24dbfb4811e1990125a3f8906e7b35d8676

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
7cd9a1353745a1f4f8dd036758588dfc

SHA1
5a84ddf2ddda35bbfd206ca1f615a7da3f623b62

SHA256
85ddaacefaee93abb2f750dd74c76c8b70cef19243b64dcb1e8106a065f75b01

SHA512
662c7f36f2e03e93bf5628e592cdaeef986806437d40fcd0d51022f4a79a500130eae3fa37787dc9e52fc9fbfbf65e1971e3623786902b045200af2b59b71b23

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
8f4d6c55af81e354ffc114fa70b75528

SHA1
fa75121a2ba6b84c94ea67e2b4e7df5562a70425

SHA256
312e87d1ec9dd7017b45b57bc452eb60ef684552a9a59e7fe20e1263170b9c34

SHA512
e8ec33824985849e0e48cfa90439ab2621074c47754583095493ea680b2f547cc4f04555917da4b27dd209bd7e3e744fc57c509cc3f80c4d21e4129920cc733a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
a2689556361a2fa7dadaa3051d5bee84

SHA1
619d1fc201b94b8bec6a74b99cde8c73ba64636a

SHA256
70aa0437830fd6ca1bad6db20755b629b1a8722584d78eda56e8cc7767ea30bf

SHA512
0bd3b2c8056053bdba5bf5c7ede7f640ae755ce7252902b46a5f0aeeda8c538a3799974f07a22e81c1f81ea64695d0d4c611b05ccf9b41ea57ba57eefeabba1c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
0fce57705a9ea2063765013b1c104078

SHA1
279d2b395c874622d980fa7221a98890c0d886ae

SHA256
b30bed451c7761fe0c1bfbdcd7c9a5a633d6e005692c08ee9bea8953fe7e61fd

SHA512
29aab473f98a6cedfb3160a84dfc7a21defb8ad0e531d73e9aa003b5fd403e12f02402a7d5bf9683b30ac8cfaf08966b170033b8fc076b4260d2eff1c5920f7b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
2e0b3413877207f318af59196677bc4f

SHA1
e1c9c634860f18dd490b99bfa69e3bc66513e6cf

SHA256
0182d8f3d02acb8ee0211fc122b8214a1181df34f0f16c95e18659bda81939e5

SHA512
532d64117f6c508805a25f8f3bf15db593eeb259b660eda5f8fcd2f970d5d8e66071a6207c97e43a65323073ab1b539e2fadd19333ccd67e57d9a6571e8b6595

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
d998ee6c4a5c3c02800873e6338b2e84

SHA1
f68c03d05f2b7532c9b2e38ad4885014da659ee0

SHA256
84103d2b474d5665a69c6525acae3100fd15ce0ac1dd57bbdbecf76efdc8cf64

SHA512
3fa307d2b60c66a3c3acacb024f2514480557b1d81fec321789c3d0237988ffd03b8f247c6b7bbffd4567de216add397e177bedd4fec428939d42360daf698e3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
d529c984e0bda3ec821b1c1650c68f4d

SHA1
9aa64587db61aa504413a81c5d0a9e4a082c4135

SHA256
9df6e86aca39631d1823f6dd853e7dfc5223be781184c6ede0bff3e034884a5f

SHA512
ee1f6e3395784129af1ce885d45cb6c262c6b57ee82ab9b35c83c49a0cfe9221d320bdddc8dcfe97ba5a473ead023c4424ff0f4e1f3157909dcd4a9a3d722d9d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
8dc09f6e86f7b51b9a6c51002a3b296f

SHA1
18867dc1c72d28b662ba2f58d9efd29605b3de92

SHA256
4cdc888bfa2b086aa0948f494ebe0b28282a6f05b0ad678b17e51105ef9619f0

SHA512
37ed0f0e9a1b112a2d67fda621f7b182d7b82979ec8b2cc8aa204e33714f5531b8a33a21b8cdceb3aafb67ecfbf9bb316016aef3e57042b2c748095202b6029d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
3700dc26fe3d29d3184be19073a087bb

SHA1
ece8bce26a65a134a98c0c47aec829a32387bfce

SHA256
d170220d9cdf3552a3d81d21aa9bb43e018edf0dcd7f01cae4fa6bb9c2d8178d

SHA512
2df5d5b22d92c4eae9806c854e2b7cd65a63f32ac4dbefa955fcecf6f7f633e0fd487f11934c2c90b04cd916b963d1605e99762b987490485d013a1576db883a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
19c329ce79752b4bee7bfd7759d140f2

SHA1
f1de4ea2842e1c6e1b403c5ea708a7494a8d3fb0

SHA256
42a04c04e82dc3688eac514904d53fe9a9b26715facc4ac63c6ea49ff35373e3

SHA512
e76447733a34b6eb0e0847bcdf1ea16e27658770e8efcc34db2718191f93a4c503c747c8a5520bc6f36380689bf5c37118fb784e54a22283c205374dee55db02

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
f860d7adb3303b9fa44698198e924592

SHA1
e16fb0e37c1720b12bfd1208d66b12638ad21191

SHA256
0fa5c404fdfa477f1caa489c82d6479051316dd3733e7cc7b4d417809d20d20d

SHA512
7431fa044cb5b1682842f253f33bc492f21b2fe90a8d1271d03287eb94003c8ca91c0e204754d4435d9e2bc92cee737e09d357bee8d3c9d273fab93d1d375571

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
43cada17903063cbafa8a7ee2964bbd9

SHA1
36d093818e0a6a67a74092e3b66176d8668d55fd

SHA256
b223f4f931af78519100b9ccd2ad117364f9419faccb06f5ae5d59095fa9cbc6

SHA512
004e3323d768a6e1ef253610ddb0770448a592b3f0678416fafbb92f5b81dba0d42680cb8223fbd914c2b14a2864bf5b107c594a0c6ce8dd7870e7ac9218cb7b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
335de020a0dbbdddc7a440aa27b1f286

SHA1
e5fc381580c31b9ba844986e0f6949c0927689f0

SHA256
ead1f678d5a00948fda9b833365e4ebd12913c09b97e1df6310925777d578c9d

SHA512
058f23590410744e0eed00e5493f5124f9eab80bc4fcc8b0f21246a2a88080f9131a37b5de73c4eeb8b612862d8904826e4771665695b3471578ebc84677ff81

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
2a58776502f6451267217da3b7420c28

SHA1
81f6a6b4aa0bb3733e4a1940ca0008286805e9be

SHA256
586a617f62e12bc3de53a4398d202c414986ef591b8094376e350eacb810f170

SHA512
62ece4ff40b871073a04d9bbd253c251b440507f7edfdcc00889d81ff44fc4e755ab80830a6e60af21cdb1458d7478ce321c14c02ce793d3ceaaa8c20e59eebb

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
29facac8c59e204fb3e41096fde6c499

SHA1
66d84fb8b5458279476d7cfda6d31dfb16808f45

SHA256
cddeebffbd4276254ba3950adc3ade37f48a487b13d8369ba07f13029d17c8db

SHA512
d83a090d6ae55e97f40bb335e962156cdee32d119f7419b269de287bbe95a186460b79b239cfe5aa2a98beedd0a166a76a086e948d40233600444e2cfb6f7973

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
24f8da339eec2b6a232330ec76d077bb

SHA1
c65cb242aa042be81c36588419d1321eb3dcbc0b

SHA256
c37d173b87ae7b08188d669d6abd152d50077cac70aafcd9850f94adf8aeae05

SHA512
645072eb56b87bc4f1426a204bbfb2319f4a41e4f850265430e1c7cb41b5fd40ac58ef0061721961d5c72aa11c4d6ef5bf38b0996f38f9a02f052fa074b267b9

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
8ee34c3f9dbaef65c471d4bfa62ed2c0

SHA1
183bf38c67f3f9439a93666cc248965de3c564d0

SHA256
1192af473a7d0edc618a2f62ae8f6a960c08ecc417d1a35aa8ef3ba6ebd328f7

SHA512
a219647b2b6c018356792a93ee616de0205ac40b3b44dcc114df99ad6307117e2f37ddc8bd691bb2da2d718731b816f72ac390cedd980095202cf5a82d68b599

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
e7fa0b3339c51975cf83e55685fc05da

SHA1
2ae88147e96686ac0bd704513f539462bfcf5202

SHA256
59fd47fedd34b0f7124d7a05d7d8a1a9ca38f415fcb0a44e65736b91eba5d262

SHA512
782bdb4b3791923da697b4d50fd6a063986d5ee2977e367c35be80b8b86406696435b358d929f08474157f052a55d0bd0a1b16f8863a6460aa4df42088d2dccc

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
82341e4c382902d81db60bc6edb09e15

SHA1
53c11d18143ea81fe78ba90700cefee8ae8f2185

SHA256
98d810c3eeb2bf4c0415938aad323ac1db0592970e1baa5c20ad3698baa28431

SHA512
3c97328b8e42ba6a81dabbfffc7effd16451efaa6b60dfc11b8d407d4cc49c1268555cc312d16791ba221dc63799a204fcbfb1250d2518a773ddb200031ba3c1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
2afe05339389e3455075739ad2da4d5b

SHA1
d6ba7417a5b49e3d7cb7763648be3434cfa00302

SHA256
00dee096333211b8c406db8b5c737091f01402398857fce22059b337a8c25730

SHA512
646239e568afcbef3334675a2c6dfd9b26fd8769e07f875fe20f229e3f448525693cb9fbba84a969e1fac9a335fad6c3280c3d8d05b1e9f779d1ac3a5d72efb2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
19195fe55dc5cf67f72b78af7fc875d4

SHA1
100284723e392c755c4c657091b50711616557a3

SHA256
119d421ae5c06b8a2a44fbe18cea01502e5c034d529dd4d202725ca050733fbb

SHA512
0f8488cce050fcfcd8e01f098e936e1ba38078cbe9203758706712b6f55abf140e10c06fbb7642c53055df1026a1e587f5fd7df56d88bc517af11cf6ae3d60c6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
fea90e7df1c7b1c273ba5101e13b569b

SHA1
4cb1321df37506fce0bf49baeafd2b115b241eb4

SHA256
cc2c7c53b027127a7a032fa78f5bece29cb3aa0e4755ccf7314f2e750639c0ac

SHA512
369d4b438e30086e88757b773170a733f51ea707bc2cc835b799d4619fe396af464d09f80aacfadd3e15d044b0ddc1abfcc0826e4c892de758fea1fdc20c0a8e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
d17694a5e691a8d0ce8705177543ee44

SHA1
79b322185514c6d662f120609c1910891c65b163

SHA256
90fca568ba5e355b0c7da658b88b5777065402072b1aa92cf4d8c0acc96e9114

SHA512
fc264118394dbba5a4f2432fd9a93e16300fa701edb517eded8f813f53d1aacc1c747b17df98152a89c9c2473738f295d81e7d22ef21d571845850db8c976a03

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
eb1e3c1dd2144c19c5a49f09b118a35c

SHA1
c16058dfb4171ccd9a1b9100bccc9574b6eb947c

SHA256
a47a4a6df1cdf42c7aed23142e7f16067803395c09925ac243d6c59746b521cf

SHA512
909c3a693219cd6f6bbc14d4dc5b88687ebf145c867ada3249ca1a132282f13bdb4c65c84c5bb2d0d075770732909c29cb6be502d819fdaaee7fe441dedc8214

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
67c8b5f27c81dd54a009e18c617756e8

SHA1
df6bc913544b1f08151266dc2932203acddbb991

SHA256
8ded6624b3194faa46b898ec02ac69046364789af678b7ef2d2395109497e75b

SHA512
1c02b6481a9446fb97b2318f54c71e4d94555f68416780535a0c544dcc8e0901b116224707855746eda9a007bae547f48540a96f34fe6c72dee0ebe3a529721f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
b500af4fb6a22f53025f5279ee38f6eb

SHA1
aef967836125659c2b3cc9adf0e47b73db6a8a62

SHA256
852078ec45dbd69559eab44c7934f65049045abee7c145f0608029920e8f0481

SHA512
080c24174abe10af6411e2a691a4426f9ab99fc167476372c7cb4364818e263377cbcc53ed31e6971b04087e44191aba97e5570670f8fb39b421cd24609ce781

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
d2d6174391e7d15e30c590f67cb886a5

SHA1
47f0e10c3896462b84137f0fd08ee7feaed7994a

SHA256
2316aa9aa0dfea2bbc284d13f8653eee0031d4594bf78d0f01b120a4ae060edb

SHA512
ff3f3b9dab15ae36cf6527a31ad84df973d7a4537d46c633c229591bc159f9575a0d82f215e2b916ea3c33ed7c206455925901cf31814ce71dc673e6628d88e6

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
d1c25b8fa65acb7866e927301083cefa

SHA1
f0d4b7526e09c3bc59b711d0bc45149e8f3ac51b

SHA256
7055f2f4001ec739cfc47e239e61bf397d443a7900357e3e9cd82382955757d6

SHA512
a16c0b6f5d9ca2b1bb4a6c56efff3c9aa8611c5514d5c3630765aecb7035c885e99edc907a8b4105d671abb68bda8a52b2151aece55cb6500b340cab46573355

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
cdb61ebccbc764337454b7a85fc47c5c

SHA1
18bbfd726b836099d96c35d96847e39c79cec2c4

SHA256
b166af459c0cd7652305ca8fb9bf2b5c65f4ab4276c133dfdc168c0a2ae5e7d5

SHA512
ea0a8c8d685585a57d9642e7a72980658af2ef73f57655e043793a9e6c15519b516572276ae5beaa2cef67cc141e237937de5a73ed29f955695bb0f7c392d303

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
e1a24d164550e11fca925b58b200c855

SHA1
ac7feb9237f65cfa215daa96c0813bc372b4f0c1

SHA256
5338ea9e1b828f5c0eef52f8bd81883c6fa7f4658cf4a815ca5428512f5a20e9

SHA512
8db68fbc0144390720fb82fbfb7d0dda88b2812f027d79ab469c51f4da8980cd2da4f27a01c12085394c469d11c2a3d971353c21cb9fcc127c31ce67569c2af0

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
6468ee20c70af6e0f438abe3df82fb76

SHA1
f2ef415c9dcefba00cc9883746ecd92c8d219ffa

SHA256
958be2f2821af48ce47f240fb715afa839bd0d07de9d3e1cfe125870d993ae5d

SHA512
75d3cb1d74f446a5c8671081a8d73284f5e7f974b8c7cc164ab82cc8ac2f31196ebb1ba184aa7dcbc35871d18c8970f1a301aa28dd1943c713e94ece9d72929d

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
8ae7ec0791925f2be24b8111b9428088

SHA1
e34ee7790ad22ab01055b7e340b7add6ae8a7f2b

SHA256
3a6252462a94744a22735028336adc6839a76bc85e7f1636d622e66244965608

SHA512
e534519ee244b1d2cbe72428631a54089881b09f193f43852c5db6cbdcf4e1645f6dcb8a93a2d43c8b4c05d9d8b377cab746c484c8109a325ee60fc573830a63

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads