Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/10/2024, 02:55

General

  • Target
    72072a90a1cf079579fca960616e4a5c_JaffaCakes118.exe
  • Size 21KB
  • Sample241024-dey1zstdlj
  • SHA256 bf171f2132965ee0db0a816140f150ff3175f9dfa0a7fc439cf95c43ac49fa36
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Renames multiple (6381) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Drivers directory 9 IoCs
  • Manipulates Digital Signatures 2 IoCs

    Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

  • Drops startup file 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops autorun.inf file 1 TTPs 2 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\72072a90a1cf079579fca960616e4a5c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\72072a90a1cf079579fca960616e4a5c_JaffaCakes118.exe"
    1⤵
    • Drops file in Drivers directory
    • Manipulates Digital Signatures
    • Drops startup file
    • Adds Run key to start application
    • Drops autorun.inf file
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:4212

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aic_file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
        • Size 50KB
        • SHA256 072ca3fa4e019b3161106c39489aa5a662a246db9732f35e49b401c3509bc41b
        • MD5 SHA1 SHA512 SSDEEP

        selection-actions.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
        • Size 1KB
        • SHA256 2a52f1533001cb785ddbb69bb504a9fbc97fb6c620e31d9a5416562bf3ceec34
        • MD5 SHA1 SHA512

        selection-actions2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
        • Size 3KB
        • SHA256 e993e041bbcdd750cd2012cec57cd51e5a76cc178932ef9bafddabcbf46e0110
        • MD5 SHA1 SHA512

        example_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
        • Size 683B
        • SHA256 86e2a3a7e9501bd5b589522889bf2fd7abc2ad337a8b7835467407db1f77c3eb
        • MD5 SHA1 SHA512

        example_icons2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
        • Size 1KB
        • SHA256 78dad5854bd8e4ac7556611d8a6aecb4d63bb7bd3f157b75b17030da1f3dc0a5
        • MD5 SHA1 SHA512

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
        • Size 445B
        • SHA256 4bb98f9af95b44e1e00e373ba10cc8a999399da52c423e75a9e46aaf43c18d0c
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
        • Size 611B
        • SHA256 86f1a1a4037e47a3a6dcce320018633611059271cb0a081ca071f041ef767c64
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
        • Size 388B
        • SHA256 b76ff1a6302e0f2c57a13cfb38c853017fa86e11ab951aaac24c6998942373a6
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
        • Size 552B
        • SHA256 b489774abd94dfb2d73c697800442c7ad86b64623f164a087c85b09f4ec16b10
        • MD5 SHA1 SHA512

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
        • Size 388B
        • SHA256 d43653b6fb1b7e6fa6d7c0255be53dc5df6be6083b03af859411b3867e7f04ef
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
        • Size 552B
        • SHA256 b3f3f41b1984cfa84ae8b5ea47561d84d8623208ac9a77fa25403d4b74a09a24
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
        • Size 388B
        • SHA256 75bb09249190b4248996649c80e603556ec6ae5a919216b0369190fe681f1154
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
        • Size 552B
        • SHA256 81311a6020364f1074c6c31888861c78a14a13095bece9dd543fa037fb6e0ebf
        • MD5 SHA1 SHA512

        icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
        • Size 7KB
        • SHA256 aa1fbb0eb23e14303c2c9b6f8957b26c4d34663601205c1c484514b8517a1ee9
        • MD5 SHA1 SHA512 SSDEEP

        icons_ie8.gif

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
        • Size 7KB
        • SHA256 1dea6e70f851b136626dd7228547b220f982da1ce4ca6720ccfac0d93b6bbe3a
        • MD5 SHA1 SHA512 SSDEEP

        icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
        • Size 15KB
        • SHA256 acfaa6a2c0f8682bf2d4357564ff10da7cf2e344d1fa01113a9bddaf0345c695
        • MD5 SHA1 SHA512 SSDEEP

        new_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
        • Size 8KB
        • SHA256 08bae49418799919b7cbcce0b11d4eadf5e38ee8341885712cd2822d9749127c
        • MD5 SHA1 SHA512 SSDEEP

        new_icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
        • Size 17KB
        • SHA256 b10993c20d9e29b90e21d136933b264528d6ef4ceb36b6e3b229ffce8139dfb7
        • MD5 SHA1 SHA512 SSDEEP

        bg_pattern_RHP.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
        • Size 179B
        • SHA256 0fc56e38b6e1eb2632aa7c4037dd3f07e93148584761b1230bce2f1c74d91e13
        • MD5 SHA1 SHA512

        bg_patterns_header.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
        • Size 703B
        • SHA256 1b602f9a7b9276c863662223f487f5dc26624c5dffe7c0ede39dd37d78d0c397
        • MD5 SHA1 SHA512

        illustrations.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
        • Size 8KB
        • SHA256 0a7212fcb350d4956608907a7a95714f182fa5b51b51741bb4b778bf64dd43a7
        • MD5 SHA1 SHA512 SSDEEP

        illustrations_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
        • Size 19KB
        • SHA256 f0d8e8d54acfac91959d7a8c312354e0fcff7c4d5324a2c6af8e18e4844acfff
        • MD5 SHA1 SHA512 SSDEEP

        faf_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
        • Size 6KB
        • SHA256 a2d4f970c220726f4e9dfec72c1bf170847e44c9060bce2e46ab161e27e0614b
        • MD5 SHA1 SHA512 SSDEEP

        bun.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
        • Size 2KB
        • SHA256 99970898144a971e82aa43ee318935133ea352f3c51393f8dedd3d29704879fc
        • MD5 SHA1 SHA512

        cstm_brand_preview.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
        • Size 2KB
        • SHA256 f7325b276ef7a6b3f112ea65d47d96c598b649d6f2652a26f739d55cbe72a1c9
        • MD5 SHA1 SHA512

        cstm_brand_preview2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
        • Size 4KB
        • SHA256 eeda34355d57152775565d00f9b296984ec964c3a6ad79a8757a95c8f2536e1a
        • MD5 SHA1 SHA512 SSDEEP

        dd_arrow_small.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
        • Size 289B
        • SHA256 b5dbedc826e528b074f495f818890e28654b476da7f3b723bd7c17e0e3ec9120
        • MD5 SHA1 SHA512

        dd_arrow_small2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
        • Size 385B
        • SHA256 3cbea64639037b3b7af1c0e37a0e7ee57f5630ee506cdf7ed14bb7de8c3669b3
        • MD5 SHA1 SHA512

        illustrations.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
        • Size 4KB
        • SHA256 02d88902ebdeeeccc1457b5d464a76bfd403291d51e5de48d0ea4785bb22d018
        • MD5 SHA1 SHA512 SSDEEP

        nub.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
        • Size 1003B
        • SHA256 d9f1553de01e45c02d75bc4e549ce5fc561b5dfcb940105589d0a2ea59960840
        • MD5 SHA1 SHA512

        share_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
        • Size 1KB
        • SHA256 7da5ab53cb9b2ba693dea6ef9e7ee65af5f42a01e98fb38e7863005b77e2da58
        • MD5 SHA1 SHA512

        share_icons2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
        • Size 2KB
        • SHA256 f275e25fea80f7fff78c5dbc1908d71d15190bf0c66626eb4e0fb0d098ad8bd8
        • MD5 SHA1 SHA512

        adc_logo.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
        • Size 3KB
        • SHA256 0c304789752e8afc69d00c345d3e369e86463fe6283b344f62677e7940b9e994
        • MD5 SHA1 SHA512

        adobe_spinner.gif

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
        • Size 556B
        • SHA256 3d23f9a6c9c44a1628a0221fad8e4f263b51a61f0c29a78e48607162d8b8cdf5
        • MD5 SHA1 SHA512

        logo_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
        • Size 6KB
        • SHA256 ac7fac5cd3148f3fe03f8e3c95700d532b49d2cd6c21483681e4f6e9fd5bbe74
        • MD5 SHA1 SHA512 SSDEEP

        sat_logo.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
        • Size 826B
        • SHA256 f8c53dd0b2911a9db04f4c6b16728794493a830d8e15673de8de6b2ce172abf7
        • MD5 SHA1 SHA512

        sat_logo_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
        • Size 1KB
        • SHA256 90016445b34dc435e84575924e8f768294ec02f24527450211b20f7ea5ecd172
        • MD5 SHA1 SHA512

        DisplayLanguageNames.en_GB_EURO.txt

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
        • Size 32KB
        • SHA256 fb0f017790ddca4304deaa9177db4abff7f6058fda9a2716d653de22f521cbae
        • MD5 SHA1 SHA512 SSDEEP

        ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

        • Path C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt
        • Size 181B
        • SHA256 b83e129ead7114bab33f15ddc0aa4939a588f120867304a95063adb8ae62ec88
        • MD5 SHA1 SHA512

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll
        • Size 558KB
        • SHA256 b16b282aabab4e246380c8bc91da1d1014d63854186898f196e6d57580a0f788
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
        • Size 95KB
        • SHA256 a79364603ceb4b7579b9b83c7906c0e4c9342179c314d65b21976f0b04f82f9f
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
        • Size 36KB
        • SHA256 8f60753cfe301539a7243290d3b1a4a3ba4e3700bc8c8cfa136c39eced51bb53
        • MD5 SHA1 SHA512 SSDEEP

        win32_MoveNoDrop32x32.gif

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif
        • Size 153B
        • SHA256 61304a304d3fd32aa781eb96691240fc5a49ae05cf9ec6f2e78fec13fd812a2d
        • MD5 SHA1 SHA512

        THIRDPARTYLICENSEREADME-JAVAFX.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
        • Size 190B
        • SHA256 7a5a6bf3681bd40426a944977cae62ef30fa12c163b66ed60d3f04d8a558b266
        • MD5 SHA1 SHA512

        THIRDPARTYLICENSEREADME.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
        • Size 190B
        • SHA256 aa111c364b8a729d259ed0a20fc62a857828eb7950cfc735d12a56b9284931c7
        • MD5 SHA1 SHA512

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 11KB
        • SHA256 7987fad20e750ebd9e5e60b9da0776ada4cbe06dd0ee2c7bb0592aeb95e45605
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 11KB
        • SHA256 f95508e702fee73877d67b8c65497fe010d235478f64df2ca1b8d3645025c5f2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 11KB
        • SHA256 4fcc3da9cc2eb20a784f4b07bb1db98e97f406746b6c5c379acf9c4f6b2e338a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 11KB
        • SHA256 8b9fbb648d05c1be2305fe2bbb3850a3005982289c3f27e357b7d678a391baa7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 11KB
        • SHA256 b23d2a0e71f8c2f71dd823d6037b0cd29698067d82b957a8704f00a754253910
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 14KB
        • SHA256 68f48342cbb206b03a96107e1519c8465fa1ee1518e9cbe3c5508c352146b344
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 c6cd23147fd416de055984cd6e6d6977d98cac6e699dd4db01b291afb8381fa5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 a7aec99e7b3fea24aff94e6e63d62e392f7044ec989f186db7856f5f9e65dd7a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 11KB
        • SHA256 8046154fb0ecc7b7aef7e157b0dafcafca7ee0a6e479fef9419d0b6d18a3975d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 11KB
        • SHA256 9abc629e17c37d192daae57394d0fb26a9ff427e1611b77d4025864dfa85c0e6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 11KB
        • SHA256 5e4935044bb923c51b1a8e1dc46b66e18ff12baa638cf49f1397fc5d10ea6c40
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 12KB
        • SHA256 eec08cb1de76426d66792b11b6ab36c688d6dc63758fbd64ed1c3fa7357c1989
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 1c18fdc645bc4592479d35c2f524a23600cb92af981b36e4d2b58dfd373e0867
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 11KB
        • SHA256 2c97a9d0525d0257545023546e711dbde3705b3b0a34bf9090ccef90b2fad7b4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 11KB
        • SHA256 71752f91719af1e75b5032ef62fd37436d847a745fccf80b88949717680333ff
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 12KB
        • SHA256 7f19b3049a7777c9f8fbae724200db3130ce83d5cb7490c3943e24a872fdd9b4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 13KB
        • SHA256 6dc56420767f26d7d94136677ea3ab8fee0455afd9907743693c00278465a860
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 05593a3d53255f02a7a946c4170102a21e12d26c3e1e4da292b045644b640470
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 11KB
        • SHA256 e70fc4f5611133ce73a3a2b59dfbcde8bea7695384b5719835cdff9d4ddf37bd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 11KB
        • SHA256 02e3164eef7a7f5b109ac86bee94f416830d2eb16f9bba5a309b5e549ff6de4e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 11KB
        • SHA256 7429cf08655aa09a1fd6d819b07189a5a25a1485d608a2a480cc41e58240bede
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 13KB
        • SHA256 42512323bea5d230b0eccae0e2b9648e99b20b51b0c7eb081e8fb3e84476caa8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 653daf2b246524b2d67c1a6e78a6b5ef67ce0361a8fe7891b0930ec74a2e9a3c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 12KB
        • SHA256 83007ced054fcaa02cb24fecea922220860b29409e0ec3652be0d2bead08bcd8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 bb6a20b1528c856c86e0360cf26b76034de2c0b2e825a22626ab1f2aaed7fe56
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 11KB
        • SHA256 3d77548a55c3cc1ad3b117469034730b5a83d424e8f8883dde535c5e81c2357e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 d95999726d7150a3f4a14b700747e406ff0bbbb6377db606db9bec7a6ec8ea49
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 311da3604d5953aea33ba8a021e874d758e7845c1f377ba53af572253b561e70
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 7537d0609366686c956274d05ee5601b59ca7dbde4acb51c6dfad166101fb652
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 83464e3cc379eadcfdafd9fe1343adf2b7a208842a8385d590a8c59832ec3eac
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 3022f629d88c1f0d1e57da715af012d693f7ef169b5154b4631c5e91db63adc3
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll.EnCiPhErEd

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll.EnCiPhErEd
        • Size 11KB
        • SHA256 0c601f54796f43f20655203a483564e47f6dd7371bc0de83026eaa1aa05b247f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 6af467029cdf57d20164f63fb447e1ab6cb15ff2b205d7e273533ce76de63465
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 19KB
        • SHA256 69e89c82a775c4e52b5cf0ffe6083b1f4a110f5f3315ce6e89d9d7fd1f95a177
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 62KB
        • SHA256 71aa291b3ae020d594a846fb95f0f076e05cc5238875b2d0a4d8c0ace8d2ad2e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 57e76ec5c4451eaf3c1e8574fbe617469e343057438c3ff00b11444b63cbb199
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 07b4368552173a8b7daaecbf3b8c2c75032c101b654ea836aebb904c3ad0d581
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 6d3ccd284deaad5dc358ea471c165b5a3259e43fb3d161b3f0edc8a3657e328d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 3a88a8a7c58d488a83105c5eded1202125e16c857019a4a9fd076aff810234d0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 aac036995bf1d5393e2b5ae4d6dd364043696883cab38f9f08472738a14fa0db
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 77c20e43c21b3a46ab0b9d8f92fa264335f16dad116f2df2faddc4395a1139c4
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll
        • Size 1011KB
        • SHA256 4dfc7a8b902e637be5f8ed0744c36e783af66ab4151624a2677fe9da4deade4e
        • MD5 SHA1 SHA512 SSDEEP

        directshow.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
        • Size 1KB
        • SHA256 2833781842575da4fcc58f58e207c848c6f1dd75522b3593fa286d26820dc6c3
        • MD5 SHA1 SHA512

        glib.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
        • Size 31KB
        • SHA256 58dd1933072c1b6c5c317697d076e254a024497e4db4eb70eb6c24ba3dfea771
        • MD5 SHA1 SHA512 SSDEEP

        gstreamer.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
        • Size 34KB
        • SHA256 82ad3747fe4e0a5e81e6a11cd874e1ad0b1ac6b92753d62bf7d2c78534e0506c
        • MD5 SHA1 SHA512 SSDEEP

        icu_web.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
        • Size 23KB
        • SHA256 d041047bc5aa00b51e85bf7611d4e5068176bc7f8155baeb0344727dd40705e2
        • MD5 SHA1 SHA512 SSDEEP

        jpeg_fx.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
        • Size 2KB
        • SHA256 82c290f554f6ab6897187062657307aa601b2634842d759bd693fb89ef7433f3
        • MD5 SHA1 SHA512

        libffi.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
        • Size 1KB
        • SHA256 2228a913e749a420b83a79c6fca1843d59f0f6881ba318baf8da2253f7d3f347
        • MD5 SHA1 SHA512

        libxml2.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
        • Size 3KB
        • SHA256 12364c0903fec30e5066c6979b21488ec3518ee5e0448f215bc3857833c20bdf
        • MD5 SHA1 SHA512

        libxslt.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
        • Size 2KB
        • SHA256 9dc7e834e1a155a4aeb83c68f7615e3f307be63cc94cc14783b82658faba9bd9
        • MD5 SHA1 SHA512

        mesa3d.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
        • Size 5KB
        • SHA256 fad2494871abaedb832e9286cd658f769afefc098c264ef087603420293a8f52
        • MD5 SHA1 SHA512 SSDEEP

        public_suffix.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
        • Size 17KB
        • SHA256 0aaa28e187c16b99dd773e3712f68399461e43cdfab407f77e8aa8b6a4fc8e93
        • MD5 SHA1 SHA512 SSDEEP

        webkit.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 af1528e2ff0072ea629b81a9fa0860b6d8fe9e175af2795e7e424dfcc4f7a424
        • MD5 SHA1 SHA512 SSDEEP

        asm.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
        • Size 1KB
        • SHA256 5419031075f9477087f4db15ba545b0e66d4a3c08a664aa82711f56efd09dc4f
        • MD5 SHA1 SHA512

        bcel.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
        • Size 10KB
        • SHA256 39e5ad6112ad94bb2991db1d0bbaaa35fa3abe77f58cfac3c04c3cd9de6bd8ee
        • MD5 SHA1 SHA512 SSDEEP

        cldr.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
        • Size 3KB
        • SHA256 5870907219575b63cbb0e114101c7622da812f162316a874f99002913292d054
        • MD5 SHA1 SHA512

        colorimaging.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
        • Size 162B
        • SHA256 21982486d4b10b2649c5e5a30d6bcbb3f6ff2c9052f297961ff34e67badcfbf1
        • MD5 SHA1 SHA512

        cryptix.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
        • Size 1KB
        • SHA256 8e99ea15be478940d32b2ab1caf2449e7b58a6fc990762dc3df641eb035f8458
        • MD5 SHA1 SHA512

        dom.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
        • Size 3KB
        • SHA256 eeb1bd5025bad29dec2c13260cfec79e90314f5a50f1e9a63eb09bbd566d5b07
        • MD5 SHA1 SHA512

        dynalink.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
        • Size 1KB
        • SHA256 67f85904f597b5fc9b85e059ffb998f6b76db6771562bb6eb8e9347630c8f021
        • MD5 SHA1 SHA512

        ecc.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
        • Size 28KB
        • SHA256 907b20aee202682e278d5f11fa62205ed9bbf90fe9d6e5b4572b7c6d22f61180
        • MD5 SHA1 SHA512 SSDEEP

        freebxml.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
        • Size 2KB
        • SHA256 5eb81a50d0052c1e1840786cb22e1b8535f928f4ae421c881787512455efdfc8
        • MD5 SHA1 SHA512

        giflib.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
        • Size 1KB
        • SHA256 e64a59915e06c8ee7005177b403dee6a32cd0324e31b1ab21b14523dc3f36c76
        • MD5 SHA1 SHA512

        icu.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
        • Size 2KB
        • SHA256 3f8c63ed27475178c8c42e284d2faa42c2f8130403b8a802fa5ed523aef99473
        • MD5 SHA1 SHA512

        jcup.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
        • Size 1KB
        • SHA256 5a0f1eead61bc6095ca2f4c92e3e0f99875f71ef632e420a84c6118c9d0c0d49
        • MD5 SHA1 SHA512

        joni.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
        • Size 1KB
        • SHA256 9d3f1de4eb4e02fed64d1653d37e76e1c35dac6ae764fef700a0220db4333ae1
        • MD5 SHA1 SHA512

        jopt-simple.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
        • Size 1KB
        • SHA256 61a9bb3d41ee74c5ba7e0c5b41f5f2c33f6bad6ee65eff263fc70730b08204a6
        • MD5 SHA1 SHA512

        jpeg.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
        • Size 3KB
        • SHA256 46372953cf0b03c9dfaaf7aa24376d37e2d70fbfd91bf9b054eefade0cf4b89a
        • MD5 SHA1 SHA512

        lcms.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
        • Size 2KB
        • SHA256 f9031064151f69a3b8a6a2aef43da4fced416c5df1ab103bfefbc5dbb298dd5c
        • MD5 SHA1 SHA512

        libpng.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
        • Size 6KB
        • SHA256 ba70c4016d37de4c65dbc0075200e956fecedca965897e790ced6de0958e8cf4
        • MD5 SHA1 SHA512 SSDEEP

        mesa3d.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
        • Size 5KB
        • SHA256 9eb8b5992434f3ee6ef4efc309e5215026b8af48d9c702aa8fcd189db69f21f1
        • MD5 SHA1 SHA512 SSDEEP

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 3KB
        • SHA256 58d4614f2f528eebf73fba34bb15e99a2dca4703bf0c6b06abd90b25bd19bd17
        • MD5 SHA1 SHA512

        pkcs11wrapper.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
        • Size 2KB
        • SHA256 9184cf37b0cf86327c2ad122ddb4364de688f4d120662f3c9c70c50f644dec7a
        • MD5 SHA1 SHA512

        relaxngcc.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
        • Size 2KB
        • SHA256 ab8053a24d7700c80eedd0b3f59e5f3a617622a6ce16c03b1e3329d0959f7803
        • MD5 SHA1 SHA512

        relaxngdatatype.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
        • Size 1KB
        • SHA256 9da92e14d3a85eda0c958ef1ec7abf2c1655e6bdace821f0ea3e54b985c5f8b4
        • MD5 SHA1 SHA512

        relaxngom.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
        • Size 1KB
        • SHA256 c6b63fd1283268a33c36995c1e8014abd465e52d195d223f85d9124f29cca7a6
        • MD5 SHA1 SHA512

        santuario.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
        • Size 11KB
        • SHA256 ba4be91a69f747f8e850acf75c019d90935a5b641b3915c41f05ad3f27a2dd2e
        • MD5 SHA1 SHA512 SSDEEP

        thaidict.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
        • Size 1KB
        • SHA256 2fbaccd501ec69df1a1601731e4aa9b589479c509fa5d77d3252e256e1cbcfbd
        • MD5 SHA1 SHA512

        unicode.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
        • Size 2KB
        • SHA256 14ac09d47168dfb79e083dfa74c2914b2c47988ea5176bfd6ede7754ca0f8179
        • MD5 SHA1 SHA512

        xalan.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
        • Size 11KB
        • SHA256 1f171a36fa40fad115fc187e0ffeacdbe5f983385efe8bcd77e8b480505cdb83
        • MD5 SHA1 SHA512 SSDEEP

        xerces.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
        • Size 11KB
        • SHA256 29c7fab2890c00f7f018b726995d87dea0f02e1ae72e84f27c361b3c4a21814a
        • MD5 SHA1 SHA512 SSDEEP

        xmlresolver.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 e4821912554d9858ebd6a0b878afa2d88ec8e81ec99850c49259a6cb3f6b535a
        • MD5 SHA1 SHA512 SSDEEP

        zlib.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
        • Size 1011B
        • SHA256 bcbf8b70c3ba15d1adc6be333a7777df2156b43bad0648562b96cc4d99014bd6
        • MD5 SHA1 SHA512

        zlibwapi.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll
        • Size 274KB
        • SHA256 f0ea7e36be7a26ff46b7de4757643a381d21c792bc244cc203d6926881b02150
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 ace8544b98ed35b06ff890a8da8026aef2788b5349d0290d2b450350c260108d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 99819c31706314b4512ee87536ea78f0ccf7bc99f76d6cd253efdce31a4f9f0e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 aa4b3c30d5e52dffcf1f20d315997e2f0bce80dba720e7fa22b68eb1154b6af9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 cb4202499dc3981606a7a885f6239b6ff58174c28e66689b0043323f2b7a91d9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 abecab77fee547ca2f0ba69b3050c4f1ca2716f73e8818784c0f3ae4bc590ec0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 baf2596f485ffe6d4ff3e228e0c02ccaa39b232965ad8d596ab99d8d7f4bd795
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll
        • Size 11KB
        • SHA256 dc6440d6281f328b892f58e5b203c648b6c3099aae47e64a543d6ffcbf9c0664
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 4d46c6d2c3ea3380a7783e4b43d076a809c05ee95f57e7242f83c9d5cfd7ec41
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 ff22946b3718308baf46e2848694969484975e8653d788f59c4e5dab43e11499
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 777d9de5b9b3cfd32881bf650e4412ee395c767fe9b0fe2d18df883625167a73
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 114fdc03d10b79a1a7daca7e573b865010f5452cd0aebd3e798507616edd2f42
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 d5d7c29c615dc82173f1b85031bfa2f9bb093900f4a65b46aba19f286c9e8889
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 8a27f2922896e5c2d4a47ba4333b284216e413564310be121516463e3d48836c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 54fc33ae440fa7522499941fcc939a275a4194e2abf80de78a7dbfb1bdfe8d76
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 c27f39525669b3863a7f1ad5ec03983da74f48eacff10530908f6ce861e56cab
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll
        • Size 69KB
        • SHA256 2f7692915024217f2508b1fcd38206b9f0d0f9f8abb0c6a13ce17bf956161184
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 4215958363a2eda1b1fb5a489d331c8677412e6e412472575a2afd39d385bc4d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 f0ec143b1f8bea6fa5dad714e6725b862f2ccd8a4f38d47c1dbf73e2fb268850
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 4ee3b7a4bdf15bfb5c53e5d214c2801be70103534f8a09d2770e0a5dc47d9caf
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 27bb209fdf2bd92cbc134717cae7dd450826b823a3c1ba40de127bd952f55ad4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 79e63264e1946b324abdbab2f5d3fcfba4d8914bcea66fbda89c50a9e2820dbe
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 195e2229c06888bbb7fe907e35bffe650db52e01f3ac3332a528a432412bc4f2
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\concrt140.dll
        • Size 324KB
        • SHA256 ac6e27b49965eab9b90b472bd32c8631e314c447f28a7d38318ebbc8133ff8a3
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll
        • Size 358KB
        • SHA256 8f377357e029c7e6b2dcf8a8d3ab6a19c15bdd201fb1898350eafbe304d19f87
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll
        • Size 5.6MB
        • SHA256 ba9f04cbcf2f7cc8efa073e1696120996cc42878e9d2251d18918f129367d398
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll
        • Size 644KB
        • SHA256 4f5a9877bc053929344beead9191f856a8c5bf0fbadfdd2e1266c1433f7bd500
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll
        • Size 613KB
        • SHA256 1539d24d3e78de8b6ba0d79f0e957f01a1a9627250a65242548051ddb14a8381
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll
        • Size 940KB
        • SHA256 2433085a788ed8117662411d5e9990ae51c1442d6dd3fd5b87ffea3f036a11a8
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vcruntime140.dll
        • Size 83KB
        • SHA256 64b9af7413b719b94507d6d3ef12d48f8fe811e877e2d62ea0af636a7f506718
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 1fece556f0190e3a3887bca67dbd305b4a2e85ffb19a49527df20e50f5e96d82
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 96414a77b436bf3ba5f513f42ca4af13ed2d5b6959a74a02e05228ad7f468ede
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll
        • Size 20KB
        • SHA256 809ac9e5d0840f8ba13d7c4681bf29b9090e2b5a5dde39e5c754b9370c3611b0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 18KB
        • SHA256 f5df742615e3cede7b4acf37bafc534b9611d97d2e7a52583b78aa69bff74e8e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll
        • Size 18KB
        • SHA256 cd5f5b43ef9346f1ea2e4ce0a5ff678704eee36d24c8289fe63e6ef5066f592d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 63ac91e43bc2446f90d6671a8956c4181e75dce09766c3f6d6831eb13c0fa148
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll
        • Size 11KB
        • SHA256 d28f18c0a27c1f837bd96e866140ab4367e0963befc5df841e458c6ef707492b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 94e6c89466a9ba2db9b9c4aa25504028973b3b129fb0bf508b98b6e6fdddc1ea
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 b1cffbf1fd11c4129bb58c15f27c69a8965198613546ef819ac31408836cb8bd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll
        • Size 18KB
        • SHA256 202d0e075211b3efbd9dee5171b43ac6468255f7b77fd21fa0fa4d649ea95e01
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 c82b676e16c0f2749b7b34ffa68eeb8dcb403be5bb2d5da037f0fb5455c19a67
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 8928761b4338bd26298819a677ab6122ed69c1af6d8cfc79f91c65b1c000f95d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll
        • Size 18KB
        • SHA256 2882a859b042a8ad5911e59ad7ca65de3ead5c1ab77e84a2d01cea2739738664
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll
        • Size 28KB
        • SHA256 10bab3e50ed6322d98e37e06ac0796118efeb738f97f9ca0d684d004a39b4f52
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 def8206ba4433cf26cab3a60380731e60e7a0a1c572be808be709300aea5f3d6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll
        • Size 71KB
        • SHA256 f74b9e329bbdf8d0675ed24904380339fc5b45e4666f4561d1bfed097d0adf48
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 f88c105a9f5011454ccc1ba70feaac2e315832b8bbb4045ada794204f5f9906a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 22KB
        • SHA256 01999c6141bd16f052d3f933102cda6d84c3d91f483644a9ff8525e90490ea66
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 7f157363a8b0cd3170b5710aa05fcee0fb285bfe8f5df29f3530c487bcd8ff82
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 cfae6f7c6844cc8186872d0a5866944f23e640dae19a33800cc96fd7754e29c6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll
        • Size 20KB
        • SHA256 29f3c25e50a42d61ba31b9eed4895722323446fd7f27d322ba76f671faf2245e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll
        • Size 18KB
        • SHA256 17cc1d21ab4ff303166db238942547f44c56a369136d4046361c31c202771045
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll
        • Size 244KB
        • SHA256 7e64aa63b08b484a361e7fcc4f138a5640a632c6a8083c356782c3635a362da4
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll
        • Size 4.8MB
        • SHA256 88525f48ae4dbf6a20a81043a2fb16d42a224bbb9f3cd52195e32a9ac321be53
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll
        • Size 444KB
        • SHA256 087ae88d42fcb0cd54f80f76fbb0e882e3e54cd6845c09e4331973cbe9346751
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll
        • Size 439KB
        • SHA256 328c9cd97a4a204a9cdc9f3d52af802572d65e32e95b4d1dc5bfe10fe62fcb03
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll
        • Size 946KB
        • SHA256 62da9816c6a92defaba7f27aee478bbbe3e42083980a7d202bcbcd8ebfb3e72c
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll
        • Size 879KB
        • SHA256 842d5869e9f3e82c8581cb1dfb65af846b02b9a19d4485d6be69d0318d2e22fd
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll
        • Size 263KB
        • SHA256 c826fd8521de4a8635ad95c0bfc15407656395bff0f88c446c35f1284c615a61
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll
        • Size 78KB
        • SHA256 ce52aa94d8dcb27261adfd2dcb6af19f045338c6b717e043036258587b060916
        • MD5 SHA1 SHA512 SSDEEP

        misc.exe

        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
        • Size 1014KB
        • SHA256 4ecef047da282b0aff8f5146189ad46d6a7b19abf609221190b530060d7e3c78
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 fda026e67372a0080631adc2434835aacdd91b71b68c7529cfa7bbc768067f0f
        • MD5 SHA1 SHA512 SSDEEP

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 a13ca8c9a4609cc47b909148bc9faed4a1e9eaa5f5c504d79653b359c40d4134
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll
        • Size 116KB
        • SHA256 0632ad6b50cd17eff1ba82b32bbdcab2268f2266ec5f9207cf908fb6c9d5c78f
        • MD5 SHA1 SHA512 SSDEEP

        AppCache133727656060295712.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656060295712.txt
        • Size 77KB
        • SHA256 7379adaceeaf9c74b7e051f0efccfa0386b4c781ea65626863634993731445a3
        • MD5 SHA1 SHA512 SSDEEP

        AppCache133727656525478361.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656525478361.txt
        • Size 47KB
        • SHA256 3845cb7e2c7bb23b4fc045e6cad7298b2468b578c90872fef23ad011b36a3f8c
        • MD5 SHA1 SHA512 SSDEEP

        AppCache133727663169040966.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663169040966.txt
        • Size 63KB
        • SHA256 6b7801627e9ce2e43c9999cd7f2b25a30b54fc41a1c2878ec3789d4380c99b3a
        • MD5 SHA1 SHA512 SSDEEP

        AppCache133727665885684530.txt

        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665885684530.txt
        • Size 74KB
        • SHA256 bb4d297b0cde30f20de09e1373ac0ab4c48ba02019e56c7867a7d012fd90eae2
        • MD5 SHA1 SHA512 SSDEEP

        File Explorer.lnk

        • Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk
        • Size 407B
        • SHA256 51f722f41741d4abb845a0c3c638ad157f557a4d67ab34b93acb7aeda0cf6f79
        • MD5 SHA1 SHA512

        ASPdotNET_logo.jpg

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
        • Size 21KB
        • SHA256 2abe992f82005d31dba0b6acb701699591d37676de930def56c10db4d727f136
        • MD5 SHA1 SHA512 SSDEEP

        HelpIcon_solid.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
        • Size 1KB
        • SHA256 647dd6deb188bb1687e7753cd2d59d9d1a7c7dfbbc360238124218967b6663b2
        • MD5 SHA1 SHA512

        alert_lrg.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif
        • Size 952B
        • SHA256 9ebad899a2d09e3d568a3cdd72bb406d9886f5cead19d861fa826f8006d4e900
        • MD5 SHA1 SHA512

        aspx_file.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif
        • Size 121B
        • SHA256 c008fb53ec9bcccb6b85dd66b55796c11782d2b9bcb495b76a31b8c6b7b5afa8
        • MD5 SHA1 SHA512

        branding_Full2.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif
        • Size 1KB
        • SHA256 ae914e4e409aa6713b575d5a6e0bc68211b88930f227367949fb69d56a965375
        • MD5 SHA1 SHA512

        darkBlue_GRAD.jpg

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
        • Size 8KB
        • SHA256 6923601dbef594c3620d496d4fe87c6baba237b6dc120dab1484fec18e7875e4
        • MD5 SHA1 SHA512 SSDEEP

        folder.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif
        • Size 914B
        • SHA256 782e1475824a8b97047a9574d8bbcbd41ca0fb0f55a3f0a8f2ae2d717deeb095
        • MD5 SHA1 SHA512

        gradient_onBlue.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif
        • Size 90B
        • SHA256 87c90a5d721669f108cf6d9bf885b7568e006825b407b8624fcf9a0fe0f7d9a6
        • MD5 SHA1 SHA512

        gradient_onWhite.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif
        • Size 90B
        • SHA256 4cc5414b1d976aaf9975a9a6110f89fdd9be6afcf0f1e4016646ffdd82128244
        • MD5 SHA1 SHA512

        headerGRADIENT_Tall.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
        • Size 328B
        • SHA256 1bdcc5c9230c6caa6caccebbec99799781bad1b02085eff30a4aa68645546566
        • MD5 SHA1 SHA512

        help.jpg

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
        • Size 1KB
        • SHA256 e7621e3b7376e8705b7648d88f44c92776fe46274e0bb007758dcacc82596811
        • MD5 SHA1 SHA512

        image1.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif
        • Size 162B
        • SHA256 92db3df798a0305dcaa5bcee7c0fa10b606015ed3eab8713d72f4b91f6d6250e
        • MD5 SHA1 SHA512

        image2.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif
        • Size 586B
        • SHA256 759c36a246c1d534bd7cc27add067f8c8baa3f15a702bab9f8dff2da86056372
        • MD5 SHA1 SHA512

        requiredBang.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif
        • Size 124B
        • SHA256 fecad4dc87e18602498c4654d69131cae767a565f69ef80a05d0ac753b7a3b17
        • MD5 SHA1 SHA512

        topGradRepeat.jpg

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
        • Size 8KB
        • SHA256 573c341525779dae6ad7bfa6fb6f815026a240a30bd9b55da06a6a0be013a9f0
        • MD5 SHA1 SHA512 SSDEEP

        yellowCORNER.gif

        • Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
        • Size 880B
        • SHA256 8966955b7e1ead2b929b7565dc27b4f9961eaf4467ad87417d13975fcf58a69f
        • MD5 SHA1 SHA512

        1 - Desktop.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
        • Size 1KB
        • SHA256 69d52efcdabf5784d70bb1315a9835e463ca37aef3512098ac297fd10c5d6c0c
        • MD5 SHA1 SHA512

        1 - Run.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk
        • Size 1KB
        • SHA256 8e53a7e03f1da2306e9d617d742645fc17ae2d813604a4f9851f34c6e65433ba
        • MD5 SHA1 SHA512

        2 - Search.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk
        • Size 1KB
        • SHA256 40f7ec06495857c1e13bdbc5fa5fbd0750ba827807fe3f2dbe20a2af98be7333
        • MD5 SHA1 SHA512

        3 - Windows Explorer.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
        • Size 1KB
        • SHA256 9f72c4e9d0c036cd9affae1967490445c917f0f7030ddb20aa6348061416f47a
        • MD5 SHA1 SHA512

        4 - Control Panel.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk
        • Size 1KB
        • SHA256 fe78da834463afd7aa356aaa98fa9ac40cbaca69300c53d58735b9d8c0975b04
        • MD5 SHA1 SHA512

        5 - Task Manager.lnk.EnCiPhErEd

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk.EnCiPhErEd
        • Size 1021B
        • SHA256 e1cfaf9c1bf22990f2a34a911e6486e002085a6b2a81cd25cefa53ca20c7036a
        • MD5 SHA1 SHA512

        01 - Command Prompt.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk
        • Size 1015B
        • SHA256 16db2c35fe0fa926d735c540ac4b59ebdc557058f624ece79fe0dd211fb79eb4
        • MD5 SHA1 SHA512

        01a - Windows PowerShell.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk
        • Size 1KB
        • SHA256 f9d72c3d8d2cc7070d2c5c0fe7b8a10d6276c3d32711e1cf2fd6563d57b53095
        • MD5 SHA1 SHA512

        02 - Command Prompt.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk
        • Size 1KB
        • SHA256 e3f4e945764e23aef290f55ccf0fd200a00bb714c0ee28e3ed1910b68acfa2b3
        • MD5 SHA1 SHA512

        02a - Windows PowerShell.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk
        • Size 1KB
        • SHA256 96535e861371c19ffa798a249493edb067d19451682a6860f6a730b49193ed69
        • MD5 SHA1 SHA512

        03 - Computer Management.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk
        • Size 1015B
        • SHA256 05d86c48fe305384b4d6e1120615f1455e7186b499dbda38611eb226cbb12208
        • MD5 SHA1 SHA512

        04 - Disk Management.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk
        • Size 1015B
        • SHA256 819a4ca2fd805346f8ab46ef20b0f59965bb80711c908038115f6282607e6593
        • MD5 SHA1 SHA512

        04-1 - NetworkStatus.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk
        • Size 1KB
        • SHA256 7a9eebf27bf0f0a3a2f67575d6b82a44e31a6cbbeb065169fb2a67114a6904fc
        • MD5 SHA1 SHA512

        05 - Device Manager.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk
        • Size 1KB
        • SHA256 24da08d84a700a878523e6a112af590cab5572b5e5488357f9462f28c883b9c8
        • MD5 SHA1 SHA512

        06 - SystemAbout.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
        • Size 1KB
        • SHA256 88dcd248613fdf00e9ac60b901aee234909bc9dec87cfacc31cbb42d8df12954
        • MD5 SHA1 SHA512

        07 - Event Viewer.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
        • Size 1015B
        • SHA256 b57eff397c3defbf7db7b90237eb0a557f6eb5216325a8cc38a52bbe1526f3bc
        • MD5 SHA1 SHA512

        08 - PowerAndSleep.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk
        • Size 1KB
        • SHA256 c76b9e2c914c026b878dc2722563bb22c2d65ba58ba8879bc2d748d372be24b4
        • MD5 SHA1 SHA512

        09 - Mobility Center.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
        • Size 1015B
        • SHA256 1fc921f48a0661360d6207b740500a8ff725af4777ce80190ab98085624805a3
        • MD5 SHA1 SHA512

        10 - AppsAndFeatures.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
        • Size 1KB
        • SHA256 91b6e6073d2039909c14b28c869075f64132a2c687624ec8fe2d00bf1656fa97
        • MD5 SHA1 SHA512

        Shows Desktop.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
        • Size 352B
        • SHA256 0921f6ed8efa80a1ae633166e924c4edaa0c3b0d7cc00d9739f701b5a531d4c3
        • MD5 SHA1 SHA512

        Window Switcher.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
        • Size 334B
        • SHA256 42a11a41f706b25af46a43b3aba7dc3ed55badf659bc29eacbbcb0d8b9143223
        • MD5 SHA1 SHA512

        Magnify.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk
        • Size 1KB
        • SHA256 bf06e6edbc828d5d332da218b5d9987ab6ac3da1cc5e52135adecbaa3ba13b31
        • MD5 SHA1 SHA512

        Narrator.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk
        • Size 1KB
        • SHA256 fdd0a781e7eaa85807627ed1ac40ce87bc670d1a33851793df15503f56daf8ad
        • MD5 SHA1 SHA512

        On-Screen Keyboard.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
        • Size 1KB
        • SHA256 377d4600be64b8c92e2ce30b285d04e6a0dfe71bd8daa1fb83764c762d84bd25
        • MD5 SHA1 SHA512

        Administrative Tools.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk
        • Size 1KB
        • SHA256 6af0e7e68ad8390ae45fb67a2bc881d8060bd0a8bc7471291d1ab77c58eba5bf
        • MD5 SHA1 SHA512

        Command Prompt.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk
        • Size 1KB
        • SHA256 e5e5f9b52fc44fc5b3e85c78ce4b76143dade7f453b2f586fd71c15865467bbf
        • MD5 SHA1 SHA512

        Control Panel.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk
        • Size 405B
        • SHA256 a261bacf7a2030344219fedbdea0a59c83456e27d9a2b9298101e4d3aa938a38
        • MD5 SHA1 SHA512

        Run.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
        • Size 409B
        • SHA256 a58035c206e42eaba10ebb176f8499ec9d9d2fa698effd6c26587ea96b4c9e69
        • MD5 SHA1 SHA512

        computer.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk
        • Size 335B
        • SHA256 84357f938f0ecf01222daf44c36d62a75a8f4ab3d414583d48f103a215c00c24
        • MD5 SHA1 SHA512

        Windows PowerShell (x86).lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk
        • Size 2KB
        • SHA256 a37d69dffc152b7d1c69c73a53f0030806d7b79e45e8dccc5a2f7b3150135489
        • MD5 SHA1 SHA512

        Windows PowerShell.lnk

        • Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
        • Size 2KB
        • SHA256 8d9a5adac08b40fd1506c3c77a963edae93852cec424c0684fca5553d3b70b10
        • MD5 SHA1 SHA512

        Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

        • Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
        • Size 296B
        • SHA256 054e7a602a83480f34f1af3e8936be2e2dc431b78f4aa68c6ebe821fe8abf095
        • MD5 SHA1 SHA512

        Square44x44Logo.targetsize-44_contrast-white.png

        • Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png
        • Size 276B
        • SHA256 8f1af9ae03d753f2f6e3715fab02d6bf6095144b64a59137af0c19b58ed5a33d
        • MD5 SHA1 SHA512

        Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

        • Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
        • Size 296B
        • SHA256 834954c89a419800bdb3ffcd1b4bd09623579270c38278295d70815e8f8b0cab
        • MD5 SHA1 SHA512

        Square44x44Logo.targetsize-44_contrast-white.png

        • Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png
        • Size 276B
        • SHA256 361e47cefc762826d956b55418597d1aa810f41adafcacad0952c4ade18b438c
        • MD5 SHA1 SHA512

        OneDrive.lnk

        • Path C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk
        • Size 1KB
        • SHA256 d566268d21e4b6ef46b04dc97750ac7867f185b4e2b5a2c24c5d1621009b6c32
        • MD5 SHA1 SHA512