Analysis
-
max time kernel
137s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-10-2024 13:12
Behavioral task
behavioral1
Sample
79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe
-
Size
12KB
-
MD5
79ccdcce117dc3dbe22d5a999ca8a6cc
-
SHA1
3f750fa10dc50b127de7ba592b792a25be4e9b5b
-
SHA256
e98182d44dc7ec4a154021757da3132769db318cf9d78f15fc06c92682f8a253
-
SHA512
795ed18d899fe7c3d4b20d4d8b24beb2ebcca88e3b8b3a8927391a8f4842cf8f8fefb6dfad5af23dc4548b710fb10c2edf414ac369f91177a6d693579cd790dc
-
SSDEEP
192:G/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMiFlZH:GebFNw4Pk1itKkpAjjI2YpdmiFlZH
Malware Config
Signatures
-
Renames multiple (2181) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Drivers directory 9 IoCs
description ioc Process File created C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3Mj8k14CbmFIV28.exe" 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\FileRepository\c_barcodescanner.inf_amd64_266a07997c075b30\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmaiwa3.inf_amd64_ff37da248ddd748a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\sl-SI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netxex64.inf_amd64_ede00b448bfe8099\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\amdsbs.inf_amd64_e2a1e49127fb17ef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_keyboard.inf_amd64_56ea9763e933f7c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_netservice.inf_amd64_9ab9cf10857f7349\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\rawsilo.inf_amd64_1cbfddc97a663ba6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\fi-FI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\networklist\icons\StockIcons\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\WindowsDeveloperLicense\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_multiportserial.inf_amd64_e92b6921fca885d5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmnttp.inf_amd64_527c415254a7e378\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\pmem.inf_amd64_acec109593aed940\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAny\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\migration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\Speech\Engines\TTS\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\buttonconverter.inf_amd64_73b807c3bed63b18\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_smartcard.inf_amd64_bf5afc5892966e30\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netbc63a.inf_amd64_7ba6c9cea77dd549\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\nulhprs8.inf_amd64_e65ae5a38cb839e5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\zh-CN\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmhayes.inf_amd64_055d85baabbda8f6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\xboxgip.inf_amd64_90ed6b3fdc759a5b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\F12\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_9c09bd1df352f065\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_extension.inf_amd64_7891c7d003f5e96b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_smrvolume.inf_amd64_1d430c5b72323a1c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_hfp_hf.inf_amd64_0c00f8f3a465c9a4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\bthlcpen.inf_amd64_a2917ed464cbbc93\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_usb.inf_amd64_17c270ca25f45542\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmwhql0.inf_amd64_db80a6e1be3a2d08\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\megasas35i.inf_amd64_4df7f6223ebcd28d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\prnge001.inf_amd64_1daeee8f3aa30fcb\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\ProcessSet\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmdp2.inf_amd64_6550f790ed88c7ba\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\pcmcia.inf_amd64_cb18bba4788e47f7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\scsidev.inf_amd64_55176c1890d480fe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\Keywords\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\wbem\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\Registration\MSFT_FileDirectoryConfiguration\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\acpipagr.inf_amd64_a3248d35e6aba0f3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\pnpxinternetgatewaydevices.inf_amd64_82b90e51473d48ea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\xboxgipsynthetic.inf_amd64_9aa94bcf077169a1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\acxhdaudiop.inf_amd64_78faaf2062860ce8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmaus.inf_amd64_f9b71b1d9c8643e2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmtdkj2.inf_amd64_46dd0342577f43cd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\wave.inf_amd64_8e8496aa33c0a7f6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\spp\tokens\legacy\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\BaseRegistration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\heat.inf_amd64_b73306c081719f1f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\windowstrustedrtproxy.inf_amd64_db5be14d5e02560f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-24_contrast-black.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarLargeTile.scale-125.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\SplashScreen.scale-200.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MusicStoreLogo.scale-200_contrast-white.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSplashLogo.scale-125.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailSmallTile.scale-150.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarLargeTile.scale-100.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-black\SmallTile.scale-100.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\TimerMedTile.contrast-black_scale-125.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_WorriedEye.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.targetsize-24_altform-unplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-60_contrast-black.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96_altform-unplated_devicefamily-colorfulunplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\VoiceRecorderSmallTile.contrast-black_scale-200.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Videos\SmartSelect\Magic_Select_crop_handles.mp4 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailBadge.scale-150.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarSmallTile.scale-400.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-256_altform-unplated_contrast-black.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_targetsize-60.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-40.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\video_offline_demo_page1.jpg 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\MedTile.scale-125.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailLargeTile.scale-100.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Car\RTL\contrast-black\MedTile.scale-100.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\de-de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\tr-tr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewCommentRTL.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\Windows Defender\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Lighting\Dark\Studio.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-36_altform-unplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example3.Diagnostics\1.1.1\Diagnostics\Simple\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-32_altform-unplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\EmptyCalendarSearch.scale-400.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailMediumTile.scale-150.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.scale-100_contrast-white.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\pdf.gif 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\cs-cz\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-gb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\fr-ma\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreBadgeLogo.scale-100.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.scale-100.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-20_altform-unplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-72_altform-unplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailSmallTile.scale-125.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxAccountsSplashLogo.scale-180.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\video_offline_demo_page2.jpg 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewComment.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Date.targetsize-32_contrast-black.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailSplashLogo.scale-200.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-gb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\root\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionLargeTile.scale-200.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-wdf-usermodelibrary_31bf3856ad364e35_10.0.19041.264_none_36cb004549e77b3b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-wlanpref_31bf3856ad364e35_10.0.19041.746_none_21db9747a231d9bf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..xinput1_4.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_e9c51066fc168b3e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..otmailapi.resources_31bf3856ad364e35_10.0.19041.1_en-us_5b2f3f1be82781bd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-updatepolicy_31bf3856ad364e35_10.0.19041.1288_none_dba5cbc97cd3305f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-m..-mdac-oledb-stub-sc_31bf3856ad364e35_10.0.19041.1_none_4b1b8abd5787b938\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ie-iexpress.resources_31bf3856ad364e35_11.0.19041.1_fr-fr_afeae0f22203a5ae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\ReadingListImage360x270.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-rpc-ns.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_6304dcf62a0a9982\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-activationmanager_31bf3856ad364e35_10.0.19041.1151_none_d3bbe3071f172827\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_rawsilo.inf.resources_31bf3856ad364e35_10.0.19041.1_it-it_2fbe928999c0a7a6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-i..p-support.resources_31bf3856ad364e35_11.0.19041.1_de-de_ea578808a17436fd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.Dtc.resources\v4.0_4.0.0.0_ja_b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..lservices-workspace_31bf3856ad364e35_10.0.19041.1_none_86e00dedf97c50cd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-r..onmanager.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_8690c4d5957cbd4e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..yn-router.resources_31bf3856ad364e35_10.0.19041.1_en-us_0949d7d49aa8d3db\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-r..ance-diag.resources_31bf3856ad364e35_10.0.19041.1_de-de_bbb387b44696ca3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_netvwifimp.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_00c9043a13ca2b48\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_wmbclass_wmc_union.inf.resources_31bf3856ad364e35_10.0.19041.1_it-it_41718fa77ce9e7c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_lsi_sas3i.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_a9a80d390049f398\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..eiver-api.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_11b5503eb7822e23\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_presentationframework.resources_31bf3856ad364e35_4.0.15805.0_fr-fr_daabd274781977bb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-srh.resources_31bf3856ad364e35_10.0.19041.1_en-us_2b99bfb5aa908cbb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-wmi-filter.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_1b28da3746b5dd0d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1266_none_777e4c5802d14c18\localAccount.html 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.906_ru-ru_6e67960b0e7433f2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_netfx4-web_hightrust_config_b03f5f7f11d50a3a_4.0.15805.0_none_bf40df7b1e70810f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_security-octagon-broker.resources_31bf3856ad364e35_10.0.19041.1_de-de_206b69af3098dc46\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..apc-layer.resources_31bf3856ad364e35_10.0.19041.1_es-es_7bb302b2e1814997\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-playtomanager_31bf3856ad364e35_10.0.19041.746_none_84b3b6e25b5864ed\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPSplashScreen.scale-200_contrast-white.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..ecounters.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_7e08359569a0096f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-directui.resources_31bf3856ad364e35_10.0.19041.1_de-de_7b2ca63a96624e7e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..itorservice-desktop_31bf3856ad364e35_10.0.19041.207_none_48b15a4570c94193\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-mediaplayer-mls_31bf3856ad364e35_10.0.19041.746_none_f2bb80e96980274b\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_10.0.19041.1_none_fb2c4e5f544f201d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_it_b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-network-qos-csp_31bf3856ad364e35_10.0.19041.546_none_362a5598c3e142b8\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..sioning-package-api_31bf3856ad364e35_10.0.19041.153_none_891009f459ecc1ae\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_10.0.19041.1_none_1f65f7473443d565\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-rasplap-mui.resources_31bf3856ad364e35_10.0.19041.1_de-de_a7b5c31ec805b04f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_dual_c_sbp2.inf_31bf3856ad364e35_10.0.19041.1_none_bf60c3724b13307a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..-platform.resources_31bf3856ad364e35_10.0.19041.1_en-us_e64aea1020416a83\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-fax-common.resources_31bf3856ad364e35_10.0.19041.117_en-us_27c971259566162b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-printing-fdprint_31bf3856ad364e35_10.0.19041.1_none_0e211e3b24a05820\background.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\msil_system.data.datasetextensions.resources_b77a5c561934e089_10.0.19041.1_fr-fr_df35d2df1c8e2a82\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\msil_system.web.resources_b03f5f7f11d50a3a_10.0.19041.1_it-it_f60ea1f4a233dd89\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-directx-direct3d12_31bf3856ad364e35_10.0.19041.1_none_affdefe4a16a7979\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\ImmersiveControlPanel\images\logo.scale-200_altform-unplated.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-u..lter-mgmt.resources_31bf3856ad364e35_10.0.19041.1_it-it_5c88da727525e6ee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-m..factory-handler-dll_31bf3856ad364e35_10.0.19041.1_none_c52db795a29f8366\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-errorreportingui_31bf3856ad364e35_10.0.19041.264_none_ac46cb7f60f8a602\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-lsa-msprivs_31bf3856ad364e35_10.0.19041.1_none_c209fe961ac36102\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SystemResources\Windows.UI.Shell\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-ui-search_31bf3856ad364e35_10.0.19041.746_none_d30a83ff81d13ba6\logo.contrast-black_scale-80.png 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-t..platform-input-wisp_31bf3856ad364e35_10.0.19041.1_none_91652ad0b089c75c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\ShellExperiences\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\SystemResources\Windows.UI.BlockedShutdown\pris\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-tapiservice.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_6b9733513e4c173f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-u..anagement.resources_31bf3856ad364e35_10.0.19041.1_it-it_47decc4393f438da\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-n..lperclass.resources_31bf3856ad364e35_10.0.19041.1_de-de_a08a082ece73469f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..shandlers-clipboard_31bf3856ad364e35_10.0.19041.746_none_9e7325ee31555ff3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-office-csp_31bf3856ad364e35_10.0.19041.1_none_735c6874d3056a0a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe -
Modifies registry class 10 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\ = "CRYPTED!" 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3Mj8k14CbmFIV28.exe,0" 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\shell\open\command 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\shell 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\shell\open 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3Mj8k14CbmFIV28.exe" 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YWOFEWMRQAYZQVA\DefaultIcon 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "YWOFEWMRQAYZQVA" 79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\79ccdcce117dc3dbe22d5a999ca8a6cc_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:1428
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Filesize50KB
MD5c2d5dad36478bdefe406ff1d71ad8cf4
SHA114288eb4244148adceb883efbbe26ed552eaa434
SHA256f8cdd3a5a07900c4b2db939064e2d1e308ade5f7ee7812c56b7bdd9625e4a5e9
SHA512d361136173f8560bed473cc10116f32336471211d10ec316a7c06e160129eea957d982841750570fc8466b762a3744e58c6ba7812a1170add343ef2ff524b670
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Filesize1KB
MD52bffe5f5492fc1237a13c34ebe2d3ac2
SHA133f4a25b6034b5c53cf6bbdccad649fe2c8755f1
SHA25604e711d7feeb0795af83702fa04017f6783b8d1f1b61ec97a97262eb8daab97c
SHA5128e0e972a57460c607770718e65cb047dd56425206de84832f8678f1184742fadcb6ceeaeeede2e2843cb44c84651b4e7333eb905409148d5822e602d3b0a8c83
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Filesize3KB
MD56dae070bf3c12038328ec0d0b4ef8f66
SHA174cc8cab7b16a72eb445120d7235eba2348d5d22
SHA256090f5df55c65f92d062f614f36843a27c31d47e19660f1534cc891469d1ce1d0
SHA5124f4ba2a2b434bd4910d94a84e6abc976ea6b6fa6d1b2d21beadf50f763ebdb5775c8926187ffa0ed2125db7fd6f249a160df5d35525129b055172ea1cb9d9406
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Filesize683B
MD5feacff524b06ff82156a4e92e2eb75b1
SHA1f0f3cc59f3fec65c9f89923e067133a4ffdaa37d
SHA256acd1ba0db2689e7a212565dcd45add9ee9d26b70a2b18ea5f0d38810a8c22be3
SHA51294b3089e4a722039ec88d7d225feaa7ecb533388da5b7a67205b543451ba5e40613924f44d15d6ebcd510cd4787113ab0ed0c25dbe36967249b3f9bd43c8aa18
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Filesize1KB
MD51104e936a5a24231e93b26907d80d6d8
SHA19bce67a3b4c26fe3f1083f1dfcf9196c0267c807
SHA2565a3b007f8b03df36beeebcb4ac51a72b28075c2e2979af961b057955e4dcfe9a
SHA51227a36a15bebaa2608d71d3d850a4967075409b295fc4f1d90638da30398d00f62c4694aa6ef85fdf6de395f7fceea68cbe46a35d1859f1d4f547c4dfa047b541
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Filesize445B
MD534cb580fb83c0e2f60d2cc7449032304
SHA157b9414df6785664446a4ceef2d4be4816fcfd39
SHA2561167bfb18fee5ad4836b980b5b83ec4983b4599058b10d8790af74039f1be280
SHA512f5c558dbec90f20362f777bfed3b824aacf9c0e90d9e0ffda93ddda951bb2d4808c74c50e99617e9961328403b9ae08b95437f34f1cd106ba82a9418c263adf8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Filesize611B
MD5d27da213a7572a5eded6cd73c994e057
SHA12d3794e24eff9752bd9a52eac557c1d0dcf0e1bb
SHA256220fde1dd6ed6c4fa7db3aaadde2bf57c8727d82d7c9601596a6789c30c21f0f
SHA512f4089aa3039bc6185e8d7ddc2a17fd62b68d0b890e7a96a15d5e804a7c9586682a0123ca83fed49c82a34eae8c1671537a160faaf59366bd2a599dbdda75155a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Filesize388B
MD57cc0f43df2f2923392b4ae3a903953be
SHA112b1e2c8b7e7a12a335e40146338e32500f4d8e5
SHA25632c3b7801d806304bf4f8b4737eba0180a9dc80319a8e326dc4ba9ba0ca0e01b
SHA5129a9b2269de954ff978d448ab9a3b4173960cf9f879a85f966afd82a785c628ef307d2e4dc201b6fa91db0dfa6942f70ce433de313d27eb87af272d35a4aaf36b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Filesize552B
MD537fb38e51fa42592bce53882d98e0675
SHA1dcb515d4877a90d2a625a35adb124ea008924543
SHA256e034615a8f204358a8f3d044939eba5d5cc4b9bb3bff4f1df02eacfc161aa79a
SHA5127fc8135f097179628669edfee80e4b7ec357070181d3af1b7344491068db72a17c6ce12a5e13ea36b447cd55a2f31c50c148a587250e6e6d57cc8e6cd1ff6e8f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Filesize388B
MD5de42307aa3874f03112f5573b66ee5ee
SHA110e6924add7dac6eb81a01c1c37f701b8858f13d
SHA256d0e84743ab00fe88aaf6f8c6259a84f6d58cbca59bf15251c77420ab01e1ddaa
SHA5128c11891550e8ecba1329d638db2ffbd89c0991cac4dd141f907ade6f8daf4c828042c267efbff033ae9933ac5d3eb0ff06b428d2ff178686a6191c38280ab889
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Filesize552B
MD58384cdc5c9602149da13287cd5c032ba
SHA135b341cb54906f4dea379ca63726b90c6c85d081
SHA2561f648fcc3b93f88989c22c3a6e667e552a56d347b941d446be4382e1a5401220
SHA512f42834d4ff952f257ba5835c88bc4f3a339c5526347a8eb352323363c7be16b0cb91214d69df93b35a196469fd768a72f42348ca073502e50b14d5e5313c8968
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Filesize388B
MD5b813124fa1cb25f035b38da015d956aa
SHA1ba339972a6a1a4d48569fc5ff7417e547f7271db
SHA2560d5c5fc62a9110be0e8725bcd7f0a0d39070d1cb550dc667b2c43ed95416a4de
SHA512b6fb349b938d7c5fd68d38c98fc5bc19b0dccfd53610e5e4f5921f52444d367a80b69a8274494d09813be4d3085df9aaa4d5852d101e5a2c60ce7c462da5d05b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Filesize552B
MD5193b15f3c35940224486ae925c5f5b77
SHA1e2b73b2d2908544cfb1c70d73f5472d43fe812b4
SHA256c22183e718cc8ea8d16f407c1d56786c6c57425afd956bb5c249104e925f230b
SHA512d00b141cb10117c3a9bde0691124b5806b21147469e06953350a13e9ae529660acf097d02f7aa0e357b164cbe31c9dc478e212366aac745f71e672f6ea2f9f56
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Filesize7KB
MD5000ec1d06bfafe4c652b41f09815323b
SHA1f41ac468477e9601dfc98aeeffabe88285a4712e
SHA25618d439edc9b0b7350fdbe4e8fbceb41a15c7dc84a72b327e0f8454a73d2e982f
SHA5128a3ba719fe74a408c9afed9997c9b0a49278953264a3c63456741c153131ce5434e1d5ed69daee9c01f34edea667b5749da0bf528829d4d85095482b81feefa7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Filesize7KB
MD5545c76749b9981fb4261cf0545572cbf
SHA1c2ba8d42cbade936075f39f98718826e4fb61dd2
SHA256ace6ec0c18d50c8620156600f2aab0b17955c9ee00ebe5559dbd55893c39afc1
SHA512ca5a77fbc9703a7d307841569f7e350742566b868f19bb5e600168957d6669db8b1815b5126585aaa0401a1ff5caf84be7a89e2b0730245511cf9eace940be21
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Filesize15KB
MD575e9cd19cd44fd8c2eef985530788842
SHA18f83fed063615406c49678ed05d1cafdfde0d86c
SHA25622da22ae6645768782a00ed708f0377850c97a80da04d6683b24b77e02eaa5e3
SHA5122c1f87ebf4a560d44bfe8cd2c3dcb7d72729be53266365c30af4646e97a4d779905ff9240c5673bbee9182658bdf6c243c2801f7bc79922530b0161cbd02cb6d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Filesize8KB
MD562404ee15ca2c1c7f5a07fd5dd3220fd
SHA191530e03d1e92b38181bef6b5b094833e80fb508
SHA2563a7bc617bbc03c7a7fbd631ffe0cd04e22caddc2f19d8495762ddd14a5862b80
SHA51226d024c4393b5d774328c61efd48895b3216dfc8a259db881f8de645a4225c94ed01f7508670e34b841aa1c0c2f40aac6fda1cd58f912f98165aa40fa2c24009
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Filesize17KB
MD58a5829ca9a4ea65445f2e7abbc08b177
SHA13a6d052cd446daf29fd9b3f73751c395f1a69715
SHA2561b55965d027134bd87070a174405451eb287c0f7ef5866bf9c87d4fa8a1b038b
SHA512532a501362ecfe94e47181a85cbd7983cdf099c6ec3c338a2341a0ae11a55b85107dcc3eb32a92d5ddd84bfb9bd62b126ebda74925f1b4b67be1f34f1ce471b3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Filesize179B
MD5abd4e6e569318863a4c4ca50b53005a7
SHA188702f4452d5ead992a6570e7dd828ed3cd36a4c
SHA2569d77762a44ada96054ae726c91cc72f487f5d4b287b134ac38acba85caf839ea
SHA512d4212010f98d1d8f77c4760add79d960dcddf8f555f9977733b0fbeaf3b7310c4b07fe69c5e8afe6a0a2aceb5c9f827e73394c52084235634a5503f3ffeab8a1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Filesize703B
MD543d129871dc5e33ca16aa8b4e699123a
SHA1fd03944f405070ba54045c8a5d0c266983d5c324
SHA25607ed0ea3d0fdb0bbab625c1bebac8c9e9c647fbfc6144eb7b41f2ece61b32dd8
SHA512089ed371345a61fe2486b3cc9ac4243aacad713b31323a5a5131eacf73c68960749d71395099dd616b782c37355b56c5ef9b4da11b4225e4f908e73d34260ba4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Filesize8KB
MD5a4e3df6efe78deb0d852e461983ed8ac
SHA147048c31b3fb71c14eb651976796fb0ed8d05a11
SHA256c3039f702cdd871d0da2929bcf1fdbf4c2a1ed3bc525817e02d1f937d715da28
SHA5121a5b2729855e01cb5b410fffc61842fc3597063dad337b5801ff6c593726701bea45f385ed190e9ec5b77d83d8db1b27ac5da9d9e70086ab56ca495e538d766e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Filesize19KB
MD53b51aa3ec60f40e4dc2c39422b28f4c9
SHA1341374683f83df827ad915aa1dcc0e62ac32df78
SHA2568becbed7764fe66247a1d0b7bb261985a54d5596a4ccef8ce2ecdad3121a3af4
SHA512b3fecc75bf319de6aecaa603f7d6f52439e62df3329ebee0d6624878bcaf7db5b0ffbf07308ba8d2d71720cc911ef9dda3a5e17954fd23a9613f7cf103753c8c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png.EnCiPhErEd
Filesize6KB
MD5c32678efd62da201c668c7fc2bed45d8
SHA188d85970b784afbb6ee6abb564538543817e2292
SHA256d1ba6eb94bc8bbf83b27df0f4282b113bc6bda276fb8b283cd99e0643e5b6d5d
SHA512ac9f75cefa790d14c53e154d154e8e8cfbe2073b5004965072c6bf16cc641c464823233ce8a57ae0c68a7031e911ec1d7b212ed4096bbee83d4b30d035147f51
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Filesize2KB
MD541a14675d19c1af4827ba484b963acff
SHA1083132fb8fb774c0e6efc25f1cfd7037c013f226
SHA25619fd94ce43f10b21d397e877512ef1d4545351fd7a847f38ae01d69c8d23e639
SHA512f0f45c58ccd8e94975b0fca6db9bd97a9da31c990e36af5fe9ca07694ba2f79121dd81060710f7fc70eb82eae92d327bfdc8b89d914cd52c7a49ad4eb97567ee
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Filesize2KB
MD52fcf647be2299b0277d60ab5e81bf1fd
SHA1b1df5cf877493f2532607789dae4af9b950a5e7e
SHA25634ee5c1f07d60335a3301890da381baa8adca00b931e07fb43150aa35b872e9f
SHA51278db061cff88a02fe904d7eef309745a208d776eac5c393ee0dcccf75079e5c8434292f3ee40754aace9b57839221842e1d99f3d56c4f5aac83de3af896d537c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Filesize4KB
MD5e0b416f90b4b0284cb5e570d0f40f312
SHA10a06bb19f8730a31ff933a59720e113fd7393104
SHA2568020cd7520c37357d3d21a59e5cda2a3ad1bb32931c56ff7b4ddef2aa91ef849
SHA51223218e7ea476804d1f0f0b4366aac505484aa2a8be4aa1cbbd95a65891ef6ba7c907a23400202d333b88f79c5f7fb7b1f832562e967001357241c4877e959b3b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Filesize289B
MD58b53585c1526026403c12ab54b25c7d9
SHA18598bfa28b4c10aafb94bd3944b787a723abfea9
SHA2567240016aac05f345044fba5830a8c84837e90b39c39f105e0159de66eac8c1d8
SHA5125bee421157358ae5dfa7e5794135c5d9a1abe823f69c209e9344afb7551921e5567e0649d22f4ba610583c5b04149963a53488314591036a5929c4e137c8da13
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Filesize385B
MD5800dfd3d58005061bb59a148c6e4f55d
SHA1630a892bc98cb038ad8fb277b3ae962761002af3
SHA2564353bf849f6e427fffb4cd74f4fba4254f71e805f0cc6db41d24801502f0a034
SHA51202dbaed91e03c24b5d2d452adc23326ee723b76865fb17236d2787fff0013843861ea045b2b92492fb90110bb4f4b9bd7458d16730a4b917eee2c08272a30d3e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Filesize4KB
MD5096de800e1b14ca4b9c279b706f4d1b0
SHA1acce52ede8c8927c954503bcacdf738a465ac05a
SHA256b0c4b483fc88417fbd0fb25b1596e47cd447ecabeb85b6c40ae4bc281d93a42c
SHA512e8775f7685a19e7d60c84ff3bf939b476bf7a1e3f54da426d717b9db94eb672475292d2bc38732487936edf5fc125f0ddb0c5b58dc40cf1b2f65d5bc7a459a79
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Filesize1003B
MD5ad3e76345fdf22d4200ada0cace27bb0
SHA18cb9007e4e6a824841ee6bf7bf646796b0324506
SHA2565a8d953c830bc0bacc6c50e5cce07d261505b36c1c96d642c083a69825b073c4
SHA512b05a8644547618d79fa426a16680df3cead48cb57d04040940ffb7407ebbf82084c812d24adb23d9e9759eee774dd0ccde165b180b238a8d40503d246fcf0173
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Filesize1KB
MD53c4b9812cfedeeb2b3db890caa8de5a0
SHA124f14f4537ebffeeadf22d01f4bdf78ad6ead05d
SHA256c45f1fcabb78b6e93dc4347f50e93815e373f7586ea90d5ba85b390d0c552ab2
SHA512b808e86c3bc383767ac3378b4c3735403e6664ae1c70443dfc8be8ff412d8f4277f972eed922f3051ad6c83054211e3ff9b27ddf00cdeaaecb4446cf85af1908
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Filesize2KB
MD59ce8083522cf54847e3dc00e054e250c
SHA1ed6ed042eef6a7e9e1988035287e2d5bcf6a556d
SHA2566c1f76dc23183c56fecb12bba2ea655878b56706d643cf7c78308b16737ccad0
SHA5121acf2c42d286acda63d51ac1905395081bdfdafc515f293cf42dfc3be01cb7233182ccb2978358f335c087e4a8bb623cb8351b9b71ac1a24faa2fee26316c616
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Filesize3KB
MD56bbf24086c7c6efd92e186a49da505a3
SHA1786ef3e396bad743b0de316f1a78cf7c0226f5bc
SHA2565985370c1bb7c2b99e79218f01890b7a5fef583df502e7cd0b851b0a98f941d4
SHA512b7193a0c25242c7e7672f389792dace03787b301e1dbd06d303c887d9ce501e5ccb7e842fb5b941439454b092f70cfcee429c340fbf99f70185926d65d0f7df8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Filesize556B
MD56913612bdbbe4fc1535ee557392c0bf1
SHA1c9004c2fe1a25e74afbe4301775f75def5c09199
SHA256f1fadbae542c67502889581e35a8a1b9d676d31f4dde21c5ebe0f974b5116f96
SHA5121ef64c2b18da9bebfba82504aabe6a80280ce4edc015fae2ef427fff4b8ecba10e98b41715123942f974aa839093f8d3f91f7a27b022e34e588c9a05b75bf9dc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Filesize6KB
MD528dff84d8c4aa269572236eb87a14f43
SHA15887c4ae131c6eec9f40bffb6b341d2c3a6846d5
SHA2564cfa0287b89073a686a8faee31786ae46511d9cafbbe7e8caf8c2a3d8a7f6ff7
SHA5125c79579c1903deb0c3fa9eba8304af576a6884df1f56155532ef65d6e650ce20fa8379acc4d4277bb7298fae24bd2db0344fba98cb5f9d3fd015f57f256f26dd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Filesize826B
MD5ecbf478d2c69147b070d386fe07b185a
SHA1afc77983ef0a8020901e854279c667f0e816f3fa
SHA256be91a510b9205a3113612940b3eb799e3be0e210baae235847f74a0a73f9bd66
SHA51269d3abb81af2b84637e0753d80f29a6147251f63577b582d898e63ad6dd61908365da13442637e6995ac3ff4ef48ffc0b80f34989ad3d9798c80907fe9835cc3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Filesize1KB
MD551d41abac88716738fa66e2e48cf8414
SHA1185f83183b1b14b18363d6f7b5f5fdf11d86c7a5
SHA256b253e554aaf6318ec2ec56694ecdbde701b83d83d2aa83b892b0e53298b2a7eb
SHA512ebac40ac1156b3ae9be153592dfb0cfabca5c9790887abd77b65e1a1fd72e2aaabfd9aa605d743a9a3f08f74823bb986eb4a3841965c887588fad7ad5adf698c
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize32KB
MD58246d9badbf957d4dbf66cd34e769772
SHA1120af3d311c3ff08d52bc7fbe6f309a44119d93c
SHA256b13e3954117dc0c4d5bf816acafbb193782c8c98a5a3d2828fb652aa5f2e3abd
SHA512ce5bd312db6a75f86138bcb81d04ab1f70a8dce9213c3836425652a94cdb7232739f2731b255f39b30636019da90c84d81cbd21e2161112c29017f0bcb9ca91e
-
Filesize
343B
MD51ae7de2b41041af2ffedc29f60e6e1c1
SHA163969a651dc2d2aec18aaff8c86acbbc3fb86b6b
SHA256534c8054977ffcd823939e2c00ae7f72a5b153fb564bb089ce4b20cf3af49d14
SHA512f3f47d138ce2ff2e0b6533f613a078beb1295459c20270ea8f31f8c4efb4ac063ee6a09852ccb4a03d450aa5c7aa89780cccad480f46521be70eceaa5b5cbcf8
-
Filesize
153B
MD559c648fe2cbfedd1140dedc3118ce680
SHA1b86c936102a9a2440961406ced685948841c3b35
SHA256fe59774e4ce28fc9bbd765319f2bcc577377b8812c28580a2556ea33cca13a8d
SHA5123e7fdbdde4cc89c18cc4ada839ba6f3c406cb8d6b284c43e3bb7add24709b4b4ccafdea709eeeb181ae754904879d5dd6b458733a1f0fcf5081befc8af5f8379
-
Filesize
190B
MD5e0f5ee53120ee8acc255b477169b9b94
SHA1c47679ad78f539153c78c1451b302a24ad737d87
SHA2562af128a3bd43acb8b1211ae743f79359f19874d7365c00309d0b9ee51f4c24a7
SHA5128f7d1769a3e4601806ad93acdb7f010f3fcdc1767a49cc0d0ad421f7693835a1c70c3f8f563b8113bfe3fc25c356d7447371ae56baf46da09c4a5b5cc8676a65
-
Filesize
190B
MD5c70cc924c44c2bf78c00d5caf30bd261
SHA10bab77c7fee6dfa795b722c5c442173c3f169819
SHA2566dd07c0f3f09c3565b1a22cd9987e5549cedf958b523d9dd337785f94c783396
SHA51219fb1ccbd5471e0e405fec0994b8f012d15b92c180b3344cbe562c22367c4422f08310cf59ee4e4a10c9ca1326d60085d94815d77811bce71e5bd698af1ab1a3
-
Filesize
1KB
MD55cbc976f3c776bd07782eab900061eb5
SHA1558c178fdcca40268a43d4df29461b8924c736e2
SHA256900e433d436e201735cffd9a2e4816a1aec00fd55a91c8ab0102dd70ae46ac2a
SHA512c719827fb9583bb49a463aecd204b3078d3be2a5e4886b1ff50b1d68ea50e6011cb29df705f3c7014a54a0938524164a36f214abb6833a7653cf2318f5631f41
-
Filesize
31KB
MD54d63af1d9341b8f7027ee9dfa0d2825c
SHA1c13de8f1d32c714670536fbae422d362e5cbfa9a
SHA256a70882db5350e5662832eca0130937f2ba4e95e1a56c638dab605e6ff16cc30b
SHA512c1d159cdccab1658c0ec099b2e459118ef820a7f31bb51f67b95779699f8086712e9708ecc38825b6d8f0f3f93e91dc54fd10b21ffbdda7f930918880200d112
-
Filesize
34KB
MD52540332888ba31fb7c128d1855f55e6c
SHA1ae7046a7fb90bac3621bcb5a4d88364f94dc414e
SHA256119f37b90b35f07ed9f635b92b16f1e9e3545c1af3fc29c8000db61dc756a414
SHA512cfa45da61a09f75d1d86f745e4b4f20ce4f312144e53f902add729bafd0c042014694782934034a699260092515f607ea88e9aa8637ea7b9a64ecf5fc13e43ce
-
Filesize
23KB
MD520d823f9321b5093e5a04d30f85fe37b
SHA18d560cf504cd5b6e421f0944cce3e66113dedf48
SHA256ea1d00a35ac45df18f03706ed68b48d826d36c0b26a84457c3b0e13ce4ca2c7a
SHA512aa894ff5ae2fc25a794939459dd68584068cd2ed3a5481d2425b1d88c89759d6ce967ce9e6e8ed7803fe955a21910bfcab5f5822f9a3521e6b1bfd492800b4b1
-
Filesize
2KB
MD57900261d9d32e40f91d00dcba4d755f7
SHA1ee54378cabb785c3ccd3f45f849de5aa1d23ee14
SHA2562f7390e32f007a650b402334e93b3f0f6b22a02fd7be02a1dd052cea30826dbe
SHA5124cc77fdd891020d7e2834ba74cf02fd8bfe33391aac22ae59c55817b50592b538c09247e61d8a9ea37a4d8429c0a31ce048d32ccef096917f45609d98d47a2e0
-
Filesize
1KB
MD5f4829ab6dbb6f01cc078cdb63553e0ca
SHA17c2dcc04874a5970319534076ea35780c8d6732a
SHA2564a682428e3dace505fc5136f46792fb3f630626b9818045e237398509ea45ba2
SHA512c54335a9b76d13ef53a693475ad4187860420082d0fbf530aa0561d9a7ed041a12edda449b7ee029ef101cd3c27a10edeaa4f3a758ede2615bff467fc414e75c
-
Filesize
3KB
MD569b73d77bf6ba82299346dc929bd8543
SHA19db5772943425bd4ed0c45c784ba1a79bc2f2e3f
SHA256cde6b008bf00966fd996b4403e64077604bade86c80d2c2de6496798fb532688
SHA512e59d3e03fafd35e533d22ae2bccea9c40cb442a7fe1b8c1212004de8daca2254b68f79d45f03b24aca3d4edd0c697949fcbd5c08068aaedfa2f9aea160d59199
-
Filesize
2KB
MD5165dd7b9bf2605cb6a6033675528bcaa
SHA158d9d9bba83e6facc6a14ce18270683c2b4e2099
SHA256bc78773dd94f45eae3521f28e90f2b5e4048049bf364532389d478f5eea90701
SHA512d9c8e9786d2012088264c324cbbf36c566005a6ffc285584e494f778468b669b6a941e7f31e86575503bec86675ff618bb5aaa6a918e95dbc5a16f17d1536df5
-
Filesize
5KB
MD5ad4eb5d79ab61c4f6900db9d459dec81
SHA130ddab2cd62a65699ba98a6b8de484123606a766
SHA256e399ccf8465d4336a18dd6c55da2fa6c87003c9aa96b18833a37f7a4ab24edaf
SHA5124d5412ab48900f9662e1fcd4a662d867b5445c96979f38d7dd99b9b25aecfc3fb3e7cdb68da2db935f927210acf7d3ef48a6577d7edfc2ccbb02fdba2ca1bde9
-
Filesize
17KB
MD51e669a07ed5127c8da405d8d08148241
SHA1460cd5f4a2d995515da7539d3f25ed494fada0bb
SHA25659a4720976bea23acced146b38450912636494226cc8eafa3cba05c44a507a7d
SHA5124c359cc6242818dd06dbf27f55c1b230ec2c058b2ca2829e581fba72c0561a954c9e5c43805c16ccec98cbc5b1957818bd79d1fb4569f0d49861b9da0a741fce
-
Filesize
320KB
MD562bdbc2ef0378e4efe8f7b74a7d58926
SHA179b5b1cde2f68c25b329203719155ddf09226af7
SHA25622945da0ec283253423bf4aa35b110d003e5f2419310ce9a9671e66ae87ad067
SHA51283c065785244290dc1f454cc84a0608b6c21192ea5de847d45601f6726c6bd0400bc4a14fa9cd7f4f35f6e676303b734ca373f4bfe0cda83a3104c3e71a0c68d
-
Filesize
1KB
MD5a26edd86b6f83c6354caf44cf14f33ae
SHA134e7863498ff0fabda55dc7f5c5cb67f7d245451
SHA256d6f47ea40f53c2a338e6c92b64c1c611bc79dcd97766bcaa4f54e718817abbaa
SHA512b5e5b77554aa4d1a43f32381d68afc73bf0a4130a1c301442f0c8173270ce661ba1ee8e5003e5eb7aaabb3a7968db3471f0e81b82b743ec6c7d397bf01156bd2
-
Filesize
10KB
MD5826bb17c5cade945cc34945778654888
SHA19e805eeb0502528075ce85887b764c0d292d8033
SHA2560d11f8dfb1a4fc3e60ca936cc2429e257975a8ced035ee3465645ce5960d9fbc
SHA51262776eff138cc5507ebd3bd0d1741c8b543cc844c716913d187c16f61de8327846ba69b518d2242a035051efc3e557412895a1cd133aca09eff3f497ff133546
-
Filesize
3KB
MD562924c72a197e5e80c988592893e132a
SHA10158b148f2a0f7722cb2fe1a56e7c42b0bd1ab66
SHA256b6868952ac5b269d6b1f04ab8eb7b4ed35771e0f2f446239e4df78b38b99ecae
SHA5121681dee5c3b9175161e73ba14e91a326e11f4b63cc8708c01a51f87c293c42e50bc008af8ecf69ac468b299459c8d69992d8c366be6062d3d800c0736bf8873f
-
Filesize
162B
MD5988b4c25b093548981a4448340506646
SHA141da2976f8d579e0c3899f3e10a4fb6ee5049a37
SHA2566f20d520ec0a428beed148eaff990dc28446927cbaf162cac582d120a0cfbbfd
SHA512e09a0237b96d82d363fccec0c429b72f5c04e7a6e2b9a04235479c25332eadf12173af22c95eed1242e00faeffab5c181ae7a1e3e42836f90e7c339a808baa2a
-
Filesize
1KB
MD53abf47e88c63441a49eb05c10db75c69
SHA1a5309b63361f61aa478a6370d7a9a862443a11f3
SHA256cb367705d8c142c33ffb2ddd23f70b7df329047ec21f4f03bb4329c48af12dbb
SHA51233f65640a42d578e80d83dce7ab5c9e3fbe3307557973f994d3a8b1ceee9540fd61ed54ee7a41f2690b43f7987329ceb835a512aaecd413a02393f3bb0894d04
-
Filesize
3KB
MD5bf1eef087179cf52b917733adad79c50
SHA124f4b6d790bea1f6ed57826fe2798f12f443be49
SHA256cf23a3b05d037fede3fe9a14488d2c3dababc86e1ca869ed1b1ab1740dc2bf31
SHA5125b3e796dbe63d1249f351507e8142a4c2c0c35d1b41fe9faab97df7459f3920913137cfa906318693e7e87e563d42a92ef409afbe8546ccd52f9b5020efaae69
-
Filesize
1KB
MD5190d4cb623396b53089a8091789f0263
SHA18726fbd84febf7e7572cafc3748b3555aa70de99
SHA256cd6e1c37ef1a10d743321c633d93647752db056f3b2f9b09ce66ef8e5253e1ca
SHA512a254f744119efc912245362dd4db02deb4e5248c650b6d63f6097d90fb464734ee2f00f5dda157df794d359152a5283545c3f7273b89952236ec3c8b0dfe9e51
-
Filesize
28KB
MD509e10a5b86e810e53e43cfd23e51f266
SHA1c78c46fe9c62d8364efac1adef1fdf4852b8364d
SHA2569c555d2cdece445cb81e8428b92923226fe4355ee06a52f9725b507c55d7b07a
SHA5126490b6cbf00ab7aa69bb65aa048f726093e0b60c54c6cae6fc3d8b0a8cd0e8c018b50d535404435c5eb0ced9695aae315881d80fcf01066f2b7370efcaa498c0
-
Filesize
2KB
MD57d2e45579199edacf5fb5f6015132744
SHA108ee6393b4ab3ba85b9a8b6372fb22127bc9489e
SHA256abd7ee7c2a97d94435a906ce84246694fac1da20b085f5700c12081f88075d46
SHA51235c2d7b6e10b3e35b22b3c777df81f32c1d66315538654a03f03c16706daeaf8f3261c4e2d01dc2774fef8db652f4ca1b4f25c47d7d82f33ee5bac6b10264d93
-
Filesize
1KB
MD5f814fdc3d32f86fe4891020da27d0f67
SHA15c03eb27f1c18872a002d0c13eeb08f709a88f53
SHA256ef4c34e13a28c4ac17af99d70e6d196a091352f731350dfa673a60464d6ba215
SHA51226e5d5e1a489c9ff611a43036a82b9131748dcdbf0124c86fed5bdef5fa975349192c589bf3422fe441a371ca8635db4ac6fce1eca937d63ed82b2069ccf76e9
-
Filesize
2KB
MD5940c330162490789beb579fc7e933daf
SHA16b6d56331725edc4c2d736b18c557095ee64c192
SHA256b1b77e7bcdb7892b0fcff6d2f1114de696c178a1fda7cdc0a17e6c0b623ad8f3
SHA512c33b75a9129d3307a938116c1ad391323e988dd9b355f8af05b3a484aae95896f397fe48d33ef5d711bafa19a07dfe156ad02a1f56715792fb4f42f0a44a1f44
-
Filesize
1KB
MD5538c65e1499145038f0960c6bba8eaa6
SHA127f3bf68d6c88b3b0a70cfabd4651af9396f55c2
SHA2568945d18f173b0c89b58a7113bd9547dfd4860203599943a6e735f8e35b705f1d
SHA5127ba40f31551406744949f3831484f599ea84cf863bb6a68ca4a8fe894111941bad3b116d7f005c92b3ea7380a4373ef12dffb030fb76b9ca30551ce08e4a11f5
-
Filesize
1KB
MD54edf2b87f8f7754b69b8cf7ee8d92f02
SHA11a35f46316cbf5dfd8b3a44ed003b784b93af621
SHA25639943863af1f4c42dde6c56ab5c39393df45b66705c9c8e458ab0bfa16f52feb
SHA51243681233a0ea8131e40b2d4c99c0b3312afa23561dbaee971bc85989665e5194266f633f22887d4b4895f40cbfa23f0a405b92cccb86daac271aba846d7bf47e
-
Filesize
1KB
MD5cee331d6be0e7df0bba253c013d1a1a7
SHA1509fa6a8f0a50711a27c6df71b359a122d947571
SHA25618f5b4ff443cd0738eca24c447ff0867278ed9919984e716fe7b1d5ad6d8dd07
SHA51217c08d33d84d461d31db167f36585487d9ebb58380007fbfcf9c9d072ffca22459f9aeed50fe9c88068a885fb704454db28253bfccde0d40f7c49eb43ecb3af3
-
Filesize
3KB
MD579e3c7d351f03aac12cfb2dc977d60a0
SHA1774bf639372f746dad2abf2732c81d79f85d7587
SHA2562f5264a90066b66903eb477ac6ce4027e96c2603183571241e60076cc88c44bc
SHA5121fcf43916a62ba3df74590c72f09fabba1d20081d63d6abddc55fb9ccad5a1034f871fd0275e89b920f924b43e4b95703423eb1f4735cf5020da4a7722d78810
-
Filesize
2KB
MD5c513a7f282457583db11b0efd0519d92
SHA13863796e033a1781ec713bf21c40060bdf3c85b4
SHA256d7b447a843710ffd3ce1cdc89575212a1df223317fe12c4ca228da1dde2f6eaf
SHA5122aa8160e1d8385d9ab17e4863d3e3251f26cdd854a77342dbb5fc5b09847735613b47f3118ee843efd36ea25ce93cc097167c3ce12b79a630ab9449cb1e3c0a3
-
Filesize
6KB
MD5ccbb01e3867d75fecddb80089907b083
SHA189d733572bccfc79fe14f17c15db020a78f62aa2
SHA256a77ff122e27c3975b587bb988941e2078e0c0af852d112312d32e685c0e24053
SHA512aff2a994d35c939f5872fcf76cc3c3718ac66b3ddc0913520585912f27af6e3f2d900e3fe1c96ade1267e10a72eace914abfc1e8a40bb475bf7f8243809bb349
-
Filesize
5KB
MD5ea17d6cb0deecf39745478a133950aec
SHA1409ecbb34629f4d89afe0f6770b79b70adad3030
SHA256bf0bc81f74af33509f3047eeea567b983f94e3b64c0b5200e4b0894aac774749
SHA512d293f58429edf7752ae5665f844c3bc0fb000f82a531db3c4c9fc2a77bf03a69d311d331d38eb5f304cd8548e89f4677cff376510b430589ffbe57ece4dca0c0
-
Filesize
3KB
MD5e185fc2934d643a26cc4c2ad8a37f5eb
SHA177bb55f0538180c0dbdf79b518426b27ff02ac8d
SHA256e1273e070aa00857e22be7ea0e3fa1bf1232130c7aa6306ed890a1f9eb3387b5
SHA51207c5695f085394a3ca98e46805d94661f53d7370f84c19489e6b0de2b155fc7e94b32b8da55cbb3cc6c63effd76d478e563436c50820a571350195f01345253f
-
Filesize
2KB
MD5feb07bdfa2ae14ab387b5e0be4765763
SHA1ddca8f4bca993dbaca7d8b614612da13ca36cbae
SHA2561ee6276b0b65de5fff408dd359d19d38d6a5c78ecaa851a7d74827c18b206f51
SHA512ca06d5b657dac27898b04d15e6ec6576d6ab0b7ca821bc688a3a2514c1465b91913855e83e94fb4cc2e23b95977c9b75e9cf131d302aca2e6a3eb4ce9d650b7a
-
Filesize
2KB
MD5c7bb90ca2096640bcb806c78341b978a
SHA1e9a44749eeea99c6d61d40120c5cc12ae625be00
SHA256fb00e364561f9a756f609f0522f9739bddd1dd1eeb24b613a439ede06deec3e8
SHA51238dc624bb9cef54231e76f10a99cc15538fcbd2453766c43fd108998b416dbe47a7458fa8f82f29cc36494854435e901a6f4f1142f5deab8e9767468fcd8b466
-
Filesize
1KB
MD5a2ffb5210f7965b7e0c3197720f50a1b
SHA11fdd6202dd9e0d0b93edf0aad9402b66f9904291
SHA2568e644033ead668bd5e273e05c4438d75fbb0c9da5041500047a4bc75104d183d
SHA5120e3b130a4736ad8110b79c897790aed6b167cc1c741d2253dbd3859a69d61b05ce9342091f3de29174fa1cf18bd6323eadc2c0f0b0812a41077ab4e8375f83d2
-
Filesize
1KB
MD535db3c676553c7ba0be1b3f9eb459147
SHA1bdd509a732a8f5dc0ad2b1f2f23a70b37b3c3603
SHA256f88ba45dccdfa976c225193d101d65f5e2f0bae0b8d6f3ab7c386d83d4d807d2
SHA5121869992879b2457da41daed5d54b5b9a6eb98f323ed57c73d33071c1bb438fe347e05a7fee0ed76436d174545b7f4774f2ed4716e920c3945066fe3fbe08318b
-
Filesize
11KB
MD596de38ede98a3bfa66aaae04d8154775
SHA10c08d4a64b7bb208bb4ceb8efe5696f34726075b
SHA2561796d791fa3899d5a788cd8bde10a100bf80f5afa4599a1f881be9f433bfe84e
SHA512ef3ca3ef600fabd79c684cad5744adecee169959cceae187cb2a3b91403b8c7be8a6e245eb0fb2aa946d26a577bcc36820cb884f79c5d9333cfc4b46e439b15f
-
Filesize
1KB
MD52aa9e1b42f4dd48e06aefb0c215e4841
SHA1f4d5f832c33dd873b2dffbc3db6d707615b9d765
SHA256ca485e2618c9e0a680c220e44d96b432d0e0c7a6f9d474df0f77f2b0c35bbd0d
SHA5128f7cfc4b5322106c103094a3766a59e971b401b46bf6cdc400c1161e1b9f724337139d90f87c22f30e42b1b217a4f56265f89e509da686df1a6c05bbf5cfff96
-
Filesize
2KB
MD5118fa388ba5733ddd3b68c8f53373e62
SHA1fa1e41f64beb2bde22bbba6e0092cf12afcfbe5d
SHA2567e02af8d7f29ba87e0ddf1acd3b10e6ea31e283c0c4345d063fc276e0c05e8c5
SHA5125f9c5a97d51d2acebbccbc79dfbf598c62bd9a8291066a99ecd06a279f7f77ff85b305430c017bbbc134eb103d5e887040509fef7d60c351c22c5d66878951c6
-
Filesize
11KB
MD54bb28c5263439ab3352303303dbb6b64
SHA1cd83a3f2d6af8cae1a4c7494079fe9fa2c9035a2
SHA25602bb599cbe4f169c049df5524d402086a80733645b28d16951d726bf30e6d4f0
SHA5124e0b6bcf9c4b7e46fd230d6be9fc48f55c617c3b76e928c997c595fd92959c034e84a0a5096130a096eb0b0b93bf63d48430c77e26bb445a3b35ba42d7fff66f
-
Filesize
11KB
MD5c85e902074eea8cd895bb44e16990d6b
SHA1f8261e9f427aca0ce8a6822270d4e51d050d6282
SHA256ee4c889f045da2e4ae7d82175e76558d191b9bf193a494fe93c87315b25fba90
SHA51246c7c4d971458e7f1520cbc05e62530dc1ee75131e40f8ca698c51e13b3650737d702414888eb3aff09b4067e21c451c3e74e925353be848cc1e43dca07fa504
-
Filesize
11KB
MD5f7143d067b26538ac2ffca45aa2043b8
SHA14dc5d026ddef15cc55f265cfd0420f09d74ab3fd
SHA256230221a7941e45253b9cdebe53f52ad83096785beb6d8624b55d0340533efae8
SHA5128f9022154a9139f01fee2caaa969f4a08970f8cf361f9198fd3aae02c8bebed03cbd0fe204df92b91c2f65cf444ec38d3ae179816e20a172a8ee87b343410fc0
-
Filesize
1011B
MD548bcc93672d7c2de8eaa5b094b20a14d
SHA1d9611b0667017165af5ec90a33a610676fa34cf0
SHA256c6b1b7ca15593d5114e8fc89b5b1bb2b5b471adc8f101285c793a768fcf44409
SHA512094166a76ae259bcc2ca50d455b291246eb866abfa7ed99462a55df69b7b1aa38c4ab63d4702514850f6689062c9e451b1cb72461bb52acdfd7b7289433fd24e
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656060295712.txt
Filesize77KB
MD510c6dfddc0c69d14a16dc91aad34b82d
SHA1baad1982739d45cbc921cbabb1ea42ff5b485dde
SHA256486e3256a08e7c21fb6703e555c267342d33b4b0f58f5879eb1f51b73fcf3be3
SHA512f45d2159397d0df3409a8829a60ecc78839657ac05d5a5807d6f0eadef94c5cafa4c9d8bbd1fca30f06766fb0d4329ab6a6f0a3ce49c7a4e05cbcb7ce1cac56d
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656525478361.txt
Filesize47KB
MD554c1bd42714dc0ed581e6559e8293f8f
SHA119fae3bf9179bf4ce50ef363379b3d014936e85b
SHA256f6d522b1e131c088540900229e63d38c487a7cdda2bc22837fc82760eb62c1ad
SHA512def8e190c591175b50c56f5d4a2e7c9dc337834cc182965929cbb4636dbf0f46503f74518f094f30130bae72056e0114c70e00ddf97c1837d788deb12efec4da
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663169040966.txt
Filesize63KB
MD55e9f0e9950cd86e0ef32828990952c7c
SHA1219c107e6053db9bbc1335c2b8a5f104d7826936
SHA2564f8c7c94e6b87ad5c3ae2def04dcd1d36df64a84b994da24493207df00ea2610
SHA5125b154f6a439424098779cf95fbeca6ccb98b106ec983da69a2dc7195347a4f24049adc0f78ab0d7dabc6cd876df11cb3b642299eea45879a51e834761fd6eefb
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665885684530.txt
Filesize74KB
MD5a5c08897fd741c52821e7137135bd586
SHA13115c263d395e58e78a9d192326547e30e15fca1
SHA256854e49fd19edac298e9025dd3f4ea001836b3f28020315450891d34ea81a7cb7
SHA512aee171e65f0362b39b8db597da64a67cc681608a8d415188577f043b81eea95a676c73ea4fad539fa44015dbeac962a21be12a2e636bccc1e79e2a979be0d6c0
-
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk
Filesize407B
MD579c6e8ffaf35094d44f6b5d15c5daefe
SHA155da80d9212323de3e5d96f0d73fefc18def076e
SHA256432345a111d6807ca96a455996b6098ae46be97ae50d5302cb320d42a79fc288
SHA5123849b13845f4a50c86284c5dcc5ea45e5dbba3253fee9c077bce702b85d1cc5c89d0e7a313d2b5c4619d9e7df2108fd44f745b14470a73320588aacb54f1a097
-
Filesize
21KB
MD56d31a8aabef010f073cc9e9b7205a648
SHA13575a61af9ddbecddb33e6b45db56153ffd7cec6
SHA2568c78075d43bfef4cbc3b48ff2ab07530dc3d9d02f3808bd2e0873d2cd42f7aa8
SHA5120a9a946018ecee2d6e899dcc154d3d1954ce03bd67ec2578be11d9611360a3dd974105c499c6c4943050920a59879a3d7e84b3ca9201048b477d0b750f645315
-
Filesize
1KB
MD556a5fab3d46a78289a87a0e484a6a712
SHA1d6a91a5774d2c4089c3f65606f3ef7264f34c20e
SHA256cb2bb12f8fd8c6c82be9373830d4eee759eaecedd4e2401dbf08e8c0d09f46d6
SHA512685dfaeb89308a356277702c417425717ebc85e0f8e541057c3a6e8cfe8197242231b3c18ffa36af0ce7e0a2349f0f0541ed740c8c86a7a9a144b12ff77c8bbd
-
Filesize
952B
MD58f47dddde8ebe2da9c7d2a7bce902f76
SHA1eea8bd3b60dc722ff9adf0d1bd7307c96ebf4765
SHA256a18f72305f585d2a23629cff3550eaf27821d7183042cc173c8603b7dde4924a
SHA5123da62aa71ed2d66113dd22eba2d040abba72cba034362b64e0a655dec34733300ea247df1840274f0ec12a0b8277c90a39b7f9793d11b384c88dd8a1881bb1a2
-
Filesize
121B
MD58deea690b28e4c7380cd7b6ff8f44595
SHA1d0f8c8e6189a652431cdbddb8aec5c824f7f9417
SHA256d105c5a1363cf7073ce0c340e1fcd85393f8ca15b7c8b705fedf314520bd622a
SHA512604898b0a5f2923e6a6fbf49108b9189df6e4626bc56c4b216da42d8a5a28993f7bb386a018b8e9e764ab6f2655874d10f240a17fcb7b51e1f57c2769d993492
-
Filesize
1KB
MD5196ffada3fae6d3d3e8ae3ca71676a66
SHA189397c36bf2750a2438a67ee6148e8b9f89823b2
SHA25674f6c7b11ac296eecc0c73b1c9cfe787c29e84416ac0f6cfed444f124f932733
SHA512fae9c41dfe8dc0af6490b918932e0831ce94c2f685d9101a8daea5bcb9cc9a32a79f8800d179d1927abd143b88e49400cfe7c4d472dcd1ac30243bcbc8083d0b
-
Filesize
8KB
MD5723f70bf30a6544bf046d95e91a9a962
SHA109d57f7ebada847101e9f795eb21866d75a38ba9
SHA2561430768b15b61ce265716b546ac38cbb959b3f810a24834a8c13fedb6281e4da
SHA512d476119bce6d116b8f5e7b14b39a1d7a19cfa54f864d1c6c6e2647d9d788c66df7671228cea5b22192db66b822e306c33cf4f9c1a769c5e6ce83828ed258a256
-
Filesize
914B
MD5a8ca9ca034a0c93eab5548f5578f5079
SHA1ef292514e2cc4b25d39a764fe7ed76ddd1b31188
SHA256b4ac2ca5922d53606f37859c983adc22e5eaa2d65c0d1e6bdbb3a27e296a3b94
SHA51262e0a994dfd22950c03c1d42ce2a71e9d5637ff4bb481a24b21566ded26f8de228db2058484e2a14175f844a5e7ea809278ad98b2252ec1bdcf35994d4aecf97
-
Filesize
328B
MD5aff307211cf1007149a63918dade65fd
SHA1c8775783cdbfcb92f87a3dc704308c7286c90f1d
SHA25676be7d93dd7801409f100b1eeb3228bbd8430d0a8b27a588d50b3612f3957758
SHA512bb7abfb92cce32ba3e030238ac333a23216b9775a84a85f2c13c4fa22a8ceeafee3e2002ff077979c7338c7290a444b6d37c8eb40fc823b2419d2c8c9c45d9ed
-
Filesize
1KB
MD5a604126017f5177d1812238c345aa4c8
SHA1ae423efeed643d83cc3f2cabdb9a19cc8c7267d0
SHA256b1cbb2c5be743ec57f2dff0d52457703bd971ce7d8bc7952b4e5c0fed3af64d7
SHA5121fcef4da041f543dac17aaa532d7e567349164b45ee5776d4001b04e243fcad9da3f35ff6c567bf235171e9291fb402d6ac502d1a66181510ce08a198bca9292
-
Filesize
162B
MD5833e62d200fa60046d8b087d9ec61664
SHA1ff99714c353e7912921b106e6b0d9e00fb5fd6a3
SHA25631b8a06e49ed1c8ac50092d888001f8382d3cf2056ba132d9804a6d5574911c7
SHA51283f7a83563b992c8ec1a5709e636ba7c3aa1216ef0dc052ea0c6cc803d2a14880546a0ae7c0871a4df373d8a9a1531f33f2c7c0d136b42062380d77da87db53e
-
Filesize
586B
MD53e97b748c76b67d0310118739fb545c4
SHA16295ecd8fcd4d42c09bb12f6ae4f4abf13ec94af
SHA25690e501cf684840951c32ff5e67cee3e09bf534ecb4ed4f2082b520792dad9013
SHA5121f0b4496a8d4474c0691259e4fc25062468047f226c14f2f7c72d1b9c2bae76caa2c33bd8d46905e4a1fd798229983ee81b2ab61378652a6012e9ca2eec72aa5
-
Filesize
124B
MD51ecaf3aca971f7cd386283ebdf5157d5
SHA1d5c8588dfa5bce64a7b51c3b8a3c0c9e54a6264a
SHA256c5c3b20105e8b61031bf34ec84c12ac0f5f33f036898d1aa5de923ed0289c9d2
SHA5121c7c34fd10316b872db5119f989605624ed89a56c0b36c2ea18de4d508892f92e58de330b5ebc33e9a5aafe6d49f3159c6a332452ad7f50da93d102036a84142
-
Filesize
8KB
MD5394eb72f51bfa0e039ad0759cba709dd
SHA1004964064c8ca579db5268e17d4d02bed2915be4
SHA25656e43458b11a23b9735be1d99bc5c08cc1eccd0bf74f7fdd7f1c325703bc3a27
SHA51298245a7acf73836b78dd7fdeb744ba9d1141150058464da558a76c4d44a823f454a4663473561619176385f53773aaf734850dbebaf94e40e566f4694a91d9ec
-
Filesize
880B
MD58abf5a81bf17492edf503f2120b2cc2f
SHA1a97e130b14c3d5dbf5344977b046327ade6595f8
SHA2564834642df66d5f75e9d9cee331c571febd3b5c579411b36cab9fc8fadc97e1a4
SHA512282fd5af0b60504380b971faf5422084446df747e6df90544ecb35c048cb0fe7df4a2ce2fb412f147cc2e6df4db0d76af7fc3ce7b8da396500750f58cb16ed34
-
Filesize
1KB
MD5b90fd6ceadd1fae30c3723663cb94304
SHA1005e88fcdb0152f8716b0a76ca936a4488536c88
SHA2564082672ba0d732eab4b22bcf040d09f19b950e83fcd350e88806f6a67b61bd48
SHA512ddb6cd9a2919f95d8299cf4577f54900a5d58752423b65722228cfe5249d93bafce098a532e1381754725dec3efbfbbed2bb4b219b7c3a11c09b2beda2af6b8e
-
Filesize
1KB
MD5f904f18372bab6103fb982b65eb0514c
SHA1e175dbae5f64d6d819920313537720fa9db8cbb1
SHA2563e41f88581069626545a023656c07ceb4727e9f090f8ea91beea835a42b55a83
SHA5122808dc6405d1997e16b5e6c5871dae3b14de62ab02ffa7d83b2053c94b29a80009a009c0721ce930a88736a543c29550f31c650ba6cdadd7c419be61afccb120
-
Filesize
1KB
MD56a3853855d48612cd63ed3314cd00338
SHA1ee32021d6b4670ff75e48c681e20e7b76039f93b
SHA256dd7e9ee0773864615d3b6dc7c72c92e32ce2e06ca6255dfbae710ef095e8ab0f
SHA512b15915fe73a9932b8588ec3d1f948f15813d3ed00a72b90fef0a26ef0d97f8f8cd6a31469d857baf257b3f14bdfdf7064a6872c89e5db3d94a8afabf14f1595b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
Filesize1KB
MD5f8d4adaeb75aca62f1027f8696a513ca
SHA1162a6cb734e7ef6be1253e800392f6738ac3d622
SHA256598ad4f31e4e7e10070ccbcdbd6325746469794db78b6d696d98ac9a5751cff2
SHA512c43b0b11f68a7fcba7bfc2b2a1aa2dc72e6dab8ee99d28b055d4e655de7ebfe3e2e368cdaad15afe505fb59c1f7c386e09f5d9a2763af3e6ce99fd9c7c5ef2d2
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk
Filesize1KB
MD538e886aaba035c1e124c3a01ff56afb3
SHA121cd7070ba0287af9ebf50d5f0d81158dd7f28f4
SHA25627b99f791a125009fdfe2b698bab8546021337b78e631c603f079e5ab9ef46d7
SHA512240e05d85d088b5480b7b7b74bd4637621c7f57aaec376abdd718796d5fc7e7a6decf849743e6799532dbe4a6e060b7f6bafe4cd0e633b6259eef7e162c9aa0f
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk
Filesize1021B
MD55f8dbef4ba8a911e7ca380de4a1ff135
SHA1e765174c5e7e51567b63c6dfaca5b05cf2947b8a
SHA2565c3d96b189d74c020057a4ff567571afd7cbe8e3202608c321aa24665a47b6c7
SHA5120d7cc40abe6ffc161ff099f62f2fdc52d825060d96df0bb33724e9ca4ca0a882582f784ff965470c6bbb2b5228256d4986e652b5396be4b8313e5378597abd4b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk
Filesize1015B
MD5cb683276d6dd8b75e90d44e359b2ba29
SHA139ec5fc1f24dc982a83b1fd8da861a6d25f5f7ff
SHA25656d207f7391add567f5e7323bb16e27c5f7dac1effe074508ff41620e5ebb02e
SHA5126b192a85fae9a7517ec96e4821c71fae787b82552ca9fa009cf1c6698dc4e50e1e1a49df2064c781acfe45afe9886e57b1d683065bd5c130456fdf5fabc6ec35
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk
Filesize1KB
MD5cd5e8633640a3cff0e62d30419a14609
SHA1bcfc98979761f950dc084a1db7090e014d08e5ff
SHA2561134c059cffc307a3fcf8997621f003a13d3709ce3c48c0dedc7024ffa6e9323
SHA512dab8f95c8de7596d72dfff07438f028bc3f19dcf35a91d630eaff4a82c0ea424b5f25a7b627517c4d5abbfc4d053bc52ef5496d660ddd6f3f540291a8751b2a9
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk
Filesize1KB
MD57b26d1ec6fb5e570795c3f42b6598a0e
SHA148322a83168eb7af7f4b80cc6a0d3ad7e4d09f7e
SHA256e455c568f5238439e2cbb32859033b1aa2dfcb6d7fd5d0e84fe0a5071b1b878d
SHA512639790da0ff55de9a657aacd2a047d6185f174b0897be4a91bd726581027589b89697627d9c825356d60078b849db27b91675134f8fc460009f6c6cfb9496953
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk
Filesize1KB
MD58fb81c26454b770fc2e06f73a7f6f9fc
SHA11a1877f56b11abeb8ebe197491f2f38fed788643
SHA2568fc06716c9a88b39e322c5c2f09208b7b98932846219e06d28df9f45b1cd008a
SHA512a32eed60e55db0b066f38ec0207a5fe84e0d8cbfe83e801bb1a0f91eba1c9bd8732692ed5cdf2a1dbe27fe071f11bc13f5295053001bee9b398b56cfb04f0362
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk
Filesize1015B
MD55579e05de5aa6feb7c245ee25b86f2ec
SHA1334b64cc3b675b6463f0a2844b4648539fe8dede
SHA2566c1d124b99cc32459c9dbc672724f2f6e71d8d11f977e77162e7af89c290f772
SHA512f827d80869a326450c39ae7c538a5e27e76f0d1f8685ceba69598ba793399fe003f75bbdc3064dcd1df85e54e816e0a57202cb4b01a8803eb1c7559c5f3828e5
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk
Filesize1015B
MD54f0a6d572ddd71e799947892549d3d24
SHA1683b718dd11549dcc7758d8c22141c5a6c18f68d
SHA2569496c2e86f348bad40290e9e55d157b09bb7a7bf2b7aa8e70d067497fed5a3d9
SHA512013f6afe51baf93b8cddc0f11116d0093a8711ab9929141fd0e6c5c002c96b7c171efce1de350d85a6d668ad05230da2e1499fc34566a3fe6e50106e01df29b4
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk
Filesize1KB
MD55689c149d9380787adf8cf130d85d4de
SHA12c45ac3e6b2cfa460e18b5226a448fc5f8b8b6e4
SHA256bc7ad9f84fb504230c7ac250e10580b6f20b36fdbb4e1b7055fa18a49d394891
SHA512b6cd5f16d3d3c53700dd832ebf6f1f26dd65009c3d86e0ee09c8f13808681df75af3080303e07b434018fda0d788d05210e50dca4f2c5c14114a9f07fae32229
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk
Filesize1KB
MD5f766be59c8b4c5d9237a35c921520d61
SHA10eb17a6b1cce553c865a90d3e15aa74bb0da23a9
SHA2562f4f3d5093a1c6b7e33deeddb4b7d8e46dd85d1115865bad7d5f2f34f096ea1b
SHA51216b74b504e86cf878e8eda701c5e6dfdaba637cdcf5da13e3c1aee77cc0a44da37bfca0c13992ad079a1330a053ce86acb96540445245c5b4315ae522fc848e9
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
Filesize1KB
MD5504710437d88a5a0b523c8b61b6aed41
SHA139ff32e9cb260bfb1e48465cd5bed84ee5985059
SHA256e4f2b7f906ef078ca8d0ae1f3b1b3bdf64f81c828fc0c168ee0218f1297f2827
SHA512c8c4bebe349ef522ed25fe989ac2d2261ac82e429d45ba86d98015da7b0b20229e8e4507daad424fae014f3beb36b42e79c3b526973793431566eef4f1d474a1
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
Filesize1015B
MD58017dd404269cd07d4760db8b09a40cf
SHA1e044ce0e380ab17ccf5361e424ef989ca01f9597
SHA256c77fc5ec8e87ee256d5a26f513929385c57f177f4ddec7e8c33dcb83d5cf60d2
SHA512ede74f53728dab9cd636581fa9c534efffcecedb511abb2fac0d1c215b89a2fbb3de771c9a66134724460dedd705914757182fcc348598afbea6556f9c82311d
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk
Filesize1KB
MD55a62c8bb85fb290eca263d98420a303b
SHA102510bcd3729bec700e0770d2c6ac9c33c22e998
SHA256a8357c21012c7f0748433fec06a81247988dbb29b1def9dabbd581cdb18efdda
SHA5123f875844964a6fd9a8fbedda425efedd83c5809f49fc2cf76f3a5483f536d33e0fe30ed33674c97ee5377d55a320c09384f87d9b382b59b908bb219371bfaaaf
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
Filesize1015B
MD572ecc5dccd455aa582b119508089f2c1
SHA1132d606479bbbc3af1dccbf4e9ae66aea34b481f
SHA25612bc1caa5cc7dd32aae0a9a563fcd1f809aafc52a9349d426cd6ba415e9f0fd3
SHA512fb3dbe3709dc36d7d1be79bf5a0ffae68d770f212373d877ae4ff5aa7ccb823fdf1625ea92e35cb316416e7d1118263b99a0756650aab157723b7e2e3d3f0f3c
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
Filesize1KB
MD5328ea6f1a6d41d156b79411c4aa39ee1
SHA115dd71695c68fcb2e6ec574f488982e40d6d951d
SHA256cc9480df99b9e4df30a634bfed4749d7fd9edd881f29b563d57c8cd97731738c
SHA512ac7dbf32fc428694910b74b7d56ee6a47458ff7a6e0f6338a77c9609ba2d1c57d628cd8ba76f85a858a4015c9a939140c05d9107cf0e1e325c4d5273147bacc6
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
Filesize352B
MD5f931fdaf74416b4a27e07406ce2791b5
SHA1815c2125641eafa68d22585fd723bf0869d5cb22
SHA2567e33c2c9c17b5170eebc4eafc655ce3fc8dfb4c0e0786e50950e9827ce73a046
SHA512b2b9194ed235889472678d43b08fffa299cb9d170a0c0f9425e479676d54bc154abbe464f5446756c9fb3d8a5769e7b7a64d0976917b75ce4924e07be3ca0e63
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
Filesize334B
MD5e9f84beab4345ad22d0e00bf794dd7f5
SHA13c8342be3a65b772fac68a22063ef95b5766ef55
SHA256f80afbb1dc09afd1632b628e9c122a3d59ff7a85b7b65f03719ca4fa0de862d3
SHA512fc3a8227178b19c58a651f8c91d6a9f107603ac5293989de8e3420986fe7825e79c1f63a4b0b5e984b8fd34809734cb4c0f1ad01bce679053d0291aa4b2ac680
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk
Filesize1KB
MD55145207ff70d1964033f54b97e2be844
SHA1c2bc15912fb3ef0a30885ff3f7d8f5088f99784f
SHA256689101faac08e214596fc909ffaff83d4283d676588929ff3b3903d0e261d22c
SHA5122670b82a3600442deccc1b24ff7afc9d8a5a3825ba92053cd22f3fd25913d8dd63ae8be1174f6aae3541a2ff276eb95fa5e0d295d8525a21cca6882e2c8d601a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk
Filesize1KB
MD5cc09e3f4d9c8a3b2cc55e7f7ee3ff18a
SHA1403324e7dcd0fb8370720c2c9409fb89bd6693da
SHA256a86fc8b264a6b16d51e3cf5974a0964d6d05ee0bf995ee4aa1ff968e36d32a63
SHA512a2087cf655a8e3a1e7263a0cfaf665553bba4672d22775891fd18978fe533ad07a8a59b9f9467f3f7da658e9f0056a72dfa212d67fbf3f1a2355377950d98cc0
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
Filesize1KB
MD54c2420d1e607272de277528ac0c541b1
SHA1f3e270183bb9b212f8c640bd15761077a35af379
SHA256c5d0e9cacf5b8e26e21031c88a4d3ecd006cabb5a6d61a2fd19de35e52616e34
SHA51213a12e4bc1e537aa660cabc0afdb3cdb15ceda4797aeea32ceecff26c289ef0fbd015046955b34887d204037770f96dc5a36a989b736b8b8f55efbe0cf02f841
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk
Filesize1KB
MD58c89c5181e5128426ae37a46fe072534
SHA18551d62500eff052b30dc31156be5c2f294ed9fa
SHA256f7b822cb81044f4edb0aa240f784699ca642e153fd94cfc1a9239215d16d93bc
SHA5127dc34279c1b969292c822aef1ab579fa99628866780727a17836e2669b96a679ba650e779959819b81056e8a3fa4d26c1039d21c2a87cd991ee100446f4cbb14
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk
Filesize1KB
MD5a6a8bf3f7dd6c6a6f1432061927bd45a
SHA1807e0c065c886f25e2b46fd4cd06b0c8bb4aeff6
SHA25603a65b26a490e914145a18192070a12d9297645d7c580fb07b5e2da237054cdc
SHA5126081c3bb4092e0570c67f62684b5e7910b1f6d04cf28105bf7916bdb7e949514ce34f55346b1c24e038827bd0905e9e3ba55b98d96a9dd7b18d1b8b1466ffcfe
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk
Filesize405B
MD573aeaa28897be79dd62a05146c8e6ecd
SHA1d1411eec545f0a9c42702d77568a85aaf7bfa9dd
SHA256257620e288d775f02ee04a3516465da40f0a3fe5f57af66f6bd6374979f4d142
SHA51249c9817299add0fe34f8f74607abe39d65b732830ced96402156e8452550c8c1beb5c93468b38e94a2b59fc52ac890d215c17158144293c641943c9049290738
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
Filesize409B
MD562cc51116687b52c757b952dd83a0102
SHA17b3b3220be21533971f197e1e1069e8f61c17a6b
SHA256f487731eda729a0829ef63490fa493da2e0d335e2df0eec2de8223cad3a4ba17
SHA512ec93f159ccc518f911497b643d060cdbb5fe8fe8353c2f024cfc64ab181c3e3160d701ceeda5cd2f845d13eb1d1a471592da436f4355f5ebaae4b1cc31ead0f0
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk
Filesize335B
MD5bdf782be200748e75e9e2e9e446e500c
SHA1826bab57c1334e954e68871b7a2a2254039a7a0d
SHA25648899cf21cf9b499f9757cff235ad8a9a871403f0c0f7eafebd4fffb0b561989
SHA512d556a6a8fd709aca86942b6f10f4b4b2ab82134840e69bbd61e8cb27813b2563b4a5f20e0c2613574274835f38fb9594127ef212b1a51399c98fdb4d42b051b9
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk
Filesize2KB
MD5574fccdf8e8db99885493e12e068a8bf
SHA10e412ee38248371db0a0392a1c94bbc6b99ae771
SHA256e763f327f5469004eff8c24286fe13c7d78929dd42dda579c1f3cd1cc44bf23c
SHA5121957c722528c1616bc9fc0c9d67d08cb8d1903dcf9b16f099c61b0c9b37cd4a3f50390a887686ccf3b2153d62b15fef91bfa6674d9ed76e3866ba7bc8119da57
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
Filesize2KB
MD54ed2d8e9bbc3ff5c32c35f7d112df075
SHA11e43a1ed28dacb81dff83c9a58badc59a97c626c
SHA2569ff380a6c1d579e5ab9f031ca8e4aaafc4fb6b429c0b4ba2b864b495f7de05ed
SHA5126e08aa711e902f0251f1bddc4e36ff5f95cde90174418edb650a123c1f6c36e27663c85a17d4f4866a451bd19e96a1716dcaec3620b8f36b15bb9318c9018735
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Filesize296B
MD53dd43027cb15d1e996bc3a650aaffa29
SHA1133f75dace673cdf125bf378578856834b9b564c
SHA256b64a620f8a933fe270d206d066dc35ca53d4fdbe5f5084362bb47ec5c29b8836
SHA5125c27ae055c88be1759f5be360e6c13b81b9e6acbd743a2c16e4ef57bbb9136da0cfd7fd3296a3dde10bb651f0729225312db76e0d8347d3c06854af7d286c9ec
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png
Filesize276B
MD5261045cac48a735a5e4a544dda2175ca
SHA1794d4edbdea4fd4772663a221ef1f903f220f77a
SHA2569380c1a8b959af7ca50526485e97efc74b0e949f192d626332b4aca7886232cf
SHA5124e2c2386df47f7dffccd2ddac4f8b30ec6d4b7768bb0e9a7493361b5b7bb7e2106d851cdc6694e752f34ba6f90357a8b85f7e9224249517b1438778804b97d79
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Filesize296B
MD5532b2a1f2573d27486ee69bea99fc9f6
SHA1277ba7e537b2af4869ac848a61b913bb1124ae03
SHA2569fcaef01ecf88777a9f578c53ecd1e57705e4bc990ad187678a417c10d0ecebb
SHA5126ad35925940831540b92facd6f10cfbf8331611bf97775fbc52ac5145f8b864913d006758be8ee1b6f9351f9401a68e58f6a3c5998baac86f9980e859c610b35
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png
Filesize276B
MD507954249d4dd3f90b852067c5f91720d
SHA16a231bc35c9a4070a0c4ace5fd4f9b0635dd2259
SHA256bf663d3d4b6fcf9c41ce9a6371cc9c77a1e02ad89e6db6fa100582789b9fd592
SHA512e856f6349c46ab42f6e87a291ee6b489b371df067c187550c2feeae4062dc5a5fb57948be31d964199104b2618b33d726d75a1195f646298f73bcf17bd23652b
-
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk
Filesize1KB
MD568e8ffc96383654f0fe98977b0f28f8e
SHA18dc11f1110d6d1b71283ab1a15c24ade782bb6e5
SHA2569278baca353bc3aa972d92769d6373991a8d5cb4052699106373257ba2063be0
SHA512b433956cfe2b3d08fc2788b5c5e163ea297acdc95620bd65e01dc0bd760372cc9a09731114f6b42ef63e2f6bab6eea824a8141f2e9a25b24e586d5f73553bf22