d0d08712c9a16bafbcf63c8ead779c466a9f7b5f4ffc5a496f79cf030e6b486b

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2024 10:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Size

12KB
MD5

7ed2a8f26751a06acff7ab672d8ddbf7
SHA1

6eccc8b87bbc5575c3d06c1b459aa852ea073085
SHA256

d0d08712c9a16bafbcf63c8ead779c466a9f7b5f4ffc5a496f79cf030e6b486b
SHA512

b3dc7cf000378695cbb0a6b431104d8ae8329c0d4a58e872ed4b1c0939d45a7944be84645303726327b790005e7e3ff469234a8193586895c74a8187e6ff5036
SSDEEP

192:Vu1/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMEmIKZTf:Vu1ebFNw4Pk1itKkpAjjI2YpdmEmIKZ

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2179) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\sWf60P7W7JWZot7.exe"	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\netv1x64.inf_amd64_30040c3eb9d7ade4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvmic_ext.inf_amd64_34d742f3550dabd2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\nl-NL\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Appx\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetEventPacketCapture\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RegistryResource\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_linedisplay.inf_amd64_a720ddb820f10790\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\fi-FI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\modemcsa.inf_amd64_a76330a2da8329a2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\0c0c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_df49c4daa6251397\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsinfrastructure.inf_amd64_1ef682cfd6fc7d1c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wudfusbcciddriver.inf_amd64_a084e687a06b255f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netk57a.inf_amd64_d823e3edc27ae17c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_volsnap.inf_amd64_47e3741bbf4d6b06\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidir.inf_amd64_7bf4a320e4ec8b3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidspi_km.inf_amd64_7e53b3972dc4df20\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrass.inf_amd64_7f701cb29b5389d3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvf63a.inf_amd64_a090e6cfaf18cb5c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\F12\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_avc.inf_amd64_8ee511eb19322856\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmlasat.inf_amd64_36a71a022d8bb0bb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@WirelessDisplayToast.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ialpss2i_gpio2_bxt_p.inf_amd64_8be317e01b44bf5a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmusrgl.inf_amd64_19bd1d6c2b642b6f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_1793a485b491b199\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\sdfrd.inf_amd64_25779da6eca4810a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wave.inf_amd64_8e8496aa33c0a7f6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppBackgroundTask\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Dism\it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DefaultAccountTile.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidbth.inf_amd64_76fb27776958e530\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj4.inf_amd64_3bc71c4327f9f94e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsactivitymonitor.inf_amd64_cccd1b2cb61d2440\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\intelpep.inf_amd64_2e156c5dc4231642\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\setup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_bfabc750039f8ac1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wsynth3dvsc.inf_amd64_1a08a3b6cd493e1f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ntprint4.inf_amd64_0958c7cad3cd6075\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms011.inf_amd64_f83138380f5fb6ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wfcvsc.inf_amd64_dfe08f401a2eedbc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcodex.inf_amd64_f5594a2af66d11ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mgtdyn.inf_amd64_a6235e923dc4047c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\eaphost.inf_amd64_d37080dfb66d830b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsii64.inf_amd64_0f02175b17cd3f66\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netr28x.inf_amd64_5d63c7bcbf29107f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAll\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Com\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_modem.inf_amd64_8cddb75e34142905\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmcd.inf_amd64_43b149b35876b241\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volsnap.inf_amd64_ce438b6e0c5b1af2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\uk-UA\Licenses\OEM\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_extension.inf_amd64_7891c7d003f5e96b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_media.inf_amd64_2dec3adbda5f7bb6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvwifimp.inf_amd64_ec11d0ad3c5b262a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_dot4.inf_amd64_55905bb33692cd84\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidvhf.inf_amd64_0a924aec7600dcde\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-32_contrast-white.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\de-de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\sv-se\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\hi_contrast\aic_file_icons_hiContrast_wob.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\text_2x.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ext.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\163.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\BadgeLogo.scale-400_contrast-black.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\MixedRealityPortalAppList.scale-100_contrast-black.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-96_altform-unplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\SearchEmail.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNotebookSmallTile.scale-200.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeMediumTile.scale-400.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-30_altform-lightunplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageLargeTile.scale-125.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.50.6001.0_x64__8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\ringless_calls\Ringlesscalling_360x120_2x.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-Outlook.scale-150.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\W3.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageStoreLogo.scale-125.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageWideTile.scale-125_contrast-black.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\notificationsUI\notificationCenter.html	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.targetsize-24_altform-unplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupWideTile.scale-150.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-256_altform-unplated_devicefamily-colorfulunplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-256.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\lua\playlist\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\LibrarySquare71x71Logo.scale-100_contrast-black.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\179.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Tongue.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-96_altform-unplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\FileExtension.targetsize-129.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\de-de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\7-Zip\Lang\lv.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-32.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupWideTile.scale-200.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-80.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\1851_40x40x32.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarSplashLogo.scale-200.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Snooze.scale-64.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-64_altform-unplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_splitter\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\Weather_SplashScreen.scale-100.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MedTile.scale-125_contrast-white.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Generic-Dark.scale-100.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-96_contrast-white.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\en-gb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\MotionController_Diagram.jpg	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-200_contrast-black.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-256_altform-unplated_contrast-white.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-150_contrast-white.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-40_altform-lightunplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-32_altform-unplated.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\it-IT\View3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dlna-mdeserver_31bf3856ad364e35_10.0.19041.1_none_8bf94097c23f5fb8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..allconfig-installer_31bf3856ad364e35_10.0.19041.964_none_f50adc6b5da9528a\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..trolpoint.resources_31bf3856ad364e35_10.0.19041.1_de-de_65621a8079a7e44b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Resources.Writer\v4.0_4.0.0.0__b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-composable-switcher_31bf3856ad364e35_10.0.19041.153_none_2fe7dace2cafb8d6\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-audio-dmusic.resources_31bf3856ad364e35_10.0.19041.1_en-us_8c149496c8ef747c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-usercpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_d82233ff00131fb8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..favorites.resources_31bf3856ad364e35_11.0.19041.1_ja-jp_b404ba9f607a467b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework64\v3.5\MOF\it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_ialpssi_gpio.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_7685dc35e7f3167a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_jsc.resources_b03f5f7f11d50a3a_4.0.15805.0_fr-fr_45a56e6f1fb6808d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..c-service.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fca62a6997cfe312\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..xtensions.resources_31bf3856ad364e35_10.0.19041.1_de-de_cf5d267b8d5026f9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.hyperv.powershell.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_56bc3bddad2256ea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-deployment_31bf3856ad364e35_10.0.19041.746_none_e43cebe9807e08e3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..ctshow-dv.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_70b9878a430f9fc6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..k-msctfui.resources_31bf3856ad364e35_10.0.19041.1_de-de_c65b58f128620772\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.core.resources_b77a5c561934e089_4.0.15805.0_ja-jp_8dcf560ffcb1f296\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-c..ent-appxpackagingom_31bf3856ad364e35_10.0.19041.1202_none_98c31ddfe48342bc\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\Assets\SquareTile150x150.scale-100.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..istory-ui.resources_31bf3856ad364e35_10.0.19041.1_es-es_bdc404c3a99214de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.powershel..agnostics.resources_31bf3856ad364e35_1.0.0.0_de-de_22dfd212150b9e79\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-directui.resources_31bf3856ad364e35_10.0.19041.1023_lv-lv_642b8f0070c4d4ce\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..ectionsharingconfig_31bf3856ad364e35_10.0.19041.746_none_98843ad327c98d51\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\common\images\minimize.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-t..honyinteractiveuser_31bf3856ad364e35_10.0.19041.264_none_a61d15efb6291d40\YourPhoneCallingToast.scale-150.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..ess-guard.resources_31bf3856ad364e35_10.0.19041.1151_en-us_699204d71041b23f\n\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-font-truetype-inkfree_31bf3856ad364e35_10.0.19041.1081_none_87beae98bb645f2f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-scripting-chakra_31bf3856ad364e35_11.0.19041.1266_none_7bdc56e7b91d3180\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_ndisvirtualbus.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_ddbd42202abb1998\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Assets\store.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dot3conn_31bf3856ad364e35_10.0.19041.746_none_702c3b97f5c072d5\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..on-logger.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_7e599e9684dc6e78\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-web-app-host-ext_31bf3856ad364e35_10.0.19041.746_none_45ad3f94a93854aa\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-onecoreua..uetooth-userservice_31bf3856ad364e35_10.0.19041.153_none_e669b22d011fc6b2\BluetoothPairingSystemToastIcon.contrast-black.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-bootconfig.resources_31bf3856ad364e35_10.0.19041.1_de-de_d1e490ff73fee191\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-help-clientproxy_31bf3856ad364e35_10.0.19041.1_none_7b3b1218b31231bc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.certifica..t.cmdlets.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4ebc34901ba66d19\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\INF\rdyboost\0407\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..component.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5ac534f6c0e256bd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-bth-user_31bf3856ad364e35_10.0.19041.746_none_43128ab833fd583f\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-explorer-shortcuts_31bf3856ad364e35_10.0.19041.1_none_6da8f779b049952c\02a - Windows PowerShell.lnk	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ie-datacontrol_31bf3856ad364e35_11.0.19041.1_none_fde9b146aa6108f6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..owershell.resources_31bf3856ad364e35_10.0.19041.1_de-de_cd7903cbcd7d8cfb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_hyperv-ux-ui-vmcreate.resources_31bf3856ad364e35_10.0.19041.1_de-de_19d36f946117ef4e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-autoplay_31bf3856ad364e35_10.0.19041.423_none_84ae5fc84c7ea184\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-rasbase-agilevpn_31bf3856ad364e35_10.0.19041.153_none_8d5dc9c2f6fbb12f\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..snotificationbroker_31bf3856ad364e35_10.0.19041.1266_none_d92abf553d8a282c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\Assets\SquareTile150x150.scale-400.png	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_bthprint.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_44eb1fbe551f15ce\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_c_display.inf_31bf3856ad364e35_10.0.19041.1_none_57c34c4e95e62449\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dsquery_31bf3856ad364e35_10.0.19041.1_none_e3b63d819da983bc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-provisioningcore_31bf3856ad364e35_10.0.19041.746_none_99522f488b926b4d\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wlan-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e7ce20555aa49593\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wsp-spaces.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_f340d7e3afb3d9d9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.resources\v4.0_4.0.0.0_fr_b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-deviceenroller_31bf3856ad364e35_10.0.19041.1202_none_36057e94c281704a\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.processmitigations.commands_31bf3856ad364e35_10.0.19041.662_none_2a8c125210169f86\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..tegrity-diagnostics_31bf3856ad364e35_10.0.19041.1_none_224ac1aa56b7c6c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..rtmonitor-tcpmonini_31bf3856ad364e35_10.0.19041.1_none_8869e02e46a71d89\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-oleacc_31bf3856ad364e35_10.0.19041.746_none_52d2b2ecb593c243\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_tsprint.inf_31bf3856ad364e35_10.0.19041.153_none_356ebfa943b1edf9\f\amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_windowssearchengine-structuredquery_31bf3856ad364e35_7.0.19041.867_none_e87e39b94b8480c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_inspectvhddialog6.2_31bf3856ad364e35_10.0.19041.1_none_7dc923aebe8d0c7f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\DefaultIcon	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\sWf60P7W7JWZot7.exe,0"	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\shell\open\command	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\shell\open	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "MGXHZYNXAVKTJUL"	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\ = "CRYPTED!"	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\shell	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MGXHZYNXAVKTJUL\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\sWf60P7W7JWZot7.exe"	7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7ed2a8f26751a06acff7ab672d8ddbf7_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:1332

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
a1a21779176c69a6a9a8e840b3fb6c2b

SHA1
7485d7767e8f5a5c2c6ebb8a955e1a40f1add3ce

SHA256
68c73e7623ced442a3b12c621620d3aa252e104be75d7c96256a0685a61761b8

SHA512
01ea0f135508789215eef94374f5523e6ab3568337811f2bd357712cfca3d8f79feaf983143ecb324fa059dd6f38a4f79be8b5bb36088717752ad0e64442bd44

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
3a856865320409b30416e54e81f69daf

SHA1
9dcadaad80909bb7b4abe3571ce6c6d37c4b2a8d

SHA256
7cb81b9f44aef6dc4d391d5b4b0b3f839049a4ef24366b8fa1ad1f2dbe917ac3

SHA512
135665cc47acfe6c562cb8b29c0ad06585ec0d461a01098572ec31ea7207165266990485a834bface304eb0cf61ac5b3fe8d8f1b82b8d9429e3a226292bc61f8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
37613adf2b2e0dcc152d66f7308c7aa3

SHA1
1bec0133cc333b5ab0b31a055feb46e16be85adb

SHA256
14d459ed063b2b6c981a1b4904705408d6c73cdc703b5b0e3fd2f38a414fe33d

SHA512
a0b0b9a37c06288e725c6b6d3ca62529236ab05f38c150f123520f35a41a8a0b0c392862f5726300dd6cab0bf082164b2516d47ccf50230a9c905e56e26fd438

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
90ef36c92631d9bf3e94ccd7f082b9aa

SHA1
b32a0ec2af5f05c1275df083cc19d1eac05c1001

SHA256
770b9a253fcd8eac3c734b57bccb90f70c528c0386e34cc81d0e47de2e4950b2

SHA512
15582ba1a0ef70864e2a8b951c1c5e4b3e1f1735ac8bd642c6a01808d3b922ed679b9b696e1e4c52ca66b7b940eba0b71b0c76a3bc222d15595313a49ec54318

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
61cd027c14416f75c6aa9d7bbdc7cb5a

SHA1
8ec77f8a89186c895eead144467eefa3518b8cd4

SHA256
f72dea4fb9d3f425520c11cb437364df839fa73819aeefe9630ef31c2dd8e8e9

SHA512
10fae04a3c0c69432fccf71c35e58783ce1ff959247baa63e9f415754fbe01c14f1a7fca7356814c80088a1fd241c6fa12574be2c3f1a3fd54eccf458e56ab28

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
6761f2beb07de9358093ae8aab261ecf

SHA1
4452f8cf870e89ffa79f24f1e694a42662681a43

SHA256
c7a050c36536cad31fe23fb4cf2bc2f83eb3e880d0e205ba2eea7f13a077e68e

SHA512
4c7b1d5125060612877a49f71440ae87e0c32d07b3314f79833f3f15a476497bb8acb7d1b103e677a92d0ffbb8364c5493ad86d85ac3b45bb8a9e996d746e044

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
f9287fe713db2c3a1b574867576477b5

SHA1
b64b95985fe84181b1e55f15fd5a14fb5f16cd83

SHA256
945d31efadd301975aa2d0e787ee49f7f3d537e67d881b3ea9ef0bbf1a343852

SHA512
0be2fcae7926c8064bf06738c09a3955deccfdbe9c0914948376c65f912cce20213398f52b627dba3315c3ca0492006259c44a11e586a274feee8106947b71aa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
3086282a71b9bb0b3068ffc2c95bc6e6

SHA1
20c848b41c29caacb71bb81e0bc85777fe7fa7ca

SHA256
fb6923e14661c6e97a95fc9682da2af1941e1a75d1647ddcaa40f123213da08e

SHA512
4d6e1c8ea340232ea6e77e7e7afb755df2216561c82e2430cce64d1e8526fbd7438203affb0c51096dd21c9e35428deca1ce0392c583d889076ca0d1da1d9dc1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
638478cf12fab75fcb1fc8f8813a3f39

SHA1
dd6fb0dc27b70de5f2f492c82c2998e65ef54644

SHA256
06ad7de38c924519d17952c4edaf7d69ef2a8f01b408b99e53a92f5d91e0d971

SHA512
33be0f3f17c7fcaef1f7b0a1cdd440b064e345d31e9e71682ccfce97c5c54bad5a2a898d5a8f12744f02819244e4bd3ac070bdce668d248b3e51b9f04dab5b51

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
4402ea60140302c493470222c451fce2

SHA1
409ac225c5237f6891991929e434adbdcbc13220

SHA256
f9c1d45d135d6321a5677631450c304bf259a2775770dc7461229b05207dc414

SHA512
770c5f493b189c62a77ee47be9454492304e04c98aa9d7a39e371b85ae1833bb7c0f8f5206d706f8ea404e1123cba1759c664a4411cd8d03991ae48de70489ce

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
2cf388c93be011333305ba743128f4cc

SHA1
13e7f3a6dfe7662e6a5ecf6b4befa01d4a4d0278

SHA256
4583d06e88a3ef0aedd168329e8e21edaabca4c848ec85544d2dce760cd4ea78

SHA512
1000e71a5738a947a6ac7a10868ebaaff75cc99ce457b2ec95996a73994a6e805245ab68f2f2daa5fef3703de3ffc08aa462c5b232e506246018e5fcba93cd1f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
4942b8370c8ff6c32bfcb61a06519dc9

SHA1
531ec819b75661388ebe28a1af83972400e30e90

SHA256
c72721be6ffecee1c61a20e2e170f7a0190e4120830f8680f11faf48075b8519

SHA512
97b875c65b7cd57f82f415f20fd85ff8af69a808759dbe1312e0d1601fd78de177b787c06d725c979f104a5004081602275daf39c9190fc21f30d47a0e80f409

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
de400a0dad6b75f72d4146674df3b77e

SHA1
5fada864087ce1c56b39d8b618625c690031e105

SHA256
9837da00fe5fb1482bb608feea63409595421c098a08cc40d95bc24b87dd82b8

SHA512
2d0ac16fd32eec180421c27cb2c43240f45ee1764e1fdbac80c852590649635e3b103af82fcb2f7ea23aa7fa284a8fb81a8a8293e2b60e05fe7563b10488da1d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
4553ba0dd496c0409f0b97c03920e56b

SHA1
4a2527e1a31531c16654bb1754a295cc19104f70

SHA256
628605c7432e673870ce84d84baa156d451ca32adc0da043cd70e9d8bccaa39d

SHA512
0a35c88503464e67c551602853d32e7f8a9a72da29113a5e78d9cbe4f5b27c1e2b3b750aa1c8734d63032ac8dd85b0b908fe9708227eb8beb496af5995b8c969

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
02a4dccb3923d181df9d5fb104b4f8c5

SHA1
d017588fbae3acea9c83cf4a92589e64ce3a100e

SHA256
1c5aeaf348dd4f14fa40fe4cc8aee4a9d0549bfc8a7706355948386446604609

SHA512
6ed1d90c61348cc88981a7eef7814c5b552bbb5f4e7917da6038292a5ae4098b2e532c13356d807bbf75084679ad1431f1d2a86f6ed2a55af882f4399a7d10a1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
24fdebe829faf720ecaa3c018f62deba

SHA1
377c0d48b6488502642d38d1dbd3452a697e5780

SHA256
e1b2da1495f6e4683fbd375b56da9f5705e93c62561ae3a2fce97691ae484035

SHA512
6c2b14939051861f0b1d217051a389c9e99459f7b7f8381088049b2aeab15718b35769d453f271e0dc5019cd78106c6b0d9a92f73673cfd81f1922b079847e81

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
e38f8ab488aa44da20a140578c103c13

SHA1
9470f09d13445ad7ae57a7f90ce2ae06d4638910

SHA256
064ee00df9e500024a1e01e5da254a8ddec14c85e1fb5bbb13f40e71b125703e

SHA512
b2991a203616f7b35e9f3e4a4bebe895734486ea2f1cbc3c46a5e4251b10cf906add4faa02cff73cbabcfd807f96690e54b90e4b8dc3e498c641684b4a98a526

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
ea29f82addfea63462a34e35b04b4fc6

SHA1
f683cae7d369a49e64be98165944a5925da8c3f0

SHA256
f2b08d717c290decbbe4747417682d38aa0417c6a61e0bffc6b742dbe02c604b

SHA512
23d38cbe599e624e02bdb0860830adde7936afd4ec5e4b39a5ea6f07edeeb17ed346bd2e369e9e567ecc0f93dc14b9abc7548ff5a57f79e3e6442bab42f6047c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
0ac98a6561699b91c5b568a1640d53a2

SHA1
0a656aecc6d25fc24e54c9a21a2d5bd0d460c91d

SHA256
4dd9f778ab3efabd40048eeff2dcdd218b61a862b68f3449a5c07c6b374f6aa5

SHA512
800ba2cde789738d3460f1d015ca1eea7f1793534af451a718b8259912e58d885d236dff460ff45190185e04462c8c8ca6f15d1ebacfaf75b637747f977359bf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
d59c8a746942410c195a024d9b62c294

SHA1
a4a1786a61babcc301b05ccded5b067129365f5c

SHA256
37685368976f7fac09fe434b448d475d386315c0b7a88e63d8f10126b5184f04

SHA512
eb915354e52990454ed1621a1ecd71b94fe3e866bf1d9e933275ab4239fac59e7f3ce0619cbf1a5addf8521ffaa4d75823c643ed1b91a106a8dcca434319082f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
aa0a764ed99ee46e4af19d20a838bf15

SHA1
35bf800f082e458429c9fc169a62884d43ccd3e5

SHA256
38328d9fbc47615663e3d4f732fbda9447da8bc45d6d8fc9734955792fd021aa

SHA512
13009230cf597f20c983aed9d2b811b41fb95e633cc02c3a8332f5b5b303f28257695f76c4bbafe1a22491aebb8360342da60bca4f0ed9cc26390d4410b2583e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
5f1732057ba0718967fb64eee08a0ed4

SHA1
771b79c71b53126c57c6014ae17a051c78b666cd

SHA256
08bcdfc34a96af87b975f3ddb443b964bb21e09d951c8d04f38cda005811059f

SHA512
df0daa2a29a3a0dab237b6ff77889d29e7f122a70dc8ee435632bb160622db3895c597c091467e4e7936a26b099869824a965c4724b5cf84393143c8f53e2072

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
ce18b8e36564c6263ffb50218dedcd6d

SHA1
cbc526ffb0a64bcf06c0fa10f6684ae71d3f61a4

SHA256
1a90fd71275981a60ff2864a907e4199e247fbdd720f51ed58057d711280d50f

SHA512
68c4b45bf72b7b7b9094691889f73bc8d5fbe14645c6e6bc0dec8ca657dbc072d0db855f643152008943cd830e4f370276e83f0b1d23b4a6457408ca7029988e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
ac3866bec787d17cdc6922028178681c

SHA1
9f3b22745fe51144a0d7edf8cd48cac486a8c551

SHA256
f9d9fdd391d562beec06f40258a4f08f005c11212710a433078109df5ba0db26

SHA512
5665d52610146310de37b4ac71ff9c7ca32cb9d921488ea0983fcc032f6eeec87b42da44042ebcc3b025ffb1b991025b2b8f8d564b7fcffc4283286e2dcdf08f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
3481c393dd80d34244e8aa8e03a2b3b5

SHA1
39d66ed5f2b9de8d3a5d87407f6f85826ff4eb09

SHA256
026316d42c7d101fb4d5391629833935ecf4aaf3f3727269eb59b6142ad8f9c4

SHA512
ad8a96b2ed54b7c92a8b0576e23071cb956e9e04a084ab4a4df7686c1adf9816d3a1776be343eb0c485028039f944c2570a1d4c082cb170e79d635afe7052ae8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
ed96079ac0439416e7b9bb3adff28ce8

SHA1
5689a726b3d5e97245c4bb015b14bd7ddc8560ff

SHA256
83b42763daa34c6f3a632fe37401a21f827929349e249f5524cf9e70136293a8

SHA512
268dd14e0f73f964875a0cc70401f6c115b2376a43de51d660059bf0a6ef956a40ec99a3f4f8a3ed875ea7758a114816fc172ceadd63304956dc929798bc3542

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
39f2bba871225201f3d3e0aec51222e7

SHA1
1869b668114df78adb7fe84521fd7b37a7d4a8bc

SHA256
36f91804683cbb567dda979dc839029a045424d03e1eb49874f95583fa6fcf34

SHA512
4788dbf7814e5f05160edd72407ab2ff8db59d073600accfdd8e0b1c1ecf9efaa7937976ac602085430ad67a1fae6bbca348f512e51553a396ce228c939fb8f1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
137318ef650b9b2fe2384b7b5084d85b

SHA1
64d42a530ec9abc6298f0b7c15390a58994d7864

SHA256
28a018ed1cf0123df87c1b59a6c78bc2f228632e776568d209427c12911fef7f

SHA512
1b1d882cc0516c48c1380180a8259f726ea8aa29020bb345c71fb699801d28abf42a5bc0e506273091fb7484c127d2e58d1bf13a6556c09499b2f26ab085468f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
795bec9116b5e532dec1d0154a057f72

SHA1
18c7bbbf21d2ede0052088343cacb6dd9b362a0f

SHA256
cab43e72721fe46c70263e224eb009af544cd52bb6171aa9ade15eb1367a1808

SHA512
944aea71f36c2aa104e87c8afe0687311d523a3c2b48f9da9e78b40b1c25b79bcc104c3153d80ca13c02a44399182d421c8738e4c48f16f1a4d1787cb09a8c50

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
d3258e68b47203b8372cff48af14f1c9

SHA1
028181593ed23f5db8fce2ab1733957d97e62bdf

SHA256
c8955594e1fd4d2345ac8a86f728c2eb5d0a608bffef12b47cbd6e2f3fdca73a

SHA512
078c8c066c08f3e83783aae2e7949161604f084abec6022d00c8f6ed3d3e39b8db6e650e0c732731c935bb53be6c4db249be35139213467c1ea6bbf497f5944a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
4cfbc4a0392ba89dc6d7ca13c834ce2d

SHA1
839f635f7c179fb21dfa1d10965f063a3c34d4ce

SHA256
d6cc64c643643c282cfb3c98fd748a2674a9b6b30d42f6377273e02fb382a56a

SHA512
159e0d406304d8cb7f58d9d6ee8fe27f24ff061193368e980d82c26da28f617e3cd31c3c32c764fc270d248c2f02f6c2f8d049b981d30b0c0050f56ab01517ea

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
c9ecce8de1c659afeef9190b435132a3

SHA1
37f2d4ccbe1cace34bd32ef3777760e68d7e9c71

SHA256
76b06723c622a005c838cd3991e8e2bb139cfaef3557a72830b8fdbae3e9d0d5

SHA512
1d254f88f31c8dc61ee8439ee73825700c2e74608763edefe93d847a93d0c875e20c71ad70b2bb1b969be08d55c45ea8445fbff307efa9f03c152033da31f4db

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
8c5b53a9daffcc84f2262e9fb71a2202

SHA1
f777a6b8e0a646020515a643812539c5762d9dbb

SHA256
d1305bdebb0e399f420cf2bc0c7f22a7e99e64cd19b87ae3f354c3030f371fc7

SHA512
1a5be48b7029ce23d4d7a7ca6168ad253ea943ec17e992d1f8a45908839ff2b78be7070a3c0a4b8dc41aadeaff77610adb0c5e32046be386116170f0ec124302

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
3e8542fade87d061582dac9d0a7d4d20

SHA1
1d7520c40b2883b59ffe2fdb401b9334b0961811

SHA256
28a81b94bba67483523ee69e339599b9dd2a6254be2b43c8251fad0d749e1f73

SHA512
1b47d0d934ecd613df43a7d3683ad96b0a26784ced720c8e204cb54c7922b2a2b27fe4288c27a65e3deb963e3777adf6a2cbd656fc1fcc7fe34c0731d994c4e1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
95b4c395626a8e501afeedfd73674e05

SHA1
b02bd58d0aeb75ce861c59c1bedd04fac0d77b03

SHA256
5c1d789d53be4f5ef447417f69dfd4c3000c18aa5d6ed097e388b6a8ec7d4411

SHA512
cc350e603248a87d652245953a4513b4ac503c5000b0920acd20764e8b33817599436c89c6a54d75d7258c3ec07d96ddb3bbb9c2ae1d52f0baa188f390220e23

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
12676f938c452f06ad3a88e90628c39e

SHA1
119ef2216950f6109bbf2df5e9858879376de6a1

SHA256
d6eb5d234176705533511cab5590f81a01d6055fad411531e72d19d177684b7a

SHA512
93a7fb0b9d098d31cbeae8eb126a08512f711125f1b16ce969bdd5e2ef30bf0be94acc68a0c0b3bf5eb296965e668855f27a3ec68b58093d881bfdc3fc295896

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
c76d3b7ca6800c520ebc1206bc35e2d8

SHA1
3bdb47fdf9f44390e05033a805f9b8aeca2de692

SHA256
0a58aaaa4a73c37c2297aa6e399672c6809f23d5251b631ec1aa1027b0f9a386

SHA512
92c08359dabdff68d85ac9c4ae23cbba4d0032ee0458d1fbcdf4eb64857290b886456370689bf973f9d360ea780ada72c85a7fcc48c2aa467b3a31dcf8073310

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
d7896366b7e0f81546aef58e011a5c20

SHA1
41837c378b4c4715478e30b35d698836dd471dd7

SHA256
56aa8fccd6e248f466eccebbc9f35d752c05ed96d53a885b0ace6c070c89cd0a

SHA512
2c23ff3b00ee1d3c22bac3c6130a51a2b53337c8eadfc5f60b23e735fd2dde6882274f4eaff2db995ed7f3c6be49abb711ed8306509f743a20a61d9013bc1fc3

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
280B

MD5
c3f458d9082cafde60db914991db0e75

SHA1
9fe93235e580b3b83e30aa38a41c89ba6010bb6f

SHA256
1692bcf4e7a1235b8d6d2c8f6d820bd2efd8d95e47a4a1d636cc62f126dc47dc

SHA512
5681d564f57eb4831ba1dec21676f48f57699e003e216300380dd1a997b08ac3a756525b2c509c95c129497c6a8be3ab96281172fa73b5d9318dd69844b89d79

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
bbf1fe5ea7a01ad7db87babf2190fa78

SHA1
fb3825c8a971ca033e458faec1627b3bacb51ba6

SHA256
2492a3aae74c905551891043084a82591745a28c2066d842fe66dbc813154191

SHA512
1c04520688e6bd4dbc1bdddd058d849bf9159b90bf38104662a1c75b663daf38c41579fb8fcab6c1ecfaaf6af58094204dbb61f6087fccbe9589ff1793ae3111

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
987d7f6f5284622a3c533032806be693

SHA1
5a62220e3ef68652133cd04a333b84bb474e3c1f

SHA256
dcb772188eca16ec20f6f7a1c243886e02c9e03e9140692e764e12b0d89266cf

SHA512
0cd7f820d6d2d78c5a5b6a371a9dbc2338d218583571e736eb8f3e172832b20b5b9b0d7e16586ac6d7f989408ce94b41cb5705810a3e520898dbbdc440112863

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
de1b8d3f7fca3948d8a7615e296cd87c

SHA1
65a702e8119bb572f2d7389ef3e87f1affc6c166

SHA256
5b6fdf6f08c71071dc8bb766ab97ab4db0c217985351e8b3800b3949dbb68fdb

SHA512
06e57e3f9ea611a99d5ff57fbd49a9b34034f3d38ee2dfcb3d0ff4f2f0191ad9834819bdecb16187925d0db4630fa158a291a067df5cc7c52cf0d9296447ce6d

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
b2d18d394333e4ac6bda0e9c51092ea2

SHA1
d9fdfce9cc16c457a92643975060a3972d067a2c

SHA256
7baf5a8528b55fc8d2a74e81a208ed1173d281fdd6d554c5f8dabd1201f87190

SHA512
ec29fe95bb4333291f8a84e927637d3c3bd5667d339cb4f9702906858eae95b99e0ddbe2c42afd14e593994246209aec70b9d5729db342565a381d8749e0bf2e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
f78752ef5fc68acd2e6ed36ca3580802

SHA1
b9bb6801c5a7842cb19d2eba630d9f7d8c7c7938

SHA256
ff6a8d0772fbe294b4d007fa66470de993da164684171a00bf3fd309f74c364b

SHA512
4edc42301da418167479fb7e62d02ee9aff1b48465713e322559ec66d273b7b1147416208a12860547539d2144c7db76cf0e397cdb75f22c23fde0a192d5906e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
929a0f1b88b8413ea163815e4032f736

SHA1
8afc3426ae1c86c42f6ee791a3c6f06fdff12a4d

SHA256
43a5979f048f3547c797087a6276de14c317d59fa879c57e786aa27c19a4554e

SHA512
f0590559dd348dbbfcfecc0d10a925e75e5df58bbe0081e508ea165db378588fde89f39736fc54ee403d7b2c7d1be24f23355b4a442db3e03d41441525ee8b40

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
7f92fd16f6b184a1445fa05dd48a164b

SHA1
80db33a1d314226ddba6b5e94e2db9eb2890eecb

SHA256
589b5148d0120b3e36da7ea44e4bd37ac7af7a3270c00d02ef0242fb3d843196

SHA512
29d9ab9286c556c76dd8f7030616b18178276d404e7de41370d556d3cf9d6f8c58d0e88a36d3a48f299c64bedb5061a883565a14b845dbb5f308e4f140495ecc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
c55863f46b9e89b14fda151777bc47df

SHA1
a429f6dd67d2349e24e2c6b7d551defd4cdaff22

SHA256
41f57560ffff6f4ea464124022d3e7178043e65041710bd63c7b32409aff96a8

SHA512
bd6e5fd8d64b57aab6850d29cca9950337462afa2fc15c74257e050ea418f0d2e06fce9e0c916b7c7de7048a125596ac118a9fde2dd15067ae4b2f165b57b217

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
6719ddc50a588b9a2685d838b235c340

SHA1
f2713aa5a4294f7677e76d6cc2db372c3ff04142

SHA256
6941a96b003dfb7bbcd30a9c615f43f094b4366a8b28ad7c16acb36d674119fd

SHA512
2d5f34d4e764784c210c1051b3e8308fa94c3b53d1b2e2a9de602ff4ef67ffbb62f65f5acb7e757f172dbd37b66f01dccd7cbe983c0b3fef8e24fe114fb53693

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
eaf731c0ad87026ceb19e29bbad22712

SHA1
391142fe5c1e89f29eb231b3e7452cf36a75843e

SHA256
f4debcb66c9416b9adc91c80f737ccb2d42f2ee705df79afee09a89c53d75a7e

SHA512
5192c1d70c344935f0640f49caae6f9bd4aa531644353add36ef62fd458ac262b873583a78bd9dc6063e424ea79579769d108afdc75f7f7f74c62278d3576831

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
b8a5bcd78ff4fb00f6e9e5e257086f40

SHA1
3c1f5a70d3bc638502bcc524c583b036d7feaa8d

SHA256
c35fbfc62adbc121b9d3929ed3c1de6f2336b799e1cbe9ac830734e5199202db

SHA512
a94153ab363f2ddee0a4bbde4251c29f78c7cdadc8fe9f1d3bb9da2a449f08dbc31b200842497b951f3e02bf202328ed6c55864b93b97eb312778d4bb867ee36

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
59475978ecc81941e35e2360b6522efa

SHA1
2b8636d4f7ea41a08e6c11b141298c2e3479006a

SHA256
f5fbb288518089765d13bf1c60d967638be63676ce6e67b5f04a143b1ac84384

SHA512
3147858cdf37c8c8c56d017d44e71c1946a225b70736949f4df0c5e6b99e05f5662ac8324b38f8d20803f7b33a587d286a565434f1adc03d22c793cc5e56726a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
e5285af054da35e0b7d9b5bb9c9a6d58

SHA1
0815ee2c236d87546b3b3f7c90d9f87a8c44cccb

SHA256
4ed0a61f52c21b47691d05d77c50cb3958b51f68b38387b3cabccec5d038a296

SHA512
0a68ef634802bfa8461997400182531ad4d108ee948e37a9ca5fe17bb19116d3d82270160a0854c07bb34f1c3c434d59ef941d22a646e9433b47727880ed00fd

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
3651694ec452b874514dd2480c26f6c9

SHA1
da4e36a7190e4ba9df9bbbd6ad4624e21307ee7e

SHA256
6bebf3517c8efda1072f8e110f88bdcca19212224f2285a547f4a1e7ab0aa774

SHA512
a7d8f99ac5c0bd9ad0d4b1fd9abccc508b2399dfcc9d902bda0f46652052fe3d1c3bf1df6f9c700b8ffaba6cf57d82d8bf050a07928e036baba879b063a5270c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
4e8c626be183d8bad2c7fcbe0a9a3032

SHA1
9d4cbb3945fbccb5b2a4dfb3feb9618b8fa60c21

SHA256
c966437caeed9c38d99945a47cd71bb2654d70e228e184d12c7dc0b01794c388

SHA512
b7b82f209bf0f0ae1f74b9148a0a12e99cb157f1f42144f50a6b59d279f11a04206fbe310ad026c8038a82666c800c67aeb31d50210b2da98bd03ba74f1f96bd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
723213e424f35db00d6b7ad3412701f4

SHA1
95e486eb500624df1c59961333c6e912720d0830

SHA256
a0562210bbb39ff32cff23695548f957c604299cedc0e29d520e2e5e7d6f939e

SHA512
cddea8dcb8e8424ae04c55a84164ac739ec24c9e6323fddc2209417b27d608bfe7702063770a40e47166aab0981d32fcd5e89192a1f1ad9be696f1dfbd70d3e7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
f0527a55a90fa195c303817c832e9bcc

SHA1
5b4146fb8cbafc48508ffd3f8f58b920918e07e1

SHA256
6e8d6983d56b832e0854ef7ffefcbcd4ccb16b636b6ac665718d9cb49aa78fff

SHA512
6e3096230ebdf744e76249780b40f103f716f9a4f752de4e1f18b1ec0d460758fdcf2e04d744803aba464399fb688429d537a56358328146fd22f0c4528618fc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
a9f61ad19dbdbec41499c19795f27d28

SHA1
5d0505d8d90b53adf5ec2ec8d8f7daf4ac2c0165

SHA256
e1538ae8d920147254886144e4109a7921e99d0dd39d78242ed2b11c10747237

SHA512
fd02a5435782bed6e8138b4b86c8108d4dc39f3b6482416d5d88f37a08d099cc3253e5cea2f93fbd2b58d689a235905f50a0c2f95470c83042d49f8b78688a99

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
2dfa1d8c63f7e0e6e95319d24f3f673e

SHA1
8a2b5f416fe1125bbc9281764a84a7dd53754734

SHA256
0f214d2355ffe52416659000759b0c48e49ad0a5d484ffb2e6630154f8a2cbed

SHA512
2cc993cdf4ecea2490fc6a4c9b508e11ba5978558aadef8bee9f9e7f7b820b3e711d45d6b72c4bdd2fb6561176e90728c5fa803fee760e8dfcee8d9eb771b83b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
ced3afc079296ac2ad8c8c97d7c97456

SHA1
612343ab56a98269ba51100f677699a75753f2fc

SHA256
efd93f087c671c7f10c4d296272cf72c35837f7b961c199701c075635dae6a0c

SHA512
95bcac67d66586b830d28fe67e21f44f3f0dae386d0d1991cde068a69ae06da663fdad0b8c8e376cb4d376a8cee3c3903b201fd268ca60c5d7ce964a996a8c81

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
10b54b3bedea39bada169fbb55c3701f

SHA1
3af3ea1e49aa99a8f30f3896b48cd79b3c85bf65

SHA256
a8420be805625ad9b251c33253605149fd2d375123b8b46db3c784f2f02a6132

SHA512
aea1d04c90414fb4394ce0b8f5af62a3bd4fa4a0c99bf6da9bd343b708d06957cddef0b595c7487c08dbbcdc65348e8bfbe04c6b1b34c1c28b062f83059d095f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
c88a58aa73377d54504e33d50603a690

SHA1
3e2cc0c86118272fd50531cbfdf634b37a26818d

SHA256
acdec22cca1c2a8a7b68e606db0acb56a9443eb00d1f08847e5fb830cebfc3e3

SHA512
d9f2d3545db33e2aaf635976d8edae5e7ecd97d69bac6d4d0cb52ef52f387c1800c124a1af7bb95ea8be752a6bc402a2f07787c19eb9e792868144e4db668e32

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
6b9d339803041e31d906b463ede664cc

SHA1
656739785094c02f6fce921f6930a243e44950e2

SHA256
fd046d6b8fd01d3d25c0e83f0672b3b1f99bb3a2fe6edd49e429c661d7bee911

SHA512
202cf09e0984aef9567390defe29a57ec5b85f65a20d37ffab598b437e5403aa30403fa423f860df88256fa68ddf18c084a3c602ad4932f146de7d5383b43a47

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
2560ef82b42299f83267693dd5a8b233

SHA1
19168305005fe590856ded69e9b465a85cefcc73

SHA256
5eab393068bf7f755cdf2a9975e871e68b9fdbdd6d2aa8a374a9b8f41d020ff0

SHA512
8875b47642946cdc3eb09474ed3e41a4cefb3477d1d6b109a433c67f05c3177c314e34b2bc712b2900a1dda71bc0e23221544dc30e3c35949acd6d59d218ab8e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
8dc64a4b20bbbf8b079ec4d967461022

SHA1
50ef38b447021e15a17e4304fbf5d49b6d0f5339

SHA256
53c51d2b0f6ba6909312223e85e249bbe1ed0bd406f278af307ec72143144a94

SHA512
4c3434cb8ceb5ec5ba9d175931f6ca02a8d1054b29df3c30da1d5af94f163918104b77f591c838d8738f605e2d42806a0c4efe54ea9114408dacb5d9e417e411

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
e2e1f22b88c92a4af8f4de54852d41d4

SHA1
310ed3f80b7ab6f126baf12562a2b5980a18a5b2

SHA256
1c7806c0e0ae7c1578c02411e32aa48102b9c21f790938c982d14af3182b176d

SHA512
f1d51a16c94ab0b7b32321e0cfc64821b14936fb7f30d4c0f150dc89852f6fca7d18efab12043b87a39551d46178c32d0623eaf74f2ee80385c3fb3942963593

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
a6e76f7a191edfd52e3ddace1c42d678

SHA1
98ae284d94fd079a155a9bd1a6c952b5d86184d6

SHA256
322c543663b945201ff098fcef85e30c3070b2a634374434c1dff1c24febb17c

SHA512
02636381385d318f35f8004fb418283db5962fdff1f494ad62c3a43e9837916324ff5bddea733c2f6ce0dc8fc2c0fdf02b335534b3e710b3dca1f386a0e3d478

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
96960c38c957df25dbf9456461110be2

SHA1
2286c93a0481937f875f06856b153378e6319044

SHA256
da4d995ceff9235de367bc00dd56f4a3bca396bdc93422be0df0072f2b6e4a46

SHA512
d872f0f7ad5970a8de504ff9c88c51c7e7512c62279836a2d3a40cc00e5968684b1f7304a23ffd885ca7b8acdf26e1370ddf09570dc26c546e0953d43e1630ce

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
93d17df1f27771d96b8fb4ab5002fd9e

SHA1
b46274a5961e0e6cb46968984db1af84cc9c7287

SHA256
0f7f3ad5c6dc99246a2849d68439733f06514c8d9793d026dcef76da7b4f92a0

SHA512
175344aed0245b6102ed4b0605b0c2fb2cf7f5f7e43cd595897afc517b01a39f7cb2380844ca44d589072cd692becc86419e41c9e4826cf45d220450ea8c1c9b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
7db60068bbbe1d8d16c28cd6c6ca5aa1

SHA1
ed5729d20c8c0ab4c433a16778635da3c4d4704a

SHA256
09e4038ecc15f0e5a1d7168448281256ad9ace273e6dd5f8dfb493b0aa132f81

SHA512
108e421324ed8d6e81bfc6de7ef89eb672ac6ee9787c24af1af3fab5c528a202cda0c8da5ebebcf175bef1657cf7663c061e12af4261e773d5e2bfc11d376b2b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
ab0989b38eca93a8ba0ca511b79c58cc

SHA1
010097246a254166476298f1aa2390a8f69d92bb

SHA256
095b63d6f2b62466cd5c1ca7e7c8c3ce785a0b7f30a1e9202e34298dbae5a2e2

SHA512
2f730680409fea2d9ae97e69b757078b478c31fabf9837a492b4d3458906a11fd18856b8bcf19a014339a93db1173621c03db2ecdc218a8f43ab8b805c541e70

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
0a1341827b898c0e8d61a43909475a19

SHA1
7d82877d291ba0cb929b6f356fe78949f8bc744f

SHA256
a575b0bbd0ace06cf3d6dacacced8191060876edeec640c1aa6e0caa72581d98

SHA512
222780a246ad47e196d398903769c4ee6016e07e73ef169bd49cca36dc312902b9d25bea811fdc5b13e03d592d9e4a7078bc4506b1a9065e7e8f3d2913aca7bb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
c3899f041888c39d36773d214988505f

SHA1
e75273d98e4a7e7a241ff933bbcb6ce87ea8392e

SHA256
e98de94c4ad828ab73ee4100edf6d1fee05e49675cbc12dd73b9c57c78ca2cbb

SHA512
e439cd68fe089ba0ac48f6c9b8e41ba001706a7b7d10df0365513167d9d9006703da8d8409d5f0bf659f6e28cd06e045ed454aacda7bbbee2c6a89c166f7e21a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
182f122af7231f08660743a14e84e357

SHA1
db6f12b515700c526b9b7724d5292ba557291082

SHA256
233369addd8a06ccfdd900e2e7f9ce446a390ab3c42079e4d614b022abb1e23f

SHA512
ddfc89743a520f1ae7f2855b5e25666ccc2a57d52ca4ba672b5b527b203c1c7876417f1fc8c6c2c20f60d75160f70e316beee8391acfd35b71baf92768a176c9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
6b80f82609edef001626413a82eaf0a5

SHA1
cfb7c090a316b0c286e9fb327840b398adb57aa0

SHA256
f5c79c778b0f9b0027f75cb9b79da47789bb82f808452164b7ae456652f5c608

SHA512
bc95a290d17ed113586179ec3e15ccf1743bc4ce77a76bb66d9dca1c4b2a7e5df60000e40e365f495ea8f681888e128e2e8529d3595a60c5107ddc0e551147a0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
d345c39aa8fe5bc67942f9d102dfeb80

SHA1
f6362ba39a0ba117517fad748af60a008005110f

SHA256
dadb15b5672bd92b31dd5ad135484ac008ab333bd0bd73d2b37ba1e934587b74

SHA512
7d24525e04840a42c1ea588b45b4f84c8600799b2eafbbfa6150030709e2d0764f601e85d1c9c74ee1f193dc8373d8c2a8bf928c924f576ad62056e4c0ec4443

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
0abcac12b964863d1fc88f22b66b83e4

SHA1
bb3a4509f0794e4aca9b6f09385eebe5232893b6

SHA256
35595ad7e0ef8887e7e3be9ab766039b3ecb61860d1076a3a3684afc87797f26

SHA512
7c7dbb5fd19aa0fdd9249c5a89d7fb7e771b1ae1590ddd40841eebea312a84ee1265c7f43d5de46f09366677ae8fd7f3782de9ef06a66af811af39c11964d16d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
2364d8549473832f1ad40eac39a963f1

SHA1
c3b42c52702a328ff0124d3c98755494b2490581

SHA256
f5811d3f7c3b3ebbc8e00b728f9fd0a268c4c87c24f6cd83c47e655e766c30cc

SHA512
3f7560087c03226a04359eab2bebf2ad8d0220016dd75dbc9a0e02121731601585964daad283b80d4fb6c173a7629860a34395d8c85a591967b8f6656a84a014

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
26496e7a218cb2e44b122fd55a269d10

SHA1
d5183432d418ad92f66e0965cd3cfff0399b0559

SHA256
56fd030c17633e2f964dad06b104c9a9a7b204817d61e3cec3c3e7366d4dbe68

SHA512
6d5ec5394e4fe18e43133843ffe692ee254374d0ab495287fadb8108cbdd08fdc9a4c7e98632399cf70d853e52f7b8b08195278704ec61df6034656ce0c433bf

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
8bd1deb6ab30258f17d0617113831e6b

SHA1
a9913dde87018064fc6a66f9c041f75c49908637

SHA256
a582c976a2dde65d2a957661094948574fd77bdd9ad43ba66437b092fea6238b

SHA512
9b87afd8f395df7c44fe1b0339e2a69d951786ce47a8668502f2ebcdc5c092babc3959292955b960360e9ebe32639c391883a9a0eac1fa59a4aef8e3de8ed10b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
d8ccffaab8eeb61b2e673dc16e7995cd

SHA1
acff4a8f562b7509ab79a285c843a00efe2bd56e

SHA256
a1bd2b12f3654d2e160aa0c73de001328b6b1e8f97ecbc8d01a0c3f66094086c

SHA512
8d8834b326f27203e24ecc7ec94a23014b9472d1518626fadcec78d478d7dfe1a6ca8f12c89dc188cf2eabe7c4a5db3588dd3629f1a2c79b524aa2b535654734

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
4b1cd96d04e3b8209a8e72a2ee6963ff

SHA1
5c3dfebb3659c35f95e94a8dd8596fc6b219a7fc

SHA256
2e75e2b15b245292b49a9b996615f70da80e1c236ea091a1de761aeb1984a9db

SHA512
19a477aa3619f5d874d4547ecf31315c51b14ca64bf837fd54e57cadc51f9667da4d4efe1fcf44b0e0110e2ae46c551ed7d43d09f4be2bbc53b0164639b48bbd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
c02ed91a408c3861fc1df992a6508873

SHA1
77e756e7e6d4e032153492554bb26b014e59012d

SHA256
6d068d5b539dcbe89e01021705f730b8697c6394891037c4952b42f977e47204

SHA512
441cca83728634fb51beb8a73167688856c2f3b14f635482e7c2372c95ee0e7370cfc93fea29e90c0cda3b239c61e4b52fe75a82eb2c1e14ca84629532f04edb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
9431330290abfd175d220c3ff67dcbd7

SHA1
e8cce10ebd8bec687d0cf770f35ac2c0245e35e4

SHA256
5e82e9978671ab31eb2b9e91886c4382b8610bda0e99db8fbf9cbd068e581df2

SHA512
17e6b033c9cf645ae38d830c545f9083c71616d8a2e6900dd1b7b015e8e233e65dc7398672feb1264b84f501fb29e05d07e55f8ae7277d801ef7b7f50d50041c

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727655977808114.txt

Filesize
77KB

MD5
c4a4ca8f0f672a104ee2ae61e13ce93f

SHA1
0567529fa897081bb95340c752708ea770843f02

SHA256
d2c4aa36399a2883c02257a0bfb3942ee6b7ea6d2b8513ddede6df001ca2c4b8

SHA512
668d22a3cd27e8c013509dfdcd3d9adce2eb20883dbc281b83adc6ed5971af3823ec4a7291b7b28408e6fc691b68c0834c79502e4011f54937f57db90cd26f9e

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656717558154.txt

Filesize
47KB

MD5
ab79201e2424f5d3c27edca5b69411bf

SHA1
7fec1576f13f5ed8a9379e7826e0ce0c9a831f11

SHA256
31134a3e388d487773a74cff8fbd641d30493f68994efffafc0344f0a55b7851

SHA512
9b241a1ae0a7de1089b0c3a73befd462162a2941353174b4ad72e2aebb8de7d6a246cb7859ceb2f12ce2c956e8eeb7b819c050f5c562d44c3b4383d53ffedc5b

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663096253949.txt

Filesize
63KB

MD5
635d1b7a821895956bb5944cf6fd9f34

SHA1
49ea418a1542a0c5918683b34ba76b39fb905953

SHA256
bd280aa0cbcbe10a31523b3230971e2ab256d119be4e4a51eda7f08ceff6e228

SHA512
33ffdb1787713a3a666dce5d54d495939667af69f3cb7a047db5da27c0be964b871f2dffd2b5da634a4fae8b266ad1105adf506b9d4c97216c42c7d53c42a158

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727686997079339.txt

Filesize
74KB

MD5
f786d87b81a97ba8167571405a04af52

SHA1
d61c761a17285b69400565cdf169fcab483a8467

SHA256
3d86200ddff5272f8e74bfdffc6e9405bfbcd9f2430382043df65d935b31ae42

SHA512
e816a249c10819c3c53a732337eca4dc0dc53e6bf711a9b393ce1ac99372379231b23db92d212f4b29d881d9a303902d52872176e82c14f1f3e11ded16024078

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
c89809069d67ddb1e335486d571b8924

SHA1
6f2d791c48d5339c6880c355fe6f92021e295f31

SHA256
1dcc6f5e3d541cb980e18f18e16ce140b435a597de6a0dd4b552d517ebed42b7

SHA512
3b49df6fbadc2af028fff676b509e5a38da61c268a36e594d54e6dcc03e49c7d4f7c93dd0896f32ffcf020e68b27af0cef4c5defaf9ce70dfe1e176084ae79df

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg.EnCiPhErEd

Filesize
21KB

MD5
750c0171fe23c6690a4b2451f1a6827b

SHA1
263b6dca532b87e904b26b068eabd16582d66e95

SHA256
a6a6ce9a782a7e388cd1620ecff51e29afc6422025d04b90c1dfd6f40c9f581f

SHA512
a2741dad54c1d94d5f6fa21ef703137f01cefeaa9a5fb28087658a9fa8402c60a204dba0a73532746ff3ef221cd268e15619b0956d62b5f2336e5f22a56151f9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
927f23c3e3005c0e3c3259528926e4be

SHA1
566e8d190d709d322be95bfe6932c291a3659336

SHA256
ad25fac4bc40215175519f245fac61cc196a2ac1643cd520659af3f4a197bbeb

SHA512
4f02262f97575d92da89cb4d1f31e855ef4376e96e608148ee06d17ba14db2a28789acf4f1f7ab488e5d385f1a6d8d17f7477db6307fc65ecc81b3b26b5ec357

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
d902e242198f7975c14c789cdf784bd1

SHA1
1a7e49a34d95ec3525b4e1be81ad9f576850612b

SHA256
4364a5aa64af1bf4cf615b1d14754e24d33212d257316151b5f7bbbe2ed26139

SHA512
6f598c0d6a8eec74b87060e6a03ae9fce511e70d0b1539cad14181fa34e8cfb3830b3ca060d0833a4354ccc99d056d4573b36bdb3d3a37376dac3dbd8e906b24

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
8c63332a24cbdb3380eef6c52a781957

SHA1
1c674c286ac68823d404072f6b86b4007aca4759

SHA256
557dae5c11a602c669c08832c16006ffa9725a07089d59c0901dde3575900b26

SHA512
f901f716d1d876731d8b9d21ed9de6db6270fa1e05e0fe9fba54baf4d29cb229be48c0495854b114b9903c67198cbc6272264a778d9b259de55d59fe0cdde247

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
b343e7e47fbd6929397cc2a34061977b

SHA1
7aa40224ae79164e78fea7f748ef9ee24a3eceee

SHA256
89fda3b4e284b0964748027b434be01633bdac6d2f2ff7e28e715de9e62b69ed

SHA512
2c3ccf74ce6ddb825bc53a2ea391a23655672fb7f119ca179a5961d549351706e755fc6209179352436c5c96a5d58decd1110bbc1abab654398dadebb511acb3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
fe246cc369e17e5f61d3f197aa440729

SHA1
3c08c6bf6fe353ed71aacf84a82ab2db29ace248

SHA256
3f02e03a42660069b1c927c485d6bfce4805ea95165892b7cc72fc30404c8796

SHA512
b2dc246e5f3d5eecda2a803758fa03278a160f51832d08fd21aa84389b9555f74bc58117056eabdc921d73a020f9e02e1511a9b6336be7a8bff95c1c9af8a178

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
3bcb4f6a7e1eef70ca6037dd2b0e9942

SHA1
8ea3bd0eb928bad0a7dcc82d2261ce832df47540

SHA256
b0ade603097613c20207984aa2fffdea134b3d9f9ae401726beb326530276835

SHA512
4697748ef99e4535d1f1de2c83731de8bedd23273a84c8bb7aff277c4475b0edb650ac5ac7076067ef5226779f6052e76335df1746686828137a33fc79f9810c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
b88bb39b8c30dcde6b3657b09b752758

SHA1
5a0e924648c6edb56bb457b2cdffc2a77693c618

SHA256
fb177a63ffdb89c078e61b16ac163540abb0ad0b5f5c3baf4a2c12daa09b2d02

SHA512
980d1614a0a1fc0c7a07764a51749df0fe76ed810a37bcdfd358106134551e2a8a9c1819cc308fad096520f5fd9dbde3f0b2adbc6869da28feed191300de70ed

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
733c7e1bf653a6828dc4fad490ea3b16

SHA1
326d8495dcee58042dae874304cce2e65709af29

SHA256
fa0f02a93fc92eff63acb6cf6cdf5e694ff93fece358c56017aa325ee5abba12

SHA512
793d30feb28568f1b36033944414bda7515186c1c71c130c68925ba59d742b9337a4f9ed33eb3de2ceb79b1766d20fed04e1a7f380804a10448fcc70495bde7a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
1dce7214fe73c3e2c03c233e65dd04ad

SHA1
6bc09e2c00b06c6fd7a1428e137faaf8054bf732

SHA256
91e4241b813a855410eb86690ad951b1f1f64a22e382b30899bceed0fbe4e1ee

SHA512
2b8b015a7a0dfc8e77791a847ec186a4f0fd37aaaef9bf1609125ef0afab2318e711310313a435a1a72e58013890136d1747df1d2bd9b6035d2d4f24649b3edb

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
0512660bf82919a497143aa15bd55198

SHA1
f391aeff22e832c3faee1caf84f969ecfa0e9b34

SHA256
cf9e2da48ecc3c97a4453776db46ddaf92fab1a6019c49c8ead5ff48ab95dc95

SHA512
d44d8335cd628dbe72a56c7563a342d675f80f0a26f56a8d1c714dee5326f99952d0144d89a83e749ce60001655612aae070a2ed82dfa48e4b69d920ac0bee7f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
b4e46db065756422b0ecdacc8e261052

SHA1
1381ac0845ce8a0a1d2e47b83d0e793bc2422a5e

SHA256
75823c2ad0c11a1091090bb80a0a5855c64f86ea7842961e763dd4f78a075b46

SHA512
1f091a2516dabaac4f3ba066f7ec194e0321f85e2e93dd9d01b966949e0ca700a57ed702276a7f58bd477e34fe57c54709842a2eb86c43b3a1db7bcfe90b3e20

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
969eec058df03fd42e5e3877a4f98af3

SHA1
5f6b360304623c53cc3ee9bde939101028b7cd0c

SHA256
fc1e80727925ecdb7d20fed34d59b9b8999f7872d6928d068f2f8ebe8112d646

SHA512
202b69852cd2908d5010ed0402b60ecd6eb0bd5dfc4d48467820a0c0dbcb8d2010d3383d527784f406cf682155f0e2c71ed090ec9ce303597e923c1b59a68fa0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
f56052a1586f83c8f1940be52fe60fe5

SHA1
6f79c432e95edc1ce457681db53acd26e6f17e3f

SHA256
72d58b160a66f82836d4e69d877d054a615e4efb9e1adf1c0f2578ca29fafcc9

SHA512
d1bf57b723aae752f1379dc9d10ec9494668b0adde46bbc4307bc040aada1f56f2de49c9dc0ce445ce0f8d5a393898adf97562d315f24121a671301fea939eda

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
708e30967e5df374ebc61fce5e823a3b

SHA1
43e0b4fd3fd99820a2ab2b4604b540a03761b2b6

SHA256
dc4a0573bdf3d89a277ed63fca720b296f4e090a66af2c5d244d7b9b90560555

SHA512
b733962c9056f32eea999fda951dc3db0b8b372ebfeb5b436bfe54560ac841d2850c8530c46d4af2d5760e065fecec717f49df0886b13420bf962d1eafd61d0d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
c406f0cb683c658d58c8c7ffd9fa3360

SHA1
9ff6c95644fbf4dccfb8f013ff23dc9f4c3fb16d

SHA256
f2c6629f14df6d6dc709c8030bb819000686bc7b7d8bb11947ed0ffddeb1dcf3

SHA512
6597adb448048dfef5b3db32dc16e2559282ac2bb6428fb7308ed25e33492456ac1f256ba4c92ab99d2e81a83f30102cebfae795ec189693256a317f6f42efed

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
4bc39f98f4bf411bec872f2a8ad9f6b5

SHA1
ec67d8a40bfe01d4b89d79575549ec8b97f9044e

SHA256
118959d24b4841c09d082b7b8a5cd4a2920ab5c1465ff5c9f5fce0ee1f9bb784

SHA512
7435f2010fdc810308e800a3488692c6d1abd5ddc2eab2d1792aea83542eb9b82d2bd1d2d2851c7542dfc4ea0f0229aeaf48b09c1d396a8309d2a550071195c2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
b08b9589fe5db95e0c784476e725ce53

SHA1
6865b73621e6104bed62dd149a4218b74d328d37

SHA256
377cddf3d736695ef72f6feb1d6d1bd514dbcc2ff7d23576867275435a423968

SHA512
d51f67acece3be705b3a512caaba34eacc85284f606ef7d4fc242992f68ff2cb966c421d4dc69f07bca28a24857ee7cccaf060020cd49df6e6bc621b408e6bd0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
4b1c29b2497d5450f98f21027bb88794

SHA1
3cefe97eb1ef9d16c9187015f9caec9999de4a76

SHA256
2d0a4fa7105d9e892810f170eb69e9054a618b2a93e2409d965b2f0305c23c69

SHA512
e4ba9290e3da827bda3669cc8d6359b309f6d91cd930831252ec8406bf35a1399a7ecaf0067bf0ae65ee3d234c6bae2f40dfc1febe430451f0f9dde7a558cbad

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
1dc333e69e9a7a2c3317e75f8e44450b

SHA1
908e70c623f51cb166d19aa486e71dea01971886

SHA256
ca40e2041150f1f1c405fa876e07c0d9e47673ffee6a71463f20825956d783f9

SHA512
0749396cb33279d1be6ddfaabb5b7aa9a50e1fe7f30d47d4f28a6b39911247d2797af8745e364d363b3baaf60e7fb85b3ec3a9dd88c696b8216b230b5784fcba

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
8ab70323e320f13c1d4eeb4f413bf8f4

SHA1
6e2eeddfdaa403839f9091565720f0b55dfaa7e9

SHA256
371088b9795e1a8d058b2524f96f0d6f0a45a8da95479a4a4a8aa3277eca8a8b

SHA512
3c48ec80f11379c880df8044914b59c9eed9ff16217fc59a5cb2d86f3e8f8ce3e4b2ffe98b770243d3da96f170ff8c651bc6d8e0ac2b41f51ff3d0df07e96a87

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
66499003a38e8594d084d1b78e6f56cf

SHA1
0d41294dac6a9a23bbfc5f1206ec0fc2826a76ca

SHA256
e38d809eb9cf1b6787773a55c540e5131f2f6e22be4d4da45fbe432b380e0b50

SHA512
bd548c81949b6a861801f83b610f6a47e16656114a9b6fda38b236d226989c2ba8ac24db85ff7fe6a0e33c84cdf992b1280b434f156f6b2456bc83ecb74189fb

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
ff8e5683e567f09fa027b2fc36c4a389

SHA1
ba656632365b40c93b0251cf4fada4a0f283ecfc

SHA256
cae5a8071eb68df964aa0882089ea6b09c8e6bb6dbc9984fa88eefe3f609fa13

SHA512
935a0a956d4fb57f93594f0ec1784539ce9bae81e1bbf7ae5f66688d989340223610e798b48b93270c828a918ba6438441a3ad1cd3e7c3090b4c4c6370bf381d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
c18d18a232a717cbda461b4d910b1003

SHA1
ad90ef45ec859f039dc5a19872e7a958e97ae905

SHA256
2d25a32a007813841e49648b4536d86f0290e98b437fbbb939adc6940ff70759

SHA512
170b5a2a416a46cbfcf948ff1c95be29343e1ed59657da6de0ce0c0da0df3a506bacd927bd95beb48b421119f84b0d9ab2fe633f939065c36866a5311110ac12

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
14bec307c812b136fad84cb99898c51d

SHA1
ce35f374120e9a709b6e9f6eeff5fa0e168b9bda

SHA256
4dcec7a9037a3c5e1f64c614091201032ccfdf34bc1ee7502ac487a6e3737b34

SHA512
490134824cea21e1b46f04fc0398a27be77f9511312a6d3dd00d42c54d2bca4e95eb73d75b76e7e75decd79ef09974dbb35e1203585f234b4a6849a768a81738

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
edc49d70fa9b9c9133915c1c33a2e3b8

SHA1
c4774d815d90e234b8ab4238731533a383d46f4d

SHA256
5ae9e27f835c3e9a0919555d9bd0d3dc521b7bc13b23efae872b495bb64b3220

SHA512
962471d5279599e4cc1e72c10caa882ff4fd3e51946cd2bc857f73bc9da3a14d5e07db77496a10464bac40c380a64f6617b002f59f307858ccfc91b6ab4bf1f4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
bb31c36a1e9dcdd02068d174956d47cc

SHA1
7a7aa523961bf9272d94f3dcb71ccd14d905bfe2

SHA256
c8413276befe71755140c36da8b39cdedd1aa7f0c0422bbc619703ae0df8ba61

SHA512
eb3bc94001109ddb66233812eceaa6e749a59a0ca71a0d33f60e12e4533bda2fd21b99a36aabb0e20c87fb2d77156ef4609e5961af2ac135df3bac1c875e353a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
d373a123ec36e03dbdda69ae7ee1c65e

SHA1
276b3b7e1d131af729c567beedc697b2420b7896

SHA256
d6435a30199545c6ffc6d6d80be6cd8752fb4b3c2e24fcfcb299f84ef814e3fe

SHA512
cee663c116f6c232e89d8d78c596d4e2f375509484157950de2170e2fa24df1a7fc091159cc9da3d3e6a58fe82038621eb3e33581e4016c3d9cda55799c06acc

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
bdc67abccc60f96f2c29c5645bf7bf44

SHA1
1c556e43172b236153aaf74f4497286908617cf3

SHA256
5aeba9bd02dbbc15c3314fe8bd39d2396c7a124f72584e4b5f64e34fe08c13bf

SHA512
db8ecaa4e1d34c5fab6154b94e25460ee24c0f23ae51ba4570683d9840af1a97c1087d83ee0f142dad3cdf8e01cb4b3426bd3ff3b354bb4c25501e8234def2a8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
baa28941a2e5aab8f8ff0a3a9db95da5

SHA1
b85922938f27139da4b23ad38119c57f173ab743

SHA256
d44f77de788d247f1ab7f8301c44c57d4eb046cdf7c4c3a37d4f40ea34e644d9

SHA512
e9f35667e61ecfa82cf9a05c53e122daaf4ba7a90f59061ebcfe88b6ba9081e7ae9a5c66b6a78359ba34e051052205fa96b60b0209a7faab50fa72203ffa010d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
f40fb454f09384cf243bd50e3b22ba99

SHA1
b01232483a5d0d926ddafb50a475e2e6fb2d0808

SHA256
8e1090714f7ec9d0c268c687255acd7bf625efe06de555f42e5c831dc0f777af

SHA512
a9967610d0df838ccbfaf45c17ee274a503c9d95cc4b5b36304d56920fc6927483302d19f4af8ddff77d2804c5c18c43558e9b3479574d63dfea6b985748b0e6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
cbbc0b0ce7da52c53f740df82dd5d7e8

SHA1
97738f4247b652f2ca23c7b185c92900c9aac081

SHA256
b67c448e23cc92417db984652445c1713cb4c3de3523540e55b2a12afed81aa7

SHA512
223f817f15c551ac4a1987b96149accf455c7e420b2ef9a905ff9d19c31e9a8fbe7238a2046e45577ab54f7108a70fcdedb44e02052e81ff43d62e12cfaa360e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
dffda428374f287758a94b83f0cb4046

SHA1
978292029a52aea818c79384d9e82ce4677f68ca

SHA256
626a216a2419030d67b7eb65a0adf00b5ff91156622fe34837582143117891c1

SHA512
06a5614c45d372f671eafb52d710a29ddbfede7ae8f9696b4c11ccb1c8393c63aab55e579db5010537ff87f223f59693940d3c41032869555dac8fdfd1988b7d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
c93786be5915a2dfed90aa471c193953

SHA1
98d3733323a6bd072ef7dae502ae496cd40150fe

SHA256
da1995c6dfb888c988f02a8bbae3aa05be575c70b04e787221c28800c4f6caec

SHA512
d2331ef2205f96df368ad42353967c9a680dd0609c9c3784e7485f8d8fdbe78eebab9833a485167d177ca34e79eb6457335a3809c4e67f62e2cbec6960716a4c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
ceffe639f54afd2570adfb489a3f1ce4

SHA1
3452330e95dc44c08cd96246ec2d790348294671

SHA256
ea185edad7b9ca47df85bdafea8839ac4eac935eee6679be86bb0a92f9841f50

SHA512
5a4f4322fc2e1e87ba992d2946d4d9efb3be97aa49936e5820fad0d9bc73683173006554eb791cef480ccf4360db88b9214cd1d310af6db970141e161e579331

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
cecb0d0189532ab4279c8dfc9834c2ca

SHA1
8840fc4065607db44437eeb4a89d79c4c6a452e5

SHA256
8ebd94287ff889297ad5f0290632d755dedab9310aec48e2bb7af5b384ec8b61

SHA512
53444b91061ade732b7d687404bedddb4e9356758813eada84b2273b0b3882169c735565e77c8c67bf7904ae11bd8c03393eac9b5667441a4b6936d504940774

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
84bc15ea20ffb2759d3268163b492de0

SHA1
88781fc1e2186c5e6b8e2cbb047530b38abec434

SHA256
2b02287facfa88e89f2bc005bcf249e5d6bf361efecd6e1b96d0a2d4d0d39a34

SHA512
46584409487f2f3ff0b28160e55dbf98bdf69b5158cdba0df64a6bcc6a018d5b1c237ccd22c6c6f5f70023f2be8a15342a098317ea21e7ab490e49d49d64154f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
3fa5e9293aad26edeec293b2d473b27c

SHA1
8869774d6dc7efde204e5ebb45de1aaf2ea8510c

SHA256
c7c66544642e4bc619568e900f610a2324c31f75bbe140c4b5a36289100fedf0

SHA512
19ec7ac91892e92a21c823bf6368f888f468f68b1a5eddebe66d4d98e98019935d094c10bf72adbd1f05bfb0fb0ba26df6a6bc3b8ef2e33ec916015876399122

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
4465591e5b4cd6664f53fce2f7d42cfc

SHA1
552d51eaa6fa1d9c0af259ef91a4e2b5f90e0b34

SHA256
1cd497914940bfb3d03048fb2fc78c4b92b781e1c5d81d19882a3b93005fdf10

SHA512
aa3852e4c85d0370fd986bc4d7bd2848f094876747d5f75ea651714d070aa291a8ec3fe473e9d1ea856c624d5868e8e9ebce7c24e553d84ed1b02e7ee28608be

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
65ac029d4741972f2ffb5c256b66e8f9

SHA1
83279aa8888f025e4ea6a9d1e228bf0caaa232f8

SHA256
89b2a4f2ecc607cfbd0db954a03744d2203b8458586133f99870828a1ff504f1

SHA512
1bd99c2a389c5e373490f3e6704b4057df3b5db88b48c6fbc766e2db024686526b720c2e74275753831b23e6d2c97f0ac2443e04312796cf990f57650ed68d8d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
8f81e9da44b73c665f80ef93aa8ce5b2

SHA1
26906ac7aea3ef7bcf0eae087876477207c727f6

SHA256
f06986ac9a362dfd0a4c1bf8237a7c7ef50ec5c942825e7225481cfd6d7bdeac

SHA512
861333efb280fcda8eaded3ff6734821ae84745c33ab9322bfaea23e4b0f4b695f90e8da9a8ffc74f49a73cb31003fbe36f37b6eb8b9f77c13a44b9bbc9eb26a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
cb5165b3c6e44e6a5ce2cad93a64497f

SHA1
3929e3ce75d7a86a47e9c561a1e960b32c332ab3

SHA256
dd69a3beb65623429b3c2a9ae40d5eb8fe7349448f86b5a68487d4271ae2fb49

SHA512
cc4cca84ff6ed71b645b51cffd1bfc113972cfbcf6abbd73cc70dee5901e7fc37c3c82c872f9f8e51043b07d3f83b797e53cfd248119fcb57a9cf632dc7e5f60

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
653f02317cd86f85132722cc944c9c81

SHA1
2e85f118c441715c23ed51f7f4d224fd2958449d

SHA256
98717acee83a102a3f1b61d549e6d8a4e887c622d04447fd66958410eaed11be

SHA512
0c49f519936ad712680288f6b4b722bf351dcb535faa71d362ee15533cf7ba7aed2dd2378c123d669f5337c3f67ddff392a39547778430284c47deb1a5523c03

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
b3caebddecb4af7805abbcc571d5a1f0

SHA1
a83df0c063951af557e0210dda069694ac9732d0

SHA256
90d32bd018b8b53a7d97aa8ddef01002750c93fac9fb7285c08ab68ab02f3c50

SHA512
c7d8e9d5127c85d54b1670a440c0b9ac7151d5664c1b0f24d849b498fdafbe000d74809babd895f08319664e19a75eaf5d35926ecac1d12d658d6fbb72508c26

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
28c4186cf420d6f28661db8684b9e537

SHA1
0b3a8045c035e7d632367bd4102bebcd2e37d234

SHA256
fc916ba59e01fdf615e63464a4dc76d7e21ae8aa314a657d6f27a9b6f9f72bde

SHA512
23ffd0daf58ef2198dc63081e47cfa42c4d5999d914b2f0318d589bb8523946780770140e560d0826901ff08acfcb270e2f5fd9cdde14d54ffb3b48c3c925cc2

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
af13b5409d841c1f2f7d71467f863303

SHA1
0dfd77e724cff5e88d4325128bf629493aea1e12

SHA256
c27ee44aaf8c7d3f31a90b55c276c387edff1f26604bb70ef646682a626d4559

SHA512
e30ae9bb137f69188ac59f778ca1bf73bddf3998e89cfa2971a76793be9750a8352743b4ac41be428aa05dc59f76923448002c53b5848b55af2e7b120d4db50a

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
c6a4b2928d132da51c3ef23e69aabccd

SHA1
66b4c11e7141f7c7f569924db3747b03f887bc2d

SHA256
d5a821b2ac25935a03da202ea6d8f9ae21e7b9bda4b76e193198247ea7a85cf4

SHA512
ff4af8cd533760ddf9ceb8c31620eb2723dd99269d6d49427bee42bd40c2436923df93b2599e96a2c6f815761be7b4248892620c5362e2ce2417d49e87f8327b

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
995b5e5aeb3c0fd3d5fff883e80822a0

SHA1
f809b921c45181723735a66a49e6ccc2c953687c

SHA256
395296e5fcd677b03d4d7b596f4e9362be3ff4ab1d03675150322bec35575955

SHA512
90faca3ea39494acbc24bba9d4568b82d2c30cc02bdc0f0e0e594829cb7a970b9d924d5ab8497cdb5031951c474af5ba7406e6a46ff9f7d9a65c1ad158d8c650

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
d0d2816b213de36dd202d1ae1f28a521

SHA1
beae0a677315b0b655de78063a9ac42e2f0fd53b

SHA256
2f54465bf46078bed88851ac528a5ac14ee7a383575eb70f808cea8a9ad19f34

SHA512
722e3b24636f64ff2410bda88ade3845b12702fcfb4f531ab63324647caddc1f9c7335abf487466c7b4c7af0a2917f997a0bc4c6be72141233cb7a30ffac777d

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
b3d1a790894c6ef34e93c7b176994196

SHA1
2a01d4a052d3ec601924a024e982d35a1173bc7e

SHA256
3879c10106737eccb61fe2adfee51c461f39c4ee6b7f8522979fb4e2c0fc63c1

SHA512
908ac9ea74831ca63ab315d9174f63b96a29db199aa5194946b0b68eae874f225cea8c8d0bff9f649bdbd41767148470492f69a2bc0e366ad13735c741f7b90f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads