b648fce4e270a19f88a94e6f94e96423e8d98ad5e8e5d1468a80d460c4f17647

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2024 00:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Size

12KB
MD5

6c72709aa40768330613c64f42b3e049
SHA1

7d99027319ae19e1305d000ec738ae892050b4b9
SHA256

b648fce4e270a19f88a94e6f94e96423e8d98ad5e8e5d1468a80d460c4f17647
SHA512

c68374e9432cf4cddf6e35bfdbfbd474874222c94cee6324d849233924681db43e74e42f453b096ee92a516288a81160f23d6a079e7af5a4b54eecaf5a496dee
SSDEEP

192:5/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMixYXZrMd:5ebFNw4Pk1itKkpAjjJs6B40WixYJu

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (6447) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 10 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\afunix.sys	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Manipulates Digital Signatures 2 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\7k5dTyl6xe4CVOK.exe"	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\secproc_isv.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WsmWmiPl.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_smrvolume.inf_amd64_1d430c5b72323a1c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrtwlane.inf_amd64_20caba88bd7f0bb3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\dskquota.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\kbdphags.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Provisioning\provpackageapi.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\wlidfdp.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\cliconfg.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\de\AuthFWWizFwk.Resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\acpitime.inf_amd64_e1498a974ab95ea7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Dsui.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sxsstore.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\aadauthhelper.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmlasat.inf_amd64_36a71a022d8bb0bb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\framedyn.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\migration\bthmigplugin.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\TokenBrokerCookies.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\windows.internal.shellcommon.TokenBrokerModal.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAny\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\capauthz.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\downlevel\API-MS-Win-core-file-l2-1-0.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbvideo.inf_amd64_b401376fd0a39c95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MFWMAAEC.DLL	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\hhsetup.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\qasf.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SmartcardCredentialProvider.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.ODataUtils\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\cewmdm.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DbgModel.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsupr3.inf_amd64_9cb7ddc26e30b52c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_2176cc45624119a9\Amd64\FXSUI.DLL	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_magneticstripereader.inf_amd64_86e291110e37418b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\fveapibase.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\IME\IMEJP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\shutdown.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\mfcm140.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sppinst.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Dism\UnattendProvider.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_diskdrive.inf_amd64_1debcd2bd95e9c0c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\fdc.inf_amd64_7534987814b257b2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\IME\IMETC\applets\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\msidle.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\nlsbres.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\cmpbk32.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\downlevel\api-ms-win-crt-string-l1-1-0.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Geocommon.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Magnification.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\rasppp.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\url.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\AuthBroker.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\fc.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\netprofm.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\pt-BR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MosStorage.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\MSDRM\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\rdpsharercom.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\sfc.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\ProximityRtapiPal.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-96_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\System.Windows.Forms.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-64_altform-lightunplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.targetsize-96_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\Ole DB\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-40_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\jpeg.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\EventSource.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-64_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\BadgeLogo.scale-200_contrast-white.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Images\Ratings\Yelp3.scale-100.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\ru-ru\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-white_targetsize-80.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\TextEntityExtractorProxy.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-80_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsMedTile.scale-200.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.AccessControl.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MEDIA\LASER.WAV	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxSmallTile.scale-400.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\hr-hr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\hr-hr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\4px.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-400.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files\Crashpad\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000A.DLL	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\TrackingDLL.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\ru-ru\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-40_altform-unplated_contrast-white.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-16_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubStoreLogo.scale-200_contrast-white.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\checkmark.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Linq.Expressions.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Assets\SearchPlaceholder-light.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-80.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\msadce.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.DirectoryServices.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\sendingLight.gif	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\appstore.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\MSEnv\PublicAssemblies\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Serialization.Formatters.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\mip.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_neutral_split.scale-100_8wekyb3d8bbwe\images\Square150x150Logo.scale-100.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-24_altform-unplated.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\msedgeupdateres_hr.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Windows.Controls.Ribbon.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\TinyTile.scale-200_contrast-white.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\Ratings\Yelp3.scale-200.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\XLCALL32.DLL	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\Zview.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-16.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\MedTile.scale-100.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-100_8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SATIN\PREVIEW.GIF	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageSplashScreen.scale-200_contrast-black.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\tinytile.targetsize-24_altform-unplated_contrast-white.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..tingtools.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_f6026de7d6f43571\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-printing-powershell_31bf3856ad364e35_10.0.19041.746_none_349bfa9e0638e409\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\assembly\NativeImages_v4.0.30319_64\napinit\8746221ebd747eb9df133b274f635f1e\napinit.ni.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-onecore-codeintegrity-secure_31bf3856ad364e35_10.0.19041.1266_none_05ab1c833d8fb011\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-apprep-chxapp.appxmain_31bf3856ad364e35_10.0.19041.1_none_edda8130b19d4286\StoreLogo.scale-100.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ntshrui_31bf3856ad364e35_10.0.19041.844_none_3a06fa8f5b2fd44b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..interface.resources_31bf3856ad364e35_10.0.19041.1_en-us_b21354e62a788585\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-onecore-coremessaging_31bf3856ad364e35_10.0.19041.264_none_2fb91ebc76ca0906\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-v..payloadrestrictions_31bf3856ad364e35_10.0.19041.1288_none_cff330c4c25c5c3e\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.resources\v4.0_4.0.0.0_it_b77a5c561934e089\System.Data.Entity.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..oldertool.resources_31bf3856ad364e35_10.0.19041.1_es-es_c90cc0cd39e23013\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\copyToClipboard.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\i_clearCookies.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_windows-id-connecte..provider-msauserext_31bf3856ad364e35_10.0.19041.1_none_94ea1ca3d199624b\msauserext.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-r..onmanager.resources_31bf3856ad364e35_10.0.19041.1_it-it_7b0d656ea10f64c7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-s..-universal-internal_31bf3856ad364e35_10.0.19041.746_none_662657d58db18195\r\Windows.Internal.Devices.Sensors.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device.resources\v4.0_4.0.0.0_ja_b77a5c561934e089\System.Device.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\de\System.Web.DataVisualization.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\NavOverFlow_Break.png	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..napi-stub.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_0a7a6e697cac0bde\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_10.0.19041.844_none_ef8661e4d6535c5c\TipRes.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..resources.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_233ac4434c773b44\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-upnpdevicehost_31bf3856ad364e35_10.0.19041.867_none_9fcce199936290f4\f\upnphost.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-userenvext_31bf3856ad364e35_10.0.19041.153_none_472991b543292c9c\f\profext.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design.resources\v4.0_4.0.0.0_ja_b03f5f7f11d50a3a\System.Drawing.Design.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\de\Microsoft.Build.Conversion.v4.0.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_netnvm64.inf_31bf3856ad364e35_10.0.19041.1_none_ecefb6d05da00d6d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-isoburn.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_29620ac7c792e037\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.powershel..nprovider.resources_31bf3856ad364e35_10.0.19041.1_de-de_5dabb81c64e4fcb5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-defender-ui.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_6c47c36709e52785\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-encoderapi_31bf3856ad364e35_10.0.19041.1_none_fe14a222b28e7254\encapi.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.web.manag..nt.aspnet.resources_31bf3856ad364e35_10.0.19041.1_it-it_190540eb4aa179e7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-netsh_31bf3856ad364e35_10.0.19041.1_none_1fe6ae13cb971ac8\netsh.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\System.Management.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ntlanman.resources_31bf3856ad364e35_10.0.19041.1_de-de_48c1beddf8dcc15c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..documenttargetprint_31bf3856ad364e35_10.0.19041.1_none_4a503e10081a561b\XpsDocumentTargetPrint.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-securestartup-unlock_31bf3856ad364e35_10.0.19041.746_none_428efbd28b482d1c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_dual_intelpep.inf_31bf3856ad364e35_10.0.19041.1_none_736656abd04b5a38\intelpep.sys	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hyperv-vmtpm_31bf3856ad364e35_10.0.19041.1_none_b09ab07eb6360de3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-msaatext_31bf3856ad364e35_10.0.19041.746_none_2bfafac79c097362\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-mfmjpegdec_31bf3856ad364e35_10.0.19041.1_none_d9a3af9727ada122\mfmjpegdec.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-f..mutilityudfslibrary_31bf3856ad364e35_10.0.19041.1023_none_6aecf1b0460eb85b\r\uudf.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-upnpcontrolpoint_31bf3856ad364e35_10.0.19041.1081_none_b201fe701a40c4dd\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.directoryser..protocols.resources_b03f5f7f11d50a3a_10.0.19041.1_ja-jp_ab42eccabc09ccc6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ja\caspol.resources.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-es-authentication_31bf3856ad364e35_10.0.19041.1_none_f7adca24b5f66134\EhStorAuthn.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-upnpcontrolpoint_31bf3856ad364e35_10.0.19041.1081_none_a7ad541de5e002e2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.windows.form..alization.resources_31bf3856ad364e35_4.0.15805.0_de-de_5edbbe47178e23ac\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_dual_ntprint.inf_31bf3856ad364e35_10.0.19041.906_none_6723a46eefe53392\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-o..-policies.resources_31bf3856ad364e35_10.0.19041.1_de-de_1bfc3e55d6534dfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..creen-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_b5ef99b91cd9f5d3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_10.0.19041.844_none_f5f48bc2c8c3f7a0\scfilter.sys	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-openwith_31bf3856ad364e35_10.0.19041.1_none_2d66868246722e10\OpenWith.exe	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wab-core.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_9519651ff42fc67a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.powershel..nsolehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_582145f1f7fbc50f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_10.0.19041.1288_none_6f1fcb1866fcb4b8\r\ntprint.dll	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..erclasses.resources_31bf3856ad364e35_10.0.19041.1_es-es_ac74ffe2ddda5824\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask.resources\v4.0_4.0.0.0_ja_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_3ware.inf_31bf3856ad364e35_10.0.19041.1_none_4bfbcb89d64dbe65\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..-inputdll.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d6bdbe7898501615\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..ty-client.resources_31bf3856ad364e35_10.0.19041.1_it-it_82f194cd122d392a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..phoneutil.resources_31bf3856ad364e35_10.0.19041.1_it-it_7a1b7a481b1cf2a8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..n-cmdline.resources_31bf3856ad364e35_10.0.19041.906_en-us_adc1f5c62c383715\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_rdvgwddmdx11.inf.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_62d8ea809b5447c8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.crypted	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.crypted\ = "QFVURFSWVMWVVGX"	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\ = "CRYPTED!"	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\DefaultIcon	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\7k5dTyl6xe4CVOK.exe,0"	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\7k5dTyl6xe4CVOK.exe"	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\shell\open\command	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\shell	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\QFVURFSWVMWVVGX\shell\open	6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6c72709aa40768330613c64f42b3e049_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
1978ba64d0639c32df88666c1c3f4403

SHA1
715c2dd1aaf9a98781fe2045e9768934b62b45b7

SHA256
e1762414581c0899594f0a1fceceaf952b73b353509baf7e752393781d19fe43

SHA512
143db5a8cd91f1fa0d98646aae05d76dc66277cd0528aa45c2d9cfad3097401ed7e8b6cc1f0c01f4c7b8f2e16c2bdb652fc1348b52831cec970d83f9f4d48e30

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
d0c71d615492b8999115117e29a3b12e

SHA1
52093d7b54beae28124cec92f800b928a14db369

SHA256
e28d7d89540fedebc50ce7bc5e871337d1f2ad60e3758a5774318b2ae0ee59ed

SHA512
7de07919f92ca38529a432df197516602e9efc3daad3aff7d7773c5a8825065b853859cf723838ef3d5bef196c780972c3ab7ee80842e23c065fee0888b99cf2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
41dd4de8b515bd8b65b2df0340017b94

SHA1
d5427fda3f985b4c394ad114a180197e4af1584a

SHA256
f70138596a00fd07a4d5eae3db1b65bb2d8ce9c3d24a1d17863b120d571516b3

SHA512
f3ba95325dd3b6aaadaa99e62f64af98218a1132f78c814045be06587cb0ac5a18756cab26781fae93d1dfef3e9e73734e6a4e818070f1303561e1757b58fde8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
8e3b45384a9760f8bf2e0cba2313f58a

SHA1
93d93f0e09deeb93c7935cfb2021c209cffeeb68

SHA256
c07a2868b5f274551f70c8d5fd2f657ad448b589af52afd381f5a8545c94dfc8

SHA512
213db9acf44c48a431ad805a91a63b9f4b523456789ad05bf1614c5af126c3f157ec4886f69d6b45a905b777b122b53e2d6e63da07c1302cf90d6c67118be568

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
172d5cbd8a28074af2a817265a4955cc

SHA1
32791e950f4fb14b935a425d51ac70a1c338e59a

SHA256
6ae008d73419152c9730a10de2aab214d37be79dbd9b3d7e284e107622ced6de

SHA512
98d906aae3da4d057161b4528dca28fb05c32998894f81366eb34c957217bb31cc4edcf8e61dcc86388c5c54073268a3974acb5864c9f4701ff0278954c42c20

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
8cab14294baaea87c878d23f91c9863f

SHA1
204cd9d28c57625111aabc168c2520e764902661

SHA256
b8f4ec21d684a55f625d05220bc5133a11ec550b4e789bc97893de23567f8236

SHA512
d364f67859f576fa0764359b79bf7074bdaa28b697700e9571d59087b1d38f2ac91a372c99b70e31e1c7ebb1f076c56b96c446724a69dc4b9ce97fb371c9e437

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
187679271191bb9ff8b5514417574239

SHA1
b21ada71e47cd815db7c9659a2474f9131470f52

SHA256
feefdb9e88a161954328931a344668935dd61ce7f75806bc3f0f028e7a08c6ef

SHA512
a639def962b2d5d04fd5a33ab58a9eda7fed51ae1f1d7369f1313c67e0caeaf918b3d683578e8a2e8b5c8b5f47a3ce82e0e972cf2882615ce6427a91291e3e67

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
6dd6939a4b865730b9257a8849cb5404

SHA1
a00bd7897e98f454a911286ac33b7e17fdc0478f

SHA256
d21b77a98a4d3593ea195b83a59cb7f04704325d361d032fd04c078a00cee7e2

SHA512
c62d7a81f9b9debf75cfcb75c3046cd97deb7a631c18ee48d283697b00de949afdf49b920405cdd794aeed6164b2a0898bb589890536a6d9b3d4e691979f1a12

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
de195f5f3ef36e70a2294d8aadef859a

SHA1
1cdf7ea27a20bb530c57039c1c0b21ea80fcc8fb

SHA256
306d953c9b5987c3ba76d7ebe15d6899bd09a8cfcd5b66243b1b7ac32fddfbb8

SHA512
fc443d814d39fc66a8bce1e688147d76725ed9f260c77b423439ffdeda063d66feeebead078675675e2e311568ca84d13e9f816c1d7c83a17104e491b9b6f033

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
43e47f6f7da31f44e0c4f9316fed93ae

SHA1
30c5e43337274fb51fed32ca99d1735fee4e98b5

SHA256
de0d48caab64fbe85d05bbb5b2388b13c1800f7aeaaec201ce138872ed3de626

SHA512
ba6698143d431bdfc6d9ad2de78d60313e9acce6bddafecefc61438c289d791576e0a308b9951f037b7c6e15b6c2cacb68185fb80795ed2c4f8551ea692c1c61

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
d3420d213fd491638d2c5feb707d74c8

SHA1
fbe5e2a356281b4d832955ceb63a713c5a7382d6

SHA256
000287072370fdbf7d54b6cb5ab504ad8dbf41725e768192e3e66cdbd327429f

SHA512
4f4ffc0141216fa9b68458104a5124ef4ad5182e2baa229ccc2a3f4ce613a035fbc02dffd7be2e49c73d6d464bee180d7318c8f8516647b0418b7ca3d92e3afc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
00d40fab384889df8a3537d6b840ab48

SHA1
fbea27a42bd5b5567a93bac812c7c8c51c88f4fc

SHA256
327bcef0538a65872e5da57673b714bf0ed5f983a2eb4b60089447b511ce10ce

SHA512
06ffa66056cc08c29ba4aa24b8bbce861f13b447c9ac0c3f023b86f92110aa5539c2f5fcf960baa14b72b94d1323c6d06e02589be3324585ba220a57c445fdaf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
a42c83e590ef91e56c45e08fa4d59143

SHA1
a9437926fd09e61ad398bfc5fb24cd466ebc083e

SHA256
f977fca7d3c1302b5957e901189b007ba0139eabd1b58aee8d6ed9f554f33aa4

SHA512
9b782bc1d8ccc0a9556dfc36189ccbe598933a0ca6d265a1e4ebb45715dc7124377fd0ce4dfc16cd95136e5a8e8fbb8a8f5dbbee7a553e0e2cc9054b90691a6c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
76bec2580eff01884ea0e60a7ba457f5

SHA1
1a3c1c6ac83232acfb815c5fda5cd8df701d6958

SHA256
c7a111d1909a404e0b6d8368264d30b16fc125cf5b4781e20135e45d4b71af23

SHA512
10fdc4289bde5d56ee343cf925158e4cea3b08b308773de643110985398d332060f39e956e9aa4603357ce4b21f96d40b02c66e6f74593120fd5495ad009d3e1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
0d0af907536534f0b43d0ed2233026cd

SHA1
b92089a887cd889f70989e8c39c23f47a444253a

SHA256
5ad302b4961ba4488e67ce4d6dfad47da2b9379a9687c756695da4d84400c205

SHA512
64fd0f2089a6dab125af6a6fdb6444606fe1cc73f3cb0a4716d48401cae6829dcaef18fd08de2672abe6f51796a1e394a42d926dee73c0d527207822023fde1e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
06220cb66a41bbb0e5519f5816cb8484

SHA1
a7d9546b4587c5f4d5a74dfe92d0a2d9397a6f45

SHA256
4cda3d022a913ab1d781164dd646ca314b3aa12c6f61a76ad0edfc1032946e9d

SHA512
fe673b2caab88222982818ce44ab673ef3670a00da3cbdc7b8fdf5dc85b692246a2d3eb6aeee5e5802e2e431564b331273816df0f14dc08c5fe76e02fa26a777

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
96baa67dbbfa42adefa5063600c67379

SHA1
15045014e5ec5cd56a71dd48ddde469416bf0ca5

SHA256
9c24fce51a8d1ace7a9ed92b17eb7db1c80e2a803283d43881c63b966aac3257

SHA512
491b9da4c456ae4cbd3ff0b1949da8528933ff2d2626a727a9994339b1440afa7a05626cb7f58b7d6951763c078d3f800b7a4c21bd9bf59288a7d0ef6a8801e8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
08e218be65554e204cdc1d75c62730f7

SHA1
6fbe651c076a24ef6c460768eb2d40bfdea9923d

SHA256
b68b853e48bd07dd77b758d83d25711f119bdf57870d575b0eddf0b87f58ead1

SHA512
160a489b4a7af20565268cfe77152e566e34c2eccd1f928d17b55016dcf88c6e714d2605bb9110fa970727fea3dcbdc080f731786975510357c57124fe87890e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
dedc81ac53be84c64729c7ec848cd8cd

SHA1
452670f90461a5ebff99c1c605ec3dc5f9e12f80

SHA256
3a9b6bb8059a75dfbfb0ba2022abb29d670ae72b603783c75b7624f7b87d0c74

SHA512
f7870fa2645fdaa09af5109d2267c441b6249f942fc5e807af27b41ad2ea05091c5b018706684063dee0a8d0acb289730bc1da0aaaaf9fcf633eb42d4adce1a2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
3648293e814aba4ac9121d75cc49d999

SHA1
3ce75b09483a6b8951216709b350e9066c099472

SHA256
28641e9417975d1e214f728920305f36f6de673b105b2b35bbc104895fbafa7a

SHA512
224232aa7ad74de9b1c455afd821443081bb78adcef7cd1f3a9250132a61b58619c5fd396a81b5fd0ea06960cf3060be547aa33be702fbffb686364c485c421d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
95012b63b709298a0f65db3ff8fedf23

SHA1
5990c2b490500dc00befb4067b6a4c8a131ad6be

SHA256
538c5a53a83113a270bab7ae90b59a67e4d2ef71dde118de4444f8523816ac87

SHA512
a58c2aad461f7e6acc28175b64deb6dfdba26a42ffab5fcc8d5f0e66340870c75fecdfe961b3de1e5e0235b0e1fecb8d287e743f1b93b1b04a38d576ae30deb7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
1740fae29d59a96e25d9bcf1d5636aba

SHA1
409af1ab1e288f56665668d33939002a43c0701e

SHA256
9ccad1a301ce76b477f96c17c7af5c5fc7b70d37051ae92aae41ac1469c035e8

SHA512
ca3853441dda58da2d5a89d0949a070d5a1f51d89364ebcddf4190de9f8e6f7c61c52fe2c818e6bb53ea0422ea2c57f1e696587af8c943cd14a524a05fb460b5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
e1aa6439783122574e5c2da1d447c19e

SHA1
0d437a0dffa754847bfd9011cb7c5a7a896fc537

SHA256
d3f689f53fb609886be5d773b447b9cad3e92a7a60a36e886f091ef92d0d855a

SHA512
67400485b0a52440bf30cf6e768220cdf311c4e5d586541a80e5d1ee4c0089ecda798b94617d4b7749e1f9ddc16d9077c9cc3dffb5a82bc7f56af3a546f50482

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
cf319d2e34043566c4804a172a63c5bf

SHA1
6ff1087556ef46e5cf0f9b41c98915067e3bf605

SHA256
a8801be35a0ee3d88e31ca0f9c73b4d6152a1bdf7d1e657a14a7e41c45961d3a

SHA512
0efdf25d0aa472d75d0f8680fdc844ee27d114d01cec97bc03c95e7f92f236b641653e3fe8325d43101e0c5e1b9669518984ceab9371922d82e392801a32fbcc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
7a781c8a64f3d21607e78dd50f8567a7

SHA1
616e2e0092aa0db4e19c0fda7202fb5dadcffe1d

SHA256
e5998c28f68e1568cb45225a44ed14726eedda24e030d2eb3cf2b67d0c06a2f0

SHA512
32a88e6298c3a2a2b237c001cc6b5dba4749fcee39e9409a45bff2ccdd56708e16e3a2ef65f96df625840d15e4fff67e970abfae312899a9307c9e5d2bfbd334

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
5f0bf8c8e26f49519cf916b741d6e0ef

SHA1
2388e552fb3b329e864c3c22ce9d00592905b097

SHA256
d456020b85f512455c36d73c9815a691e2eb14032eed30d507385b9bfb2bcf3f

SHA512
dfd804adcc49ad27ce4d6ddb84d92c23047bebf6cbcc63c12299da9f24fdb4cae87f2e07ffc3c24ebcb93da993ae1b20bda4b6b5b80806184560f9968a0df76f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
ad039dfa92a39d34286d3216e87608f0

SHA1
15b621ff0440cabd787226dfd203e368000291a5

SHA256
037d3f3098a6f804c9469592ec0269b58b5b9c2f1bc54c7f49b836fa37a10c35

SHA512
52f1d21cae1863cde82930cc915260aaa11eaa15cfb138022b40f8f65e1d549ee5cf403c24c499352c73b555ccb4928934159022051184bc75273fa06366b10e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
bbe769086cf9eff32adcfcf3f80f8452

SHA1
254befabfcc1d5f4daba2169021930d27e5efdc1

SHA256
10c2bb00e15663c28c0ab361105cbf118b7e1e5723e8b9d88394dd109a0591bd

SHA512
51561415d51a91f5ab52e911c4cd0879a1ffb8fce1a7f00407eb2e16c0b88a73ae75b4f057caaaa013bb2d13975ab981c859089e50d6686d35919895615553aa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
7285717a1c49cd1cec65e1923d740777

SHA1
97fc154e004b98ec849c73b9d8b014f1c35f1321

SHA256
ab9640b5dd7cea9099d37ac81c2988ccaaeb029d0f1882d661e95e8586deae86

SHA512
66453945b77652ad786b2b5cb48968e8e245beb2685e23da974c7e48bdfba2d172dad7fc5cf3add6b94a7747b94de590421fe5acb9fd81f59331cb170ae4609a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
2b9b5925661b716f634ce84c39ce30c8

SHA1
7d5e71ba342fea21804a8fdf82e2485c933921e9

SHA256
926d9aef50e9aaff9eb4263324a0663deda66abd1cae44cb586934faffe911d9

SHA512
3580ea2577f8433a2746d7b411e4da010d7dae8f2303bf8f3ec95f91f1c5ffd5f051b388eeb478acb5e96341fbb68b4c1edd526e5fd33d1ab61cea14806d8c8a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
65f4ab5ccc8c79b9cc179075310cceb4

SHA1
f2f8d92b09cc1ba1fab3dd98e437351cd7bb8ca4

SHA256
df7644bd4adeb5425c523154365548c76328f8ba5038d5b9257aee4c7dc2443e

SHA512
0d5f82bbe705915fb9297289f53d39e416772b7d6a184aaba649b26da2eaefa29c02007b5869902f7f65dda96ef38d07265aa4ab6160eeef510ed7208660d9e3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
5acb5e3fc0af37e150e69d71c56ca9f7

SHA1
56933f45d71c47755b4b2cb4f3483936a5095081

SHA256
9abac62fcfd43b1782202f81ab4011305c885a28bf57196bc49a99088f16bb23

SHA512
e6acaf3c1b1cf4519100db7ee1a5fd9049da347aec2717d9743c37ab7498bd9269211f6906c5953d6c82a635280f2bd113c4429f5abebe0a7c9da5eb9e0b6743

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
196c728808d9ab2fc2016419e9ad2508

SHA1
fcd8b12858d1a051a97c8607ea65844909eaab7a

SHA256
a38efbe668879a4f89967d27380bd75898a4e0c1e2c83906ac9d212d7f0ffdc2

SHA512
0a3e643097e1a21c21f66e23a6933ee12c54969bc737e755846c354172a42e1a0c5b5c09fa51c8d7a1b110765ee03e95f64ae96d3e378c0063697bdc964dcc1a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
f5b9b541693a7afd059b4d666e961012

SHA1
bb538763addb18281993fa24c608d7d913c74d86

SHA256
cdaa8ff5c8752806c2d94f4d128b35cd7b81712972e83db21e1650b419171bec

SHA512
2519b5f5d46795232f1094d8c65292fcd70df1782298d62acbf697094b22391091dc3d36ad00b863b5a22acd720d8857aa75e020d89f98f3afad19cb1d8f58d2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
3ddaa9c5be39a4a4f8fbac965d45e753

SHA1
282463b7cf98769d9945e951fd56bdbc7f83f60f

SHA256
50188bbd5f45f30c1eb874d8219cdaa7d1ac9aee6f304d11d9a76a0e93131743

SHA512
71a25f76c8f179d06d1e12d2a505fdb999efd4419804023748a689d50e31fc55277f6377dbc20b8f2595507a890b85251bf0c2992378e7e0485b11d69bd748b5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
d347547acca878f2d58cbbd7470dde90

SHA1
16558b41f299d624656d47beccbb667bf43044a9

SHA256
3d2a4e249df0cf9c57e9aaaa95c70a3d4c185d20691bea0484c2b0a1c60023b8

SHA512
97b0405be5c699cb2b403530f9f41e4261b87b548ff48f4685d46fa11399797d4acf334045a951cc577a3fa0c5279acfa183aa0c11f58a4e82295cfdc72df560

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
3e3d311ea309ec51268d3cd1ef04f49d

SHA1
c86e0bf7ca2a79c6bb390f7e273097a3130b9e55

SHA256
529e7414ca4c9f66f0e73add650dd56cbfd94c3c73f962f70dfcc4deb424fc53

SHA512
7feffbb62c46287705d331a8358de75ff96ece49a5f42b33e36bedc2e097fa0c71c8abec7a28c84264e669543cd6423a65a66ea8709bb6dc0722e825ff1eb5a0

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
162f24947fb0bca88e8339c2395084ac

SHA1
7a156ac5ce753acdb2be679cb6f8aa6a05c3f277

SHA256
9e2a774dff78e059a51bcf8dec805436bdf840bd2ee71c2c5c5404fe3692a92b

SHA512
1435f0f3594fc1d8e0ba9eacd2ab670fce33e15da400ba8703e2295b5acfab548866be7009eddf43c460d97e02cd7ae824b663e5636215f5c503807069df75ca

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
282B

MD5
69a98ef655778f1cb3764a923acbae80

SHA1
22683321e95c9a631039d15fc49ac5d3e639ac54

SHA256
2ff127d5bc4c7333c8f522aa4b456684eca97c06d452bf7d00b6a99b49b11b0e

SHA512
610fc09f40124e1a74ff303ddd95ad5809679be9e0c381e5d367ecf8e1e137c3da188142de7a2c5fe2b1225e12482245f2b5c417d43d73618108bfb1c32a5ed2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll

Filesize
558KB

MD5
891860a8e36353e50c3de7c4690ce313

SHA1
bd4a4e59004e80b589ea8fe4ea4f7b87baabf6ce

SHA256
5b657f8ccc2bc4a00a07a5729334d9b57c3b9461e2c8bde036fbe28af6ab7bf7

SHA512
d0917cd3715b79ba643b3fe37def32a78ae4ad5b64c11570144cfb8136bfb1c5425aa23d727978e4123571ff0a325af87c66e0419f239edc8db8a0a7b19cb183

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll

Filesize
95KB

MD5
543b3cb5ea866720120a620d22ea5fc9

SHA1
0747c62db765fe5b4b6065f2951ada48098fb58a

SHA256
210557601bc79d9159608ccbff160f356127823fa7a1b59afdbeceab8d2d811d

SHA512
f771022ee78e36ee0a69939d833c8670cc0fa56cb98d6ce5298c7aac86d02f8b3bbff4fa8e349861f9f8bd0dd2727a13001764c88deb3261ae5ac1b9cc2a94a6

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll

Filesize
36KB

MD5
614ff46adc2c6f3b8fbb80e7900a83df

SHA1
d38c4b453c17feb475aaac1c61a12933ee07e83d

SHA256
264ee23daa14fb9b4c1dff5d0fff75640e6d5ddf5066f5729887bc7cdd129dbb

SHA512
9a92c996b1dfe9ba6b52ad74ee1ec801712ae6ee322ff76aa4b09da860ba50cc90f0490f23ab9ef28dd6e00fa2e68535934700aec902ddfac3fa2c0cef5b9e41

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
016aef03f1e4a18a8d0bc3ce6f7b6462

SHA1
85b8ec35f079cc7fedb450bd8c5b9e4be470ffe6

SHA256
e56f32a3745945d59269ddc805e823f1d189557fd88209122d04d534b1f4628b

SHA512
41ab8669d00aba5ebe968897f2ad3d124486479e6ddf6658f03d233e165ba14de185ffd2d29caf4cac7325c69fe8c64feaa3c3e972ff1a2b0eb6d43113aea665

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
4e10679f20bcecc27bad0700c084b9cc

SHA1
ba5fd7cf2129ec5820db69261ef0a9006a814b63

SHA256
3112300ce95dd30732e2102ace2b4b140148c698d6c9361e586b323ab29d807f

SHA512
909b9ea7319bc8e768fe21a4e2a8de8743bdb4002217eda3c0e9db35899c355926d92442727dca1c542bebc8aadeab98b30348055099bcf2f2547b26b8fc8004

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
09f5fdd5032ad1f6cd012699078de539

SHA1
3bcc6dd8d155edbc576eef5031731aa7b642d079

SHA256
b6fa4a2d809376821aee375a0c4c6a5cbb85e2624e3265e1514301743d7150fe

SHA512
e4a169e3e0fb6a254636a1839926aaad1f024b24f0943f2f5eadff987f62278f12d0e646c1027ff67f88e471a9f29a97c39cc4d06144b06fe89210d6e7f3f536

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll

Filesize
11KB

MD5
5c85d849f70b4ac5daf6248cebc0d65d

SHA1
96e49bc195e8d387f7cdebf6b96e37a311e0f1e5

SHA256
4999e4bafe5fcab6b1fbdcdbc9435a0eff47abb5bb5bf2aaa2134093642a39eb

SHA512
e6775b379bbbe6bc5d93ab58219a6e3d6d1d03bc1f56f34423aac6736bc591c79253449f4f29b5b94b5a0622636a46b6d50891d4004fee1e7b680123f8764a87

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll

Filesize
11KB

MD5
e21544678c582b5609967347173a9ca8

SHA1
a546a8477693cc9d59ba4371388c7b51109614b6

SHA256
7d3a12ab7a2a24a021da692b8b0f2e3ae3eb2e5356d4977f318ae64122e3cba7

SHA512
89b5db16fc00215f9f9fadee1ca003a98106cd6e44977084b79456efa5df72884088e9abf03a0dd3fccd684623e4bba28a920424761ff622669e3b0337978561

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll

Filesize
11KB

MD5
6ef1c13e2cbbba1375ef78d22dad8145

SHA1
49d744dece669495e8955bf33e4bfee0dc09890f

SHA256
acdfbd97fc124756e0fab2237060d9b94c8058c14671b2dfa32e1f67bc6c1880

SHA512
34bafedcf29c0fd2a5276eb91d7402016132f2684d4109a35d90e3a02aae9dbd96bbbe8902d26a14b54ebfd8d1d82c4fb9aa1f6c4512be2bf1fba10612f6f9ab

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll

Filesize
11KB

MD5
1262b835954b6b36a73880126f8864c3

SHA1
baaa989881544bfc3366e5d802d60037c1f68dc4

SHA256
a35eda8496599fe8140fd6e69082a3e27a7a7143e2fd97cb1d06ad583bcab407

SHA512
645675aa53632dc43ea6d78298dd0cacbae49003fbdf2d17ed96b15854f55f43b7dbb8da6a511620de41a0e41341efaf291b7f7013977a7f36e5649733ebf958

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
11KB

MD5
2ca78cf01c7f40a2de8245525f2d0ad8

SHA1
b12a1209dc182a62717ef6204e0cd8c5846f1627

SHA256
3058796da2e7f512fba5477f1be6576707cb324784f61343c458f70861feef94

SHA512
0a47e8ee4a7d8d52d4fef567279daabbcb9ba8301c0945968e44be0f02230c6a7d931b95968d3d5e27bf129d6862ac9467b885e4f9b251918adb27ec011409be

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll

Filesize
14KB

MD5
97d4fea974f0edb8827f4f57fd776e57

SHA1
cb2d9a72afe704a345b6175851ab67ac84735b46

SHA256
54890fdc6a016b7fbe7c7c1f93bb2aa1c4d025e514de4761106122146f12b3a2

SHA512
45903c518a14b87a246dc30ec7eac9a85f4f48e60d0dd99240eb5c48bbbfce279372a8ae3d9c7eeb84a1df6429cab7bb15b96f95b7878f740f54d0ef03200ee7

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
d27f27a3f913791e6ccd79a7932f98ac

SHA1
944d00597294523fa49cf7e176865af58231653f

SHA256
09f8c7695f02074759054fe7269d8ebea126ab75cbbd492aba8dc449504a3b41

SHA512
ba39954d584548f0f2fb88c3ed8e904aa391952716312680ec233e6351b2e22981c718efcc6e24cd1dce794a1a461bf523c7fc4a0ae547304816fa683ca5cfac

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
17e77db7d24186c84f192d0903747e98

SHA1
0ac84719b8f7c07846f614f6715ce8ab7f498f0a

SHA256
8adddb5a5221cc2ca76d1df5ab36a401be4b716be1d6a6ff33d1a2ea930e7ad8

SHA512
99dd01c0295df8daa2e3fa3dde159c56da874a7e0973892466ba221dfe7d2e1d5d2ae2f25a45d38f6883e403f47d6cfff5a64b0dabad64d368fedf55e2ea25eb

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll

Filesize
11KB

MD5
3e3b453f0d53f89388d274f473cc7f88

SHA1
e4850b161bb17d599055ed122c4ea9c3605e45c2

SHA256
4c3f37ebd9f32174b725855090573976f7596c9af5fea77de2cc896f0d0c8f8b

SHA512
61756abe038fd9cf12bf30015d8501f0edd4cc7dc8fd1f650138f23d35f08582a76f4d775cc846bce5297a0386b5073af9d1b2dbac324e711822b03668bae765

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll

Filesize
11KB

MD5
ab073e029efec015b8ed6f603cc149ab

SHA1
8f01d141d6906ff7536b599fda7faa340d80ccdf

SHA256
2d9942d7a513e9cbb0fac16c2451ab4d58114e1d44b72174e8aecf56b7799920

SHA512
584ce964e8dec643fb7a2acd286a835c8dec77f724e9a10c6e138c5c5d7d8ac86196d6349dda0300e71cd98c0de4a5f8ac3d34aea1239db9439602a9887d2712

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
11KB

MD5
0506ee47a41cdb022bc5c3c2a1d4e711

SHA1
21f8b9250357541ae34773e6b7c83f39b1b1a96c

SHA256
6c1a0c8b97e543f931815783d3ae0c5628e35e005643edf753cab652c0843889

SHA512
89032dbd0c445da18c43fee8e3252f82d7ecc73e5bc02fa4f41096a87acd67decafa8653a235bb5ddda9c9505a4ff593b9715228015ef7d01195f62b84c04ba6

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
12KB

MD5
8f1cc16c71d42a9bda290c394e7b75af

SHA1
189b0c4c732a5ae0b75947c32f8c842f7664c6f2

SHA256
0c0ce21745367dee73d542fd5edf965b802e050587cec3b7ab6e8a6df34c4eb0

SHA512
e356b343762b86b2f18c9446c6b18d260e9ee8d13bf77603d5db3aa54d477d3405a0792a24a9695b6446432c43762998ddf2ffaf0a22a4534b2c24e2f08f9003

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
1abf9f000b5f24e494778bd14de6655a

SHA1
615e323100dfa0a94eb9bb5df6e20117cf5f5c32

SHA256
643d743a04b74dfcea833a01440b4e927ede176a22e76b6edda687b350c518f2

SHA512
88ba9b6461c7c41f061c9fee1b34a7f8b2751b113527d9aa1e92b9057c1a226e156c019b83e3a3dc61dee0c83bdb5f07eea4ea87947433b182aac28a30fb36f7

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll

Filesize
11KB

MD5
0cd8dbeb833780dbc6418854d33147c1

SHA1
ddf6936e6176c1fd432591b7cefbbe59cc51502d

SHA256
de361a24fe8f6d6680c98bc4e02e8cc2efbe8c9311008d75993d627aefab9285

SHA512
e41ffe272ea3557192b70a3e8a9595c2d870be42c0798ed43afe9fcd805d38d654eb5840f870bfe1f4d757b1934241d60542c69e0c5bbfeec3d31f10c55d8188

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
11KB

MD5
e004f9aaf8bff331737e0e9dc9b1fe46

SHA1
6c9026d7585d05d36d0c340ed0faaaac4544e49d

SHA256
798a9fb58a3cd8aaac3ad411241e85cfc60a831ade7f3de55e7f1ae82955ed3f

SHA512
f883893b6a4da705cc07208e19dd7ae7d3bb741d7d8ae6eaa064db6acbb48e41aad3f5b3c52f5770b849de548a6e77dd30acf83bca6a61d009127dc22cc50213

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
12KB

MD5
08cd141c63a61be174c605a80fdf515a

SHA1
279a47cd892cc8de5ab976e9cc3ebf86e71c38d4

SHA256
b561ea574b6c5f5980d5b77ae41c0db0a5680cae9fc89a7c88dd15182e4babae

SHA512
1f1b861889604167ac3aa0d89975d0aaa6fa77dabcf5dfae7cc20f960eaf3a4f4bb7e387a217ab5cf8e57b9865401ca68357a4a8f57c1ae608f8313d3ceebbd3

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
13KB

MD5
e0c285c8bce2d81349ec1cbf1ab863ab

SHA1
c490eae98ebbba31b456e1ce8a1422a83bd03f1f

SHA256
e30be90a9494409ce267bddcc48b0ec06648c01b12b145cbdbac1b08be5bfb8a

SHA512
5739167452236b71801e63ad713246dae34e07c8e550b80e6ac5f6d15f63035c973c33d892f597d99f7c5f0f1bf92d55b2c262828724b3690d551a8e4a1da299

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
11KB

MD5
37e6fdababdc5caafc3330371adc3d47

SHA1
faa821ae0ee594059f2f7bb6fbbc3992c3d30183

SHA256
c2e6661e61ea396bdbd3cc05003011bb9e4cb8b6c38b992551b064f272e9081c

SHA512
e85652f01a7932ca496c18d2780c8602a233c11fa1f180b2a073e29f5726c1fa3498596ad8998b434ee816350016d9ea605e154fdd4de1b8912db2c0c1748bdf

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll

Filesize
11KB

MD5
55e07e1e9a1cfbaee418c31ae05e9012

SHA1
77cbc03ec0fcb4d1739ec3d887b05c80c3c8b540

SHA256
f258e944e65adbc9d77c1af50f87594bb5ec62229fe66a287a7516462c96c282

SHA512
0b5cf7071a8877c7a3764a285abed3c58b502290fe19d3fead5b80e0ea751aab65d4cfafe39ce852969d0851a4d8e3f9fc6a25d278bfed241131071815cb532a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
11KB

MD5
334542989cf57d97edc8fcac850fe6ae

SHA1
949d615d883d2458a60555a47e1b8393a1832b55

SHA256
a465d818c314a946ced5c87c1bf9de69e595fdefa79cf34015ea9af208d8387e

SHA512
8ca563178bce7a14fe25e07d66b5da6974cfc83cb77c8807370b82e0b3a35340cbf55f68cefc488e09267d23b69f850c084915563ccd35f163da875d8df5941a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll

Filesize
11KB

MD5
9780fdb99a61770eacea8b71e60395b0

SHA1
8c95d38bf0abb7ad2972d24c8a02dcb3a5927113

SHA256
086db2a7014841b69c95d9ec9cc233593a1e52454e95b26ce733a7af6d78794a

SHA512
cdb4a602a53729bfa6a80ddeaa93dd7da00c12f2b2a55786e2b59f2f6dc75f79924204eb7460d74f4057edfccfc29d165a3f4d5538d191d65cffd2bad8d47616

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll

Filesize
13KB

MD5
6c056e7622d62a8e1a24d75a30d30e03

SHA1
7290b882ef7b4980320342236f044c8b760b929d

SHA256
ec2a5d5323c849a44b7ead3231c122dfb9a0783d3bc16cdeae485d96a06d6bac

SHA512
76391450493d3dd76faac17ff1c322fee9dc697248e6738139a17812a80e67e33ce2d4930a5e1f8e1a6a7c8dc961f20ffb335b83e4d106b0042474b0fcef8004

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll

Filesize
11KB

MD5
7df495d89aea41e976ca3ba0ce7427b0

SHA1
cae9e8e895964bc2f008ada9e2c0740daecfbfba

SHA256
43ef3d88824135aa8e8df6ded03d455a5449f1a2fbdcb709c0adf1859ef54e26

SHA512
4bb955297f21d8271bb0ecb113977a1159994e184c50c9e261304aeb6ca287beb2b6eedf3609afb9d935faff90efe2c36b69f0df5ec1c78ea16a9e1315b0e278

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
12KB

MD5
d5c09df0b4f76be636b36bce38bc1a83

SHA1
e2bd3aac2c8a8fb9dcb2c441ea625067878984d4

SHA256
633cecda814f5dbd053bc02c604a124ddbf3a746645a01908998518d12fe7291

SHA512
4957278c641ca7326bfe7544a5f5b7d9147ed1e162dbbbf9eea24b000f9c9a1f210fcb0353e863ccbb43e96370e9cc77517f6be94ca240ef0eb58414894fd74f

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll

Filesize
11KB

MD5
c9a6c7d7296ab9b7d06342f262958dd8

SHA1
29d7d1c8e527c9eb537a6fa55db78f6a07f720ba

SHA256
6f75a48d05dc9d8244dcd6d318d27092dd87bbe3447dcd45601c23014acc50ba

SHA512
f40ba22f25ccd07dcc9f6d90f1ea88a4c5a60b0eaacb44277360fc36ffa49a393d1befff17149738079da661f12baee3fab242910df567b8f65a9e2e2a752327

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll

Filesize
11KB

MD5
a86cf67095abfb5aef2674e2efabc960

SHA1
0b9beab12e97c4669ec15f7b4bec5a5b063067b2

SHA256
7125aacdcae56deb62c036cbb32e74d72ab903cce917280de290d034005ba15c

SHA512
1c933bb73bb0c1dfa1d62d6071176e77d648da65322e77095f09da798966cd8223c097f93bdd19f98892aacd6d49d7f9806dc912a0b2df94d0f0179cd7bc25dc

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll

Filesize
12KB

MD5
b9ee1b23bd83d6a62e63879c4a0507a5

SHA1
ed00294b50308b3c2b6620d8db5e98ac1a44a91e

SHA256
04e462f9165e546af80742571ba913102f5e910d171a861de8800b8a2b9c03ea

SHA512
2706e5ac70f15dd6b77b34100162c01cf013d106af8accf20bc26303d9b6953bf9224eb7ec60792f214dd1b50b6bf1c531bcd3f81fe92ebf99e0fac0b8c01886

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
cfb10408494a554310b4ae6d6086bf9c

SHA1
97e7e52114da551bfe1e76a8c60a91d5723bc139

SHA256
fe07df8aa259eeb0e73b8e61c9848efc455006655834efac45f4aadc1bae020a

SHA512
22142db2a941362de11e242c43c4946725055fd2c72c96ccfe572155ed773adf0e3044ccbab426c5c80d128623c6b86c03311980c31c5ed50274259f40dfe672

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
ba097cdbe7fca1ffaa1af46d333a2543

SHA1
10a1070a7cf5d8af25bb4a276a3522144c564e2f

SHA256
4e82be6320b51156dbd88da895e2f13d2bc1dbeff87a8ff5b3392a0c57f33f25

SHA512
1f4d9f033814c6b9facf78b3f6963dbfe89d64f2299b7e77feae7ea4d2554d080cd56047d509a5fb400e55d4d69970da6179fb4708ada9ed49cd88b77f22912a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
8ec3b9e641584393ecb0cc7ec8781834

SHA1
7674ae2b5d43173101af2830705aaf74b7ba8f7c

SHA256
ef0a30987388537b4af814f36bc52e69ed7e5411b6691a87700a6cfbcdd0c6ae

SHA512
1c8b3349e44eec63aa0dcd486b78c275b9b57fe9f81d437ed1a08c580e2359272391bd29b389642795bfe8bc99f1c3135042a6324af192f93b51acbceb1b7200

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
cfe1eafeca880c384d192cc03c337b7c

SHA1
ce9289a3c86f9d9ffd6881ce69388ba014812b8d

SHA256
594af4336c7282d3296c1066fe7bd36276d7de4ae3eadf7f6874d6ad442c9841

SHA512
a095a7529d9a7ba2696b25ad5d8ec89d59837d8ac420b63c80cb832e6276b1fe89c4cadc268fd4c558def25d9a97f89c47463960206988d15ab93099fd3ab45f

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
298a4b5eeaca1f517de73455cc4fbd45

SHA1
ce3983761f220d2363db47cd963708edc0d24985

SHA256
67e566e0ce4cb3ad8b8e7316b81c9c7cd3d1e5c79e9026434894903087252674

SHA512
dcff8fb57c692c5ca648fd8a8c4a1a9dfea2d99e5f9751e64ff8c95d9995f6cfb1596536a9c306c148f15a2375dff35a18f51b86d0a4ef7d810b294b93699c81

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll

Filesize
20KB

MD5
8ef66f886a9925197cb9bbc18f09c9db

SHA1
f07eb893890f1b06eccecf640654678c588e8d50

SHA256
f65a5026d338da92de823feb39369a535bf70a2360e979458f60bd515c31e8f0

SHA512
ef4ee041806eaa7627c15d430ca9567b22994d91a95c946388032b65c647fdc44c4d1d4f0786b0177b83e8e2efec993c47b9d762bca53eba342e40934da185a0

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
19KB

MD5
8b3d40f10b7580819fd2513fa11f7d15

SHA1
3ecabd7a2ad2938d4829d16f2108a42a9c3abf4a

SHA256
8e5f8d434b89f446b91b991e5c72be8c419f87f2c76458a1011f2a9a117a994e

SHA512
2003adf7fc99a1dbf0e4d00720637377dab0f65f0c4bd3b29e322cce9e841c09f8d356269f12d4f849b20a0c048f25d6f991112ed414f77e6aec48b40bf9cb05

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll

Filesize
62KB

MD5
6fb0b91d96cf68b4993ad9d5ef80f1e5

SHA1
c1326b0b61b6f235970ccdee77a9fe6a88677050

SHA256
59377837a6ab975ba3d7b0dcbb5c6d3e12e7dbaab5788068c00621a1b3a38ea5

SHA512
fb7433726d1fc7e9a6cf6344d2c7b0a1fd93c55e9265e967a622dbdbe62c2543ad3750f0fd500716401a11158827f4286618d06a3f0108cf4dc5181fbad1b553

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll

Filesize
12KB

MD5
a8df0856272c1afe7a64ed29b2242d31

SHA1
00a7e953ce1f260e269307ad54f2de42ff2edc44

SHA256
51b4aa06f0e7b41ae97f162b0576f3f36b63875746ee61f1e29b479e566238d4

SHA512
b4d6b963e885d5242fc571db8dc3962692513987638527c7d95c3292812ae7d40d080b38d56e1e4365a4e402234a2c98bf2216067a5c702e2c0be4f40c109307

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
139da4620499eb443252e46a1a89cd2a

SHA1
8afcef916b7e26868ba773acdfab2005d82cd7b2

SHA256
6150a7611653807262b31b1741277d1c1241127c3c32b0b32be2573af0c91d3b

SHA512
def85a5764c4284b821c351051e927985718b6af9e8b68761c844a206fb5f16181f0b5a74c997fade8ff60d39cc75326e4427e2b8ee0228de20dd499a853dc93

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
19959bb68e0cdb98bd6254c6be5ed843

SHA1
a08dac7efdf5d1496be17c3067f3877180f7a497

SHA256
935a90cb76186f5bd675f9a288c5616b461b149f392727535e3539f6bab7f512

SHA512
7455ede380b88eaf791e6f24610c32b6e0314be0be1bff6b302852dcd87a60564059bdeabe52d81e0232e85bc82ebf4794af8530b087eb5955d4695e7cd5abe9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
4901bd0a12593373c206d5552ad2bc7e

SHA1
3455e41d057b1d76041663802d85a96ca8f75ae6

SHA256
9f1d4e5f26e7da279f59779ca62b6e80d1d8222e17890fe12859d59d479c4d59

SHA512
a6337f005a2fe5557b16b7ef60d096473404ecaf4ead679c756ba0a66e8884bc2aed014b9c6d306612697cf46f41da7fded103767d16dae638d17f96543465e0

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
855c0220743c1405570147aa25a4df64

SHA1
db8fef8bb542635fd0aae4cbd8dd9097875d316c

SHA256
e21876f6e0f314535b82b0b4758e1e162f4d9b76b822aab5daafc71dc2b148e6

SHA512
629d977922583ee42bb53d87d14a68d6d73bbe048b62560e972299f79f4601154ff87437967df6f31da1aab1a95cdc5b47e6b0a7600d40f089391ea76a78323f

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
f007fc9415aad6df2ba7937d4fe960e1

SHA1
dbeb8f48259e67f7da09eec2e9b9e5fc833083f4

SHA256
6a74fe08df3859d49e9da92751f14aa989f532d33f81fd4c1a0ab42eb0d3d3dc

SHA512
dac3aeab10aff0c08b7267baca7ddd8e6d72a4dc9de3eceabf3dc69d13906178cd9b1182df03b8d9b3e617c740bf0730e3d9876b45b7d2643f7241b675acdff9

Download Submit
C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll

Filesize
1011KB

MD5
2c4ddfeba303c064746208cc503b4d6c

SHA1
87a6ac3f87f55a90c75f774b9f09307d8815759f

SHA256
0b1ce23fd2c63c9e0e643a713f6d3c063689fa721bdd8491ef4803614a6a9994

SHA512
a573c4d31a521aacc738cd566b623127d0bd81530b0983824688a60b2ebeda59087694191a52c33b1d1365588e4bf9505a5971720741bebb626866ace5ae12fb

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
456533569cd7d3f883c4bc42920a44dc

SHA1
d39ec4c3b274af92c0e5bb3be43727d9fd41f6c1

SHA256
93b3e4b12d2b2e4f8075037a5c1e5eef39d8476959e027bff6bc9f952d21a1ac

SHA512
1c6d05b57adcd48bbdf4631dd2253d375435133c5208fe501e83917b08697269c892d1d1d234db3754112ac9aec3ad522a4d1b741c92ef1bfb3a33cd57874fc4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
ff13883f4159c4351e5c448e86c66a16

SHA1
697c24bc2dc45fe396cfbae05199c1e927909b83

SHA256
7694fb42fe8b7c4afb438c2a10af8adaf4dca93f88e655e1c5f7bd6b5edc87c4

SHA512
fbbdbe210723d896064c7bc3e08e2773f997e22e0b03eac4d93b85ae503d218cdd30ec33e0eae420619c0826ce87cdf3e1458f401cf98fba87fea5560ff052cb

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
5964e82ec030e39c88e8f96ff3998e17

SHA1
f0a98f5975a9b85781c881835df8cdd7412e7086

SHA256
a8084b4fa8d38a3c353fec2f9e8f7f7c1f4f570d7843be70766296847c6696cc

SHA512
f8bd409f7f0d60745b736e71e021588d0b4611e8817716de415404bd5fd5054b777ed032d0b670cc99d28bad6efda3b39a26567864da39c93940e1e9b47d5412

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
db5091113dd9e156d3560b4e3def5e96

SHA1
958264f2b990a95d79b7717846f68bb272df4fe2

SHA256
308c6780d3aebeed8da1148914bd12929722079376ef29dc207e3166b5f3400d

SHA512
3ad2f78e57a9155ed231a1e545a4ebc3be57187ad2ec89540127898726ced79d1af231582774f06680246881069bf23966c02e4d99244c14d441bf8ac92a9e5d

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
126ffeb71be5d1a892524ede60d412c9

SHA1
36a53239f87f624d6a97b5355c9e094a8be785e7

SHA256
620e36ad872d5dd052270fcba806bc9aa36afcbbe6574815da0e90fb94665729

SHA512
c0b8a8a7c66046b6ebf8ddacf4eac94fac7e0ba1b68494e49346a742012f99ed9781754f26a67ed56e9437fc3e950b7c1fa2ad8f2efef437d885d3f026a074b4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
53f206347673d946b02ade839ad1d3ee

SHA1
9f1d330ca33be1fadeee1994e20a1fcbf3bd6d05

SHA256
14f19fa448e7b4b5a1cb0533333d7c3da9ddb2c08b194ef14e6194b7297d84b8

SHA512
21afec905b20e1f78a428b80cb5cb5677084d315d87c3f04e3731f2db94a5cd96e49dffb06f41e7fc0e9abd5a9bcaa08a1b5875b43995c4f42085a1345cb80bd

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
d34366c08f141cbb0e1773e61d84a0d5

SHA1
31d7412cbe60d18511bb50f0485719078405f27d

SHA256
d997c6ef9dd453e9e00b719a27de5d35d2289883fb1cdf58a3fd08b0fbe9c9d1

SHA512
3cf095cf607706d417c735fecf26b6e2c96f8a55f1e2a61abcf230358ce411cdbb73dde39d9c151cd5469142b2eccb5849009723e7b3af7f85bd2fb30755f1dc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
6163b3f47746b3c64596e792e7b2a540

SHA1
c152a2ace8d4dd7bf2929cd1580ffb15a5bb9220

SHA256
d8035cf15b4f76157375bd3c0c4dd01e9dae15476d7d1df7c3507de732179d0a

SHA512
f6f4159f8cc0ae1cf934a4f8dc170a14d7e1f594017f09ce7a7450c6684b0711d0bb36f0221639b25e099d15ee81a0f726e746e00a6d1f43808dc5990f45e160

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
a1e0964e03c0e059874c3e766e291ef2

SHA1
e42dea8dad74d14a0331d108ed005ecceccb438a

SHA256
952dd449a0c4a3f7d01114cdc12375cbdc7b2b5c8987c8098d7630c56f0dcdce

SHA512
b78638a4ab95b739d433f0e154f0f2b7f6c8001ace1aaf567fcae9601900f1886282a0ef5ea1ef1991f6ecf83c6d6faa9b97b4474df3a1cc843592c25a9fdecd

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
a384370ec5aa90aed0e217f5f510b05a

SHA1
d5bddfd296a083699450821957d4c158b13255c5

SHA256
c61674aa118d37b029e7c7c2b0e439aebb7d21f8416808143251e9e3fc3df914

SHA512
fe0b60298441c61f92270f4fe5d4038fa009094336fae16d1418f8601bb0fc0e17223ab6a96f0e3e0a16cd94d89b59ca5816c4e422b90e9d27059e9489ff8abb

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
56b04035cf66080162c5c28c149d037b

SHA1
3fccfda30b30406919498400cd2d55ad00edf6fa

SHA256
2a29323dffe4fd65fcb813c6407daab1d777fa62dd7a8559dadedc0e992db790

SHA512
e7415ad3e6fcd0a30e9b88ac5fb0f05783a38adece0758902f0032692f976643fb1e858cd3cc24b2ca519d9c8f8bbe6363b767015ef29c53d55db29c5126f8e8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
bb1ff416539ae1eaf4903f66ec11b0fc

SHA1
ec3f26a2bc455df02dd2961ddae6eda851c9d44e

SHA256
03c5ef4875f07c224f6623c15e41b2e2f88bfdeaf06bce68fa93edf2bcd027c3

SHA512
37a94318a3f736e56c1a34c888bbf2e52b0bf831ba0bfa889e2fe6c9f019d10ffdd3045aceca4f2d394c6a3646525b397435e7cd316c4b6736e13174187e9b92

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
eaf24b118dc28194903796b91324beaf

SHA1
73aa6245850adf789d7555e823b2298d73df9403

SHA256
e4066cf6a03937404a49030ffdbb69d4a888ef4963cee20c6435ed564828ff5e

SHA512
dd8629b5f82e36a3867d692d18106881bbb3c9eba80ffdc6aa605dc53312592406656a61357b7254b138dde87639a1fa75edc250db1b9414bc097d6804082716

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
c9aaf41125da9dc8ff4b4f8d1f3acccc

SHA1
74938ce9aef3826b12bc268146ef66a6665e9a36

SHA256
284833fefabc635cdb2933c083e07a308d67a83be37f4e65d34ca78318e3a1a6

SHA512
c71cd68210432bd824db3455f89315ce4da5cfcd2f04afe724b2a8c2e38616d8179f8052811d26ae735dab68bf499b902c3cb51ae158bed7acadeb9e02ca295d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
98a23fe48a5998e2d90fb397bc75448b

SHA1
7fe091ab9d267cb3a0e646045a1f5626542129fe

SHA256
7e75c4d7d3c8060f7421c98bb8bb40c30fbb19ff59d66b323fd28123bb6f2669

SHA512
ec5363ae6dd7949ab69787082c6b683866479f9aa312ae048702702df3706fa6f127a37ea79ac0c57029f45829665a858c057b63990b81cfbbba38ff1c8581c0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
eea1d39c58e13be93bd443eaaa6b9747

SHA1
ed605e590f3e88fea600e230ab0da2dfe963d497

SHA256
86c1d47e767e25dbb642c041358451abe515c5fcbafd9a7d3f2880f5f5377c44

SHA512
9dc600ec4569720064e1313a27e41dbec209434bcce76e915c6af4b009797a7037124c41e276c7f4a88e6c2cab65598b7d87ff04ea73382c57926f0d3ccb8ba7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
7b7f89b74bcc3ce4f305ef12a1ed3aa6

SHA1
b8b2e86d109cd9be7c473478a9cbb8b0251642cb

SHA256
03401b12a162000e44308a9c815cbeb49b3bfbd4505bbdcded0bc114e2747f05

SHA512
4b24f6dbeed7037dfb83a94b6df06f83cd65a8803f3c4beba3fb8fd12080d098b2865ccf7233c35a22e7a42ad0be5598111ec4c4f56ccc403a200e716e4db18c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
2ab85dfeaf8438d53524d758d8ceb71a

SHA1
6c76516b4259d4d7811968d0da8d7caf527f6580

SHA256
3adc3ac8045be2d8483a7e0816620503de12cc55ca28aa1c399dee9349dab2a7

SHA512
d63b8de0df17c6359f67f57694a27f00db4bc038d12c7538eb31cd80baec8c67c6e882d59c84755e5126315947b8999a1f817c4fdef9fd3dd405f07d7db4dc0b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
c89ed02ad278b7e88a814ead49c94ae9

SHA1
4c7273ca83f7b92093d77940dca6a10441558560

SHA256
4a3a80540818402ffcc01e823108de122de0cc00c7a21767c29ddb3e38718567

SHA512
e51124b3a978d37793597bc310581c1342d5cb3cefa1c22db088af9780db1efcea2e778108bd2dcee28375322a87ec8d9ed4cd29de4c2455797f57070f3c49db

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
db909cec44992f51b23a09a4269da16c

SHA1
6d9de7f75bff7cbfde29a7123727f5d0ffd3b75a

SHA256
edbff4f57e01e236bb83a5ab44716501c7947736ce6bd5ef45f01ef93142ac95

SHA512
1efd0fb07ce006dd3142ce4ed66b11fba38a4e55fd2ef41dad25beaabd15abb47955216362ffc682aeb76d71615bb65573a33ad11419debce040174c09df262a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
104fe8d2c53fc3fa6ca2e0299b99896e

SHA1
c321a62885981d3974c53fcea980843dd6388ffa

SHA256
4c7255c3cb4e15b23a924f3c52f9a43c4e4268c3721d1228ddfdccc6636919f7

SHA512
454480c8d126315301dbc82598e6aa5c78fe25b6a8ba6721d914966a44566ab4d873781bfa38dc9e1e14dacce3387135932a7e1caede78d851d312069cd3da46

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
34acc3287405eb331da3cde0728a5615

SHA1
5124fcbacbdf8558b02921cadc487d32f6948bc6

SHA256
b7519c46c1711723521b9b01024a05a3abc97289f507ed96b593890f2870756b

SHA512
d2edf0a6342b150f87e24bdbcb96a4de4031ed16400cc05e8a8a749c820f877eecf8aa942db839c5da85bef847fdab925c93f5b09bb03c8b169f21410e38f74c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
403aa866181fe836eaf7dbe5487e450c

SHA1
91731ef4f467a44e301b28e74eeaee4e3ca6eaf5

SHA256
ccee5e989609f7618b0372e08a070b6558cec67f44dc7a47765aae5bcc031be9

SHA512
c85ab71e09610a787b058101a70b64802ef92588926f0463379bbfc352364b138f577e066506fdcf9637f03fef30d5991719bef9375a76835332e27a08ff5865

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
17ba3d7aa1753b71d50fb2dbdb78a152

SHA1
d76fc9c5a88e5ac05d796ab1a6344cda6052a373

SHA256
c5cea77cdc69e3cdd044b627b213fb6d9edc4e1ebb79f19093f81649d63dda65

SHA512
20e6e013be2e4372cf0d4e59f57293429e66a29b3c6e37305c7b592cc669b7c9fda615cd1f037f4eb4502876d6fec00970d006e3a87b176105a602f3b3294365

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
a89fc6157b554acdd365b0a7468ba6f7

SHA1
58fb02ac0e8b4236b08d0aabd7768f13400fe039

SHA256
f428d3033c645f1639c53fb8693e846e646e4100c9ce499923af8872061d13d6

SHA512
5cda1935c22c6f0063028fc12cab9bf0778f43777d080e458d656286ce9c66ad4b8d1ce04680e44a924327df01eff69a06bc7eed35f594198dc836f40444bba0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
eacf9c4149b8850dbaff9ac1974b4a66

SHA1
2133e067cc7dda1220a7529ebce77a3214875acc

SHA256
9d57e8e13feee5095633c90d415d88c2f294977b7a1063d21062ada5a50c40e7

SHA512
220dc52b5cc06f7531387ea37b6491c986e389fbb7ee38088db86f487e849b22d7bc885d0042e82270f9cafcc31e49422dc4d8e0d25d1bf40e046aeaee4db0fb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
69d783e82008501aebcdada171d7994d

SHA1
1442c639d5c245f2b8731c03cf5f1b091ac7f0c6

SHA256
5f1cbd0fa1f8652682903d19e92a3405b6d0b36df320d6320e8aa746669b55ea

SHA512
aa499f78ac4bb61207bb6c29eb3e4e1d929ee5e6d6e4843facbfbf663bb3f7ee1fe9be617b9355e8808cfd3d22d94384f9d512c6608bc80ea8be34b750f95e3d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
a69c1d3560f24e21b2b2ac703d78f826

SHA1
7c5252b26f1c23e48a6b04cf4507a32aa23ec56a

SHA256
0f9a2b6b176933003ca34ebadaa24d0553ba95c89599be32999b310ff528733d

SHA512
bfe6fd61653f1447469b596df33e05333eca17921fb5168a431ac9bf0bdc5af16e663d2ad7cf0d2c2efca40fc07e9d21cd70e56eb78828c862e215292b9cca00

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
0a986dd6e9dff63fa4dbdce4a585765a

SHA1
4f56dd62ae64ceda95b3f39328e63e52e267655e

SHA256
d32c7404165b3b927d60f1f68b4c7ab0f4143ef2a94c4bc0df662ae9cd6c7651

SHA512
a02e1f97b07092d8fd6e59bbf35d4a2a2fa4c3c04b5244de3db6e2eef52a65b44f6e08e8135693617fe0be4fffbe1388d7c11177887fa80e9bf58d5327118ad0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
4b718f3574b4e17a8095aafc5ecc04a5

SHA1
d129787909034728a2251307b61fb164b818c47d

SHA256
d32bee84473c9881eef57f31708ac302320a7966002052193fb25317668d8b8b

SHA512
b14ec60fbb29945aa63307b4e70f6baeb3dc56f07bdaf8446d2407221f9a0c0e61caec35c0c7ae4555ac46375b00ec1733575de453a119fe75faa1c2fdbb8f2a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
916b0cd6c515933d2a2806957f9d52ce

SHA1
ffe96245d486f6103af61537a72e8fd1e21cd85b

SHA256
efc5bf64a8c8847f88e5bad463daa4d9ca3ea4266894049c6777169ffac4db89

SHA512
191c5fdd27d34804f7d34c235932ad2d34131ddaa70942d3fc2b86e87c737f24975482c1220ad060d0f94b387a3597bc424d59b89b78248956e1848c9be4f12a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
b99445ebd24f5b2f7e3ec04ea633e660

SHA1
956b8d66324bba8236f11c029ee15d681b5423bf

SHA256
11eaab1c3e0aa52aa80505ceef5313d8af3749a218a880f5e7ae2dd04a8903c9

SHA512
4ad35681a04d5664732d229e3cf32dfc71d2cbeda97efe61bb9c84729bb3533ff06db4d54ecffafd101b499701d6203d8cdfdc5f286e980413ba9517b2a2279c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
ffcba729a4f8dd8d3832f43e013b579b

SHA1
541754fb00e51dc2936315976f3ebc1e66ee6f20

SHA256
981ddcea21e0b43884642e3a92ca0ba2ae6099c76b7936a12ad943c9c44b719b

SHA512
45912312659469ff788ff53f1b9f767366922c13929e019d4d12f063c237642e5c537f1c14bf304df491c88b7fc17af1d165947dbc95b11f4974e79bebbc2c78

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
a62c00f2b1869ffadcdedb3455e3c8f6

SHA1
1c36adede7fd87f2ce97caa9e8f4649c69da73df

SHA256
290e47fefe18db31713e5a9561a71c734fdb3758094faef3d2663761dfc39e2d

SHA512
fecc7fc87519448ac47735d4360ed0f9d508549423b992dba59a8cb6beafde4c5e931e95850f930f3736b65e610bc1d0002f0d3a8f916cc534996e28c05cea78

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
2aa0b5acab3d02a1fe21f3552438290f

SHA1
7b179f9069a68c3103a2e06455de21a8e82a437e

SHA256
eae7dc548493b7682d0153223171e0909633e7d5a4d6f3eaa6a351976c08a527

SHA512
281d912724336442ee051fe43054794bffa6dda0e7cd1045fe62701a276e4b658eaf8da4d387116c8dfe7d3fd276ab050fa703e3b3e7664bae808b0101ef3cab

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
ec6b36049c764fa809ea0555f9512ad0

SHA1
3935c259707d15a169fd57fe404240960a084f49

SHA256
62723666bd99ab6765b0a7e9da72cf73e3ce9ef897e606a958cae82c263d868a

SHA512
50324ddad25c9e469a7d2b35f2128164a902f42d5f62ec5e552f0a401585cd0f21408415339d9d894f966c51bd8d2bcc0de4e9f52f3f1fa90264f0d7298c9a03

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
2224e052d69deca1827c1dd44dbf9acd

SHA1
14d58d567c0e4a095637328684545c760193d836

SHA256
ca4f55bb6cba000433774f020a7df969180813e9b5a4260b2a0b75b3fe9765e0

SHA512
b2bccd02c2c25562540c1ec28488414294a15e4984aab8967d555a0e94f7890414fb8ef24be64265d7479d436985007e9c61ea7e8303200c3adcbff3289921a0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
df4196ecef085bb651be42ac2f2887f5

SHA1
16dbc3b2eee7a2d075ca537e4a1ac411c4f5cb2d

SHA256
2d3e30a10d03cf08346c49937d37799d713f9b8412c3e9cd7cbb5ecc95a6793c

SHA512
9f88b5566a9a701fc3a4b5551f5e9b1e9e002b705f4e7083790b47c697a30356973b5d504d3ca62540ff576e938ee34550eb452dc4a0a974f5bc83b04e488737

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
6fba9c156b5c814d63b14ad9b1493ceb

SHA1
97e6f5201babdee41335b2edc05bd25d3692f05d

SHA256
85982bf6df6f696f30f199f1f24153a101c0ea7cc4c16e9e68d8c25dd4570ec4

SHA512
f6b26998fc9201b35ec2029ee56748759cdbdc68f7ce35336a919cb39547dc3a372d622cded58d90573a8ffc1573bba14fdfebd551f7cf079f4586a323a8f132

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
9b2cd575f704c89b7ef320aa87facc0f

SHA1
24411f0809932033652746322bc941bb3ad1b70f

SHA256
8dd48ecddd7b399c8a9542a8e89394ddcc6107d528c4c7659fc40487a4611736

SHA512
843c3c79ef22bb5ece325c749870b391d7c740782de5ea3218596962e5e51923e99c836e723bae8fa82a603b827d32c92875408f7af663b0ca523cdff131cfb0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
3bb9348272c9af12bd21e509ecbfee21

SHA1
0903bdfb1fd7b196837eb6941c3b70a3ca53ba67

SHA256
2a053cf759a8a787b0093c9bd46a4fae16e58791c76c093e650f0888e83b588a

SHA512
0f3faa42cf130055049f846a3160ae004be4b93c098a58377f738990f4e7b4912a467d61dcae2e5f71f7ebf184f5ccebb0c79553965d04c0670d07682703ca00

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll

Filesize
274KB

MD5
ee67ddcd46fe0e5cb7059cfc04c7dbe4

SHA1
39eab7e1627d3dae94550de9bb94a30bca0805d3

SHA256
2c423f0c552daed8da41b84bb7b9cf09c6ebe6ed7b4a942b7b16eb3d5499c1d6

SHA512
def023cc21c6ffa00e7e5947dcf282db57ca1e77d78209b8de3f9f2c1b3b8df5f3c9e0ea04ef3367a3769081ab65e6493d0e46505f7b8d428780d6b0db49771d

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
db881a6b0651af75e5f99012f2b7a38c

SHA1
4f1eb7346acb031e641c44686ba0ac44c7654021

SHA256
79e3609b371b0419e9ce7c6d33eefd3430a1f9e6be5b7d4c55524415df87712e

SHA512
7e3f38b3c2ee2a3608c234758b784cd9be52f61959df74e17369312de38d7889291fc3719b428b9f833e90f211503ef8f9efd90d23f24015521ec4f88388bdae

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll.crypted

Filesize
18KB

MD5
ff843cb5ae4bbc131c01b6b29f26b1d8

SHA1
8954821f7803318b8806840d6140ab5e10183877

SHA256
f9d39c0178b2624e87da6e0f5533150625df37036fe57e1e8fb1b65b98ecc6f8

SHA512
772bed8a5b2a3fbc1520e370afda190a4b5e7e737d1433098543efdbcccbe7bf4e8c342bc92c07b40d98631eebc3bfa7ffdfc2109b289af79441a15ed9d26b3b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
a17b03d5379832b8e5a3d8cdca2f1258

SHA1
5ba5f4b45506adc64bc735787ee78752362f17dd

SHA256
14415d5ee0d088b1dad0949ebc39c41c7f94f4ae6bfea8416a68ef4123f029ab

SHA512
302bdfea199c70d5ca448eccba09eb37fe232358b087c4b95a13a482cb4e0d920715ee5f8b33a8b0fe3144a8b113f1abeadd7843b3522f83a644659bf2cb6b59

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
f19f5a433c63d318728852af8443c267

SHA1
b7f0fbdf3c9580fe03b2722ec93ae51156f151d8

SHA256
31b41c36be13416b4c988cac7a3d784145093257b7559aab3647812ef225ad02

SHA512
3921b0c2847078144f1c186fa52e70aa813d257c8a84619b276ffbd6c483926fa0be0ea6505c4e62622c87e7a0458f4ba3fafc2d9e0167ec1628caf31245084d

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
499d5a8c52ae4abad25b9dbaccfa4395

SHA1
23673cb3200df1472e35229f9389161a725b48c5

SHA256
1357180d6e109da4bf4f18525cce0b6ee0539074cd13c20cc70b0eae8f0ea821

SHA512
b648cea6fe9b7aaf1c7611b2461003ff12d120ee9ffc581b48c16e4b508bfe7d7b5e61098095f438a38d7c5ba74e0bf9cb51cfdd14ca46a27b7bba1ef562e543

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
4f23ccee0b0d70e7cc38c891e7f6db4a

SHA1
a271230c01c3414ee1a167310d16d7aefc2ef36d

SHA256
650c94ace0e2f317edeee8c7aa38468fd1db530663cf7afd2363f60f629565fd

SHA512
282990c40dc2fe5927974e319a613aa70a3e825b22ca8929bef46e7aaa2110b7abbb70a5dad249dfc2870a574df0335445b827a5a94acbe5c781fa208c0c95f4

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
fa4f9587f8c326c9c9217b4739c6c9ae

SHA1
a3167a029d4d06960e3ad60e785a7f793753a794

SHA256
0f6e6665bf6531f780a95df6b8e86a3494f46b597910afc8c448c4c5f82573cb

SHA512
1ac096a701a05b407490c003f8879143a644b03998db119369fc0fb86821beb13594e676b584ae7c49ba576ea347ba92cf2d58d6d46ca99daa807dd36dd8da72

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
fce21c346aa9821348974b14354e3fe8

SHA1
e10c386a065bbe4c06f8cf33ce2a47b5e5fb930c

SHA256
0d2aec37ada6ff89d6f453167bb03d5b7e55014010e8ebd663c82340d1acd20d

SHA512
efd37c2838b44d2ec12076e780f8434eb0c4151c6cb149bbde95122160d3395d3c04169983aaba7a9abe9b4bcc6abb8806ef55aba18134cf9b29bc0db7f7ea52

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
af62e873c6dd0a6f80db52460853162e

SHA1
024cfe4ddbe3d233d8d9b6ac58e8003fc0ae4523

SHA256
3b180ce1d1cac260a2a7ad574765030155f5cf6e5788e0dfe96d1132b0788bd7

SHA512
30e37ea358ee1709841a6299cca6eedfadede1ffd0941c00270d02d38cabafd8f8543fae61b8c1b0688c4bb2db2e090b8dd4d858fe1825bd761a88f7d3814c93

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
2a43cb0922b6a3f6b03fb41f265358d7

SHA1
c134053b7fbebd851b7794d8df08df7be5e5b049

SHA256
70c6281ff01371d2915a2b8e98f2353ba6000ec886ef8d265ec5c0c2c933ca6f

SHA512
1e9bdae885409149ee13e93a808a9ad93f7c6fb2dc685ebc988741875b792d660680eeb733a5d260f9f3625049f65f06bafba5a46e7a448cf30d4cd8c73f62ae

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
c03a7ceb892020b2396757f3692d1e9e

SHA1
72db4e44f6a3805f23403a564581bd2e0d1ffbab

SHA256
e060144ff3197976238506a745fcbdd2639ee857bca19ca31489960ddeb35187

SHA512
e3f2f6085cd9d24877ea17276248e93b7be27917c675bea9e9a2fca65ee213f2bddc4dec5586fb2b53f4770f0464fdea1728e08bfce0385c6c06cd285093a1ea

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
d2940e2479c5dc3507f1f0fcb10f5036

SHA1
13b9e96f0eb148c4463f58c48e2f316c88852d04

SHA256
6dc823e7c1e3de70d5358a7419e2b0a71c5887375b93f8c967325b0ed7e2b953

SHA512
a493b661471e2ae9e72a41de346dc84967cb629df87a9c2e60ef89037da2f1134bfc10c01c20c25d9a0cce477cf402939a5b8ea2c2eabc5757dff8eaf01bc15d

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
e4f5160331317cb81e025122f432f0f3

SHA1
8a92579b90671e2cbc7c7bc636ad2464ee65aa2b

SHA256
cec58c26300a9ec079f7d80b6731076e3fe5e3844736a335700f9d77c8d5a964

SHA512
56efe45c40c08ccde748d4fc5ffbbc8fb5ce94822e5ea40692842021ef90dcb348a0e54234c1a32b5531781fcf91b0c55845483342b88ddc6dd60d7dbcfb9a64

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll

Filesize
27KB

MD5
85379e9c0cecedacd5cf64c4add877a8

SHA1
1a4e4926213fc4c6555966e61a58735c0bc25216

SHA256
43def217e95fce13b751df0811175d8f5796228c36cab2092382694bd54b1af4

SHA512
268dc872089bea334045750309950556cfdd24a115bc8807d12af4893fcded8e370e5cac0bceb6ccf4a833690d1331f2daa7031bf06aa5b51ee78df1c3c948c0

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
9350a6252b63dec128d2cff2642514bd

SHA1
c57665755e13fc79f8a545a0b38ebc88de36823d

SHA256
70b7c9468f9fa7a91395ccdc9322be01de53c484fd5f2628b22456ca6ff55591

SHA512
724d2005eb286f8d167b299bbd8433c4710e6b4ed91004e4b3fdc4f8b61e7ec3c4d4ed596a033866c58241cc1513979cc84ed7af455258e730372145895db0c7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
69KB

MD5
bd77a3669e4594df2ab4a9e7b9c321d5

SHA1
897c8e15adda5c00d2d4e5a92d5ee79fb37b8e49

SHA256
a2b1d191b7f5b4586d4043d9f81755349957df0553201a1a11318d60079256e9

SHA512
e3e030f526de6fa0b73fc81cb7b8b7ae6e39578e2f3a38f6c8d65933129ee49ba49f22098a1348e969f5cd8278a92f322689afbef129e2a20e3d610a479cc6c5

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
1657260841ef5dbca232ac7a2823f212

SHA1
b7f7f837d3c79baf1badf459c5d9fe8797f11e1f

SHA256
d256861a9ffaa8fb4dca3f4a52d39aac1ece6d62b838b5d8ce083a3ed4380756

SHA512
ae84d8bc4d3219cf25e9dcbc900bfec64a90d808d1915ad250396e5552dc46920d22ca4396bb4ecb4e63ba9ceb41c077c8ad2f67dc6a5c1520efd0032f363fef

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
2b593e9d05cc216f9d14ce8ca6347e40

SHA1
91e7ad312ec4a63ac41ba1ffdc64a0bf94a25677

SHA256
826c3b7cf03c68b95215626128c58da52184d736e7ba4330c55e494411ca65cb

SHA512
2c16013375c3962877e1a93fd554bc505a863957928fdd822e2985da9d1e050dc05ebbea3ef1acf204b6cb1d989ee78939e04d2777bf24cc8e295ff628b07aad

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
bb6381bd714314020bc092e7f4303214

SHA1
8532fe66424580ab24422b189f23230bbdb9ad69

SHA256
863d605e077549e9487b9f2e6dbad57c95318e4344844ee00d467ec57d4cb87a

SHA512
6efcacd40011e5b495880cf2f066e8f94eb3ccc88cea19a2f53529be490cfbea94eb60a7490b08a4cf00dc064c8f8804501caa5b1ec2fc233ad653aa2caf14a7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
e56f3a7a321bc307e76d26902bfc32e8

SHA1
b9cdc3dfd34873fd62d5454f5cf946bb93e566c3

SHA256
25a31df6a370d03de883c94adcadefd9c84e19d13d31b5311e0cd9e29638150d

SHA512
7be21b0e887a458b4d63613380bf5b2639a27eb62f925d5426c94efee9539366d3a95b0c69db9e3fd575257c8e7ed9a91d8d56e6dc457e1160b259e8628b97b1

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
d82270cb43af8cc54e22536a13f69562

SHA1
4a93d10491a9d10650ba101edba6828fc6b9bceb

SHA256
20cf67b482f975ba3edbbf6e3fd952ee488ef3272749bf2a7cb2a3bda36a67a0

SHA512
62f9573ff53bc114c11bb054a7ad194cdb3585e91e89e52156643ba554e7ef935bc9de4fae8080efe90e4e69973ae7b8e1685be785c12f5f0a0fc16069364f1b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
98716c1558bddee2ac0e580d27356319

SHA1
499d0071c3fb4b60c0d685c9a35931fffc18ddaa

SHA256
cf6076351be445c35b66eb0ee4e6ee1459aba8c0289a15976489ae0767f249cf

SHA512
0abc75ab36bf897bc98a21348cb2d850d9ac773c8ae9d6844bdf96203f7401bfbd91e8c27b140d1b48ef5e286f6374f604bc4d9ea5b43df19f5ada6b2e8160ca

Download Submit
C:\Program Files\Microsoft Office\root\Office16\concrt140.dll

Filesize
324KB

MD5
16dc438b14940b7e865f0b7c6114c4ff

SHA1
05f301af5cb8474e6ce527c5baf04350127e68c3

SHA256
5faae8470707d2d1a57b4f0a1496e594e4cd5bdfaae405337dbd663cec6a36bd

SHA512
45e4ede085b3614a9d0aea6d9acb08b00f83c7edc293d2885e40b5b5559f5ba622114f3040b8ae6ee98ecd3e88ee86b9e468f9cff0e1af0a8c5ba927001bf2b2

Download Submit
C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll

Filesize
358KB

MD5
2461784a6b864d1e210714dbdb915a7d

SHA1
aec953de58c197151b02d81072bb456778aaf854

SHA256
e38ccd509134fb63399612a195d15bdb63c00b58fa14ead1a428a118c8f0fc4d

SHA512
cd970e08fff13fc4e2322e33486a7a51e5ddd099bd905f3b248c473f907c8041935768b8cd5b25037ba7624464e92ad5e67b0b9c2ae76b236ed9da65633cd026

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll

Filesize
5.6MB

MD5
60b8d2df3cf9a2322d8c44c194dd9ec9

SHA1
04cc9cdea0f37cbfbe70df916bf3d2edece738bb

SHA256
81bc46ddda99b6aba0b9beaf5666d8e4d4fe96855d64b3ee4092505f27f4e753

SHA512
3a30d0b1e765c58585d8cfcc55048c530a0931700bdb5493c4ac5f4978044d1464d027d03f09aed115acfc097da121e916222ec1b5d59f17b32b4cff1c213d08

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll

Filesize
644KB

MD5
ca71417ecf54b9a63e4efa3eaebdfe89

SHA1
8679885a2b765d8cc20d15dec745cc4613916c47

SHA256
c3e9d5bb93ad6f7b53cb2dec9f94b3b198ee57f0e2f34e6d9664ddafbf331723

SHA512
fd93356a2bbe912691360ee680c90dcacb40627a1dcec4af03d91003dd41d523f699e64fe5909b2a868df91911e8f2fb72bad7c7749149627ef0c859bd56259c

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll

Filesize
613KB

MD5
44f8f8ce30fead09e14eb4965370f871

SHA1
a99d944315246488a2db1fe4be3be5e43d5bb64e

SHA256
df2f560740e3e14b5b45c34eeb84d8de79b85893d4fa48ea4f9b251059302542

SHA512
cd090bd9528bfce15df099bdc5e9cd861710f0c38dec17c2c8d6d77fadc1704b59d959e1487c290b355eae61f4adac36b59f373f3d478d785de71d08ce312b3c

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll

Filesize
940KB

MD5
af2edb8c39833ddf7f2cafd8833a1eac

SHA1
1ed348256d8de425a34275a22f0855fb404237f3

SHA256
801b896b7355bf904087032302e0697ed266498707184f792646dcd6d8670b2c

SHA512
9c86f84d9e71d74aa0ea06ca4265e8343ad35a834e3ce94ed01590066df89eca18924207bf1c95f997aac46187d42034628b018195336a8efe16e40347ddcc8b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
74388033610a6de3835ea758e91223ab

SHA1
a2f6322ddd346fcafe9b8f434ff628fdb1f4c9c3

SHA256
b348d426113359f0faf2159c3c8791ec24e9ec7ca9b97f2a6a0819ce9a632be5

SHA512
221795c500d9db34f0d0c2fa028c11bd7658b22b360011947e9b8c37619f60d1a93bee259650cb26c7922f47185c6551fa821630718bb561e54fdb6870713098

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
14b3bade7651218fbc8ab9d936d40e9a

SHA1
fd8e6e2969cc15293e6d486f50d1fd9bef42794e

SHA256
8cbdd58bc025105de07f3f9000fb2bc6d218d0f289ff9da96fa45ded8187cedc

SHA512
673c55b7dc109cac35db5ca8035926606080e04a376e012b7f27944fd30fd6dbcaae4a5d398e87d38cc6ec411a7b7b6683e1ffee9de83abf2d68c8dbaaae7479

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
d6e28a0840c487b3206e00f123f0553d

SHA1
70c40b824c84da38eb47012d9a9530eef6b0111d

SHA256
285e9683b62267e1500700bd00091b74762f8681624dc7668b86188f2f4e0263

SHA512
994a64acd6c63818c457d9a6e154b1e48747dc791735c31cb184788d4497cfd89df9563d994c8e22ab6d4aa27be0479d6b2efd7116a821d3d78a69e04d0767e7

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
cdc90791dfc0d5cb06aa148f6f47ac30

SHA1
0bea25d2a6d64c67fdd2a749fa1602c0383f8da1

SHA256
e3f6b0dd283822af38aaca7053c5e9b7bdf233e8ef1bf01191b092e170d059c4

SHA512
d54243c3fceb417768f4b54b53ff697fb3e899b49dd70b6648e880530f9fabc54dcca3dddf7be1c8853cac56331706338a431f48cd1f0e0f3aaab167b2f454cc

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
f80eecf38d67790cf8648cd02b63d56a

SHA1
9a4f504ff69cbcc25519f791949b3ea77486049a

SHA256
45a6cd68986adc140fdb7b1f60010412b230069de59e5e3268a792aebe95068a

SHA512
939d923c5a6ea806494b963b5a55cf75bb5829cc317c02b1c69ba1e68e7c897c52a7b50b779324ae88e2313f0adb98516db9d18c9de5efc00d8355493a96d8f6

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
ecacf3857b686125efb7d8f0520c2ca0

SHA1
f3b1b86be59f838ef77aed2a9f5526006a77e71e

SHA256
df27768552a1853c75f8bc44079eed40a42443efd4f3844a5425622a80a69d72

SHA512
414097c02865e9cbce1d7a2779b2c75de07487b3ffcabea4a091e7f884a87fc14938dd3301d425a27c86d2a193585206aff61391bb510582d219b6f8513f9783

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
ab406ddb2db2cd74d724fdd63693d17a

SHA1
003b543942ed197be3fb88ef12a986916d60fab7

SHA256
62b68cde251175e4803ded773d73c094fc5ed1871c50e22eca6de80b11af7cfa

SHA512
05674096db6607a3c116e20bfab57890312c522f1ce8381a29c05291e44c59cc9ffb54427b6c8beaf68b1efd91e4458dfa6e1938c36a9a91c0429efcfc546ef4

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
bf2cad95bcc6725155db756791ca7843

SHA1
b1f04fa66936bbcfebd01ff5ccbd6193af7e9b0d

SHA256
488b0336c4880330c02394b137eb63b32005b73ed5e0809e3317180bf08b9e91

SHA512
b4dcbeb3869b25517ed546117c6ba654346c29d51c18e93239476cde1694c1892b78a1da9db4007e1ac29e086091a2796704e18d167b298e6d4d3e6f6f140ec5

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
e0b9e07852f23aed2c467c99c0c429f4

SHA1
84a9fb359c24aacf97778a769e98e4178283349b

SHA256
e68b1c6f9982a11ca5e0b59be77eb0f99688d31cba55a88e998f5a3846c7faa1

SHA512
a36efa2fbba61521a9c779c6bce9f70fcc766e410f2ac41cbee68d3b5ba34c3eeecf92ab1ff45c24b7e45ca3f9084c2261a712f4982e2185fb9edb2529567cae

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
ef4765a39f08e781c05de04a96cf4867

SHA1
1166c9e7bb7f0fb30910aeb7c33c8c5df0fc66f8

SHA256
fa8817b05c2c6b78f353df85ca1ea138862292216bd10f5441cafa8c710e1164

SHA512
001446812dc1db9eed0e6d1eeb075525e732a077d728aa18e0b0b8170d3fc03b72031f19d1d18bda50e105b48657e2bf983512fe05760b21eabf6a05dab78a4a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
2117ae22858e3c5b870d5ab2106c53f1

SHA1
cc62ec451551e670e1feed22308175eb548603d0

SHA256
13678dfcf2d822dedbf9398ff72db24f57c98f1ac5c48d6e1863cba82d0d5736

SHA512
820881232bdafe6dd56f4a06c316833358033537abbe2759ae8474591d001886e99f4c5e9f3f99a81efe1cbca6fa24b6e2d9db685b224a0f1f176224a0075c9e

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
6d3125bab295d8dd9f2d152fdcac3a64

SHA1
a08a72b4a378c8c5438ef84b3f037b715bfc26da

SHA256
5db867b1776c70c476512bef9762eecfb945e30dec362aa606fa8d6e64dcf906

SHA512
11b2ea8ac53b117933225fdd4507accec2406473b09cba8bc7435a5b9926b90e321e6fad26a4848ca26431ebff5a2f42ab89a520599acb983e2f9fd1c0801aea

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
92ab0c42c58ee74cabbf086f7504307c

SHA1
4f0d7af3ecdf98d61ffb6d6000fd7c6b84296867

SHA256
66a3452ce85458cec50b879b8f145b0da81572318fdec36d06fada4a33057298

SHA512
777cc2669e153c67fe971413571c56d09ba290c5250049556add179fa632fea82c19059f039ab18c11bf09a1cd4a730de804af918f0424c406b9789a1de4b0ec

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll

Filesize
28KB

MD5
c8c48821ee8694862b68c951435fb638

SHA1
b7c1db1c01c0dcf4d5b1dcd641fa43372a89a0ff

SHA256
4abc79d5c1d15abf1cf8eaad3dcd0e16db20b31dbf8681c9f3f1ac5249470c85

SHA512
8a2e7c0aa8203f38e28ccf0b8fac851e926db4ce693ac91949795d437a9b52fbafcae59f4a7cef00dba64f6b4b0dec13ed3d39ad3109532d746593a948fbcf53

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
5b61b53ee689449eefd83a02dd227fb0

SHA1
b4550775428fe9b221976b593304502d5a60c487

SHA256
3955f7cfa8171d7e3af545f284b9da07532c9384ac2e6c1bb1f798e08eada4c9

SHA512
b4997b2c769b5f8d268900251cf830f8a59f4af9123800bf1b5f144b16947d24dae53156487d9781341d1656c331ccef20b338cdf2b7e29f2a59d3ec8ec72f44

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
71KB

MD5
6418b391ee167953c5e68a2f78a58a3c

SHA1
bf41f7c1870a82e45ec790b30c3aa7be9c0de454

SHA256
a4e5d2360fd93cbf668a50937bf945526052b1ff19bffba160fae5fd6e977923

SHA512
d128a5209f43bd493b7904c47e4f3ea96723caf937f6e8e4947292d472379dc1ca729a51ca3616d4a968f9f787f1e01c5af130f0f1f8a66e4bd09dbb4ef530d8

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
a6675f995505b725847003d1adecff40

SHA1
b7d4ee985d8d5152564ae3b30d725b87916df869

SHA256
2f43d32669742c4a39a31f79941019ded337da47ca086e92ef301408eb0ff4dd

SHA512
2b08f7f7dfdd855005a2930ac72bfba6a00531f27ff2476e0b1f930b864d6f1c4f4183f059132ffb692f5c41b11b84f8e5ef14b552e82175d648559bda9a8306

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
9924336db75478e6d18e5ac482ffb3a4

SHA1
59843fb676345b1ebefe0d706d81a8128604ce94

SHA256
d0181f1d3be604f8c0a58addd5264cd79bb8914ee2aefdbe5faa8dfed41b4ca2

SHA512
080da5d45f57a4ae90c5d4c6a383fc32e3267f96d60974aad002bca8cdf9b585e939925ca67438804cf8c4b86c099083384d0880972a6a20a30438ade1177729

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
67e0c169672c5435abc48234f73728c8

SHA1
2d394a64f5bd2131e2082b6808dc1d59b2210638

SHA256
f8320300cb788c8bcc92d85903684800c54961f2f896cd6d638122f353f164fc

SHA512
4b43ea80b62f9f59584627befda07f742622a83363efb7509e899c9ad19f4744c58bfe21b973892e23e8c5fd7ee2d9b2133b63500a5ea71bae07361f432bcdd8

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
d5bf00407121dfc60ef71d17d934725d

SHA1
bb07d77d9f0e8fda004c4897c88cd6cfcb7defc9

SHA256
8f6a2eb2ea4d73f1322c7c355b2d457d285a954a188f058b74a5bb6a491ae150

SHA512
f81bc44717d328f6c3b57dbe2da5f4c281af0d43180f7c704ac4db7abd28ddbc0ec83972fa2968f337dd6071a66ac7ade30bb4f3690b8a9c05bcb1d7d133c720

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
35de17e2d3f7f89e438f6716886dc07e

SHA1
ef04df2d2d264a187d8bc0685e6202fb9e15837b

SHA256
584e159eb246877033875d94261dd1a7040ccc77ace4057628e6fb0227592af0

SHA512
b3cd0510dda46b537f6030a1ccc4e3add8981c84e833b217cb7d61d335ca04100dfa0b651b6f6796b1cacae73901eef0cdc31af377f3a59930ae97f8d297276c

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
0f5cf012999937d54eaf9faf6f17a10c

SHA1
cc4ad86c53766469e537aed0fb17e0cab7610e24

SHA256
f86266e1b5c078194b375d80d9c39dd8bb5be2668757f99f4caf645a39d05899

SHA512
6ce7b2b0e42867843da2790a6c6d34b9e89d294917c5569d499c1dcee8e301e4db9355f505c7c31e452060f092046ecc93f6229384dc0c9108a0a584733a863a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll

Filesize
244KB

MD5
f9c6856c5ee0b927fdbc1808ebfb5f4d

SHA1
7e31169d7330b3ec66999eef3f094971658a5c75

SHA256
c01d084d8f72c2e210c50d6c1ca888392ee6ad2cfdd70aaf5953bef7f93499fe

SHA512
29cfe93c8db241057bd7291d5775d67ae41c45b8b176341620406a373347e3cfad892634352e9f98d59cae8b213eeda9a74f5e0975fdb6355a150d91a7288c8f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll

Filesize
4.8MB

MD5
66bce09aa4dfab6212d57965c33a6ef0

SHA1
0d1060da5d5abf2f55cd9ee3c166f7fae93a853d

SHA256
a592f949756a650a606e7c405654dc4034565e3b720ce788c9fe34d089f3d6e8

SHA512
6ae12d33bf0c5485419ca1fd11f2c473bb6fa325224a28d773c2b01b154893bf75f6fa2eb7efbf0a641296f4c8434ac430eb8db0b1f255f0d688cc83c9b15b46

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll

Filesize
444KB

MD5
43155fc4b52a3718111bf9cc7872ba64

SHA1
5637113ebce6c608729ca31c8f657c633625e7ee

SHA256
32a84f91e42430570a52c96d04a49dad331d44b23928d51a47d5ca411d395eea

SHA512
05724445486cccd4781f87966b1b654d8f248a638f768c4f08d31bf30b4e3de680ea88d4fe32615f60d91f2eaf3c5474478f35b8118c673fa9f9fadda90f063c

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll

Filesize
439KB

MD5
73acdf5aee57206e26773d1178bd5bbe

SHA1
f56dd3bf4bfc7b905c532fb576cbb9a5da12eb8b

SHA256
f83ef3970b5b45fbb08338396e101ec0811dd57799452b052f7a7df2cd47b681

SHA512
5aac7131ce3e7255dc722f3fdf4550fde72c1f1c2230f43e351cb0c86a605a2b24d94402b9cbaf2e4d7eb99bef56837a80c47b73d1e88201dba83a63166c93b1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll

Filesize
946KB

MD5
9779844c6725a1e831e1fce850c96ebd

SHA1
4ea5cb6638a4df4236a23bde8d2e1b68572b6b28

SHA256
0a860738dd2746b355974e90c205ecc1291e71586473eec0da13e70e717ab3d8

SHA512
0426c49f7bea1a515a3c4767960e3a24949da6b4fe65a798f8e70bc94118993b377aeb9aa0e0c8fd16d254c0b9a31803b294e78aed6f28183aa8ab75af2bc12b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll

Filesize
879KB

MD5
ffc4139b1dec13ee3cc2f0a376049dd3

SHA1
6a46724449d907ad48c73ff390fe8997cab9950c

SHA256
5f5056c01ab01bd676e4ea9f0d755d8ecb23da455cebd08a8944804b1691c07a

SHA512
8afdcc3b3057ec76d131599a23444ce6f2e76814e706ed1592301b1ac9e484d16c0fe3c2428587ac32c767da1a8a330a9d27fa8a9e2a4718664d637fc790394a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll

Filesize
263KB

MD5
e09e2a8fb4e7593483473c2db69938bb

SHA1
495c308e4c2a3309cfb42629906e8264f2484a11

SHA256
95f41f401b2d11a1ddcdd8e82e66217b43a95d318d9dbafc23c7f0daa30d5da4

SHA512
8ed08e30ec1cbc4b6f347c77cadfed8c5fd51cbd5fabffe1bce11e0406ac69772d2856109c3edc577a5f8a0c980848bfb7d05f85b6c91a35016f87a00736d242

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll

Filesize
78KB

MD5
92d3473bfb5df279a09863a92467c7a6

SHA1
2db95a14279be77f863e1047a1493fd52e2ebf1f

SHA256
cfb0715bc8a3733d43bd2e53147205550fc6dc9f87ee7bc647af4a34a47b8f7f

SHA512
3e42033486e9380ab75b74bf7bc15e24227012b66f2431fa76b900205c04fc5aa5bbfed9aa50d9c4fd9e06d771ff985b074268a972263c671c3c95e487017129

Download Submit
C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll

Filesize
83KB

MD5
0f3bdd3cc0663e7c170c5a58650b045e

SHA1
7619a5ccebbe83c19370139aad5404854801bc46

SHA256
552f52d2e89ebbbc2c082b87a25634264372601c99476481600910ff6f0fd473

SHA512
9d0d519418524f424c7a17186cc34fae2856b16fa9692e137833e0535a386354ade8c9f6543baa5845abb71ca9c8df71b1b6627a915ee4f6c225dab91027f4c7

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe

Filesize
1014KB

MD5
e65bfcf8536d662ae1ddc5a6ad1ad748

SHA1
8176e711b71f7dabf596f0dacff9efa49aca1224

SHA256
01b1c8bcd50f1f46b8ee52c071ca4f665783f4d9709fe4c4cd44ae04d6d5d1b2

SHA512
4b779349a6309f292ac5d0c2436b105e8214799425bb1346780e52b9d80a1c2eb1f65217dfca0f2f400a3b45cdaa8276a3305d4ed1401e0e33397c7a38e6fa8c

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll

Filesize
1.8MB

MD5
ecdb16cb799aba454452f19d22344539

SHA1
f347528fc629fdd1c0e9b309369e155586667c60

SHA256
9049cc66ad1e7b0eafac34170565ed43b114f7cd5aa21d989baa3e2903d139a7

SHA512
698ef2ffef5eac5f608e36b7bf2b073cb9046ebeda8dd65ce6c2f31ec5c6f4306af64b41adb3994a1a4182317248dfd80aae35bc3f40fcec855a8686a1bf6d23

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll

Filesize
4.7MB

MD5
7d0263675fcc614d32ae30a626c5658d

SHA1
afbed1c694b3fefa69994363d8bb03e093accbda

SHA256
60280d9d0cede78584d55744205497b8c852d1dba92a816e01fc6f4d77b3b411

SHA512
6dfa8d5f2f35d39801fdc5f90e55bb5b30e89aeb8c604027ad987c24daf3bb7bc129a75bfe59577f144bc10e907aabcb695d248bcaa351bbe87107f49044c49b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll

Filesize
116KB

MD5
cdecf04b6605156d8d0ae70b9e647324

SHA1
4b98e10020b392f4f59c5e4ecb3f9d859a4557ca

SHA256
19e1c99f173ab9e0b147632d772956cdf0446cd1aa642968fda6f91872b26db9

SHA512
54e9bd80b910c4185e2c4e155cc4195c54675256f8945256668cac157b35eba875cc8c7670ab7bf447f411146cfbc259af1794d91b2040236c3cc5dc566497b7

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727655977808114.txt

Filesize
77KB

MD5
752da6c82aa1cfa14c10aea5c9233a53

SHA1
c05278046ebc1ae140c091ffd76313edc350dadf

SHA256
b03cd48d44f6fe5f178e960786b713320b065e180a9ccd7d72f95dfd15b3f79a

SHA512
f8ce008d112fa45f3fc211561d5acca0d8e6e27173c08c001e3462b2ebc7b38657c992d30d75e3ffc5e23a04c11a6df6489b61564f9ef9de96a9df0eb570c4d4

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656717558154.txt

Filesize
47KB

MD5
9c2d73883ce8c7cccb06e61e841270dd

SHA1
5aee51f9a8f9685575c74cf6a0eb6cd25550b1d0

SHA256
25c731f5cf5ff2ce0b9334faa57ffe2a892fa8053340febbf6d65e41ba6ef3d3

SHA512
c899cc7150cee82c64d0ce1aa7751c26d779976720c047290d19a37363ddf1d43a9aeb5f52648cba0e61bb0bd5b4a9175969ee91b2949a82c37436b6ae2b3fc0

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663096253949.txt

Filesize
63KB

MD5
16ab73bd66fcca09ad037ba47c6cc70d

SHA1
dc2146bad52daeee5992fc5ad24d143462256d4f

SHA256
f03e701529caf66dbf2cb05eae49838a5bd7e79c7225c1116df8512399e79085

SHA512
c4c45431cea5492d6ab440280d2600f25d8330cbc9ce41339a0470cd8f79cc5a243799047e93042de5c3d8aca9bb93c0dd680411163aabefa99b34e0697bb385

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665766873969.txt

Filesize
74KB

MD5
c2e603f98b9d79949091fcf1ba2f45bd

SHA1
d1fc13e085de789deee90cb2e5d983b1400d8aef

SHA256
a0a987f2aa767e73b344fc7e7b9750055b2ef0d1d77bac9e8f70570995169f97

SHA512
a1fdb94510195549a76baf5ce92e703bb414574ffe6b89c3eeb0a69c2963827614f3256dc803c6d43dd5c5f0f397ace33c0ac2949db7d6ed5000c1e7faee1367

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
54c0a3237bbf0d7529ea872b9d2b4f6b

SHA1
60ba40585077deb23e204954d37f752b11439830

SHA256
5f48b85efbddcc9e6e3b8125e5046f15b2d7b1ac300dd5ea1999b01a291ed5ad

SHA512
41cd425c1e76c619f01bee6cf6da25fdd18bc7e03b7b6345fcf4075682a518713d07164cd89b5e53d9954971999add53160861192ba3aa4fd5797e683f821f44

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
7a37da63792b1ea2ca3a66194a85b3a5

SHA1
29e9177227b907f8c515797c593d09867519379a

SHA256
327478f9b719e77bd07a5cbe42d2ae876df926057e3dfb1548a51932ffdf4500

SHA512
fe0c5fd216a6768580edcda6163f2ed19266c06ea93d211f99a0d879845da81a1142ae89c3dc5506fb21aa6854d4656152cac1932d42937a1e5b3ac9266b4bc3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
171209668633214a2aa01835d624bb28

SHA1
fb2e6f7dedd404f86201f67d3dae92f9b74a7f55

SHA256
add02767b4f3b91966b96247b6eb443846380f4f3969cd2ccbc368b739b4b5b3

SHA512
377c5486fdb7cec98030de6c4b981eed4c92a9f74aadf76261f022ea2db6d73291b13ba2a8dd69921b5770fba45680401a23cb675fe7ae4535c8bb7f601cb88d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
bdbd4b2f69b620f7ad7f71e84250050b

SHA1
f59e7e8f60b37274922b58d14d594a20ce18dcf5

SHA256
fcb9149f41922eee0aa5f6e28fcac0207064d2715a8c72f5d99032efb7a4e058

SHA512
912cbee1fd742d92aac9ceec1364c47bf05a9c2ee53c42c2e201fcd641def0194f98d81391004011596e15e5499e897022e0598633b372fd16b652458664b42b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
c8538a65132437079ae33de7031fc3b5

SHA1
7e3ac5bed73811d4e38a5ca0667a16a89c19c6c1

SHA256
fb9bf65a216c12c81e35feff6307b4750db3939993be72b3cdbf1ba0f8efc24f

SHA512
f8f3e9e4fa29ae98e61985aebb1b04a725a80cfa9ab8a679aa536536241bbbe433493701dc462a45546d096aa66a971db745674cbcaf43d4577fa7d6be3d07dc

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
92b234211bf2add92ae2160d2024fd06

SHA1
4459d92ca34c8a3f32e394e43498624bf296f4a3

SHA256
910fa749746e1c44c676456610a67d69543ca6b7102f10f663dde49de80ed9b8

SHA512
67977b5ff1dc017425fc1d536c3107017ba8714f45797b400869be1f99cd5e7dd0f39a88759d2800985a6bf7a0dc530d405d110d90f71a6713ee483cb1993bfd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
ee1e81b6ee0bf9dd80eafc297fceef28

SHA1
a4b07dc0bbee19d9d3beeee65bb55d8e1edbcb98

SHA256
b0cd792be87d73abdf8108f94c04e767bea2753f7ab2876580f60dc5fc00e358

SHA512
f99a6753418247961b24c364cc826492da6970ac88b9920e5af6d33b288de4b7732e8f6bffcc1e5b4054c9969f61305d1b0fc9ffe041d3fbdcf2466579faa299

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
5e789092cebc3ca6180ba7e334e96aab

SHA1
1f399cc1897501a5dbcb62617bc71e7369b00a0b

SHA256
83c8d68457e7c5632d3714012df292b61a2c2a2c33bcdde7c93d569d00827089

SHA512
a8a7375fb14f907ced3d671e0b4fc06bccd3b59057c0464eee099df6b20dca70d5b1ebb396d1c4fbde3e6f93babb961e4fd5f128b8542862e7c606ece344d090

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
621c9de9d35abf7b2033272c3d01931d

SHA1
28f1520760f955aab01e94d03f6fc8f09b44b149

SHA256
b5cb24b425a7ad3c8c69813757d082e2508adac16988ac1c1a8442acd1f4ca12

SHA512
467bf098242bb4410e49ee11eb23cb1eef0391cf1efd751a052d6993db42281b66b68ab9cb10d0accd2b98e194f3db489683e4eaffd901547c837a1c7b9a4c9e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
2025519b928b28976a09b432a9513a97

SHA1
5802916ee11b0aae015ae249c64379f7f4363f05

SHA256
56f7789c41a5bfbb00b2b2ef5f7114bdf8a38386f7f4e0ff3e89640ca196de53

SHA512
9583af1636d25d45a5fa854213c6af1a0a38cae8289c868f459677bc5a618e7999ff2ef4c2c21cb2493a4a4ee4e6089ff87166ed0b6e725e686bfb8418c0f7ee

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
64cd402ec6c24202d4fd679084b31da6

SHA1
9d10e3e7ea82df025a5d1599b18f9ac616cd142b

SHA256
c6800c36623dbf2e71e510155dcec16afc2e8947b7d81430cd80397c2879621d

SHA512
bc0f8b0f72e5c68c1b7c863cd6c482decb5b1f32dc8aab1cdb5065f3fb396a614e990e8f69f8b2770e11f0c98e29ad2a522582e6f167227648b473fda970c1c8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
fffb2462d9063f2072aa28736c0e1a69

SHA1
46ff49306049810251c478f1cfd0949a2b0bb2cc

SHA256
5ff9c09fcf5220dfd1a2e1e47751eee9c047b493b6fa2be03540215b11b9193a

SHA512
5a7129e81602d63fb189b680ffa6c07ac18439ad7097a1858198a0f9f55dc2155a08fbd331a2498c51264b93a851978b9fa203a358135b2ee8e00875505cd0fb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
297c0b436d779ed01c4ee21b151ae627

SHA1
8a5a253e7deec102cfd7909cbb671144c6a16ce8

SHA256
e74dd9c180ac4851b1795f2d98ebcfaf8d1e83f6b0950ac77a688cf9b4099c79

SHA512
9d2a2de9f0287c990cda212aea6ad4713f922726fb94ad8ce108fa844fb7e8d6c5265c670e4e65d411669ce459cd98927de134279cea195db0c903cf8228567e

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
9c6ca8106f45dcf95b97442b69d8b168

SHA1
6879819378c07a774f3ef172303faa89683e7dc5

SHA256
bce56498a7e7b1bad8030bd37de05433930dd699405fc2c3494b0facd8978a87

SHA512
fe3cc682d8edc828b7ac9ebb2920c76bdb1af26e60c3ab9f6ee7bb489547fe6ed6bc5b28ede40806558f0e308e557e2b6a0d0af6df1fd3b60da0f0b41ec5a09d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
7d5ab544ee84dd0c788b083749abbef0

SHA1
c433d032f312fbb53653bade1e3a427d199d8bec

SHA256
958fb5f60f2227fc5d710eab275cc77abd3ebcae24ce10a9a3b82059dbc0e4e9

SHA512
145c19e8962d4a64148bc8645b1372ad236dac54518149d4a9ff68ab22fe99248fe50cd59b33723cb554cb1481ed2fc8abd497e164d4e195b3020ad1f280a6b4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
92a8b659c9f96beef406dd8f1bfca872

SHA1
2716e3455211febab51167603f524114df15f83c

SHA256
b0a48ae5d44d60302cbe11ba265b46f073b3d0e96155448db39f71d97b9d5dba

SHA512
353374910778dbe9b9642009ad3636484fc6da475d99616c13fceb72b6d8ba6c6cbfd355c3ee1630d17abcd1aa8c5b906dcc433df3657bf49a014395cb1294f1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
f3fe7c5ab125fc7eebc633729c252281

SHA1
e0f079dc43ddee2a0458b4862c0ba1bb69d5ab1a

SHA256
b93ed3a3cbc929b93321fcd043fa507aa5208e1d78548624f3c65c1fc16dbde7

SHA512
cb34b3ef798599c64623d7d7011eed3d7deb435a9f2a8963998b0922efb90b1fd84d36b2f651320da0b900dc4009e86100699270571357d5e9c60d0082b81e1c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
3756d3b709e574d0edde97f6e4a28dd3

SHA1
970ceafab590c55d28c6dcf70113cfefd54afb82

SHA256
f6609ce634605596a3e4c2bacad5e0417d4ffb922166ff8405a488961a7c607e

SHA512
4eb64fe66685b8f67fce8bb16a83c53972ed49f14c6fc1976f7f71b2e8538a280b1064f438aec17c966f4bb713600a59cddfeb3a277babdb611e16dec674f9ee

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
dd4b8c4c6c4a3fa56e04b56d5a0109c0

SHA1
eae6fd04b54d0a038b5faef4b85015e1f375dbc3

SHA256
715b4f2a051d370ca3dfeb38d4e2d349f8b056c0bc0ebb14e6aa0faa9dfa6410

SHA512
286a1599cf67ff2f968638382e37372f26f14c6d46db98c3e5c8c9beabfa2c9138767d44e56a8952c2429c9fb15a3b1ee16679f109cc78e70dc8e7318b1939a0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
19974ff48b40e7554d6022141489bdb8

SHA1
f2fefa55a5f94d9e729f207a66491d11d8a23137

SHA256
3ca4f1d6f5ea583bf8e666faa457bc50f24fa96086dacf8f4c0155d88259b8b0

SHA512
871b4fb05fc4b9b28c03f905efee74f3f6f9fadb8142751f0338375946e2006d75ec754359537575cbbb10e8c8e8d08146c8b991fead66b68c086f876eff8c32

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
db6fad2c7bb8156ebb436bba5c8871ef

SHA1
68608741c0b8bd6c8701496b394ec95d66e0891e

SHA256
7f05820033be77f72b1891e4658fca4e6e5f087676628e597e6870c840a304a5

SHA512
78c90b92d8d550acbc1730e8aa8b35b7325c38330d2a5c19de1042878f86707388bd0f98eaab67c89d6f99d928f7b0285c2594bebc81384bc745c9dd0698cbfb

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
c0eadd683db08e20e981c754b058eb87

SHA1
3fdb53337393bf5daefae9025440d0cc8065a0ff

SHA256
371a1529cdb878eb709448af6747e5fb80c5a3b9fe556d92d57ba09dea65f369

SHA512
73f777718ee44f272e402d5705d915f2b2b98864cfd65091d22a5f75d20573ccfeb7db429bb5d6ef7a85d1e2b4094931de4d8d873cf7c22b19b19abfbd7a70cd

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
09197a0216e4881fa025de81fc438020

SHA1
7ead4d9e71095ea64d7c28da6bf69343d2f28766

SHA256
48e4328952bea992dc0076cdc9c68274a250f574651c2343acf1eae8f4375014

SHA512
d25f7a68ac6636905c15c14b57d6a3d577274b91cd5002936ccfc780ff90d38208907325c6e65613b12623c65e6aef5cd1330e085f803871b46b4b08b9c86e6a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
2195ff71f9e24119dc2186cd3d5d37b7

SHA1
aae1f8933a9f78b492956ac6e744d183bea99a27

SHA256
187d1340e6451d592f8968c0465e9cbf59fccb6b50922f53598a9f8264fc6b9e

SHA512
6465a714fa82ffc5d0cd2eac4c02c1d556b90e3c4ea4b2f4dea32ff42f57190256b4ec805be8ebea94ab77660099f9b84f3c5b69c75efe3db95949ca37e98ae2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
82d1825917b55c73d0afb0d4e35b3800

SHA1
ea341bab15d67864485d95bd51ae292091348287

SHA256
c447838182047d62c074b49e67f3b60300f82fd8cbd3abbff660b6153f3d0501

SHA512
ff6d8ad1c4aefde6db97216a08a8852054de0e977d04100d0f98dff4a4099b53488f864ca67e1be3c117f20aaa23a0406ea8544d93876f43923257c661d2dec0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
aa82e510275e97ad2f2c02cfd2f81dc4

SHA1
1bfe3e3cf8c45bfde920d8e49376504070b376f3

SHA256
27153f12aa62737d0d839cf21572379f5b950bd7c83e6dfcea9c0ac7b18d6319

SHA512
1379d44147685b60192260d7debbae1e5c9e0cd61c160d3f40d81890766a17043bfd4fc195fcc005bc0c86fca08c94135aa469d60156412f04e0b33c681a0b39

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
886677f193fca9583a2dfc5fde49ba28

SHA1
7312bfc910ad0de4441501ca219733ee8253afd4

SHA256
ab0a9477dbc0499de9395838d945456e742dcee39b33a3bec6e7b161d8ca326f

SHA512
145f5cc01213a9c8b50795a5bb41a73a077416a34831c961899ec7fb4818fae46b6068fbd264b61364c601ffe66e5a4b9c09d8b4547cacc609216bcf4d849079

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
4ad32e2cf202d50d198d21c47f7eb29c

SHA1
b8052aa186c651577d8939adbdf54066a1402a14

SHA256
b9315f346deb0dcf32b389c5e0db4b608e0dfd0eefa7ddfb33ec1ee4586156fa

SHA512
6baea7c5b12d72cf3686e3d6de51c5dc80ad9f50c115ffcbeab743ad8bcd26419fb427dca3a5b8c7ce26404e5b6cd34aba65b40b924c529024eb2476f3bfa255

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
856ed243d459f0516f813d8a7c2fe0b0

SHA1
cc0f9e94ae1792bc90d6b93247979adbe68eff7c

SHA256
76b26ff668749ca90cd8e9150f166bb620ecdc89bca3cb0b38729be6d81638bd

SHA512
999006d4d3fa702b21fd5a36e1fdd5a0552aa98feab2a154ce178f58a855a4ccfc8ed19d4e3228d22ef0230e5dee23dc0645fede4c9b8ce975ce78379f515dbf

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
376f2f1be95d3f6555887812ef4c3a7e

SHA1
8f032b1a2e16b47dd8ee281881a07e90fefccc99

SHA256
c4d52958ba4fdd53d17b539691d598d3a084275d01bfbffdc46078e84fa22c6d

SHA512
1b91340b68e7404e6d0d70fc5ab683c7ba383f56aca56ad48327579e5ff8426f04f154e40a33fb80bf44081d9392c81812234b1dd3963ad405d6b354301e908f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
40fe8a0188e797e4b55d7333f781f729

SHA1
47b67a8f2938f1195ed9b6dfe4fde5fea92f1d8a

SHA256
262cf56d707092dd77aa9e6fc6d79f7098f5dea2377f9cd0e076d1096b88f02d

SHA512
a873888ad7df4453e531468793da650b27be8e65fc5af51fff9341cf98f22a61ebbb5bdb99c4f3b1d6e5693c94ad9a820af62e968919a30e425e67c601ffac2b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
e70047360814616923cbb5219e8da3c2

SHA1
c1379e8815fe2100de05d6317f7716de6b89cc79

SHA256
9e4f88bb32709acf1a73d7b81fdbdf19c4188bad373f7f2bd4bbe0771c28a609

SHA512
56293b31e69a4895e9edceb4b93ffd05028c0c9c678f462fc8fc8bdd2acec8f27874eb272884f56ebeb0764e183a97bfa564d1746b533ef7dc9607713dab8044

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
d1df08bf363ebb16b0283fe25bfe2b95

SHA1
c93b54fd750363fc253661b0eaa5cf99327b54ff

SHA256
9688b46cfeb78442410332f0b440703bed817adf5817b2722c7866d57a33b5d6

SHA512
a305060e0e5113674408d1484ba0b6a43288d326883b00eb85198797cb903ed07b0f975b7b20a0f9ce0ce0b0e880ced2fe851e637921d936257163e6b1f230e8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
4e9b76f56103d57c9db9441c44914738

SHA1
795a190adccaa2cb961feabe7f087359e07af156

SHA256
fae4833c55baf147822e4a072426db55e59e122bc340906c98bae613ea0dc4bf

SHA512
ff77a58dbe031550b37a722f1e85623b1ab5c3bd27db2d2f3eaa84291d95f89610ad723699e4a9a9370c95521dcb2fa32885a61965a262ae44bbb19ad2e27aa7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
33c3341342dd516c8b5a18c28a6690ef

SHA1
a4e8167fc150285c4ff48efe4f1a0bce91d816d5

SHA256
e1e56c7cff87d3c79e06b963ea9a5d5e2722aad0f60bbd430a4a4f3fdaf8221c

SHA512
30a8b88faea318ddc96d0c0b4eeca00523c57c4eb779b0979fe9fe120ac6a91f546e2dd21019c6a761b9ab053cca8a4cdfdacdd54131dd55770d4baac065c78c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
bb90690063098f30ccc0d190ddbad570

SHA1
89c0c47a133fd382a37488dcf89321fb9d8f77e8

SHA256
b2fc0cfe1a4f0e5d97dc15f482ce270c870e4a6877ba24419240649baa1e7467

SHA512
780af244eecae1a648f600e9abd289c6451b16e695647869039aea0c5901a7b744f6dc2146143624620859701b3ebfb678290ec21c68fc4d2427a4c95cb65898

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
96a1ce6379ca2eb98d21934938dce8c0

SHA1
e154eabf1cd9820afd1564268ae6ae4417f3e5ca

SHA256
719327ff4a02980efda4c681fe494dbf9c14b442b8d6cc507fb385e2421e4583

SHA512
183982b31e2412affff14e3aa79f9fe22ec816bc150cb56f090a7f861f34b4d43232f68a2cee440aeaf71f21fc8b38dc7c73e6ba2e80daed53633ebcc5c30fc6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
104a738682c7d2da0c297a33080ff7f6

SHA1
20dd7895b79300dbb87e746899bec799722dcfba

SHA256
618bcdc031b57db1b226c1d96f2d417aad3884cbe86e8454d1b31f44fa7d8db7

SHA512
2843b3bebc80bb419e89efa545e68918ea12ecee0dbb3329444112010772c9ea91c430850b3f95def9db4670c7f66a2395683d60dce8a4f230cc9da06838bd6a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
1399d1d1ba7414a33e73c762f42dadde

SHA1
8d67b20eaec952755780e7c1e5a418b777b60d37

SHA256
561db234e83b1ea3f48996c0617712ab23bbc0e05bdc82bc380ec761571fe657

SHA512
1cad48d5f1673011f258bad771f9fef90753982ec6f0da606062bb98e66a8905175cfe10e7b513b96f085ed98cb04a4f97bda1a0239f9604734fdd44ace2c77c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
019787601db5036c362e1c8eedf6aecb

SHA1
e3f26541dfbad2ee6d5e00c579c274c179aea0b6

SHA256
3f69997975dcb4d7909e1a3d947c741274d6efa6d1b85656cd6d3ea448104118

SHA512
f63b07eb4b54f92ccfa5f709db3f8416627710b5ccd2d7e08c8373e23e1eb305b772b0a455bb2f40baf255742f19bfffb6a754c056c66ae5b510f7cc20268136

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
3fe8d40d719b42b77a77cb62f92636dc

SHA1
78d9564aa9eaf20d5e21fd36ec2a4ca192a5e3bc

SHA256
f9dc2a89f2abba2acb60d7b8b3e63d58d6a7a7de3c09709b29057d3285e4d5ee

SHA512
e2662ea3856a9807fac5e30fa95977be4c1dcd2f0d9fa0341f11e5251dadedf0437230c506df9666f714b50297a6bf6cedf522081f6d04d647ddca938002421a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
78ab51ad3860a0282da5ad26ac57e757

SHA1
75eea2d032c125bde2362afb41f42beeb664becd

SHA256
838b5bdcb237f6f124547e27122e3a07bb05a5c62ece71418fdea185df786cb5

SHA512
b4c89eb7f9b257eb1e438468eb1a6acabe2d14884ca84411522f440f988794ec5c645c8934c1bb68a1edbbedee7b678a8f8ced4fef986ba5105c1762ae752f01

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
5c577e462f22bf14433cf1b295477ac4

SHA1
9c90eea919ea114c712c641e415c2d5fbb138595

SHA256
5ba8fe06fa622b226e22f30ed495168f37d55e19e14f9d211ef779550e296b85

SHA512
34c815a8209d58859a2bddaced4f30e0adfd8c7ead32dc5086f10bc31b240c8b902e79af99be42c752a231e068cdb27f7e8886bfa574cd85ad55ee992fd7fb69

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
38c3d6ce49adf35631ba88eaf692ec8b

SHA1
aea68f476159f5d08b32e9d097f6e8ec281d05bb

SHA256
f51acdba0ea1a28eb41c337e4266787e0b42e7f24d2b542903948a33da45df17

SHA512
d963a6f216cd87b079bd89a3928375372d21c6a9d6cb2ccec6687b22f4ed206dd34ad1346083ee40b898e9c9a00e1bb85d650692d81d9f20796c0eb47a477736

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
cdcf7610320aeb52f6b4d5d300c9442d

SHA1
ae2474eed574d0c7b56bdbc15c1714bfd2caaaa9

SHA256
19c1bc5a82a3e0b57cf88166badaa10a1c873bde0daf08a1955c6b2f41e07f4c

SHA512
f13470a7cff4615b79b26fe166a77566ef96e7e963bfab8a44b201aee7513fea68f1b6323ab2e3c5d8642e0e83a142975ebba8e6d426610dfe0f8c646c0b1972

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
bf7a84be9677910567af5a06256fe606

SHA1
c22b614cacb0f8bbc0217a747cc700d2c492499b

SHA256
4682c1b39815f5f39083e728e6420ee305b8abf1383420e6456c749d95578956

SHA512
3259d559f0ba5820496af5a2216200ac726c3c8b2a7ecf8deba605f67a60aa3f2b3d01ebd76d5d276bf561b5f41fb1e106a834c2768539660d35fb29cbcd5135

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
b8b60600334ff1fe2f2c09ea0239c543

SHA1
f54a382074a4d34370a47f236f46ad0f031de603

SHA256
4817d1ceb701ad3125f2161776ce6c0ef2702faab7f09adac714b45f21a52e52

SHA512
63de2d945397fab8beeeebb8da433905c31ce923218a9d4cfa2705dfd0b456c28a2f67ced1617f391b9711e2ce62fb9556e82b97256a71d2f815893200aa2396

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
805b334b6ed329e1e33e46030bf9d50c

SHA1
8cc95f98680a169ab7943566e6b3eccc226f0ee7

SHA256
fac4b40de0e5ecf92196e9be1de64ea49d35344ab4f4a0d0019799f9c2691779

SHA512
68643e40da745e522a8a8ab8a471fe55051eb4558c2d97539fa3b774dc141c9f754a78d883418b05f7beab4eb044d9efa6d2a4ba5bd84d6f526abc16c5e222e6

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
b48bfdb81e95ec81af91ad1e8ad032fe

SHA1
9ef02f2890423f420079a1e21c6fcf183350a510

SHA256
5d1b3c24329360aca0415733b5216165efd36fefb835f8697c06e7ff05fe7297

SHA512
7e11ee55a2503c324f88f463794851867584049955f0fe54d1c9fb592a90ba9faf1359f381df7295379de4196f0d4e5b2b2a30b99bc5ec8c217adddb433579c5

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
83c1ccd1a4b2842dae72f4a40f598041

SHA1
5821585a3fc0390e28e5b1d5c4bc3153f2e71228

SHA256
8bcad1916a79f2a3d5c7b49137c8b1d998128e7cdf082e44dd0b23872f160258

SHA512
f179460153c1d35573fb6c0ee268cca2597df59f5e8655928a044ed6a8ac228457619a28061ea6ce888559afb1a34de56907d1a2cea8e37dcb04c4648e8a4562

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
c3aa15734864bff783413c487fd31eae

SHA1
bbde02bc5c5ab2f8794f465cb7f5a41a7bda337a

SHA256
abbc6ce2382deefe91bc45250f0112e6a7f39e50e1f48fb9a9889285a1f68abe

SHA512
ee88971c45c599491e7812a66b85556930fc6e3266c2395b3c7dda4bb0279a5f9e52d69de6cf594f9f432059d6f288c02385175b895e60fd4fb280c5b453718f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads