ca3de1ceb19213fb7a0f369e779f3eb972c89b352ee87a436e79d6567b24f98c

Analysis

max time kernel
134s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2024 12:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Size

12KB
MD5

6eeaa0404f1f4f3ba2f2d6b80daa4471
SHA1

f7cea6726016cba51087377f75d74c6266514a2c
SHA256

ca3de1ceb19213fb7a0f369e779f3eb972c89b352ee87a436e79d6567b24f98c
SHA512

2b9b30dbfeb4b8debdfa4c11a18135151c4308563d7e82a1890c551cac3f4a3e2a0599907a6239deb1fc62c56199002fb8b293a42d3c42b303b033b786ee5c12
SSDEEP

192:Z/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMDS55e:ZebFNw4Pk1itKkpAjjJs6B40WDCe

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2182) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\fp5yhPeo6V0DUB9.exe"	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\MailContactsCalendarSync\LiveDomainList.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WinMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_memory.inf_amd64_6fa9664593233d6e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mchgr.inf_amd64_399f04975a0af112\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_2176cc45624119a9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\transfercable.inf_amd64_911a60fb265ff111\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj3.inf_amd64_9658f2eb83f061c9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sisraid2.inf_amd64_845e008c32615283\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vstxraid.inf_amd64_300cb04282659e6d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_5938c699b80ebb8f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmar1.inf_amd64_b2ebe9229789b181\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdgitn.inf_amd64_6360d736a6f64e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpsion.inf_amd64_28542b9aafacda15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cht4nulx64.inf_amd64_641bf08bee8ac46d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_hidclass.inf_amd64_b37df5bd0922aeef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\tr-TR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\pnpxinternetgatewaydevices.inf_amd64_82b90e51473d48ea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\lv-LV\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\ISE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAll\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_system.inf_amd64_184528953a6fb673\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_volsnap.inf_amd64_47e3741bbf4d6b06\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\itsas35i.inf_amd64_4f5850c71046b0cb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmhayes.inf_amd64_055d85baabbda8f6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\UEV\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_LogResource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\slmgr\0407\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_holographic.inf_amd64_6ab9629b23deb837\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\intelpmax.inf_amd64_2ddee95f7a5d85db\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnis3t.inf_amd64_9f214efed426c12a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\xboxgip.inf_amd64_90ed6b3fdc759a5b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\sk-SK\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ks.inf_amd64_9fac168e1cbea90c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\net8185.inf_amd64_7a30f5a9441cd55b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\rdpidd.inf_amd64_ce12c614d182f4f9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpace.inf_amd64_5e0fbd01da4f7c7b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ndisuio.inf_amd64_6096fd74a67ccd5d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netax88772.inf_amd64_5d1c92f42d958529\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ProcessResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcxpv6.inf_amd64_46a3b42507e9d29e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetEventPacketCapture\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ScriptResource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\v_mscdsc.inf_amd64_05925c79fbad7433\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\F12\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0015\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de-DE\Licenses\OEM\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\sl-SI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wdmvsc.inf_amd64_8666ee4da6ad6325\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Dism\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\AppIcon.targetsize-32_altform-unplated_contrast-white.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\music_welcome_page.jpg	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\jdk\thaidict.md	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.scale-150.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SmallTile.scale-125_contrast-white.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-64_altform-fullcolor.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsStoreLogo.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\apple-touch-icon-144x144-precomposed.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-Google.scale-125.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-60_altform-unplated_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\WATER\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Images\accessibility_keyboard_arrows.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraWideTile.contrast-black_scale-100.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\EmptyCalendarSearch.scale-100.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\javafx\libxslt.md	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\LargeTile.scale-200_contrast-white.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\zh-cn\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\zh-tw\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl\Assets\OfflinePages\WebviewOffline.html	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Exchange.scale-100.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarWideTile.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderLogoExtensions.targetsize-336.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\OrientationSensorCalibrationFigure.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\WideTile.scale-150_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\SkypeAppList.targetsize-16_altform-unplated_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\bg1a_thumb.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\FetchingMail.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\RTL\contrast-black\MedTile.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.targetsize-96_altform-unplated_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\mesa3d.md	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\StopwatchWideTile.contrast-black_scale-125.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-256_altform-unplated_devicefamily-colorfulunplated.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-40_altform-unplated_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover_2x.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\it-it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\da-dk\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\Common Files\System\ado\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-140.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\StoreRating\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\LargeLogo.scale-125_contrast-white.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Viewpoints\Light\MilitaryRight.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionMedTile.scale-400.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-256_altform-lightunplated.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sk.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\FPA_f14\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Resources\1033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\Ratings\Yelp5.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\GamesXboxHubStoreLogo.scale-100.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-30_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EBWebView\x86\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-20.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailLargeTile.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\arrow-up.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\LargeTile.scale-200.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-200_contrast-black.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\OrientationControlConeHover.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\WinSxS\amd64_netsstpa.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_084d6fe3e8ab4ae2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-atbroker_31bf3856ad364e35_10.0.19041.1023_none_4478665ed379a3fc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mapi.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_82ef00987c8eb8c0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.hyperv.powershell.cmdlets_31bf3856ad364e35_10.0.19041.388_none_2f655558eda5822e\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.M870d558a#\d8c6c061391afad5d08eeee96bda9e8f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..erience-apisampling_31bf3856ad364e35_10.0.19041.746_none_286e3332ce427912\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-audio-volumecontrol_31bf3856ad364e35_10.0.19041.964_none_a40a1f93665b43eb\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-application..-appcontracts-winrt_31bf3856ad364e35_10.0.19041.1081_none_fffc804232d65210\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\Assets\SquareTile44x44.targetsize-48_altform-unplated_contrast-white_devicefamily-colorfulunplated.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hidinterrupt.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_a46b0ce8ec8bb1c3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..utilities.resources_31bf3856ad364e35_11.0.19041.1_es-es_b44fc81bca4a9ddd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..lerevocationmanager_31bf3856ad364e35_10.0.19041.264_none_f5644adbaccaa28c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-eventlog-commandline_31bf3856ad364e35_10.0.19041.1202_none_3594628932065f23\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..ervices-tsfairshare_31bf3856ad364e35_10.0.19041.746_none_0b33a1c93a22de1c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_smsvchost.resources_b03f5f7f11d50a3a_4.0.15805.0_es-es_502c1a4cf8554f57\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-a..ement-configuration_31bf3856ad364e35_10.0.19041.746_none_56bd1f729bf6c47b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-devices-lights-winrt_31bf3856ad364e35_10.0.19041.789_none_07d293c552ab1f05\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-raw-image-codec_31bf3856ad364e35_10.0.19041.746_none_683c2ce4934f8197\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-t..platform-comruntime_31bf3856ad364e35_10.0.19041.1_none_8ad63faf0acdaa49\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-hyper-v-vstack-debug_31bf3856ad364e35_10.0.19041.928_none_e22c6ae2239eceef\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-graphics-wdi.resources_31bf3856ad364e35_10.0.19041.1_it-it_6db494b3601bc003\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-van_31bf3856ad364e35_10.0.19041.1_none_6c5fbce22cc9eb9b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\Assets\square44x44logo.scale-150.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.117_none_e0d32848ac56114e\common-button-template.html	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..cemanager.resources_31bf3856ad364e35_10.0.19041.1_it-it_f121b6729cd754ef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-onecore-pnp-devicemanagement_31bf3856ad364e35_10.0.19041.1_none_03a6ad8d31b214f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-fileexplorer-common_31bf3856ad364e35_10.0.19041.1151_none_ec76581f556a7020\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hyperv-datastore_31bf3856ad364e35_10.0.19041.928_none_18e96c6cae9dacb0\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-fileexplorer.appxmain_31bf3856ad364e35_10.0.19041.153_none_47569e595c44e70c\PPIRemovableStorageDevicesSquareTile44x44.scale-100.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-httpsdatasource_31bf3856ad364e35_10.0.19041.1237_none_0bbf1845425f6c2d\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-textshaping_31bf3856ad364e35_10.0.19041.264_none_034dd448b05af73d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-v..iagnostic.resources_31bf3856ad364e35_10.0.19041.1_it-it_d2df3e3d4fc57eb3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-g..zards-mui.resources_31bf3856ad364e35_10.0.19041.1_it-it_a49e8b44cd0c2ff7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..owershell.resources_31bf3856ad364e35_10.0.19041.1_es-es_f02cad9866e19db1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy\Assets\SquareTile150x150.scale-400.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..lsmonitor.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_d7a239daa1d6e63f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_presentationbuildtasks.resources_31bf3856ad364e35_4.0.15805.0_it-it_da4f9ab2de2a1935\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.19041.1_none_cd0389b654e71da2\recycle.wav	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-g..ion-winrt.resources_31bf3856ad364e35_10.0.19041.1_es-es_393729fea530ed2c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-n..mplatform.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_8bc99612724e3e53\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-p9np_31bf3856ad364e35_10.0.19041.1_none_6a6acb72ee41fd01\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\ImmersiveControlPanel\images\wide.DefaultPinTile.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-deviceflows-datamodel_31bf3856ad364e35_10.0.19041.1052_none_8642037757fd6e41\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..iprovider.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_b4556a0c471bba4e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windows-securityhealth-sso_31bf3856ad364e35_10.0.19041.746_none_9d44fd61d4c8aeec\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-d..sprovider.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_9dc0071c92c61978\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_mdmcxpv6.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_cceff0ac22ea4c8a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-onecore-codeintegrity-secure_31bf3856ad364e35_10.0.19041.1_none_46d6568127bbe063\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..ents-mdac.resources_31bf3856ad364e35_10.0.19041.1_de-de_dec58c91d303f3c1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-mpg4decd_31bf3856ad364e35_10.0.19041.1_none_20eb461f35c81916\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..etype-timesnewroman_31bf3856ad364e35_10.0.19041.1_none_9360947b38b4c9f1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Assets\Icons\AppListIcon.targetsize-16_altform-unplated.png	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..ooler-core-localspl_31bf3856ad364e35_10.0.19041.1288_none_a4e3048547ddd4f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.1266_none_fb76f6fb7e78a373\InputApp\InputApp\Assets\Ninja\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-userexperience-desktop_31bf3856ad364e35_10.0.19041.1266_none_fb76f6fb7e78a373\ScreenClipping\Assets\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-ie-htmlediting_31bf3856ad364e35_11.0.19041.746_none_742ef2790009639d\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_lsi_sas3i.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_00b73740116be7d3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-nfs-clientcore_31bf3856ad364e35_10.0.19041.1151_none_21b291c4f7bdb6e0\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_de-de_6988eb133eb82b0f\404-6.htm	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..-vaultcmd.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_2504e89e4c78efd8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..-wow64-setupdll0005_31bf3856ad364e35_10.0.19041.1_none_a3feaf274fb027f5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_networking-mpssvc-powershell-windows_31bf3856ad364e35_10.0.19041.964_none_a4475251b255df80\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\shell	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\fp5yhPeo6V0DUB9.exe,0"	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\shell\open\command	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\shell\open	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\fp5yhPeo6V0DUB9.exe"	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.block	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.block\ = "IZFNHUDIZWXVJPH"	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\ = "CRYPTED!"	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\IZFNHUDIZWXVJPH\DefaultIcon	6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6eeaa0404f1f4f3ba2f2d6b80daa4471_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:736

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
8c5b2909803a683ab2504833bc3adca3

SHA1
04c605acce1e13e5cc5eab6297c018281fde422a

SHA256
649f296d289cbbc7283921c133ab9cfdcf72e864585f7fa269f8be14a962653f

SHA512
432ef603649d5c30d09e676a9227854a0e884b82e93df66d6227979ffdc4d361903f85aa71c22d65e324de7b87085a18cbca72bb1dc4a3828d39efc405a0e5a6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
52d3071ab6622498b929f54e9d30df6a

SHA1
4e9753ea63f9a17b40c5da0ac331b4d2d3fd30df

SHA256
c665c087488f99016cec7bfd3ae9d0d771b37a913d33b963d70dc6d08fac734a

SHA512
90ab984c5d8d3aa6c66829891bc95d4cf9f8c1e66ad76c558bf402fc0c18402fcbb354ec30d7ce20fbc7d2f6be701ca25b2646e08d7b8514ea85067ba263f6db

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
8c1a5bf90fc7ef10d6358b5e6989a302

SHA1
4fdbeea374c03cc1b43d6aea9eb397b23ed81e4b

SHA256
ac5b7533da6a0cb5e22c51cdcea9075aff15d465ad6fe95cb7fc16639fe93d59

SHA512
31b5c0aee02d7e24cfa655f010dab814d8114385d6b17df56d3f052bf19187f0c905b29b1d233319ab6b3a5f7894764b4742eaa66f8029f49cb0912da64500d0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
d7a77e081ba5a7e7b4effa6af2b65243

SHA1
1293a30569cf14e480732aa58dcdfa66e569bff5

SHA256
a90843d04bbcd90e3e44690de3e36f6df9362b56f6798a85635069252e977d59

SHA512
531214d122c338fcbb35e7fbfc85e46bc88aadf1a703a9edb60c89a103cc40cd0364e5b526fab79c1c98adf97334ab2c0b39e67ac7370c3749a171c797bbefed

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
60c6ea4b6678926c8fee36392a3f5f0a

SHA1
e1c7a033279de781cacaa5e6dc2af0f39781bd86

SHA256
6be119ff672ed032dbe632b3c909ff2052753d845b85c164e63519a389e346dd

SHA512
4b355a13b0162c5fae8a43f521cd062423cc62c5735c403ec4792f89e32bc2338c107eab6dcceebf35435056a5380cfc5c36340930539e7bd2ee1ba741de7cb2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
18d4f03e4590b5ad723dd818d698c38f

SHA1
36932aebf518f6ef7716a994376bde3236568201

SHA256
fe5bdd47bfc46b8414c6ed8d7187fb84bc7376bd9756102f1e1de8363bb1e989

SHA512
962c5cf3811749945d91a929dbc159d791e95c5a70ffb5a3626ec198c69f9a203aa0509a3aabca5be929d9cada47cb1eb01d1259614b733ae0d43b33c05cb270

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
78985c70c1594b633cd96746c183759a

SHA1
8e9a588de409be2c18a24411dcf79987011ea630

SHA256
00dcd0ce97b5bffb71aa3899d4a00be35387b7378f0dcd2f2f22a3272776634f

SHA512
a28b17d198bdcd616949ea545704e2f06e8f8fc5ebb0d77c74559df62024980dec2bdb09506e6e03ad2be547d980c83edae93c123eb0e95561749164d7a85db7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
3d9917cc3a62c58f017870f8709e237c

SHA1
c30291a7392d8d6eaa5ecce25a90032cb9e7f2cd

SHA256
54b5a3a13f1565a302e9050538324a8b8ade0ded65de05d577e03ced66175a72

SHA512
552ed395ff2cc902d97f5c7418716444f49251ec689ebf685f9e9c2ca6c6d9e53f996bdf0aa2dfbd57bd7b9778067fb8b9b43fdc71b26ba1ffc9c69d8dff1e27

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
c98481670f6f40bb01d977ea19e8f9fd

SHA1
2823ec2129231aa77a43146b03c96de0ec5a5802

SHA256
7c1bf6a7f6db302ceac362f747c758e68f915a75d8196de64f95d51a8df3ddbe

SHA512
519c032fe9234b6799d4b6edfb25097f8aa851718dc1ac098158acaf5bb67682679abde1a2e25e4c7bb9524104fb96ec93890d2ddab9d4471c0f8ef5684fd282

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
d5601e9c56f49a10af04aef2961d92fb

SHA1
49b5df742ab436c85693edac5bc1ee65e1a1f359

SHA256
8a50b62d7f577ab9e883414396c9fac578ef9492af001c2915e4d420d83c19e6

SHA512
22e7e9c6e33d8f6cf8a491829a1af578eae600d47255d681fa77c1d0d5756704e3ba6f5ad17f6121b2d4f2e98be093655d4620ca8a81a5feaff3bad72590ff26

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
64a84f0bac1fe8c67956b89209019f55

SHA1
2b58f20458fcf1fc107b756b0f351c3ce1d4c7eb

SHA256
cbf219cdc72bbcdb6f0ddc157ed5ac9516b76909e502cd9209b516d6bde0ddf0

SHA512
f8fec1d6aac1c23da47eabb157446760fc32eeb23c9451e162afbad8148210afe64a2ca8020deb2869e4c9f9c5092e7a635cb14d49f2b94d72d677291f3286d3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
0a7f55439fd9cccfc906423016870691

SHA1
ae8ea32298364a27bf995b4916304c72091f1039

SHA256
98609e7c7f64fbb47b9479ebe2847bfce36c3cbfd90d0d628e820f69dc1dad24

SHA512
ab313ac8b61b4378831d6decba2d6fc885ca6f262e81cebcf5a52baa4ac530cec9110ab77f753558579a6a3249052b6c5ef97066e7ae675344a72ae75597bed1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
e620aa17704566cb965c62b5554a442a

SHA1
da189d626f93e7ee5dfa5bc1c9247b46317793b0

SHA256
38e2c2d294ad2d3c3145e70121b9a6c8638a3d51c08785da0866ca1effe7ad52

SHA512
b13570b34557a1277a62184d4050857948e14a8b06d1ef74796adb8e6f441ea98968001c13994b8ca8b85c3bbad4c21072275f55bf3de44933e8c42e80118321

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
bf420264c5b19c5b9752e13070840e8b

SHA1
1abb0b30f5a7280d4f5e13d2f749fadce7747f27

SHA256
200994d1fe168d88d941bb5500b26b4b112aacf7eac884d5c0cc43f0973984c5

SHA512
ed13635e3d589be9024b06495a0635e9fc519db5808f5db75cde7d48d4249c8aeb046b4debbffdf9ca2886e1c8306997e63fa686dc0a1c28db389a0bf1bd5014

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
97b8f980aba38c1b682d2a4f2ea9ad11

SHA1
82c7f2f00c02504f671816b1ad9b7b54898d89e7

SHA256
1e6c1ea2518db85b3350d3a0ef3b92406c7819374100e80564983bb4acad1d79

SHA512
4791784e46a69643c410b6d1eea4546fcee2d787ccad13f12f097c8d256f369c3fbedcbb5572cc0d22e30cd7210458fcb684e6f3fcbcd697d9285eb117a53287

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
ae3f2574e923ccf0ed835686444f1ec0

SHA1
923ee629a09a839f064b2764e2ac1d5a0f230e20

SHA256
dc49514686106c8f1ef7fadadcfd7ed82374246d3b3f54a2bed40002f6546114

SHA512
9ca9a6781a8d0a6c5a04cd79a6f31ad56fa835e880b0d9613d87b58a605c67bbef9e928695da461e82e9450df38119611d5ca9a499680d4c36b8165895f1e8a3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
d6833ec3984c71b594e0b7ca19d3ec3e

SHA1
cbd91527e54c92562adf2d5518fec5e36097b5f9

SHA256
3596cd8912b17afa79c39d717d217ea7d7b9c5ee81ae43b9e23bbe1e674e8992

SHA512
3b3773f73262a1e045fcd940273144ff27a38a97275fa3d17ade8852a28d1f74fb76bbfe8b579602e115bc0dc6189664f6a8cf6a83678c237f432d7e65f4737c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
995528bf1842e6993e2904058fb47d16

SHA1
858123875cf931b1646011fba8776fa0090fea7b

SHA256
e3952dec6ff272ed7e0bca27d2cf23b92dd684a78c30468aab5e408907c9ec8f

SHA512
800abbd979b3f4d4f13dad74a13acdd8264fd0620a5e80eb8512529e3cf8048d503df154e4bd17d47e8fe86254ae2cea69b4d337340dcf99ed3d8f8a9ebfbd57

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
812f268fff66b79e64cd658efd0a436e

SHA1
0a3c113c48a8a77b7405417cd1067ff331680e0e

SHA256
e13b3657f6c95017ff74514c7068e140f254457dd645d82a647d8d9bd7796eb6

SHA512
1b317735fb75a698a907339bcafb1741ef348469092ba239a30b33a706078ec5c7ab3edc062161aa61f69568af61f3e6b2118ed8e1491d7abda8e12bfa9b8bb6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
aae2cd4691a4a8ff4ff4b7a072b6dc4a

SHA1
8d5990696efc522f09f6b93914ca1a4d4ae77266

SHA256
6dd99add1e098ca2e94fd25c605a7d4a8032b02a20c63a86acbd6cdb280d0d3f

SHA512
5fdbb04fe32c6b9058241b62a544e50de8cb6e990e825720ae697fc2290031badcbd1dbc55e0cea22f10e88c33150fafb8b7374ac1250bf751b8fc0fd9677163

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
d19f4d614cb7ccdf9e8c364fbfb83f6d

SHA1
b222ab62855ab5e0934e3e2801ac1c0bf733c055

SHA256
41b27e8d5bd6323602f65c32a258984dfbce4e8a2e194e33e0c7fd3d9ef9c9aa

SHA512
543df62590d40468bb77b85389c4ceb81eea2cd3f35f1a8e96613a4ca2c72e73e6e129377e3e9084a17c007260e0ef74570beaffe3fc9cf04c25237f9031fdf7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
75d886a5d8cae2f4f83c6b9376b61f93

SHA1
adb023bacc6447342144cb47d2e7ec9b42914554

SHA256
d00aabc33c12df87620ca3f91eb6e51f40c599b0eeaf0d58fc7689e30a304096

SHA512
5437664586929ca6a314b10ed74ceaa4bd112b2329cbed5e7af81a7892a741a18da986936b117b7bdfeb53779c112647808cac1c3a5ac48d3dc1f67e3d7a4972

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
01c67ad92b81c8656cf19cf305593a56

SHA1
54f297533769e91ec27ca542c1797af0577abef2

SHA256
108d9ef13a2f5014bfc8ab1f68813676ba6105dd086b7fc62555c10ab3aa690f

SHA512
a22521411d3485165eb440492d94bc5ac24097793de7be4c3ab301372c87c9b568d441e8d45d70d0df2fe4aadeed0e70756536418d8ea2ead8751906de514298

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
5837081f761103593af8319c06d5a375

SHA1
48e4cde489dab9b1908cdbf370f4d289bca54e26

SHA256
7239df3d4dbf8c0f378f7c6687ad24b16826c25eb0d01bc43297769726ea8630

SHA512
e8d7d5e02e3798e5e51ec0e566c2e5bdbe536017356733cd3a211b8b1b213b20494e775c8d1f224ac48ebe544ba5b53a94f885d91526109e89a4754702e5c0ce

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
51e43c01d12ec3d350a2ef883769f158

SHA1
1f8d1a3269460b43f5e12050f1f3318242dd671f

SHA256
32e6b2080ba5f7989983bef86b0d2d59ab834d1227f4db15b80b55d384cf0999

SHA512
95d406a4a6f7886c90ee5284c86a4bd052ca010c23ff33b0fe33b81989811f67351ddfeac8f00430c41c691be7cd08cf100b41d08ad34c853b5a57e567dff000

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
44834a92c2cb0ef3e019342c20bb7b9f

SHA1
f9e59d326be678ef4d4c07880c6c5911a54eba8d

SHA256
e55c59f029be8bba2bd6a26f9405c069dc52742c71d90535062b5556ebd6f014

SHA512
b358530eb087c3571390fb67893c519194f6b0d86a89e3ff72f9a7ec3647c241710aa049ae92d286fa205f3a30a2cfda7587dfa1525c6c535b3a76655375aae0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
915049e4e6ae7284534869edb614e711

SHA1
3f716d9bc1b837fcda9666feeaeb522452a93220

SHA256
639476fe3a8fd974c23ea475eaa995e8a238dfcfe0d72176e3bf867d4a363c2f

SHA512
e6b1a466b9d5c1ed8bbb8e8e95c87cf2ffea1efaffc8ce77538b93728941b6c025d9726914c6ac623c0a96ae07a3a55880b7e039dc0e888d7f298e78e2b4f439

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
cbf9912a12613f80ded840822d32f306

SHA1
3f5f360a1334a7e682dc2d93da329390dd955c08

SHA256
a813e0f0ebeddbc34b513755f1e4e55c516f0193e0cc97f0f3188edd1050ddf6

SHA512
d3defe55af706b7d5e2308a208b399f5ace9ea6e04bea0835dc5ec3e1a48fd1ab07b41533448892d49ff1e90842371151d0844eddb0140a77b1c6b3030ca81d8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
b900719077bcd049a2566386eefb5b50

SHA1
d7656a7d0d65f682c82deee2776f06057764b500

SHA256
1247e56e02d90f55cad02376ea4d1f95878eb07c288903bfe99d62f2df7fd577

SHA512
1291bb9d152be217e52939d9b8ce9643c5e4c817d695ad8331013080332962d7bca62cd910d8123a0f494dca7b85152ee8b2bec9a58bedd4870b4227ddc0b4b5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
d6062b6e19ae07cb4279a5e7d43dcb95

SHA1
5557f37015cc90ed14d1334d851c58a0aaf9ee91

SHA256
6edd074a9c7dca38294d295eda1c0f1867fecb08d680e450db3d3ff4a50f62a2

SHA512
6a6127329d818b8042671e4351d67054c25d8f794c4f33d0a9411c8974da46eab34ee5e0e7b37e89f5fb6692ad5d2c6b48d912933ac13f73d589b456e379ea5d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
34b26eb754500ac68628fd137829726f

SHA1
fe9f4151bc762e33166a3b41811d65678ed2630a

SHA256
e402c82849e56eaa8eaee51ec56a85ca51ade8132907b609eea495456f20ce70

SHA512
84ae39194d5d145121332c89afdf802883dea6c7171c134d003f8363e25af652ca37b6278ab0f7193e0a86da9933dc56b9d7dbf53129153404963b18e5bd0621

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
d3629b74fe93492e0d52b45a006c15e0

SHA1
49ae136937c817181a212bec78d6f451e2036dc2

SHA256
d4440a9d7d200500235fa8e55eb0d09b6263407945a6b6d28112cd84f9f650dc

SHA512
2366feadcf5fd4210f076c017e00897f5f1ded558dd52ae589fcbb7b8e683c245fd90f5d0f334efc8441bc791fda4ae0b9ab6beef0bcc315a335a66e9bff2313

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
f8e667a0b688d9f5df17a9eea4a2a10c

SHA1
58ca08f471cceb052cd4b6571a735a77541458b9

SHA256
29bc15ac942681f2d436e0c62f5c1eb12ee8b5a31adc8571a37ffd0b2159b151

SHA512
b0556a2c6bc68e7daff2d4362d6281983efde6c7d4df44d4dcc55abc5e1c563df328ea41b31ecff73ec0fb4a2c499e978f502a375b582fa3c7cc057511d8b1cb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
a711a77c958a74db20333c77a4798936

SHA1
9a3692cb35be6068d35f57c62e6f0f104621bb3d

SHA256
07ebcd0baf3f30ca7ac519c1517995da31216834b34285d98f690cdc22ab16f2

SHA512
05931581e6619410c7b385180dc04d1985b02b01d9eb21423dc56d8408884798afb42a16128bb3869f1d5261789d4bcdb2cea2f6ed87f545d9a9de0d47f72928

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
f9347ea8b00dac94fd6bd48432ec2d0a

SHA1
e70db9e917117973d759ef0fe87b944aa0c47a29

SHA256
b1b14d4c358a48f9ba97b364c969374baddf06b506fe6ef6e8221a6e3fb96cc5

SHA512
1cf63af37b5793c9202ff0fccfa34f1300e40a3e7ed285f9c0f48f5b94ffee9b5ec1c09655aeab4c8a28d8feaa5e37328a7c6e1f181228a285cd9401a0242af1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
c90a28312bf9def77782ab9a901d0815

SHA1
55f5c30a307264fcbd413107e51c372898630416

SHA256
abb28f188095a5a30fcb916e9121510ad24ca7c853ac0a7dd76f5a382ce6dde5

SHA512
1aaae75f0199561d76e8fcd8836b10577013cc269ffde20f264850d861ff5a10a978720615155a89c8453faba4a65ee685b585b87cd19b8f1085c03d226d45fb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
0bf3842ec95dafb94d7d7f6f7d8e2825

SHA1
fe002f5d15c2ef9147206f2b00573857dfaf0687

SHA256
7d6d1550a6c55c2a8fc7e7008c2fc7b9f5b8be4cbbb3cbd78e3e8c739c8594b6

SHA512
7e3bbe2bf7395874ad48eec12db9c7563532bb6f940fd4798c788d72f4e12492c024ecbd4c2831506d2f74396d685935cbcfcba9a574c806d4f23dfcf8dfc77c

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
3350302bd6bcb536ae0efdf687684d62

SHA1
6d36f3e969a36fa2ec50280c86313b513557cd1f

SHA256
1388e3db5796d71fb0cae8d572a87d741340cf9a16f641e4b094756d4234a4e0

SHA512
5532221cc07f2b09d00f9462e64edf8aca05139e0b08516c4965b0aa7334f19a9b58e9e97b88def4ea923cd4e782bd712cad45173e3243da5dc5467ff2837e84

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
282B

MD5
69a98ef655778f1cb3764a923acbae80

SHA1
22683321e95c9a631039d15fc49ac5d3e639ac54

SHA256
2ff127d5bc4c7333c8f522aa4b456684eca97c06d452bf7d00b6a99b49b11b0e

SHA512
610fc09f40124e1a74ff303ddd95ad5809679be9e0c381e5d367ecf8e1e137c3da188142de7a2c5fe2b1225e12482245f2b5c417d43d73618108bfb1c32a5ed2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif.block

Filesize
153B

MD5
b2207e72ff53b593d4b7546afeb612ae

SHA1
65e9d16b1b11ed90d4ca67919173c2d29232063e

SHA256
70c422b4d26501bbd12d9d0cbaba9afcae195c049064fe7598af1e3a6c91851f

SHA512
ed3eb43070ebd0e9f9c16711e425cad81cd28fd3279b9246a76776f9ac2d9c17206361987823c6c549fa38715414aef86460a69e820da586bbe76d57c7cf0658

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
6e79c24e71c8dd6109a05678023dabf5

SHA1
8f69c2997d20cec452c20ed0b025f790204e2843

SHA256
4a206d2868dd5abe0a35cff9811557e8755ca042e5fbc3c700a51568784b7d7b

SHA512
8c7c0a66afb24199fed9abd9de4209ea85afd9dd481644e835baa89adb379d862f5f651df28ff092918585a7da66ecfe03c2c2b919e8fb84033557833bbbebd5

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
239762a7359c36b742be1f521149a65c

SHA1
8b778d5ca329652480294072bed54788fc604e64

SHA256
b5be6067a2b12544536afb7b9912a2803380d1d8599679c8f09f3be634b90c08

SHA512
1a3bf1d0e76f4342f6ef1eed5e2c5203dda648bb12f16c742a1d3d74161acfa13c94cfd049b9bf3a21b59a01200766557e7574788946d9a786bc8be50e7f1364

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
720a5a0cc658e4b6daf0dc9ea9b82f88

SHA1
550ef1e2dc5119f081efd7faed320dd8a9096bfc

SHA256
1d8c27bfaa5d1ea51194ad1fd09dfdd6a50194735850778d8a7848f3a4b9be5b

SHA512
44d55629fafb92957fb7348a747fdfacd9ed9f3a6409dc1128664b7945731a9e3c15923aae0bb628b672fdb1eca59385e91ff4bf6ffa3ae51a9687142416c8c2

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
a7b14b82ca67fd3090ba5692b751a5cd

SHA1
3b35faf8c520dda89e2e04274ec59302f9abaaaa

SHA256
cd5009a0ce049deed2b4e655913e622ea971e97f1cc72671601428ed93f207cc

SHA512
29c2e25e80fc139db5b1d0d4232860a097233dc2f5a7cc5f105469e12b8c3f688ee176707445a6e75f8c9cad5d29ec09a1cd74ded7d3f4d2bb0cbc757c895d19

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
49c6c2ec77612cd1bc4e2d8c00e8e199

SHA1
74e2d73cadd335106920d3ceaee2ee7d5227f5bb

SHA256
06f95c592c40169dec1494d45a706a7ddfbd8efece3c82cea2e928afade0fcfc

SHA512
c264b911493d847777bdc1ab73621f75c6ea3f2109c65ec6575442689ae0ac79b328d638dac3347c5e9fcc0e53455e4f23793316b4a7b2de6933ccd9e5a56d91

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
e0aa0c974fd3e69ba4cb4059a1309091

SHA1
f554b385d1ae87a7f5bca187b6a447d226a2876a

SHA256
c14c570a3e34060f041dae21c7b871b187d711d6c341f98f016e2af6a6d82553

SHA512
472e98e78ae4ba8605e9a77e710a5fc58eceaadfe906581fe0ef2f491efb91b5026751dd3fd9a452142f71d71dc3581bfc6f490f8632883e49a7ed46f3018419

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
6012f9bce55e1495f2c48dc0e4c3221b

SHA1
79ea1996dea8c6ec6b565f654c38a8cc7056a9a5

SHA256
742a16692a2756825f8b39fef4691b1d425497db40147833c893e53eec86fed7

SHA512
05211035fd37cf10d11e3613fcaa3856c3e45dcb0023302aaa36b1233ad2b6dc9b26a577acece11562bd86a34da95b8e6026fc75ff1af6807e4affa5fa6da8ad

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
e178ec157029cfcd08eb81954bcab460

SHA1
897e83662dd5f8b37f3b9bb1b7cc2fff09f89758

SHA256
4c5426f92cb9d9e3a40786e7a8b278fafebb3c5e78ed4e34680074ff7906ebe1

SHA512
69aab8debf1d8e07208d718e45856319c9bb8f054ac5bd69e5a49df80196fe675de5d78e5d582862805bb91fe98812273cb59c56053f6a31aeed6d6967ac1092

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
970efd697505bb9625cd96f424662eb1

SHA1
6f1e7b22d8771d2c239dd15c7eedc43d8f92fb77

SHA256
67513ba2703697c5178aa39b92a835afb54db0b203f77e8777de1115abff8663

SHA512
8ef23c19ee8b98b55a415f083e98f7c141fdb68f22cffad8e667f80bce2d8b230be97f92a2021f36e893a1544b97919031428728c5697d09123a51466a0230e8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
e82cab0b5987321eb11d43305097ea60

SHA1
ae9fefc9b6092774267b82cc99a9111d830aca6d

SHA256
ce03dadf4aad5b88e3b378c89a535be45d58caef470d84d652eb5a14f10aa1b0

SHA512
192bdf51f409c213449d009eab278ec21f0e57a4c7e3ab8866ef1576d75b6513b7fa0cea719a2a11fe41e38a8c322cecb5892e6d9ffee86c35cf2e7980502d26

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
7c5b1d3d3ce558bb33f268591fdeb27e

SHA1
5c316ca6a6d8990828777df8510a785a7356950c

SHA256
171d5216b924a9614098a30971745852d607b21faa909240fa2020691f828b79

SHA512
b1caff1d78b33734d868bdeb257e274da15a6bc08e297186d9489dcaca1c22d2dee8867cc1af22d325677adc4120b372a8262dd30239d0927a6b81e469f763c4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
447320d405fdb57a845911e9230db16c

SHA1
30a63bf94231cc220eb037f13aef751acb21760b

SHA256
7aafb2a33c064e99bd50f31705e8a59f8dbade8535810e16ba42050ea19ddcb4

SHA512
16bb042d6051974897266fee320b1c3249e08aa03812fffa4cfd30bb121455f2f0189683daa89f58c9b1f08796533875faab3deb0ef5d11b21c84a8ee7456ee5

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
77856b95d44dbb0c5ed203fe9d762cb6

SHA1
bcf60bdf82fdcfaaef9ca922a844f083568ae813

SHA256
9593a21ef9a3e8baf38249ff3bf2ca31533b587c1531f90a4f50ac72192470a1

SHA512
049692b48de64461742f0a0f18c8012e6350fb4472a9b9dd9c16fa341ffbd5c14d6aec4902ef9b39bdaf5f5fb0158696e85f9b253e981737ee8b2075211a95c9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
9fa4eb964d8b8098d87e77c9591aa582

SHA1
314b5b419b583c5fc962763873f6853be9d9216d

SHA256
26d403716434074cb62ed489341b2c8a86c97b9e0dee06a45dd7c54080d70747

SHA512
a510d9c21db24cd0e33ebc1dd6ca765e34ef98a097af7b4e1c22a0b7ceee72ac5a36cc7d512dab32e086f24330afefe0632bd5aad5cd31ced3e7a8e95cf94153

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
0376dbb2384efad2342950b25d7c18ec

SHA1
3ab96b24de10f8809c7d6f151c6a609fe79521a4

SHA256
ccd5a7603a96f41570168c6a371fa8471d86d7be9d19574cfac934e2b3c57047

SHA512
f33f8d356b9aec98e9e44a9f19b032fe02bf6a581f1ebe14283cfadde49a4184fafeb463742119dd928732845f7be47fa8a37238c00095570be026b01a2f96cc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
6d7c011bfb6203cd9cf87052b400692a

SHA1
be18a2213922e6a74a3c701acf7de4850180bb0f

SHA256
29792fadd56c3446e61f63fce2f67ad382b03d4084fb606717d3775a498ea3b2

SHA512
57139454bb0c3648ef1a272fce7636069461b4f47f6e3b07608980fcdf691d5a475b7ea1cb58db48447535d69e4183a53cd77dcb292f8c89a15d6d464a9a2055

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
cea5b15c37b054fd868102d96c7df9e6

SHA1
eaf45890cee32125527fec7067e7490a094ac40c

SHA256
c95ad6ac3efb38448b798cb07aa90a3c03003029f5341ff8b932ebfe812d7260

SHA512
04bd5f4a7ac1b8b72a6a4d0aa4c6449c19db9bfcf3ae17ae8f42c6ff19cd6e4befcd5e1821f545f1e674f18ff498230c11009206346d11d57a7bf277e0b633b7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
8160b8c57af2734b7e8b52eea51f9b2d

SHA1
35312afd313fba14b715acf22b939588fb3cb7fe

SHA256
b31ae5914c60675187d3786ec86ae711a827ba535ba65ace3a3b896a125d0bd1

SHA512
9ff323c10d5b869167485e41f1e4c7e1b2aa389e2e0aa137135459656a0d19e167ecc85db0522d14cfda9326eabb4bae1f545900911ffb909ff19f46c11f84ef

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
61eaec04a30e2c49093af25f884988d8

SHA1
1a5137be48eed5579b4388b458eeb6e6965948a1

SHA256
26a40e9650c4c4b7382dea19de1515d56e786628df7e90835f8c4a998d2fdead

SHA512
3dd6d10996c8d335cc6f5c074ec2fc73a8c166bdc7a6942a32466bafb06e828dd69e36bd296749ce76bae201471242a51b9d2bb978956b4c3af8741886c2a6e6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
5d6d92ea3fde187a737ff1ccc131813c

SHA1
3fa30ec7ada4fb63e19e2bd68af58c0c616d902e

SHA256
d3d3db31f13b7385140b18272f08ce3f26bd94a00e915dd5094199cc6d216feb

SHA512
e4ed05bd56cc5a8b309379cfb3d08b2f192734184903d8c5d8177b8054a469da52fb9c931ed4c650b114a82ff28d25fce67a43c59363b00a70c2ab5f643cc18b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
09fdee960b4bd39743c5de1e370411df

SHA1
e1f0bee5391543b9ba8d7d30edf1d1651d1cfda9

SHA256
1a458b75f129366f528be77c316e1c5f01cbdabe25d4422dfed80bd3491fbbaf

SHA512
be2a6e70d3660fb6f31d7a2e94d1ea782c80643c83ec3878461721c7d716393c15eefdcfefd9c47f7d27758a20f04fe8cf6356478e47e1e086e76b9fa32a8692

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
769d66ad2b1320b256ce150e40022553

SHA1
12edd43078276f1f14f443eb5900b53f1fb1aff7

SHA256
e2a6f9cd8a556615db99a5b859c9f0ab9dd86fe1fa0730a3028c35eaecbd2a5c

SHA512
766fb307970730a32f30b2df10f8cd3d73fb9d760a89d9bcbe7007cf63317bc089f75f2eedeb5e1df1b17d7a9dc9c8b590602c1d7f6e255d617c18e9ad2149cd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
9a071e8f58c568665bcbd4e014c764a0

SHA1
78cae9a98d10a2e67d1fa3358c6f1ba8baa2675d

SHA256
254791502112be5953da72c8279751f40a1ff443025cd7ffbb065b8f8913f158

SHA512
e1e218e13fa47722bc8848e3d064afecf305b570faf4ba425a58b58d24647e240076b14edf3b5ec05abeedf5bb666719949cc12ad5635804acd76fab1129ac6b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
1e1468615537ba3a2a8666b5a0834b39

SHA1
29b2f63a1de52d600acc003ca2817c7a011a5e40

SHA256
b2adc1a98bf592df7b18e483902b9363755b8544e1bf6631f4c1dbb785d50279

SHA512
f6693b418450fca8a264e1d3bca01c71a515b2234b8a04d4846594d68455b4c448be975375a8ffdd26021882cb6d5b8ce43155f9b06a16c993ef9099c33b64f0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
6522d4f5a7b4ba957b09e42fc2cb0f0a

SHA1
5c926f5a435f8845e0ba74011fa3eb59e12e394c

SHA256
3f13788aca3fb8f125d12e7c745ff539fa51ca1a34b34a72217547b8372f8083

SHA512
47086e2b3b08242da80cc8ea67287a032ac995450027222930b3f00330f2d2faece5ae7e9025cb1e5e1810c65dff1c00cb79c49561dc9cae21ed59e57b1b10f0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
9328cad09a77cbaa39c1eb2b8ca21714

SHA1
743d0df533b417497781b4f05d9fde56786f6704

SHA256
2b832fee6021772b15c494377cf480930ffd774a3bba75972f3c32686aab0bc1

SHA512
8f28a9e92793890e4739d82464d8a3e7e9330a37ef03e2ace625084dbe2da5481fdf3b6246a9444ba83ea745f3a24364e413a4b14a041bcd7801a07b00ce1a47

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
b037c403126950d7a2cfa2659b278c09

SHA1
6134f5fbc6479aeedaaaea63e0caa562f8860339

SHA256
126a905ea31ed42bf095dc90517bd30e73ac149c6cb67d8505cdb39de861f0d0

SHA512
9610a8a66a3dc0c5a7ad6b7d82fb5d2f0eab3d673653663bc23f0afe63039fb110d70a79e18f98e6c2586e241806a45716f72007d5119936c86fdb69daa2f4b9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
3c489065c23e953dabc3e895051c0608

SHA1
336b2a03b423c5b3281513dcd39f7631dcd8af1d

SHA256
bc67ad5a6316f2fe1f25ddd4c19552cf5dfcf8aacfbaa989592bbbb52d54ac80

SHA512
9c9bf827cd701353ba7a023c632c17015d8d89d30d03b7ce1e2a5f7f806fb20d7dceeb7a80a3314688bcc55b894a2ba9ed41a8a2dfd4f69b9cddf9f449c37d07

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
314e5bb24b601e14cfaf2c4ca119b0d1

SHA1
ac6648cfa1f58fde7019977a2daa602c0ec3f0a9

SHA256
9c33fca03370543423a4be52fa2dccee12781f0721cad8976181bea7fb4b3b1d

SHA512
ef7d46cc74170852453fbf02700fa3bcd23f3e101651c17825315025b10e1e419fe4a464e60706805d086eeb1c83aadba75eca6b00387607ce3f550299d8695b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
f3fbf19eaa16e09acfdffc66f33803b7

SHA1
6f220902d00aeab15db1883329cd666359f54500

SHA256
0347ccc6bb895a518e80b690e558fed4418ef5904fcc1da698276a713a48a177

SHA512
fff9deed0176947739463d725467378a28f0861212291f4e47492596cd9f3b351403ff9117ccea226b87e6ec50fe4e0948e161cbc6bd1ec7f1a9af2a919a50c9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
6b594adff8baa03db0f7e9e0700bf36b

SHA1
fdc0805a7556b9912851fbd9ff6d71135081939f

SHA256
644e9465eef88d69db13e33c5477a008ffde769967f3221e4f6319e06d54ba19

SHA512
88144ea1678a561ff41789cfb18d074250c0bdabf364a0a71c861c663c58b9c0ab99992e1ff509c7c2c4a84f35640dd560a70ccf84a327f8449b3a731e871403

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
ff88e736bacd78555dbdc5bd857d8cc9

SHA1
0a415ad98b91c7838b91f8d50c046064f1474783

SHA256
6f88cc828ce93fe804a2784349c718adb6b9947bbb0ed4afcedc368d51c0f94f

SHA512
65a3b93fc6d1f583ecae2bc012b9ab9bb46789bc1fde53eaff2f4a8c2b64f773e8ae2de0152f4399489fe515e775a0fad97dbe0f79684b1e56ac8fd827f26b68

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
56eb044be2cbdaa44ebf94334c848876

SHA1
f7cf1241246b717964c8e0f5bb8d7ffb5fe8c293

SHA256
5c0bc8be9f49a09102113eaa2d7a13e01671fb512a7c9b288f6d7ec73920f204

SHA512
08d60e8d03788ea92319d84612f66e3e71c4ba6f1cc70361849d30f0a889e8f876f61529a9de5b8c602f4620a80eee55762f652d3a3532ffd0e3f38bee5d2478

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
c76d72bca4c323335f816ccda8a735c4

SHA1
d9a8bde99620c775e4af86143a7d74510c2dfc2b

SHA256
77f315739bd0b0b8189bcb95442c40d59c908b6de0bcaf361a217a9f639ba783

SHA512
7d0135464a619611c84393b7b2427ee4afd473d9e8651904b290cc1fc5d513789de6a23191f4648560782d71e133afd1a14b5da75c74d41ec581f077a0c8033a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
c9d6b39913b9458247d12c0a8915321a

SHA1
788eefb1740ab603004ad9d7e60922abb4cbd6bb

SHA256
600b9314ce0abe9c206bd6e1ba865127c48014d972eedd391bb0563f0931a023

SHA512
7e4a97074f12e1970a0dda4a92cdbe2c65814547f44abc0cf19e2b85ab083a277c835266bbfdefa5e92a81516a98e2c157aa006478df4e46ed2c865a04f2486e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
7bfa620b52a66e7180a0845005e3d170

SHA1
6a356d1c8d09fb3e70dd94a2dc28083a4c3bd7a9

SHA256
565577cb387314c71989ec0e33d9321abe5fbe79535e5109b1b63786c209c00f

SHA512
55151778528d17bc76f8880ab11c9b6c305116c2674318e322a175580caafa64d237f359ce80b90922b0e9aada5d68fe8aa361f8f27ee85d31c45e70a8815b7e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
c9c1e123a12aef84cbe51b2df166da4f

SHA1
788ec20a026cb5a0f015b4ef40e90d68466803af

SHA256
b76fff38b620d45950e50fb2533f1fefd1171d14a479ae500cff9674e133cb3b

SHA512
9de16564a8f8d8c097c6732002a556549b8e267f0f9596e9490446db59504cde0a328b3aaaed659a8ada4052e82e6b5ed7cd09c73dd1378e3ead7356f413c1df

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
e75ca03585fcf4d3aa84b3f273096e2e

SHA1
b299487bb9744137331a49f13b943c3f18dcec7c

SHA256
8774a12723075b9d39badf110eee724cdfb231586f9aff71e2498a0385f438cd

SHA512
6877d4882cebc75b360c5cbc08b2b9062b71188a8ae9d00a14eb4f73b1d2e74c7c75aacde869772a4ed18f755ee4bbc9593278c8a82ff44931ad90efd2ef98b7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
33be9ef91be7e55239ee6f798b493013

SHA1
6fd8f588e7fa063b7bbc0a081c7e82921b005bbd

SHA256
e913ae96961ff02a836c6ad26bc65ec53e929aeff79c7bfbf7fccb59034e1f6c

SHA512
610f45c66dce728ca993da4b55769534557d6d3487565715623108271c13f41f3e41f11e8db6769b0333727426061c0c00589da1341783c74de3cf189d522644

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
07c081bf0897e896bbf0291bc7e97c09

SHA1
152c6d495a125f907f13855db3ccbb1b67c6e6f6

SHA256
aefa35495ca70d5b9cdde569fa7889dfeee303c598cd2f4cc7984f763d35ba52

SHA512
4a2da1ea07775356b245152c4ceb28997ba1c39b17c095e4f15b14b100384078204796dae6065b5cbfaf65aca04f1c8a7fb198302bea1fc0635b793719052220

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
138ba422f76cb193a4e733f33d9cd6c5

SHA1
61977b614f9e7b3e98cfcadc0577458c536e4d85

SHA256
58a2a720da7359512b721a36ff5a894ed2c6a44e8bdc8e93ff8f0d5f7055d4da

SHA512
b3f6b2d6d7b20e50c18264175c92cbb95f1a2c69b0f4e33e5baaa02cbed498b18d6f574edb0cec9f0549fe1d98ecc7a7ab649a50ab144dce287e51392b24a496

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
7644b13553aac8ee4241f7ebdf268bc8

SHA1
727cfd08b6218f4a8b08161a91d1c372c798ad22

SHA256
d11cc415a03f415c4381c71cc894aa6ad5fc8baea560d3e1e4d360cc72281cd2

SHA512
17520869737698d60723a21948a173555f4f0cfc3b4eeaa289b2551b5a6f9775d9e67f339fd7d6cff1926b940b757ba59594a4a8908a648b2427e89fe59cb6db

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
5f293b3cb6db84f79b7dfa6adf903b38

SHA1
a73cb5fb6d87346e9aa79943b521781b88622cb0

SHA256
0441cb83c947d2243701042dace92c0a130c3fd2221da56f05dd30bc754b3c88

SHA512
e94eb142966e201c55d40bb27a3d15d46e3ec2537a6849a745525d86589ac01872ac8f971735acc4426a8b372e805b89c0d7407848ed0758f483f342df30f764

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656060295712.txt

Filesize
77KB

MD5
d11908977f7172e3ab5eee077c6b5ade

SHA1
86f1e7492cd0244b0860d8fb68ddd6578444352c

SHA256
e52a31a945f36aa3b47f0f5b2994c36ed8b2ca7b3b53fa17d411a492a106452b

SHA512
a372f98e18621d3a5d64fd6d26ad5adb97f2ecf33106c47cb184514b6db5f08607c50559c591b6bbc7b4105fe62bb8f82c31267d4943559986baef5316254ed7

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656525478361.txt

Filesize
47KB

MD5
80cfc2202a471b888500946f98a0eb6a

SHA1
0a6f657a7982f4f1c28ed5ccbaa46f4b3121cfc6

SHA256
9b839c512ef253f07def5feb9386b058adab93216c2988fc4a72bc4bcbd547b1

SHA512
ce0d288ef2714e4cba60b8a6e380551898f1cc5d06486c75dd14e9d540b80fb42b8b89824f2893f42ac0e5bc1caa32519adfc74517f044958240d9fcda85a670

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663169040966.txt

Filesize
63KB

MD5
196d42f91ff31ce292606e2a3b6453e2

SHA1
16feb5c8683e4bc0a863a8eb17f7d2a725b59694

SHA256
547595bae1c7df3153c105f4196b8992c6f1cafb8f0610dfd1b1ef5af5abd46b

SHA512
e0a57bf08a2b822da1df5462c599e54028e983cccd6d9ea6234a7e64033b17f34f0ef753b7fdc78b0e279345c9083773cd5dfc034700ee2446123dca13b0872d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665885684530.txt

Filesize
74KB

MD5
96b596dc99b7d3d98c9461443f371841

SHA1
4710d3f3b840c7073c613055c53d31a7b7c6f7e9

SHA256
416765629a546ece88cb30acf9919b59a2b9cb89a11e8d70f93bd9cfde00ba5f

SHA512
cf7be10a049f0c4cb8afab3f2872636cd89982475453fd40b120fde7afeedf2dd6c97bcc3c1cba9551442e18b3c769b6474b464d03d23c08b0e5f1c518cb641d

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
5c34a930eafb3184f2cb045ae3f310cf

SHA1
d69e41cce75b2af8ae607a8b878cd8c20f764bef

SHA256
dda8c42ccdc542f1099952c3bd2fedf023560430a95da25760dfdcc2b124b1fb

SHA512
e70b88124836cf62981889da2d4315b5a030ab61b06b44d78be8ffe410c88d9db8d99a40398825a0a6b83a6611fb8819b4d4148d68e25404648af356d2c0eb22

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
d7a01bf076c6d87836f890d35e27eb8d

SHA1
5d0d14700fd4e826b7fdfc1bf3fe5eb9ec384629

SHA256
5bd561f60c3d65ef163edce7d31c376a06594a59a606db9ca502e4d66d33ee89

SHA512
7be7cac94e31a57c5cf6b60db564fbe79ec009b0626ac6419b8acfd5363df0532ee58daffee9f12d2c56b0ee4aa6f05e83782eee3fc9569d22d67fedd12ba9be

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
e99cd4dc8c748696f216f0d06f0c8584

SHA1
b544f0598c64bf9fe86db07fded378e682839d2a

SHA256
e373577eee34db3414b103f0257c5d9cc545abbf64c34445d32b7082d3058fda

SHA512
dc67785eefbfe8c7726d3a0f1180591341461d0c690c2871c5da0e45007c8c16e8262845f0b024a1a82516c363f74db7d6ee7deb104b8bf364cb6e3c592c85b8

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
7a39da52559cf68041cc43671d425a73

SHA1
fdc8a23ee33975026a632c96c8020c626a4868d7

SHA256
f4b879f0a461197ba589896fd7e9c9f3c33b03306eb906d8730619b5af28ddbe

SHA512
e61843ab45a51826d8e457a746691dbd824cb8f5321799011945451bba947bb91829cbf5b3d4e8e158842c9677b48363a71916154149da749656ef4152c4b131

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
fc2ab923312c8d6cc21b686bdc24f95f

SHA1
27b958881d51e9d008976c3cf49f5a019f3ad5b9

SHA256
fd6c5c5512c13ee183c340bae62d8462ca6a061716ef8ec5e2d6422959509099

SHA512
a22f99df19057c4bd09679037dc3aead1af4cd60200acf7da8fd26f8b2e599148098b7aa75b011a4c08c21601dee6eafa915300f209662bf2b3378de39fff89b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
e57d0ccb65d4d69e35168103deec1abb

SHA1
114ccf1e7a82e118edb2ae0e33f9da500cab15ff

SHA256
441165ce0e713952fa7f92e7b3e7a139befb4af7909d14df314746982a116384

SHA512
b3e503a005e3914f643b07581e086c8be936b2f9374b5ced164ff829364689512c964afb8471669f19a79f58581c79da2ca828eb1153ef11b2a4da59db7042ba

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
75110233c18c90ee80fc3826796e9761

SHA1
2c1efcb9caa788e1ef8c1ff207f10bd7a35a71a1

SHA256
1fab2f11807aa4e5cbdeef6f31a3db0e56729314ac11774ac52c147635a041e9

SHA512
7ecd9ba909c0d75cdd123ef7f500ffaf6e169664805a602b483c55061ca198526a19c416ca7229a1352f6a115cfe54f93919ef35f19f13001744b5d41de86041

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
a20dfe1276c3f7a39631b663a68315e4

SHA1
6676e803cb755356e2f2341e31a00ebcdfdd1623

SHA256
2360c70641605e221ed8757ac1028facb4a6e3afd0faa222ba3a128c10452b82

SHA512
6dfee0fa1d4af1564efb43497ae47bf27ab4a4416e416c87d07dc79af00270a3f1b6ed713599bafed88d0e580925bee6d7a7ed9f2897baa8521bea0a68bb277a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
f41dfc747b06645a92b2845af6856492

SHA1
503a48344904dba6073b3ffb8e4f273b18113684

SHA256
8685a7a365d495ac447d7998060395fe8587da8ae96690ba736740d582ef2e8e

SHA512
25e3743a18b7ecbe439bd38c4d22f2cfe3fae86516b2eb9531c71319933504137afb22bd8d8b6cb4e5ea66e295dea7f66aad6cb5dab9d47336e6146e476fffb9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
339efb284fbf45dea86a994a3aa1be54

SHA1
5489718e260857e3690bfd477f94027e20ee0535

SHA256
a10a7b191982c470cc1910dbacb4c07e2e275a6e45abc8f41391c8052b302ee9

SHA512
3a77f0beebd4d45d4f6a35751f6a802b4050ffed691eea824db0f81df04af2dd270660c83cc7a5ce01437f31675ba018ec6e32ccec4f034291a32a2ec0195c6f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
26e9e7951fd645d2a7c8eab0caa0dda2

SHA1
c9bf7b6d36c2b4e7ced09d97a4b883031095c0a9

SHA256
f58ef88e5420430aafc1662e8362f3ce59541444cb41e512a21e55158373675d

SHA512
a3e1ebaed08e878d52c9a6366055256e637b8364585cb97d9d034591ef661b9fc83a08493b283bf658f2b7dce72c70e76ebdc356c4c3ea69801e52e22a2397c9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
ef2bbbf72d1dead6d13df18eda784ad2

SHA1
c68724083f8495f0af7d47b7cd366ca50f56574d

SHA256
18ac85ec42324d151fe244678ad5c655ac1e73ffcf44070bfc6cd0c6a9f1527f

SHA512
d3b66a7a418e6b43d2647ce969a00cc24cef6aa56adf2a28845b403573e402fa7b1102ca5f9f740c45eee9351514408cb3f4c5a30970f3a9a22b9fd077193f26

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
101a5996b94e53dae33b8e27736c7d49

SHA1
4d3e56661dd168a9024b8277ce2d4603b1307b8e

SHA256
883628b3e74b936ab056eeb69cf45372020930429438dd9b0ab249c12ba94ce8

SHA512
45783bd81cf15f5e83a8f08cb2b4f2941b7cb3c039520c72b458ef26336c19288090b673980963b5739840b84dbb5ce5374b6d65c6990890e5cffd0e424c46a0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
bf679f9e817f416ca66600e1ed0ab9c1

SHA1
85664308e55e115a1bda7427445267847fb96433

SHA256
6af7b1a51e8901b5c3303b3ff491ce2816267954c653bb441eaa6659884f00cb

SHA512
5848f3e86f22c83a1033964ff3a716edad8f150fcd4956c9f75c7ccfba861e1ceb309b1714f52e278fbb7f1dfa07e2e955929eb40f7586a720503e7bb268e63f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
a05d9a5d85f78cbaf56078b07d51e1f5

SHA1
7646c30fed9a2bbf14ad2ab5e567e783995edae2

SHA256
5a99c6920657d60b22564fea98be21137c662acaefd445450dd67393e641235f

SHA512
c5ca88fe425dc9f7620268917bb403d233219da8eea9f6ca8348686755b899dd96a1067be03779b9072d5ef76a73e194e46558faf3a679c8699fd8a09862bd54

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
889d75ac31b5f6746ced8f7b02313bc4

SHA1
26462b0f1c388bb7cd44de3b3cde9597dc91eebe

SHA256
267fc6bd06d19ae0f5d586c9c6ff38c964d6b55e79f19450e7946d2530cb21dc

SHA512
259fbad7f6c7dcbafec3d5434515236628c432a6abbad1f20b81d54367a000e18f0c437612822fd9c9f20c3e4b8aa942240263817119d3c38c0ad24224efd17d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
43c884ece180e97c2cc616615d14da55

SHA1
cc1aa285e9f70a0e9bdd6aeca6efaa30d63091d4

SHA256
c1e85dfac4cff7296f7c8384e8b548dfadca210ac6650f31a811bfd573b4c3b1

SHA512
a6709336b96a25db1293a1b38c645a31ddcdd5a612ac2c8d740c8680d4ed4f878049c04600e348cdc2a443a9dcd1e2d177105c74efc31b3fee5f07346fc858bf

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
dce26b3fcb37b8c344398299a3b1cac7

SHA1
51f3ae39ed7ace21dd5a2cbbcc920cb7e41e7e5a

SHA256
6ec29eb109f89f4c29df68223be41260e218abbd28dce81c55b8d1d077aad3ea

SHA512
98a0655d55ca7331389b2108dfb01f2738c7778762311c44368f003495d4ad8e250f9d8fda558985033f9409ece945673c9c4e12758d2725b07478f0c99ae18f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
980160c34d626afd18d8788cb366aa67

SHA1
4382ae750752a94bfe125a5b8229594301a8649f

SHA256
28bdcda755552a7667d319c76f48460968888027b7a4cd48967b76c0031cc002

SHA512
1d2da83946aff655734e6b16801288ce461b71fd362308d3424139bb5d9744dfe400c6cd86f4edbe532343d2958202d27795f9f1e751d510ca4d984c52eced7c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
90a95248decf63a9d3987a0f4292ca6c

SHA1
4863fe71152f342e88e50fd7d82b7f9481e52637

SHA256
e14f54de29eddcf148bb614bc5bc4f013c40709ec9ca5a14d0ff64fa1f606b14

SHA512
f734febf7ffa7100b6c814e205b95a1669c77736726ca1007509f6342b23e8449277f6df204c8b14f607a1a9f68abcfaf4ed4dd723c5108ccdf76ad40cca58a8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
7630493a3c4baf58c898272596374717

SHA1
064326bab7c98896456d8a46d9bb20213a11dada

SHA256
b91399b129913893ed81813fa5cc243d7b37aebbd8340f27768dec85049b5cae

SHA512
3671b2f139d6ccd7e72249413e32532bae2e91d90a3c0b62a30faeb9f1a89988c6e4470f9330ab4de027a41256c06911efbbf6ba218d77e22bc3c30d634c17bb

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
bc06613b60072f20b534e56c4de98c45

SHA1
0e5ae7f641e767572a191ad43a511e602a143907

SHA256
e49359512e33e7a8f22f63db73fafdc6bd6f252900f078ab642feda7200ca852

SHA512
0d3c0ce3cd73224537d24a3130899cb00ae3d03d061a629a7b6f7a69d9b5b6dbcf02aa01ec27b3d46e6bee45303c51d9e79207ca62ec3d0a3a2c994636fc88a3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
6ab43d8b21452ce6519f36bf56c6bcaf

SHA1
98925625a871a36f02ab5d227e35776d9f87bce4

SHA256
74c52360badb89346199edf20b7e559fa8cf6d72488c6fbd523cdbdb373d9765

SHA512
1d381a7f92ea7e8bb53d5740daa09d74fa2cc200a0c0eb68de2e442fd264a5fb2d953ab09ded1aae8231b0593ec9febcdf38487f038a469dc54e2dcc57e8dc82

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
bd6a9cf6debbc66da6413a0a46e192b5

SHA1
28b59f110c649cf52fac57200d854c8cb83ab482

SHA256
dc5d61e87575f884d9563cd2985e8da7358551c431802411d232af316fd6eaa0

SHA512
74bd5bbb5b7c11a6c177e634b6a7e47d834a73bca18f9f3f6fd096be4c6d5f6b27a47b2621078e2f8e27c4413844e03174b3bab40507e1ee03d2ae0cbc658ddf

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
5496bdf95db82dc8317774623bea7018

SHA1
448b49620d4af94ce94029888598be7b6c61df4b

SHA256
008305580f3151ce561e28b47b836149f4ea1c6462b7a9329677123dabc34121

SHA512
760914079158548cb84d9f7590441bc933df7d539f94b7a087cfb086bdeedf09a163f58c1d461b4c2cf9daed3aea949d8a2186c9b169ec39ffa87ca1786c1b43

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
80f645e8282d17d0a222bf109215bee7

SHA1
c5b9c5eaf2d483fb1913d48e743df623ac92cee5

SHA256
e9fc81e9507fc06523748101af5696710ab5040ba092dd03251ea25a103cccda

SHA512
a3015504539752c2e0324855c7b6f9dfcf6eac5d91e0cba6f8cf6a5045f45d987e9278d63f57c70b64bd31bcaa1a87bfed677384226972be68c330972708df3b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
4b8b38fbd64559b1f9470ab046c1456e

SHA1
9ba749a87b28061b0f86e31e9d4bb662914025a6

SHA256
9defe3b5633baf086dc2bf8a554372bf1e996c2659987ed13d46787493707607

SHA512
5d6efe1d7ee86d85161169eca8a60e65cf8382c418089ae218fcb50d629d5c2ba3d6d51fa53ed64ab1972235373372c13e6b5cbf47fa047f4f78ca1253f0f429

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
63711df61a696dc6d883e4da9f60356f

SHA1
279ce4016420c16942449f03afdf690e9062a3e4

SHA256
60d41dfa46c106ce9a23b1986b48f053f3c95d70d12f59d4b6a0f664e8aeaf23

SHA512
aee16c2ba8cad40f10c119c4bf14cff175d062f161b450870bc599d912cc8d43a1088f9f3e403e5a95940530c207c968a6d35e072a31185578174252d9b46f4e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
2321e6d6037621412a2272b730c64bdb

SHA1
082d0dbffac0541fb27c79bcf0cc74e30c403cd1

SHA256
f7d6e6297ef98efc80d04b3d5c1a387657f697097176d958003dab2e848f69cb

SHA512
6c31855b83ec1ecfa41c6a627cc0e2bd572eea97484d57c1eef9afe01d7afff1386993c08ae030d4fe01be232099e07e08eb7f39e3f833ba17437caeba56462e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
3c805d9c8cd30e00478aa6901c4061ce

SHA1
81ed7fd770ffd5b36f2f95242a25b5c90bee69b2

SHA256
cf4175d7e5f4eb2191f43fe8ab9b6232b33623072aa73e52b7065fcdba81f744

SHA512
112e7c51e9d991795adf97f6b5d3b8200f76bf18c60774bbcb310b48523288a82c81b597429002a0b4ce07ae1c40dad78866110fae65c65cae57994a9d0b76b0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
2ba3181927c461c2a60520c751ab645d

SHA1
848a56aaefad402e314d6612681c2f74546bf559

SHA256
7831052a3577253cf5e015b9d1b22aab47d024658cc374f11c8589cffd45558c

SHA512
d9708285ba24543b9c6919184d2ba13fbba0f5ab516a84dd7d6fc4c75854d46338233c04d8371b1d996624ad68158fe314e3e952666179fa664401b066a6ad83

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
798ae99de3d9563a555f534362c15e20

SHA1
efe025ef71313cd0b61aecae40c1ca7c9beace3f

SHA256
b6c2d5531cd433643b04e1ac65b7b3491a8b44626a2a45183d9786f129c7269d

SHA512
fd1422a44e148de330ef8cf7a6dd9bcfb3b95f54a8373910bfb3dadeab8009393ff2427a357bf73eb9e1652d4692953210c5f07c42aeebad6aa10ede70e48eba

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
91904acc8957d9dbb3048fcfad3d9a4f

SHA1
9f34d535f4e25100aeff65c1fd7675957d03d9fc

SHA256
213cacf3e15aa9035678a93c5602121dfa40717bff0ea2f5e149c1c355e77a30

SHA512
3894bc28e24cf89ec46ea08a219d4591220b51ec0d17e95aef9f68095ee1421b9aa09c1ba6b9ccaabf6247f92834686852bd82f8c16d0adc661aa1dbc1beda4e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
8e3ed1c13496acb7f6a6bc74a5d7acdc

SHA1
98665ffb65ad29863abf42a98c92ee94d57c7926

SHA256
c1ab6454041ef09f6154c491a44c1fdb99bd3f374c0ed10b9ee0a63cdc3c3949

SHA512
165f0a122c25f2e97693a2e130fbaf80f0e52b6963e751f63a8d079f43de44840729efc6dfb8307e83b0d3b13e93274223693cddcdba742f2a5925915b4c1686

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
a29e6b57f5e9c4ed3a2e84d574500847

SHA1
e13f60e3e8a32e666bcee8105d13bbfcdf607eab

SHA256
076665799d4a7a2dee609a58464357272e4d60cd5606bcc7aaa4ccad127216e0

SHA512
3dba63748dfac9498307a8faf5cb413754be14e5b8c78252ae2a1eee3126cc71f4016503b8ff4c33fad6ea8f02f2d0f6324f2eee4da689e65292f6af2830c03b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
85f4d6ec5f6db79f3da1bc00fa7d0ace

SHA1
95afa54265a740e88cb9716c8d013b5bee352686

SHA256
9d50690c52f9af80e258e356875cf1f05c7b3eee97fdab0d8771ebcb27f5d638

SHA512
6ffca6f45417556258a7ce77c3c1d62240fd32ae3e340ce3f14e90211b504673c76dac0d2beb4f9eda3066ff40561ef741033fc22f8c7ba29244d149f570e2f8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
2888af65a4d66ffe92401554e1758d22

SHA1
f5fc8a349eb4c38f3ce9422447dbeb1cd5c9754d

SHA256
f812195b8e718563104f280b7aafcafa7794f17d614a0f7c8486a2fbc6996c58

SHA512
3f703b93b746376078cade19b4b15ed3ccdf4d0d5bb91bb64cf00685b30afcd147b9b827bf85beababcb9439d86409b226a3abd87cc4502f7f829013ce6ca486

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
03b6c690dd0f40d4628bd6dfc017a638

SHA1
de25d9832a938a695c7eee49a1d05dace601cfda

SHA256
364ccb5c37079b9a0099e6531787bbd8b41be122bf831fec103ee4b8eb7eadc9

SHA512
4f8f135172cf45bbe204fca3fae857ba658f9eec877a73ebcbd34e99e42a21fd1aa9cbb7659df50f764e3d82bd9a8470e1b8d4edec8920d2cce7ada402511dbe

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
3592a5a40846ffc503eb709643210857

SHA1
beefeaebe87d65500ff7c24ef6fc776076471b56

SHA256
dd1e35505172718a4683754d71df921fc12b880d550b7ead3e47ca82ee3c0334

SHA512
44f163690a06e19a56ab745ec58fccbb22d703d4387a407c3135857b62e6a3151f13bb9dc442c498109237567293705a9880fa25553adb84baf8740e0862d2a7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
fc4de356f74bdc5e1a0ebdb6f1803ee9

SHA1
d4e7fd53a3948b1cb491d5399713d6cdd17f5571

SHA256
6d32c3dc082b7798ec5dddf032f43ff7b627472180de4b1be6475c9613953233

SHA512
42dc6630ae201eec4b4d69d78e999f323732c37ae9fc03cf0e83a2cc056203efd756229204eae991b54f4c09e00f6d365c09b5dcde280235a148325cfe6c74f2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
bf9a174ff226a294a8884f2fbda57df4

SHA1
9b32e227c6ca497d65b91bfc1b10efd9e3319ef6

SHA256
210b3b488b11ee453adc125f0c55d02476e32dec2f2c76213816256058a01dae

SHA512
0d26d3512c804f913bb238bed30ff8f3c0c4fa548db19027ac4ca5de5e676c87685a9dd87e5add1b717bb18f2f0bab4a96da9be57f51873b5ab4ae0de02603db

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
d2cb83b63c7b2a3e1f884bfd0b603308

SHA1
c3772baa642beca20c33fb53f88b94d6758b4186

SHA256
8c9482560c81f04ab9b8074858d61a0234a1e2bc919d9638f1f810b2053c3631

SHA512
c5e56e863127488cd511413e618053c35f4af3cb81032bc0fe0a22f28037585b4cf46993bca1d302945e05b99317b938632749a89806a6ae1c2ffe3281bb3303

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
96300f954993133ee17f9c56b8183bbe

SHA1
76bf60096af8c08851b86f6e7ae0f90f6a48dfc1

SHA256
c9aaa8e98751dff90a782d4834470e24b1d5fedc4c8f0b62224b0ed8a63dd22c

SHA512
fce0fedbcdcac2d19a4f14b0931b0d3d202510dc06dde926bd786a0b7a2eacb843827d2cea450d90d99e692fd86e2cee54c009222ea3bc9e933bcf291c6e5483

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
fb41344bbf0c6a8d875ee0bfd7d875b1

SHA1
9cd3dc30ac355d44f6d3633ab9d7d54b1ff79fa4

SHA256
c78219aa6a92e789ce28d201ce82a8d2fb8a28ce6800c022ed12332784e9dbb7

SHA512
151285f70b5a9e6935131ef9130f1fd924816a6617ad7bb9435ceb388d36620bdaf6ac3882f54388b25f6935eac577d83f146a98fe865551bf62dddd4a86664d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
905b1b1a8a7cff489dcf10f48f55cb65

SHA1
23e41db0ec40d25a72396c0f5ec274f72aba01a0

SHA256
646c614d7d456c9777dc34ef84464c261eacb5029a93c4e11b7568a45d282a19

SHA512
87420b2c5455b169466e8365566440d0debb19acc181b46c53e78cb920ccdfe5cb285bcf7731692977d653e647051d8b8180b6d448db35158b834e6bde21d139

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
b42d0f8e27730fb588179f8a26a8e3bc

SHA1
78a384805af18f4b23797ca853476997e233ff75

SHA256
053883af29f15c17bbe3f4bad330636b78b79adb6b74548bd8beb545b221307e

SHA512
0792ae5dde8ab83207fb2d77182ddad509458c73f60cf5adf4119d6c6ccd4ee6e5acb0262a6c2d966dab7c2c3c31ca62cfc153f6bdacc75a3d39ba24f87a4e84

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
eba937b7a736beb17baccfd32cd40e86

SHA1
3bcec5141621564b1fa61b093f1613719dff6ae0

SHA256
c496516ca89833f8a0ae9744b2bf578a20a6f040ba9d32e07554a017fca2a603

SHA512
2cf685ec5c8206b77db37299eda56e3614a7ab0bd1b6fd7fafeccb99b3b9340ea36e7bb39345358afc711d87527d7e7a5e45b86f968dba781cce8b66d6848e7b

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
715b1179328168ec6b2bdda3eea61bca

SHA1
cb7a163a84a2194c66ff21b5b65fcec7d3173640

SHA256
6779a2eed8260923f61b07ee2e57555fdfd36cae222668acf20411e74747969d

SHA512
a8fd63092cbd371f33149cdd697f2d8bdbda52384a76d1263be8d7fa3f11ee101d43d3597b1121dc4df6a0044e8495fc0c3410652e63b7dee0cfcfd95d050cd4

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
61494a584dd63259923a883b5d58a0bb

SHA1
169f915e0738808e13febcf5ff356b8bf9c3b50b

SHA256
baddeeffae4943e6ddc1b1155467422b70336ec268a5d23e4892b45731a5c316

SHA512
5bae7c87e060b66fcddcc7df90d52f980b572a169a7c38589de362e776d33bec17d7766877509d3903dd78e779e696909fe0bfa67f630e11841429f9f24509d6

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
a8acb0fb029a8b7f03f1cff7c353cb6e

SHA1
7a969553c01fd46828e4061d8e424e4f57f5f74d

SHA256
678e325d1631c12d9c7e8dbb6d02c5a850d9a01b90b6d1a8e350e3aae21c9076

SHA512
9f0fa019be0e82da26db2800e93f1b566fed3d8419b9eafd572101ad3ee379b695fbf9b9a55d555e73c983e888c39726a8faa3531fdc14d90f0c464523738f77

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
432600eab007ac43dea252b0c76d83b5

SHA1
710ba0373ede627e5fad99d9af1c10f36a54201f

SHA256
c2878f3f12492bfae8158cc6898e3fbc44ad5352e13513bbba0c27e6f748b07c

SHA512
e6312fd9d75d4e2d73cb6bdea177a888a8578f960845f49525860e33fcbfc617dacf16edef07ec133de56e8c21e65e5e3d00ea7264fcab352c50a7ca5f07cda9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads