xorist | 19b605a68fdec32ef6e596bcea5fbbb8f22c84b0f43a9c6f3e0f6699d04b545e

Analysis

max time kernel
146s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
03-11-2024 18:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Size

222KB
MD5

8ccce69652942733ae5ceadd4faf8320
SHA1

d50c444d6959e851b56c7018b810b91ac7f9c14e
SHA256

19b605a68fdec32ef6e596bcea5fbbb8f22c84b0f43a9c6f3e0f6699d04b545e
SHA512

4ad035d016b660e0b776adaaae5e07544207a5cd4c8ae209be4ebb5dc14820e79c9c51cdfa402a3e5dfcbccc70cbf124635b000d50538073e9b2aabf6257ae88
SSDEEP

6144:WGGG+BFoqjHH6oHI4CzgtD78nfa2Dhb6vzSFA:iBFnH0g78nCC8vzn

Score

10^/10

xorist discovery persistence ransomware spyware stealer upx

Malware Config

Signatures

Detected Xorist Ransomware 8 IoCs

resource	yara_rule
behavioral2/memory/3668-2231-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-5166-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-10041-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-11040-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-11167-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-11444-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-11445-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist
behavioral2/memory/3668-11450-0x0000000000400000-0x0000000000479000-memory.dmp	family_xorist

Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist
Xorist family
xorist
Renames multiple (2208) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

Loads dropped DLL 1 IoCs

pid	Process
3668	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3gMvmFgvytPK0VW.exe"	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\usbncm.inf_amd64_9957a38c3d2283ed\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\000b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\LogFiles\WMI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\setup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\Common\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_battery.inf_amd64_5637e58e54fb24bb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidir.inf_amd64_7bf4a320e4ec8b3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netmyk64.inf_amd64_1f949c30555f4111\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netimm.inf_amd64_8b2087393aaef952\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\IME\IMEKR\DICTS\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\Common\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Dism\it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\DriverStore\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsreplication.inf_amd64_cadbd20a667cf903\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\iai2c.inf_amd64_a77c815b2999404d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmminij.inf_amd64_a85c8e1fe15a9532\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fssystem.inf_amd64_89e15d7e662d6584\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ialpss2i_i2c_glk.inf_amd64_7b6c08738ca8a856\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netwtw02.inf_amd64_42e02bae858d0fbd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wmiacpi.inf_amd64_4ab67656039b026b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en-US\Licenses\Volume\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\Engines\SR\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\XPSViewer\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\cs-CZ\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpn1.inf_amd64_7e6108426fdce03a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj5.inf_amd64_6f327fe9ac4fdb28\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_0e2452f597790e95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\da-DK\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\circlass.inf_amd64_9f3f831d13d3df1f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\kscaptur.inf_amd64_b95d9f4691816045\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.WSMan.Management\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAny\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\WindowsErrorReporting\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_unknown.inf_amd64_9f92c189b415c003\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpp.inf_amd64_e196624c9ed43e83\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrasa.inf_amd64_1bdf7a435cb3580d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\halextintclpiodma.inf_amd64_7f59f2c73a7fab14\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hidscanner.inf_amd64_b4d877fbd7faf471\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_hfp_hf.inf_amd64_0c00f8f3a465c9a4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\miradisp.inf_amd64_14cd3615d012fdf0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\virtualdisplayadapter.inf_amd64_bcc7550a6e285f92\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Speech\SpeechUX\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\chargearbitration.inf_amd64_a0097842bcc7e487\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netvf63a.inf_amd64_a090e6cfaf18cb5c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmdcm6.inf_amd64_8b49cb79b258e1ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\es-ES\Licenses\OEM\Professional\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Wdac\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_camera.inf_amd64_7b52a9607d24ece6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_scsiadapter.inf_amd64_efffb8c026d3abc5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmmot64.inf_amd64_2afbe7d3ad20f42a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\megasas2i.inf_amd64_ed501deb0beeb5cb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msux64w10.inf_amd64_5aa81644af5957b3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

UPX packed file 8 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3668-2231-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-5166-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-10041-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-11040-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-11167-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-11444-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-11445-0x0000000000400000-0x0000000000479000-memory.dmp	upx
behavioral2/memory/3668-11450-0x0000000000400000-0x0000000000479000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxGamingOverlay_2.34.28001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GameBar_SmallTile.scale-125.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-16_altform-unplated_contrast-white.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-96.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\TrafficHub\contrast-black\MedTile.scale-200.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hu-hu\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\7-Zip\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\StoreLogo.scale-125_contrast-black.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNewNoteWideTile.scale-200.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-black\WideTile.scale-100.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\lpklegal.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Car\RTL\contrast-white\MedTile.scale-125.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\183.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\uk-ua\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogoSmall.contrast-black_scale-180.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-200_contrast-white.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28002.0_x64__8wekyb3d8bbwe\Assets\AppIcon.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSplashLogo.scale-250.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-256.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-black\SmallTile.scale-100.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-20_altform-unplated.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-200_8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarSplashLogo.scale-150.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-72_altform-lightunplated.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.513.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\find-text-2x.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\apple-touch-icon-72x72-precomposed.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_NinjaCat.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNotePageWideTile.scale-150.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-16_altform-unplated_contrast-black.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraLargeTile.scale-100.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_~_8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-96.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Standard.targetsize-20_contrast-white.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.scale-150_contrast-white.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.targetsize-32.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteNewNoteSmallTile.scale-125.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Images\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\XboxApp.UI\Resources\Images\MessagesXboxLogo.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.targetsize-256_altform-unplated_contrast-black.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-gb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\LTR\contrast-black\MedTile.scale-125.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\Assets\Images\contrast-white\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-60_altform-unplated.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-96_contrast-white.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\new_icons.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-80_altform-unplated_contrast-black.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\rhp_world_icon.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsSplashScreen.contrast-black_scale-200.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-96_altform-lightunplated.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-40_altform-lightunplated.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ICE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\TimerLargeTile.contrast-black_scale-125.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Transit\contrast-white\MedTile.scale-125.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\MedTile.scale-100.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsSplashScreen.scale-100.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\WinSxS\amd64_aspnet_regsql.resources_b03f5f7f11d50a3a_4.0.15805.0_it-it_a58f4b1f4481ef65\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-kdcpw_31bf3856ad364e35_10.0.19041.1_none_0c9c5df6508e6540\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-timedate-mui-callback_31bf3856ad364e35_10.0.19041.1_none_aa5f70ccd473fb32\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-w..installer.resources_31bf3856ad364e35_10.0.19041.1_it-it_5c0609b23611689f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_wvmic_ext.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_069ab66ef0fb44d7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_10.0.19041.1_de-de_b46452568a7278fc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\common\monaco-editor\min\vs\base\worker\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-hyper-v-vstack-vid.resources_31bf3856ad364e35_10.0.19041.1_es-es_443ff1c31249ae7d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-d..scannerpreview-host_31bf3856ad364e35_10.0.19041.1_none_484e61e96e69ac70\Digimarc-Logo.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-encoderapi_31bf3856ad364e35_10.0.19041.1_none_fe14a222b28e7254\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.SettingsAppThreshold\SystemSettings\Assets\SDRSample.mkv	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-w..tnet-mua-hostserver_31bf3856ad364e35_10.0.19041.746_none_b93dce693a9c6db9\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-dot3svc.resources_31bf3856ad364e35_10.0.19041.1_en-us_c75e61f00b6f9cc9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\Assets\SquareTile71x71.scale-100.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..rformance-xperfcore_31bf3856ad364e35_10.0.19041.746_none_b50abe60cd67ad0a\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-mediaplayer-vis_31bf3856ad364e35_10.0.19041.1266_none_f004966aac98030c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-tapisetup_31bf3856ad364e35_10.0.19041.746_none_52411fe22e5a0ca1\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_dual_ntprint.inf_31bf3856ad364e35_10.0.19041.906_none_6723a46eefe53392\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..overy-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_a62762106599feb7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-icm-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_54794fa2bbc2694b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\i_alerterror.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.ShellCommon\Images\NearShare.contrast-black_scale-150.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.19041.906_ar-sa_347b1904099a2e4b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design.resources\v4.0_4.0.0.0_fr_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..er.appxmain.ratings_31bf3856ad364e35_10.0.19041.1_none_ff46bbc9afee54c5\RatingStars43.scale-200.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hyperv-vmchipset.resources_31bf3856ad364e35_10.0.19041.1_it-it_6f6c3206d8a45f22\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-usermodensi.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_94c4f68f7229c0ff\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\Assets\StoreLogo.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_dual_usb.inf_31bf3856ad364e35_10.0.19041.488_none_22ab75752a645476\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-backup-cpl_31bf3856ad364e35_10.0.19041.423_none_8f8fd4154de00209\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..ger-utils.resources_31bf3856ad364e35_10.0.19041.1_it-it_0aa9bdd5e1ca4fa8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..atson-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_7b9270ea6b0aca58\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-programfilesx86_31bf3856ad364e35_10.0.19041.1_none_3870d3554f39ac78\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.applicati..ulewizard.resources_31bf3856ad364e35_10.0.19041.1_es-es_5271e4fe1d5d533b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_c_mouse.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_c63c716dd4b8ea61\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dot3gpclient.resources_31bf3856ad364e35_10.0.19041.1_de-de_25e6f3a05ac34793\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..l-keyboard-00000439_31bf3856ad364e35_10.0.19041.1_none_a0bf26e7014db120\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-r..-service.deployment_31bf3856ad364e35_10.0.19041.1_none_a13fbf18f4e5a4ca\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mccs-davsyncprovider_31bf3856ad364e35_10.0.19041.1_none_8c2d76dee85dccef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mobsync.resources_31bf3856ad364e35_10.0.19041.1_it-it_be3d62eb83507440\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-security-schannel-mof_31bf3856ad364e35_10.0.19041.1_none_9badbd6e04b7eaa1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wmi-printer-mof_31bf3856ad364e35_10.0.19041.1_none_6f1f99a38236ee2e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_wpf-xamlviewerapplicationmanifest_31bf3856ad364e35_10.0.19041.1_none_c257a9aeb7dc91fd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-wsp-spaces_31bf3856ad364e35_10.0.19041.1266_none_dafed5b762bc3dc5\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..rolviewer.resources_31bf3856ad364e35_11.0.19041.1_de-de_e365cb47d7f752c9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-mscat32-dll_31bf3856ad364e35_10.0.19041.1_none_36d5217abee2f5a1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ast-black.searchapp_31bf3856ad364e35_10.0.19041.1_none_e479c512c8bfeb66\WideTile.scale-150.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..e.desktop.searchapp_31bf3856ad364e35_10.0.19041.1_none_43fe9f4e368e081f\20.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..ertificates-utility_31bf3856ad364e35_10.0.19041.1_none_49436407fe6823f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..deronline.resources_31bf3856ad364e35_10.0.19041.1_es-es_aa959c7605f6c2df\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-directx-d3dcompiler_31bf3856ad364e35_10.0.19041.1_none_9f4327d7bb6def3f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ries-french-fluency_31bf3856ad364e35_10.0.19041.1_none_5596d3cf055373f0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.746_none_8457b34a3423f6d0\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_hyperv-vmuidevices_31bf3856ad364e35_10.0.19041.153_none_5b8a700521679de7\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..ompat-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_1edabb5e30c849e3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.0.19041.1_uk-ua_36765ccb207eb59f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-twinui-appcore_31bf3856ad364e35_10.0.19041.1023_none_10f51e9144584b90\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.DeveloperLicense.Commands\v4.0_10.0.0.0__31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Experiences\PreInstalledApps\DefaultSquareTileLogo1.scale-180.png	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.906_ar-sa_90a6dad6f86cae6b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ces-targetedcontent_31bf3856ad364e35_10.0.19041.264_none_4cb3c2a908496ac6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..l.desktop.searchapp_31bf3856ad364e35_10.0.19041.1_none_37a8fc596f462cbc\3.html	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_wpdmtp.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_f8021327d4cf27a4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\shell\open\command	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\shell	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.qwerty\ = "LIXBXVADBPLAFYV"	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\ = "CRYPTED!"	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\DefaultIcon	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3gMvmFgvytPK0VW.exe,0"	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\shell\open	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\LIXBXVADBPLAFYV\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3gMvmFgvytPK0VW.exe"	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.qwerty	8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8ccce69652942733ae5ceadd4faf8320_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3668

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
ab6de3e8b9e51c29b48bca0e195f5ac6

SHA1
ff71000b11b76e475f9c1461473f680f9424ec03

SHA256
64ac664b3a239c247e7324d48fda5829a9813dc2d910b5ac3ae4e1c4989ae1cb

SHA512
058133dde71a05bb5819097ff7fff222ecba527bcfc536755d0829757ae82965af34c76d1b815dae41b3db8d930ca2017efef0591b95259e441e5ae30fc4d10d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
8664b8f759aeb4db8e7e16e00a402eb1

SHA1
2881b487bd51ed8234f7b46fe89adb3d67972b15

SHA256
07e6e976b8f913d40ca36f40917b17e50b45fef9a6e09e8eec324c94a2822fe6

SHA512
6fb7de5e07df9329ad441740143365059e504db2a9fbc1122965b5611df6d009ffde39b0ee82a41482e58c5a1febe1df17a83e4cb81b75ac6fb67b8d56d3d040

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
3aa5fdbb151b286dd1847d992f765414

SHA1
4f945a8c3a6dda6db5a26bacd218d9d4f31f85e9

SHA256
118431dc4658a06f74490d3a107e835fe0f9bb8b978dcfb97f1ed668b524f1fc

SHA512
0fdfc0dafd2f40ae3716917493ca9111461abff4b2ab9ac302ce288293bb869f958392934386634edc12f210dee039f91ef874d9fad82459de28acca1e18c719

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
f8ef50684623854292d1acae7e531814

SHA1
4847432c8049c9d82864f8d18be9a3ecad2ef29a

SHA256
179a4c0d5faf762a76365e32062ec3e5f3143b5635abf8e3dec20eeb26c8a79e

SHA512
41a9291bc60bbf9b508527d36fd3e01d552624b86db6658633299fa17a4fde22b25dd084e94db868ca6528deb5c6ca5f0893f57464af4b3da10a760497b9ff46

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
d3cb887ad4f84cfa696b159de55d3173

SHA1
0d830a01caf2bce9c1dbc63b46657ad15658f16b

SHA256
3e34633bbac0a6aa0522d635a28fa13e5d9daa98db9e72d02e9afa18ec8f0305

SHA512
042d6e34162920691bc11403f5859b163361e539cfdf283a3d804ca8bf1e16b5f6f6d8839cc468244cd6d16d560193300538a4f6144bfb622240e553ffe2a294

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
c1ed6c1b430b8f36e6b1febd992c1ed2

SHA1
906fb4acc02f29230097f2556e24a093c2b779c2

SHA256
c0c4c4094e336f9690336d9d2bfbd61597c694c29400de5280e18af4eb1070c9

SHA512
9b57524d7e7aebd3178fa086bcb4d832d0fc3dcc116ec4330a59d49f5daeed57a3c7251f64118ab8776f50621ceb8046792beee985ebc5ab99c41d19e747e403

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
aa1fdb57553c0093090422f3ddea8762

SHA1
f6f1f4d2bd2c6ee015789986e4c6e30750374198

SHA256
e433da3240a254ea72a31f89d787f85bcfde0c50a6bdaebf816208d095d013c8

SHA512
1a8ee5ee24e6c8a9dc76e04ec7f277daa924cd2c9b1463b830daad62c34a200a36c8ab2fd6039ab53aa043a690f0f347b5ea0e08ccf2cc3de281a3d4af5aa4da

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
9530f3ad6ba5cad288eb02e3e46ab3c6

SHA1
ae229b3957e47da5c6b233c431d0f1544425ea06

SHA256
37cd4fd968482cdc34b774b5a0cc3b0ba0ebd2d73d42c95178791b71077e48f2

SHA512
ae58b36f6fbb4af70ed97f76c3b6156b3a93b69e4de26dd2d7c245a433923c1f47a0897cb5d15f9e041a73557107aba7e19af6b669403709aefee14fe40a7c17

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
d8d240e5dcf9f324d1d1480488718666

SHA1
da90ff5b2db6729275190e74db943f3da51c2d23

SHA256
f40ba0e1f6e088969ef7be3e822a6b671ddf0e8fe603aeb287314f89e12edb26

SHA512
e4031a6d1550f4ba236f9242936ea47c239d6e1cf6d14259ed061ec76ac33e3a1d9b4eda35cd0da05b4f69124288e1da5d161e3993546c0e515bf39f01f85229

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
9a2d517910d89126c36ceaf3dc88d79b

SHA1
9ddb36e15997a2ec6ad60510d42c6f839345e345

SHA256
5c12bc5d3449e9c0c09c0df1f57227acf4962eb4f9dccabbec333b7aae03e587

SHA512
f63e0c42ac514c78830ead279c20425a66dd091a47ac5c82b3e6b7ef6d5ddc5c232867f9ca5190b44a3fe8f76983c11e711fd9f5cba2337408e8efb5a29ae4bf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
88bced0d562b7ac8cabaa884b499be65

SHA1
bced238d072e32c059a983a37a131ef7455d1682

SHA256
87af9524559a7c6e2d0e9f306506e5a9fdbaf8b89f431ca01a64ffb70d4ed212

SHA512
b57b3f89e5cc0ab068a0210abb47b5f097adc2ec7f77f267ab9f9dbe275f9cf6e15010d0422f9127746bfabdd80b2484a9d18981fe6075561e3443cb25388a66

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
b2732257d68a2c76214a01a666241583

SHA1
12d963ed4d23d334b40b5a19ae3589c56a902e3f

SHA256
9397dee92de8fba124e097e474d0b9d2e53e780ad1f0ad48c0e6fee74fd55e54

SHA512
4dfadc9b47f4337b72ace627d9e357cad8e9cb4126a5fa77c869bb8eb2e85d40927850ca261c59b03cadeee287ed32f934a38835901490340591ff0108237e78

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
561582bf1028f6deecd1a642bf1bfb16

SHA1
f87a123380dca2c828559049e2dbd64128218248

SHA256
0ad2fe4b024af3e262b71c35da94773d1ad3fe9613dd75c6f312838f230aa488

SHA512
2a49dd11a69457d468311397846ec27a57b48b5bf8a5719bac0b4df831f128f2631fa1b71b64c32a47a12b624f2c959febf7b470bd93c19cd4238a1221294a6d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
ce8ae2a89cd66d32dd16855493606370

SHA1
14e5df3a80b61d92d89c28a501abf3db95b6b4fe

SHA256
1421b2fddefe7d742676471d12fe2cfb24b49c2d548520d60cc0c475d552676b

SHA512
39f5d6a3cebef10f1180449e868f1d98ec12f9b7b7e559f0f5faa2d9e325fe014df8724076b7e7a94f9f99c886640c898178f1cd4ebbce9565924f61631e2ac3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
bb803b970e22d089667dfa3be8072507

SHA1
564c1465d4c6ff58e96c52c3258c2b9e6889e0b1

SHA256
cc6d9f2f3e03526bf28771f6c7e228c4bc56691643876dca4ad378244745591c

SHA512
85e9e6e8f55e8ad2ca38aa6ef445b0211492b21d3aec82d422e281ca224c58170bcea40505fdfbc2f20bb10e0d42c813c03e743caf38e4b20116fecbc628be59

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
b7de1103c03b43898888315a2412a511

SHA1
85f042a3e962dac0b04eca7ca4b4ca93495600bb

SHA256
42f928041712f9b92d701c3a6398545a003c502c31016d9595b2c5c185155ff4

SHA512
57f36e25aa50da20421239afa73f225086bd8a08dfa03ba91d75accebbe1d0e3044945cd9b6a46d425e9c3a3c24799ee7b8b2eaba055d1a7716cf78d6f142795

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
ead484962f41747332b6cb49a3662e36

SHA1
61438c6c52b27313e0cf2bb323838fe632da72f3

SHA256
75dc4579995563d2cad35aab4f6af1cd4c35e01d2639d3fa9ca9d223f49319a5

SHA512
05b9fec20cbefead2b8680006cdf9c6998b7afc550c3f02f62e6758c3728fb3ad2a6f1bd072e1a2153594fdd077c62755020f264bf1fb6c8f653a5cec5f85fe5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
05d995d3f0e3f69557560083d29a255e

SHA1
a29dfbb615644113f550fe64b90c1c95550011ab

SHA256
ddeb8fa6ba6fd0744f23fbeaa4ddae18ebc70546f5e9eb4c56fbae5489d2ab09

SHA512
b1685614db53624e4852aaea951eafc4136bee3f651241295a8f989a76b9c875d7b9eea518d8a3450cb09ca2e38fb4bd8aba701c3670dff0f3582db4b8acfe02

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
e4e74a1d1363f7072e1ceee9e7865c88

SHA1
99bd4636126d9c23330cb202c8cf3713e1e6db34

SHA256
1bdebda68d7ec490e8d6edaaf5692049839e9a6d4dc26811412295ea14edfb0e

SHA512
1d05476196e2b946927be09cdf1f33ec818f906ec61b9a11bbcde12ccc4a5677c84b76fbdee68dd8e063d8f5521970f69d5ee7bb1a7200c2a54ad1797cb30331

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
2037ec51242a00dca59cceb77997d6b5

SHA1
1f13566cbc10f4ac6da558d80210a750eebad7b7

SHA256
a10e495e7318013128ed50b6e56dd88aaceedc13bc68920cbd2dbcc22a2cbaff

SHA512
2f37afe13ca1bfb16573890d8a08ac8a21cb29c8b8f8933135d56d38db3cbba2ea2d384c1d50a1db9b8d511b5f5ddafad829ee10f8673fdd940d187f29e4b804

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
1fcb9105e20cffae741739c6670b251d

SHA1
4a62379641bfd1f0d080a3690e202d5172e5bb29

SHA256
d5a22493606ba7c63a62f77c4d953d5777c0bd09af5f74e7c7596d30f9a4f100

SHA512
530c32a680090cd5991a0c97f187dbb5c0e93dad210bf1ed3cd7a7e8bde6d2ffe6831af7667cf520a138cca8e7f456b6140d6d761dba1811255359dd41a7b587

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
39b70089bcc7f0b04e7b42f7f4342a2e

SHA1
e0ca5fabf7a4a13608b45f20f497bc2307e0088c

SHA256
e384f99128083252d9a1dd0027f504aeea352340e267a8a9e2c6510883cf9a9a

SHA512
3a0778b65da077678ae36afd134eb61ae7de1dd6f52ab6bd218458e136956574b93d6acc40aefedff28ad9a91e167ae87808a9fa6975af8f16ab6cf7cfdfce10

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
6eda59100b14ee3f576bc8932f5aff51

SHA1
b21d2e919451e3b0dd2a0a25ce10fe5db7c35a5c

SHA256
a2f3abe8eb90b57ce43b3bc220f3d343212c4a93207fc559b5d373120303a701

SHA512
b31004aa6d333696a026cf4292f11a5bb0c485e7cdaa501350dadc8e346ececb115a59d1f5f2cee2bb8e296227d97e4f2d187cfb08d8d6e882f24bd80e524957

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
330e0841b53331ecd2f775ecabc41a69

SHA1
a02021be4ad8e8af9f7c76ca435d0ab249d39568

SHA256
6e706b9314c3e10f66fae7a941c9a0033d647ea068281ee0ab945f5104edd8b3

SHA512
57b85b5a1ee569abe7f995dd47afb351ccf5f12f968c55f35aed01159a626758ba5109dccf8c89dd3b24137425174ad95f681445c9eebf3a80aea74e44914791

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
1e6bf7d25bf8c8948a555f820c6ba332

SHA1
f3c0fe0670aeb4a9069e8dae1b0d5b1febae6688

SHA256
8b1ab95188bca01a67f1621d202104221d8a146600c8fb9ac5d042b16f37b752

SHA512
5c835a0d703cf20c97db71394f38d204b65fb85f78459e844bada2cb2fe2629d049925eb767548ce006531cebe75dba7fa858e5de73bda7dca0cea7e7d327b83

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
be0bb92a222f9a92211b47443d7965ea

SHA1
cb4e3a36cf00a3fd102adeea098f57e80a7e5640

SHA256
a646bf804378c1dcb369ae051520984d1e01a69c2e9da344a9023bf034c677a6

SHA512
cade9387779b0433e76bb0b41d2bded26b5a6c37170add6333940c4447aa8ff97886e87caa90549c51c89e74e25baca13d1b6202370183d56c3270ba88fd7fb9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
7efbb5330350254e6086db6a9b3b9a37

SHA1
63e5ded06ab83b29acad0db966202d5cdacf5128

SHA256
37af5ff99c791e9c61d05f0f71015edf5d6ca438e03a042ef4ec0350a219751c

SHA512
a1b52265cf7775788bcb3508d69cbf9f311f9e4ce8ea4c350586307588f8a752a1e0cf6b91576dc735ea43c1f81301e28a1f26c01978086767bc5449e825fa41

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
6a53a5767e3fee6c04defb93a5fac41c

SHA1
ddd1f0abac5e9a53c8631af07b76a72766079b73

SHA256
b76fd627f895c48f6bfcca2c68b07af37a824ca8448c0323b0eb931d17592cf6

SHA512
2639422da99fea9851dc4cb129f82fa7509b88037f78d989c4f010a8ff0b12411bff5e57d9e33324a30934ad5b1223d5336e34d214a33398b82cb0e0d5b46950

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
dcdc2433789b3c8c9d1e6db1f12421cf

SHA1
5d2243cd4185ab39fa2b5406a8e919a773cec55f

SHA256
e05a43cd3b30ea3215eb40f4cce00959f76242cee0c9d406acdcca006e852a71

SHA512
f142f8a39fccb1dc281387be51deca27c8151ac0a4effa7904d3a275841db6c40d8a57184eb9587cc00af42740a50961534de7217af6de4690c5c25dde4b091e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
51038917213e2a836edcc4716c126e10

SHA1
e38be4003310cd010571ade334d2b1a944e18411

SHA256
4e539c356ef50aba723c00f5fdf2d7eece4c5891f30de51c0bfa71092076ce29

SHA512
c3307b9075a55bd516b68c8f3309a4444c804c02822f51e560c8ad566883aede03e509aae13e7c22f8b5b138ac474bcadb6e06811439ff19f706cbd3343d421d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
d5460fe55d44ad0b4251aefda4f7348e

SHA1
74f78acf929827d033983b4326e8f47207bdbd3c

SHA256
3be719bf15a7266c6bdc9d7e2b07e45e4850d68a7955b50149a1d339a32c83bf

SHA512
384a0795b3415264d02e18d2ed092a633cae0474eeeea25f2b9b7dae31bc838015066566066308b1e349ba1ae0238dbefda0808a1c1730f1d78bb2ff9e26baaf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
be639416856dec09ebbbf9c45af94909

SHA1
210cfbc98791711d7e93257c23d0a86900db89a8

SHA256
43eb6198bfc2a3ad43e4d26ebbedcd965925dca06079fc73468b1fa5b9dd0bf0

SHA512
13ada908a13ce2a3ec364f854a55be2874c1410fbff52e701efddfea6e5e1ad1966d9760a7160b03603156eded3e53165d0f935f37ab1ac1b66edbadc8bd6b8c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
24d8d7d4a8dadb6784697082db6292d2

SHA1
93208a5f68a345b203b418a25ae452d6af23273e

SHA256
2f63bf0f1b70d71a2df0664820cfa2c49d708c88fe853b22cde2e672ad45c257

SHA512
6505bdca60991409e595c7b4394cf1b65b1b1da506f71e25b83bc18039a349728b8ac74e73efae4772ac1fa038cc12f079a30babf520b09d739b4fc7ef661c1d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
a6b536e655c06944b1220a9519c27e89

SHA1
3c8fc8b7c094f48acdf4a50cba1370b990936117

SHA256
24bf064d61c669647b04a1ee0b03e54f59370561686a9a70e8203b72fea7bc87

SHA512
49c158cac1a806c0d028a51ed3ad820f391c550a41c92ee882079cd455644e50ac9ede7bf3987be54f61b83912053c1989bb326272cab32b694c76fc33564962

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
769ca59caddbffc5b4f0f76ce9900e05

SHA1
8f9d7220acaafbf0cf8bbc08133d40b6b0a37713

SHA256
8c4714b82760eb0d74a84da8ada2259cf39d51eff448ba71f7c67f6796447e67

SHA512
ce8f3db103b369ab8a80d09476b1a29cc44528efc87d3c9061c113c7500a738799b817db6da6696e195fc8f2676652dbc49df3f724ca274323850ffc255dc653

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
e624ed1ba22ae0ddb9dab02b731d0c87

SHA1
4be9ab2098cf266fe72a1163fe4bfc47c9975246

SHA256
25b52cda1af1513fd9e00d80b32a1812e127baf0d38446be710199ca3264076b

SHA512
0fd67f57de2fd23312abcba3f1b9a4757298a1aec792cbfa2dcc5a2a91098123d4630eeac670fd9ffef1da9fbdcf5db3b13df311cf69345e6d5324ef10a2b3c4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
cf5a7aeb277e1fcb6479704095423614

SHA1
2fa4af9008bbfcc1248e2e69e1258333518e8dc2

SHA256
877d7e541994e8a5fb16967c83d85dd08c1f0ee8eeef204a6895c06ec22f1877

SHA512
345874e5f826fa78acf209b2b13dcbd1f1153954fe5bc3cc2ea547e632b93b3707c0c1b003518b053d59febfafb2e4847a7ec88e588fa1b7bdc17e40339e0327

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
ba9afd60e2dda5dfb9736dd74ff41d80

SHA1
68dc7a7d3cc687787d5feb3d9a8e50a7eae8d1ca

SHA256
01f6c9590264ef97de48aaaf51ee38c554bd32bb89ac9bf456c288aee24f7703

SHA512
b8ea35c6e9284d00e93eae24595db07b203a1fcfec668d11899dde27678cedef620a3f4f1690c0efdac3c6ec9e977f15c2ada69354fbe7d0abfc0f5ecf9abd2a

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
838B

MD5
58f4aeb67b1d45e81e1d59b7b87fa0d0

SHA1
c9297adcc4cc2740d022cef18216fcf110c20ca3

SHA256
b9c900e896a3f010b5a8eeaf5492f654cd25fe3b67b653b9fbef7b6cb12a2b0f

SHA512
110faf60e2ec618831f127decf6df0d2f9e2584372db33fad8e988e0c5e7ed442f0965e8be7beb1e360ebfadd675c14948d3c1ce45b13b97b7f2561894abbd1c

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
f83b9c78622705b5b549b5b1e39415f5

SHA1
d7de737cdbaa3c25f38bccf0b3654374d599a976

SHA256
dad2c4714fd59f311d8ff5a3dee07a3f96b6f419828980010261a9018eaf07b1

SHA512
6cf0fe29952042babf496a9970e12848a981b27de55f269352fd59112596c2628b19968351e65a912f598ebd2129b4d9b78bc1117a4f66a0e770465cdfc2df50

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
b7a07c50dd7a68225b452c0cf0cc4ed8

SHA1
866c0ccb23c29df4fb60fea6b400805df7de5102

SHA256
05f0523e46d48895505288104eed6e34bf94c2e787d2ca633a41133a4222f613

SHA512
32ae55b225d0a0ba5cb9895cc458531e747afd8f00680eec8c389385046b71c4fd0594a065365768a75c4d637fff1813fac5f6c0e5518b4661fe0d6407410fac

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
dca1a2b231bed0d1175f49b15397f41b

SHA1
4fbf4a49fe924a41715ed196356e0cd24a54aed8

SHA256
a8a0493a2b229e1a1aa1b5ad6a328c17231df86505ec67639217b1813df3914e

SHA512
a112f31e906ad9fcb095e221ad953e4027e74b26760a0d13b44e2d8fd769cf7443e7f3c782a47f3c6d2d2b222a34482b1a3c4b4d8f122db09446cbfbcb35290f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
7a76638be8bf90cacccdb6323915e804

SHA1
0b27682a84e4da9955d829e12d7a704674de46f1

SHA256
7e58c4f65eff0eb66bce640de6c38b040f65c4e991911676d4c3dbb6cceb0ccb

SHA512
f744e51ec9ed6b655d44a0ac681c20a083358affc435b5d4ae6dbea89b20daac5e20d54177e3d3c5297af721f41c45c35d4d49a612ce7f004719db0a6bb2597f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
d36506c77dd8d246f38f961b759f8cea

SHA1
3e170dca2964575fb93ed593d2faaa491eb58379

SHA256
4b9e9b39bfa685a68e23147d2e9be14bda641ca823a00e0cb9e83c9e797eb774

SHA512
49f29ea1d1bc1abe6be1c962df43eec686c03f33d6227f475cbcf2be90c5602ea6541da116c1725b173465fd469a25b81d3c6148769477805001c184de7b83df

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
be641d459c602f1426af111b7fabf2e0

SHA1
b08d2d6680ed9e7352bf2252acb2949e21c1a98f

SHA256
6f63e7c25933d1b842fcfd403aa31c8944e6407d7793fb95571232f6356a4afd

SHA512
9c8b967f28268b656b61076336126ae83e51ec2a1e62df420252cff6144a694afbebf5a66ce723a8dff085805483451c48b5f47ba43863d06c0c96bdc1a5b5ec

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
f09501b2cb6b1bc2a75dd2866ba33e33

SHA1
12f39d4b03bcd0de2561b7b6b12a2ce2a164d57d

SHA256
93e722988a95cb913196e0177b4b59693dfda8839d675f6d67418c95655eb645

SHA512
f4a2cfa66f7f0bf2fc867cb009945764fa63e03fdd1349a53be16f979030a290b9de1b88c75af104b515a02a33c67b62d2e71c2758d5737d3bdbc1fb242afe95

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
3678058e57f8f2c40a8923d70d85f049

SHA1
cf9f0008aec9aa1cef9a0a7bc7b6057456bdba87

SHA256
26f64b1e05af2faf0b88137ad01c9bff1a38f268893d545f0951b5f38cd2b1ca

SHA512
920e72d70e5d0f0376382988c4d60617e61072adf8c65bb4c50a891363ba6eb64a6abe557f397a4f43ba4b01cd411ed97bb90d7e740a9d46517346bd39b8bd5b

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
f167ff4aedb61a53cb0aa58d7ea968af

SHA1
accac603f4d0c4f292b73cd879b972c548933707

SHA256
31e8fd54c14f8b64acd20676ed0ec49be7057513a133814f3dd5c5dfc5fbe730

SHA512
baf9c92a676f9575e2e3ba4d0b3cf0b162a9b9adb39dcdb365b2e57cea858954a63be7581b6e1f66e326ae62852af84bd1c48dfab31fca64cb624d16db1f498d

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
23526fb68b170c96e708453afbb2a374

SHA1
3ae14ea7384c7b6544903e1d0594b6706b0e5d70

SHA256
bbf7db20e386e89d5a3a0bf8084f5fd716a66afc2f1093238c1ae6272bc5064c

SHA512
92e8b6d108b639929cf3f6195c8b29f60608d7469f02ac57964939d532b0f4ecee48d971d4c5dc3f5a3500447b2542350d2398e1588d87277cddf2efa702522a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
e55f15f245708dd8254a2f605eb64904

SHA1
00b617573868ef4bdd379b1e9a148a685a8dda3b

SHA256
7eebc1f927eacba73fbb721f6f6b925c5f269abb1a34a520c23ef2f30f15a133

SHA512
3de540e50f4ca587fae23ccfc2251773511b4c6a2226bf01d8e959ec514072178984af995f17240d131f4be8abb74e053fa19d661b04f89c3c497484cb4faed9

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
7114632141589002c5c4fc66541d3b81

SHA1
5508c93f726d73650dcdaac6b664203dd2dc49b6

SHA256
1660ac0b5dd0d792bdf34ad2cfbab07bff5a6ad318f53993276d8e21b4ac656a

SHA512
c11addbaeeeae6dc89ae867f9738e31fe57e9320a6a692e54eec0b036cab87d8cd56ea91ccf83d82a7018c98d73e4c3de5720292a25ccb2d56977f6e8f6e15cc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
915ec06e3855622807a5ebc3fb3be68a

SHA1
3a0b5375af3cd131d8d1ad8679ae5cfb141ef789

SHA256
3fcac5cd3e8a0c8e19e5e96418e576b148b2c7e8141922f57c8e03074e5f4429

SHA512
01b511fad53792fa8311848aafef2cd6870c36447b9b3a8bd3af426c9919d52d4becc371852017cc9074efb56c20ad4a7196f0e6a3e511d7c68ac39b0344db4f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
53a475b1ddc5e30db984ea57832a3442

SHA1
58c426827e1fb6bb2800b21265340e23a313c72a

SHA256
6c6e035490da2a2bdb679e4cf09daa9bd5a431b129bdb17e18f61b751fcbbd73

SHA512
3c3964e56f96e421b763cf956d98ad3db2f2af54e95c6c937542f363ff7145aa8ae4b761ece2c88afe47f7ea5fe687e7349cfd7b8d2cccdcab1c511ab04cbec6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
5b06831fa9b02ba4879f7c7552cdb23e

SHA1
ad065bf020b9a92782af62f1d66ee48e8d50d764

SHA256
beeddd9a67f1926c8d434f5bba8a7535aa90cc50a1a646fba072c2a4eecbdbbc

SHA512
b598209868c107b87655f8982b7d72b7d3f34c275ae0b90998c1b6c3ad2d36cca3285c08155a8437c3fed64040d2be6a33445ccf15c4ba29c436955128db94d2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
5e08c69acf69351e0326288c9b468679

SHA1
1c63b3b4a09eca1811fd687786df9d4d1887745f

SHA256
ac7b90d2e0617e999c9591211fa2c477e104f8d2fcba6b0ec26fb58098450727

SHA512
c9ce70a2f70277c46d644dca71c80e52088e049d10b81b2f0477037af18da4e0074a83307a88cb0e06420f15b6be4f17b649ba381f57a4a8d1406d51e16a64b8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
4be9c25cb75654a28791b16deba0c0a9

SHA1
6e5d6ca157129ab3c90b326d377714876b3d34cc

SHA256
b74b294f44d97961a34c37d005e66d43a1fa516f7d4fb5d79ca7e03d52ff88fd

SHA512
b2e97c5e88651e88a5f625690c115f3d01f5f05848c672b1d26d3fd730464a482d83b504544e929ec8deafae473ba88a7e421bf8925c6cc6aaf9bce4e6a7273c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
805a31f7cc2be76e58b06e43d612c405

SHA1
fda0eab4a8629c759c41534d8f4579ca888e61ca

SHA256
c953521848cbf3795f65d23a86799ccf32fc54b35a3455a515eeca87caeec284

SHA512
28a6907a96ef554e64e1b55b04b656e1fb08b11002f73bb61bb56b22f2202fc38cb20c5d392d7cbd8355a1ec194a6a124013547c7b62b7640245991000462533

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
4a2467f9799aeb39755782e3ae996aae

SHA1
1b7da5013e8af6daf4ddc4850537f0bdfb1c57fc

SHA256
257d2c5dfb2bf49d563992383a878af3078a10271d7f78792c6517216fbd0a4f

SHA512
1d2729ab3f3e9e73f519a342aec008674046355e652db5a3951a2afbaaba2b7dba5593e2fcfffabe01e1679b38541f33b26f775995936fa3e1fe51f095791af7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
43043bdd9975f9e6dbac9156aae59567

SHA1
e0fec35cda2f93c4c94d645ccf9654a4f9776f5e

SHA256
e2fe7cd566a9c40f1ff51226798a668ae4d3d50ff394d4cdbfd59c4304fb1bc0

SHA512
76c3169256342352cc03a2c52398a448cab74da133a98e6c07c5d0586ac9a7d14750b821dab8b015a344b9547cc97967d28d743bef52640d666a400ac1d3a52e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
3dfe4ac535a1a29848179eb9e17480ef

SHA1
0589741bea449e2032bb893ede9a8fe28cbb77ea

SHA256
a45702def5b90e72debfaf71437db07a5401c28140b6e4bd0ca98990d7b48dd1

SHA512
9cbebb81859a2c0de77d1da7ba09c62adaf9135f7ea963b47cb7b7064961de804ef63950fcb46e94cf38c353bcf2a987ec12d085da657f64fba23a2217896fbb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
bf57a2eedf664505060b87e3b67fa00f

SHA1
cb5750924c2b63fce7e1616bd79b2093523b06ad

SHA256
ae25d2597e266315ffeedc191fc18e4676578636548999ab3895a9edee1b06d3

SHA512
5703c5e925940c20fe38d28c949e33a902b4a0c249e408cb568e409ef1f259a0f74589a6a270de6b1395fcd9dc4bd761389926e9e00b2004617628f696b0343c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
8bdaa0616bb8965a95fe728835b8f1b1

SHA1
d617e7dce6c6ac5562c7b9b182411f873596d01b

SHA256
368832808c7914e6c71f9bbf28ce9829294ee721748345623b292ee5c7a0edf3

SHA512
39d036dfaa47bef1584cec2cfeee6e6448c21b92e489ccec5a0b9d6eb437b431862398e87d8eb6d6af2a23060e029c1c298b76016105e202efb8084dfa6e8d4e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
38e3537fa99a30b351d83bd2aadc86ef

SHA1
f4097b48a54411647c4c7430248e124f1b4d0797

SHA256
0c62301c06105f3dfabab83ed48adde4a5ed1fe5f950e138b4f285f44ccfb8f8

SHA512
e746898399b3cff4a1970acc580e8eaee4dc474503f97ca66396716aaacb4c8267bb50da50c72351cde6f373ffd557f44276ad79dce9ccf760ba8d22621ff3c7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
ab4d3762eeb4c2008b1295ea7f7ba073

SHA1
10e82ea5b3455410e253f2b402378a27f2e783f3

SHA256
6cb248413b5e0b23f3edb5f6c3c1e1d154bd9e9742e5eedf8d90133aa3cccb8e

SHA512
30e31b3d2b3a04ea81916ff075676f9c3ec0e89f6cadc21d3f88a19640dfdfa29c2fcf4bd579da5b66fe0d9028829af32f1b04deb1145ff5e845d878d090da60

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
99b62faba89024aea3f727ae0a048230

SHA1
f3294d2660913103b278f9fc848f44ec29e177fe

SHA256
ae986b5b0f13c997eef5347248ebf8a8164cc66a5f48d82b3f56705512457498

SHA512
5724709229fd6e36ede888f103e6f83c0518546e44baf54a7ceece52e5cf9496142d952e4fc8f8bc516a084401315ee374bece61667050171acefab04bd0fa07

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
9f8678c086101bfbea8649c73236a623

SHA1
9f5eb01228a2efa669aa7e11925bef40a27a17e0

SHA256
3036294c8b8b9f76614b1652cc8bbcd8a56fbcbc896d52df0e5a6d9f4e4abccb

SHA512
191b943a0d12677854f606923388a18264519dff8b73a35a8b8762b2834d22edfce4310fae79a288ee7ea367f6f7a29ddd06eeca88dab52827dadcdcb8ce509c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
b0ff9252fe990eff62d02ce36813b377

SHA1
88e82154e95ebf99b90425134149c6c4f2d8d394

SHA256
309830802d3b3465641329985bdd756abdbe347ea4f146ae4ac24fcd879159b3

SHA512
1c3d0b3e851380e71300fd631c67d42209774a810bd3e701c96dc028469fc24063aeece1592cbd83bba5fde7cb438c31252f00797f99fd47d9642656c4814fe8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
01627f9ed3fec33767cd9345a0bf8e45

SHA1
ef96bd6105f30857975503efa9c21a72e53164fa

SHA256
be800e856b49ee01078a9ec08fd09e450a25b3ef23a7b8c0c8e726d8e7150914

SHA512
e8e5d9e7ea7c8a6f8317e18a4af7c39391909f5172fe35c2b3c96a2a4e303b4563d4d7af8d7d57b727ec0d82b68f0c92be09bb98cea803789cc4e6a93b99c835

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
280da6e5b75009e5038309d668ea95a7

SHA1
b3df24b3774aa5fa8dfe9a37957efd6fee84c55f

SHA256
7257e6fe274ff1751f896b7daffb6ecdb09cbb290f187de6b1d47fbbe283ef3e

SHA512
c2af96c8f82c27a16943aaddadee327965d8a272fb4a536eb815a08d76d4327fc79e98a4b7ba8c4bc576ef0587e2a7fba342d40ce4ba347a3d7ff0db63a7112d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
baeaaa8b40c44343023dde8c70baa063

SHA1
1561ff454a0a51df28f0e920b5f6c1a05e9c976f

SHA256
c4833f792f0d6bb9e3bd84110e306c1a25d99c31eef2ced5354eb22b55edac41

SHA512
eaf4901381f9721a5b6a8522c436175c1a304de1490f3381da3e3f7f9f3f5462880c30c31d74904154939a3bd9fb0ac95896389b213e39c6180054445099b96d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
13856b187f1587ff0a7bfbcc21743a59

SHA1
902e5b104c50922117a57dbe76507db74ce6a23a

SHA256
e4ba00ab57a4e7b4c9140bf46a6887ce1a4220d105fda69576073a05e0a862ce

SHA512
d220f4bd24f24721a4bbe665fc562d0e1de04c9f1a4498b18b9e68286d32badb5f1574b07df538cfc825faef1abbb2d954e449af2a6babc1cf9a5e8ba461d4ca

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
4488c0fd14cefbd346c064e05e0bdd2c

SHA1
98ec5248838cad6603338b7c9ea8c0d97d6efa4f

SHA256
bd168c27ab0af8823b63e7c5e4b9496c6e290f1431d723abcc350add6a76e0a5

SHA512
2d91a1fed35a4cf80b94068c11f13e7288aa194fca396dfa283044fe269b7f811643071b2a7bce523906349c8d661dea0339d0c5d0e8343536d9ec32e96c7995

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
f0e2a083fa5289e00b27a97076910db6

SHA1
04f5f0500dbef04c2f4af65b9bf6c65b8a67ed41

SHA256
e8f52ea7a1798d733d3e5fb1d8687f7dd39eb995af174b8c78d7c41fdd0f0747

SHA512
75dc220026d9bc2b9b188ea3f519af4e55f7a09a39973b34acb1114800649d950e86a668e03e9cb23a208eccd0011866acec02c56d759bdd71597eb4921948c9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
532d62d09314289484a39f5891002739

SHA1
3591e3e160cdb93a489e00d4dc8cf2c8286a43eb

SHA256
e98ecf7bdd80be1504d70fbd705da1a5392d04a0fb22c39c172657d00b9969df

SHA512
922d53552c97894698fe866c62b2ad866aac9455e705d0910079889033f2d75be3c2795218d8a8c6edff98df7eb2f5cd532963f015f664bf4e84673d0bdc3c95

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
0aa38e2edfd7a0954348cd3ba19bd4aa

SHA1
520989385b9ea3de43d65411c008f6c5b22039b7

SHA256
136b498a7bb7e338a580d486f96d43188e4e6710e9bbc5b6b7f359c96b580852

SHA512
a819e60f81a5360586089fa23f3eedc46b16a9cd86996d3d7f6bb5287d140c9898e29712b38094b6a58355ba8811ed7c637dffd59a93361fcefe79ff67789900

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
b9f0cef02b299a3bfc96ba6273102f02

SHA1
a99dab4ba6a927b1338b7ef9c8681c9aa9987cd0

SHA256
110220bfc53f2d080c82abacb4a159d5881aaa53603882e0645fe2425741eef9

SHA512
48d53a09a3d7cf698f2c73b8a9573509a846b3d675fc97f6c9987f31259e17d9021c6f9645e5e6eb3c85703daca8a1ded33ccae7752bab1754058802d4881c5f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
007dfa83161c60dc0e38b6ce6e70c070

SHA1
9982b8e23c4d177be5342d9a426cab656a0aae37

SHA256
b67becafab1f97bd8b5bea97856d7004227c9953af7bd2806ec112c4198c350d

SHA512
b357e9586aa434a4ca8bce95780b0ec779d4ce8fb9367b9bb141913adbc570de86ac62d186bb5b5e55b28d24ba134b9be2902252515d103db76972db5e32502a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
4e1bb8806676a6678e7d4424cb77086e

SHA1
a334e09adfee044d19b2ae77ec889c86adad6a63

SHA256
66abc723f10368db0ac2a95119c58f155dab91f94b1e272b7d28e87dc54c411f

SHA512
262142ae2f1adfb3d3ae438266fcd4b8b433b47d0f020586d8a4cbcebdb3b85fab5560d1dc451a31240549a8b105c93304914e92c85345ca8e842fce1ff80875

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
4e3da0b77871d87cefab66ed74dedc11

SHA1
61c0e54ad892eee07c9dc09774281627b8be1ec0

SHA256
43d51a020e425818724c1cbdd748009a994f36cfd587af6dae9b73b1fd587fed

SHA512
8c5ad76220afe375d8ea0ed8061942e99962b734619d526d810a312002dc94ae890768031f535dec1607ef96a9a78c5a286d3a5fc869cb3a04e17315064776df

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
fbfffe8816f7fb607c3752857becba80

SHA1
83a9d6f89aee9aaa2e34c64cce05eaa790b64998

SHA256
dc04178f0526b71e487964aebf08dcbe8eed13a27a11e9e947d045fcb3873c9d

SHA512
9e0cf7ddaf60d39054824013ed0a9c8cf0808c5465b9a27415f15706e5c6e7168fade1320a32c7792b6cf62cc89c6ae74089d5f679b7e71f8438598b5e2ecd48

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
c65076d6efa8012cb71d9d5b56c770fe

SHA1
bf48a03f6a0069032f1b7b2949bc83507058bd2a

SHA256
eb8434450ef5bdf48a456ebc64d5f29714a32e60371310a081bcbe602eebaf6f

SHA512
885a18417c83e2224570c8d6249a4f685e78a26394eb12bed919c1e3f060962e79e4bbaa44f8a1df3d552a542a5c61550e1ec9c1d20168991b81b54d632c069d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
11bb1b6857dda801a751d31093b423c1

SHA1
c055843e9ee0aad77ef93e13bb2f1e746814862b

SHA256
759b553d410a69699212d332293bdd18c56b6be2b5e75dac99a2ff6474454bd5

SHA512
d912d7937fc858c10031ca6e879c65841a33741e38a74833dabca1148855d3a479306ae0c4bd4c7c42498ef3383d8b598db73650ff57d1d1fec3e3cf74617d77

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
05ecd44dcff43211f7086b82c71fe722

SHA1
0ff3e818d74e969232319eafd3f312878cbd02aa

SHA256
7b990da877d0d649fea286abc3fbf2d12e3e73c9578b62b45d334206b501b677

SHA512
40bb1ee4ae2e4171ccc7af646ea1cd29c0da88b93be5623d3bad3bdedaf90fd4f8a9d39ddb4c1d43695b40a1c7c9c2d4a0c2efcb8195dbc87b1490b724416ba7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
42B

MD5
bbbb0459a8b774c5a0d0727104e8b118

SHA1
a7a1a5006f98a0567b5646738ab69ca1abd00732

SHA256
362ee351b62e22a8498f94e4e5781791c50c442d2d1b5eecf61f3122acee4dfb

SHA512
7086d4e08a04ea2546af38a8d8171663c9d9caec348e3d0cea7c2b984eb82000044c0262078a3e5c35db85a1d7735e99be713bb97869e9d136c709fe413fe44e

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656134012488.txt

Filesize
77KB

MD5
40fef163072a1420354640fa511c2c02

SHA1
6c05d92816af5782ba0625fbec95203a624af671

SHA256
12df6a9afc367175c99cd5010d716bc242128bc5b7407a2f41716e2dc8c035c1

SHA512
0d5e37e49664e2e8dbee8ae88bbc97741d6a1e7fdeab82bcb59d92e62017a7eb46578ab89ebf4bf34f1ac3c521893bfaf0aef8ac209993df63620b773c1e58a3

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656717558154.txt

Filesize
47KB

MD5
c168b21dee629add883bb55ba7c3df46

SHA1
1b8622abae61f2cf677effd4d25a3a32d8bbafa0

SHA256
86fe2218e4d23d26e0ee4972c8f00c79156a91f8bbee65c9f9f5e740f6c2d546

SHA512
9dfa9175cc33d94940d3f26a5aa6640beb3634128c570f59300a4a2da662e6c9c2c0e60c76037890fea0de81b2f2b0e382af588715bde5dd5c994e1b3b5719c0

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663096253949.txt

Filesize
63KB

MD5
9f6d9bc755d42bc447aa0b89439b08f1

SHA1
ad0be4223e04ccbed241532b11f248f42df58250

SHA256
2fe52df9a45eb3e6c24467f47b87d8fc646d5e8b5159add02d5d253dbd0c7404

SHA512
7b6b917a963c037041f3b623df2aec2a2155a6ae20d4a9322dfde46f886f57786a8cd958ae0fdb6d92620c606a1b8a44e1a52c601fef6d2bfa6c283efc7d8f0f

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665766873969.txt

Filesize
74KB

MD5
b89d448bad30cf0ef59dbb46ffd1bf38

SHA1
57eeff7a77ecb44828521a7533f439c798ddc494

SHA256
c5c6ed5478fc7c058c4228f5e4402f4a2bd7b4d2bec433c583777936359fa620

SHA512
5cad6e46e8b25ea18b776d7958953e3b1e961fd73269ce9f02210693794cc7c5e98ddc02b0fe28fc8b066e667c2022ef5498da808f89d3b9cbeacced0213b999

Download Submit
C:\Users\Admin\AppData\Local\Temp\libnspr4.dll

Filesize
10KB

MD5
28a57355d9583b66e51ad978384c159e

SHA1
b8fe4ddb6187cdee0e89c02bab4a104f406d16da

SHA256
81ed76156df0de1caae6730a091f29978493881b54a2d6fbfb43c47153b6fadd

SHA512
991a288ed0f033eb8f54e567a6264a6111f795bd61a1cd600e210730d7ed39c89e735480dc6f0e4026eafad730ae8dc23ec7bc7600a14a2ac9d652638c02ee3e

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
160da81d69f01377ce00a892d4d96049

SHA1
4d2ea691d8cfd049159f13f4b7bf63584d927f38

SHA256
b6b4b2f7792ab68f629720f9920d8aa7b71f4ff18c45be5bef001abc519d3fa7

SHA512
2b48837e2a7b495effaada89f222e67909acb325acd74ffe2d5079d2ae5f490806bfa2ae42ac1487189a721d9fe4c662974ff54ad7f22435464324618cdc67f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
45cfc19ac58afed6ccb58322a7ae95c4

SHA1
88882e95ebbcbe004e4645ffe02695068f0fece8

SHA256
48db3c6fa7e8ec472e8ba87e43e8a778e0a9d3bac52c4bff92fd5da06153af2d

SHA512
d19f27b6d98a0fee9d1cb4cefb43d7c86d5949358874a3bcc6d512e3e7b58bab494942503d3edbdcfe0deda6d01bcec4a6e5355ea411806614068298b50cb4d4

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
7abdae92c435305037fead708eab218f

SHA1
3df8e5538b16b5d7040f68db6ae5656626b60531

SHA256
9112fe4e22a498c7f5de2dd25932309dd6128cabed51c17bfbebfd5226105662

SHA512
aaab6467f502df29a648413b7d711dbdad1fd786a22bf1b752b46ff87c97134f86e1f1db5928392a73d199829fcacf3ef547b5cc5796a747c79f136da6c659b9

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
062ba26c2e33109e4328102b2bf80de7

SHA1
5ea396cb956235309b8791581c44abaab2fe09cf

SHA256
3fedddf0f0bfcd44fbc74ee6eb1b517d996ba96aac59017564e29480b3811a58

SHA512
a15054ca7e0f5322a1efe9fafa3633364fda2847d238d7f6474e500651dbd87d6a468f91dd3b7817812d35348b54280d0f58ad30bfac74a37bdec9c5d4bd55cf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
33b107d02db1c0cc774d9a10ff64c83d

SHA1
5e5a7054dbbe570c4c4ee81463a594f752a2c7c9

SHA256
495f03c67e5289c735d745b2426c0d3d75bf9324f6b92191d56fb508807de9f8

SHA512
563ea178acfe1967d46dae98eaf8c70dcd580b821eb6cd5e924f69c2de76ac935d0185684b9cc41a4ea9c93c8eb7caf673c659930c401afdd0d6ed61d269c511

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
857b1adccbe63b849e1692d3d6f625ed

SHA1
09375a2ed5a443c2f2a1503f0b76f7e3ac3fefa8

SHA256
d3415bde12b8d84da8ce1b3661a3014cfa458d85038d206cf141e19ae7cda54b

SHA512
d0fca0715a35466a0b76a9ce306205fb20295a163adbad1196332b94fcc6199bda97309ce6844cdda37831a33cb9ec7feaf34ee830b3b5b2b28805ae0d321ea1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
b183320af29007853601c6d1e6a222c7

SHA1
562dcad2c84db141f10e97e0b1d7b8103c2cd79e

SHA256
18abad78d624fe66d0175cc54881ca54477d205635574e418ece20a4ceb92e24

SHA512
42999353ae08836cc245a555e99fcab974d60191af39012a86b2dcc476516055ecbee3ab40a54f9cdc23a4c4af2b008bd285ea084a7e858b39de2c341ff36572

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
d22230ff2d1626112160f409e94eb301

SHA1
7f16bde147a00d3d3c3c1f5a8b7a32ac080c1aa6

SHA256
38ce3d1104ca49bebbb819689fe6828dee4b46306d311d8f6ea027f6af1606fe

SHA512
d1452ef2e2ff85a811df4b3d0c6dd4453b0ec534fb8a05245c78ecce80e6ee289421d53b69f6bc33c8a91b27601935d834bb78f881cfefaab443e55a45eaf55c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
c2e56a6b0793d500bcd3ef4b440d1b60

SHA1
4a3c68971d4ceb1fdd62199e63b737aa8acd153f

SHA256
53feb81194fb6aec5393ffb67cd660ff85e6fb04564626522946c0a31a7ebd0e

SHA512
c1e9580ac45c97ff1ac28bce71116c67c808e32ae303968a57d0979ad6bdbfb94ff4c6240ae7cf5e4bffa8de5ff175262b1c35aa99285136dafa7440f66890ea

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
5250dd58f8780f67cca64483cd6fb856

SHA1
e74997ad48a89c6d7e074d6b2dfb744a1ace008e

SHA256
8e72e415a8febd0ba203932f304d11aa17e40ffe601bd2a31b7a4ccd69c99669

SHA512
4832d6268d03631124f3033dd363d147513e10d9ddeaa0c7ce210706d5164dc15d0f857033008309acd4d674a4ca0c7206d411bc312be6643666f4116aa394f2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
b0fd897a7333820a5637912e740a70af

SHA1
0df052b6a90a4008f39d50089f8c7a405938f010

SHA256
dca2cb4387e58fbda94ca78df21b85330c0a53e4ac88783f65aef2351226942d

SHA512
cbdb43816fdb6fb0c33959d876059947b70709627705552016fd33acf1aabc8435bfa89b9fbaf099d106d3fdcee7f9bddead2b1673ba9e0b5afe55c13071bf1b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
9b8f1dc301b6939ca705ed3f65b68a5f

SHA1
0b5bdb726a353af944dea18a2d577fa487dcab13

SHA256
0b6852d5909be17cdd45d340bab6c3d1d620ebaa6fc4cdc9c03cba254358374a

SHA512
d6b6108abfcae69b24febef5d97671247986b995d72dc33d184f2f52f02529ae5dcf4390b21b60b7ec8657876b7ca1e1ea79caa83a1da2c0364192aa3dba4ffd

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
8f584462ab7a442e413c45d7c412b3ae

SHA1
93a0b383a03b91dc32df0c54cf5b4a494c210745

SHA256
8d353a6e0c9ea1e7a08ea6c6b7074994d812768e1826ba2f286c6f8c186e9dc9

SHA512
89093048e42b3f683a580edbccd25d110d181851208be299b23c35b2e34f0498b45a26ba16ea6361581f5b19499ab79ca79de1fb34e0d690eceabb4c4264b0d7

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
f7bd77d9d20a2ba94dd3f09e8a169948

SHA1
a4f9a91cbbefc335fe458ec637dde55c142ff841

SHA256
92c440a5b2448ec7b3c1ca8e8a8a1a36f5057e140f91a52d7050bfe60cbae4b1

SHA512
8e83e5061f00caf0df4f99003aa5c55d6421d0723939d7665f34dd196b04f682c14d8ff23ca551f29509a374e314302291698a893fa5c9d610230e858fcf2086

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
79c37558ae7f4e1700f20e1823979395

SHA1
d5efec080f500ca67ee1f108164d04b2797220e0

SHA256
f4518d6e240218c5a451b5db92ca966f6982995cbda07958a1f758211738b514

SHA512
5f37efbc97ee0ad24daef40355a919553b9a51b2e63b7096967ebe6565c713b1673aa1a19f6a89734a923333c540bcd9e52b8ab0b671099032ae543666d6498a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
8e9c74fcee19b9c1d2a097edd43494ed

SHA1
8069a463591f853f92716890bbd29479dc8d613f

SHA256
ad641b74c12bcf0a56efa03419f4809feb4e2d25cb42a293877fbaf022b21b32

SHA512
b33b052de4636ea25c46ba12bb148928c91ab25ce7a612495c2fc94a73bad874dc324fdb11b6214832505723fa51cb91ee2f257167918a27cb92408dd0dad6ab

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
de1593e4ca12504276acfd15c4d7acd7

SHA1
8d9779ec7f12868a933a97cb445b60d6cd0abcbd

SHA256
07f22465c89342e7e42cebf75a0a6a9eccf77c74384bd0a1ef12f0ceb595f691

SHA512
129d3ad6489bacf13519823c9f36f8d596586ee770dc035c9fb787dcb530861e84bd76b45088ef624d3a97af487b60f9c4b9a0ba360678786a838c92f027b5d3

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
809f6b56990669157ab83cddc4948c45

SHA1
a3f1282c5273af93c038572c78e3616a7cf74a48

SHA256
29c6b8683e6065ab7052b9eb33c19af5fe89f0b09782e3d055513a414295b512

SHA512
980b24a3d02e161f30915243c43528946ec24ceeb76de06c81c6128806bc9375078606dc2265ecd28716f4e718fa1008e1e84605cd2f0a533bfd88180fc14532

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
567db697ee193608ae94b7b5f8cd6c19

SHA1
836d1a5caaf748cf5e5e563304b4767849c97ae8

SHA256
7727ebccbd37597a64d994c4cebf1b2229e6a1f0ba75507ee3a11c08a8877bc1

SHA512
a4edcf3dcda545baa042293cbd9d27ca42c30cde6694b04c1f405c5befbeddbcb29535f8f97e99644b053777051e0d71601cae651c04e02fb3a3a7f50374d7b2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

Filesize
65B

MD5
58c42aeca1d2f807ceb39f6889fdf6ab

SHA1
b53e5dccee545eddc269a5246d86555386e9a923

SHA256
ad8ba3ce32f22e8951fbda33d5226baa00f196786af66a8fe29b311259080aea

SHA512
b5e0d0b46a504562a469671e4723d43e8c75d8ec5552703a014b4342b70c5118214739ed87c96e57aa9d31cec2ce275557b0f0631ad6f93c79d9a642f48badd0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

Filesize
65B

MD5
fd5352ceb9ea56704ec6fd91121dffb6

SHA1
ea8e0f0a628392e6ec178888f12c0961e0ee5771

SHA256
ba2d92c5f00953387608dd67b02f257364700a1186d41dc8fd50ed289220c376

SHA512
b9b331b75685da4d8d957c3004ab9baeb93a01af27dab2f5c5c0ba4185caebbfffff48d88caf4eeda7611f9c72154972bfedcee3c79184e2dcd01cd2ce692eca

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
fbb167313aa80ae0aad48d3466ed12c7

SHA1
24b817e8442e2db30d92d0f907d4bb7ba08719b3

SHA256
471d5ff5947603730193eba4a16a5f818e99a521e5041b348057d91438ced599

SHA512
d1970101cadbe1e820941b5f1b4b6ea879c3445ec7b90bd87d3e93a666ac85f8acb7c8bba5750977cc765d2466e404b3617fe3ad513e6ea1244f25e306720b0d

Download Submit
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

Filesize
49B

MD5
60c581bf44c7aa738b9329963cc0f36f

SHA1
58585fbb2ab85d0617266f0f5c7903878ea63516

SHA256
6d88eadf6ccc8d4161c124fb9ad9fd44fda645ce113a6f7387c36119fb9a2255

SHA512
961b035c9b253c01d9c2d56eecd65799f4e3ace8a55976eb4e61e9c26a24b2b473e1a762f015d4f8c5aef62e2cb898c2a78a1a56df858060842b82053b5ae2bf

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
3290d4cc005bd86a8bf7806acd9c37b1

SHA1
8230090efd7d906943a66ade4233289c32c78aaa

SHA256
fa10d61e7ead62d2545c80556ded50fc93f780da197651993b1eddeef13f9ead

SHA512
02f9161eb89a1179c4c6055530b4e43b72449383e46d3013101cb47fabf451f0aefe6b71f4245532ee9f86273288520a09a44f1b5ff849b0b02bb6c2906dee72

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
9df50e25f769f07ec7b039ca77c5db35

SHA1
2d630d8c0fa03faeb544664587fe6e37b8a8ebdd

SHA256
a5f1515ef8d8607e433ea40bb6b5aee6a9fa423a1c3ef1e12fb756add116ce47

SHA512
9bf22f92d26a70f8ddc5d8e162b13301009f0e3d9390ce8a434cd43a2914f76082e9ce84d952f299eb44ca1130bf084b72ba151ccca1df049ec69d162f127f97

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
0de080c8747a74bc70ca9924fcf5774c

SHA1
090c1ce8d1b6c223c533f1ccb321e421435ca98f

SHA256
d9baf9763f32cdc8849544b359aaa535eeaacda15089dc7d9378fd064f3843b4

SHA512
afbde5d9f3e71336296fd00ec30feaf6808c2dddd59e30ab898ce0a9915751056e8288ffbc09f5e505c2a3453edfda587c23c8185d2eb532773ece1d308b60d1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
feca3bc5e3ad7de1a3003ab230184216

SHA1
02fcf5c14983b57795a65c877d64d7a08e946c3b

SHA256
13545434865bbc643480dc2e6dfca70527affc7f612358a0a69f3b318b6a7f6b

SHA512
93533383f4afbd7f6726feb238d9d2466d9ca6463d6f06c24c6268a57c8d57361923ada1c112acb2a58669aecd3d89868b3b1eda3598c7b7dbb19b77bf31a2b6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
73013beb6ff7225e1c0c9ef5792f6b97

SHA1
ca5384fbe8db42e2ce3ac56ec4993f4ed032008b

SHA256
827347c8050b9195c9a3ef5d77eb16e362b6c72855064d592a761f1f3c4fbf2a

SHA512
5d2cf2a55c0b26e28ec1e1812a8518d47c11c5d60fb4d48e173f2a1b88e8a0d1083b7bc60da26f186af6ffa304170d0741d6f2d69caf5ed41869a470500d1dc1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
a3ed04a8866a1711a38041cbd621d36e

SHA1
a347f7486a73f7720229695c5b24f6dba2852483

SHA256
72d72ab786e0eb06753430bd00611f7c188f8fd2ef391fc8075ae6c7730c4db1

SHA512
56e85827e399845590db65bc3b89330b54ccf45f54724b778dd2d8a14523e19fd1a3c73066e2398e7e1d39a065b4d44939ecbf998bd94eb62acadd5e4858c3ee

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
e7d136b47534061ebfe4f979888495f8

SHA1
ebbd0a58e3d42047f4d82a1875ade598a0355fbb

SHA256
f6878b29a151d7119f4c9e25756e3e235024ff054fadbb8ff0a311a2f1244939

SHA512
36a3920948cb3206224ba8006c70ed699e6737788a02180cd03c14c595f21eb37c402dc990f63c5fc810240f6cd77fb3676a594b104e0ec0ea9df647a87d8044

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
4bd52a8e34c1430d235f657877db59cb

SHA1
fa11be0674e920a996cad55d99701574382adb25

SHA256
9e96577606d9698ce6fedac05791fc7a78ebc03086656cf556c335272c8fab47

SHA512
4b41438648908e529e5c98bc18d915428471e439ead0122ca164db3c8d87fc5f3fed4dcbe2132dfc416d27da970be2421e3510a268de755e142cc42c0dae61c5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
4c3b11611379c2719be9d0d98bd4302e

SHA1
56160c30ffa47b6224a046ec3a5ed15d894de7b0

SHA256
36a98465714a1bb726fe6d3c2a419e2f3407e845b6982192b0bed7834cc817b9

SHA512
86fd61874481f1bd9e753ca0c99ac29bb4b65f2f403c4df2b34ef8ea2567312d89559f870c8148fd004da7a6b2defebc899252cc788431aba3a4bc319107812c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
2d5fd549f182e36143e9b1511525f840

SHA1
6da67c54179a05a8f33ab0ba96fee8dd82bca903

SHA256
1214c25afee7032b1912cfbb0844a363b19548dc4eb18e312c3d78b21048dd6f

SHA512
b747bddf50c4b9181cd953326b049466a42b1bc84ea5b92f8e73ef3594b3a63d1ee96363edfb217a2f709f276973c65de5f6fd1d60cb820bd82925eb318b1fe7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
d3004a176c3a2d409239a950150fc4e1

SHA1
81ab2d4d26ae0c588aeb814e8c71962fce7d921c

SHA256
6e1542704bc7ca22729d95f770d7fc44a7b3b49d33c47dba1b251af1b8c6ab1c

SHA512
6501da8808d6d1036c17c4044c739748ea2ecd1b40a6c64742f8fefefb73c7463168a3fdf746d2aa6ac127d05bb2afa714c4df7fd1155d7cd4b7ec96bb6454e2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
26df80e232ee47387999d0ce80939549

SHA1
05d26e1c047e896554e7b4d432ce92ff76ce6444

SHA256
1a878e205f7a4d3e9518c8ceb80b1e9317f49700cec46367412f3efee70ffc55

SHA512
298e2b5122460c1827ddac7d1abb482483a06ce406b9232e74525f65bccefb94bd88e73c4ffe94273a608292b0759690e36586747095970ca3750ae77e9d19b0

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
f7ac3acfe6711ad23f85f29eeadcf700

SHA1
8218a4da388b8240e795f1044a9453feb1ce3ffb

SHA256
ccee15e2cb8c05b5fd7682a9faa3315ff643072811a7a8c85c609e09cd27445f

SHA512
680b74812d178b02353260746f4753ba58863f69af7f155575e28443c4f3d214b95f15156cf519fe38be34f820a07b7dd9fdc436a8f77655635d3f53a6d0a82a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
90fe969ea960d187b9f18a86ff245632

SHA1
38e09e84c345dd666ee93b95cd99bd8fc3e18db7

SHA256
233f0418696369e980a0ba292b2dd0c6e5805fd598322117ea6942d1919f4743

SHA512
b7a601590878b9faff599b177161f3876413096a71292ed4718f326ad27a8c663b02ba098084d8af10fa815ac9e16ea23a4351504162abf40714fe4a4501be4c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
40c74de1188654aea843974603b10d2d

SHA1
8be7f5e5f0c20ecdd1c6f5f172d3b6d8f6202455

SHA256
c393a6d79f3916fa688b05759734cb4572d0a46708f05a73b4388a4e7d3b236c

SHA512
0824ea33551184badc2c2ee324fcdab2136ad80106c1aff55754c6ee6a37a7ee1efef3045d3f189e49e6e5dcfec36d6659dc27c2050f212de1d9efad65971039

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
dfc08269aa2c11f44fbf61d45d85e5b3

SHA1
26bae747f4f523cf1cc51cb8a451066b464577da

SHA256
0840803b263088d7c420c2775bf5eb9c5183e2017a7e4af54111e7a1754d7f38

SHA512
41ad5fed17649607753049f8eea7a644189e6d6110ab7c875684ed67924ecdc8fd42d53ae2c82cc0bea8a96976fe97f9740661dbc7829e43d7c93977b096eac5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
4fd2c8cd011dc42e5cbd4b8ab43dc05e

SHA1
69262a7f6bba10cd456bb9488b9a558ef5e46071

SHA256
fb93c575a0298c500220063012df0b8703de65462bd62548a8df56c723eaa9bf

SHA512
225bb77343476d801b2db1df064c3515a47607799cd6fbc4ec8b14668f770f80e5e8a0d0aefd8d49b47672c76783ae95f491337b1a02e869c9fd6cb368e09ac5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
36a981166342458a727b782b6e7e912b

SHA1
1bff30d23bf0c234008ab264a6163b39f9fce35b

SHA256
a02e7051cd6743e3256f231599cb9d9920bc4016f0a9607b9669432b3585db6b

SHA512
f30ea3345df260937beb31f43c81f1b62e58ed226e86d42f25fd78dfbb042d95451e3e26bd55f93ae5da4a4dd1d81a9b1a30153d8a4b7551b1e87f6c527c157a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
306f7340dd99fd87dec4ae82dbefbc54

SHA1
4288a073e4e2296fe53b9d0d83c532e3627b36c9

SHA256
3a4dd87142389e6a41f3b8c7b610a2928a9812ff3e84ba2bd09641bb32a118a1

SHA512
545a3c90390d18da90cc1e91638472ec660965aae17b364c263e72e7bace0824aecc7aaa95ef5a7b6686d0e9928a8ce3e68e7331907b43e1882b4c074479b4fe

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
0265a07f45a6849147902e0cd21f0c55

SHA1
6caf731b6c3ef519bddcf38386faf946adc4ada0

SHA256
8400773cb1941f80c9daf0d48454d8ac0e45ff635ee47f55736ed0fe7cbe4f2e

SHA512
349b5e55140b798fcae3d8d30e0dfe353bee69bd673bcdc5abf84efdbdc6e4d4e81da619a12aad9e0516b3af31b49721d7f8372702b662efdafe145762312bca

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
4988ea2ef775e58e8ee94d979a69935d

SHA1
99d364dc2f48c35e6fddc285882d863e4fed394f

SHA256
e823149ab779e00936bfe4f4f58a47b419766ac4d5c61251c85ecb7157cbace1

SHA512
b994fc6bcb01578a14c097ee00f51742ce588586641ea62a7f0bcc489ecffb4f695d30c486bf912b61395f00af51883005a1eea72c0c2b3dc6f1df645ece4294

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
020e0a24947ef5264a26ff4608ae836a

SHA1
83f6dd4db70ea493d5a0e5c278e996a2425fc373

SHA256
156e6ec1362e6c0b004adccabdcfb8b4a806f4efc93bf22ef1699b0ef383b5d3

SHA512
e4baac436894232cdda2cca64f3949a5642402e34e0a09ac06aac21eaa942425e07f6c01efbc8694c010a6062de283d3b0d131897c57024f635a89c8b0fe2274

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
d53de88cdbcf3db6ae6e186917172590

SHA1
9c615e6a2d07fefc5040ea7e4e13af1c06bfdc18

SHA256
8593132a801958657e3eb253d0b8a241c277c438b205121b817c2ed9693def6e

SHA512
e127e0f97b5908ad16cef7c4a979561fdd7c401d8f18cad046785e3a54c453a6c267c5b03ab3f90ab6de1f9ce87e09e16eb2cded66f415db07d1f86dc528eca7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
1b075d9eef0d15a3d098557dcc97216e

SHA1
8186e396bea5ce872be08ed5e6e19bdcf1928906

SHA256
b8eefbaf6d5c83066bfe9e246fdbbb8aa38e13cf681aec357ac73ce01bf26605

SHA512
3f2ee8c5e1b03773ce89e87c3571dda1c531addacd4577e3bacb764db18535d33953e602a826744f46f3a695d1effd174dc0a83ebaa93d829ccb89f312c91975

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
0e7e4c9162220078c51635607145e065

SHA1
7d9783a955c27030ae58d709d0e4b9f08e3264dc

SHA256
3535a4733f3cedfa898eca7d632f62a856d91c6f1aacd3afcd6cdc4d77f41f76

SHA512
393e810ad8496ec04b97279fd56741bf3c722fa1880ee3eaf2c6bb2f091d71b2ada64167f10fe8145fdf4a2a7c90024ad9125da2c870abd9c44afddc76bcd11b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
9297d52e1c0656fffccd994c888b320c

SHA1
4cc0360e130108d5d74f1569f681f1584a1d530c

SHA256
5c8ca6eedc8d78fb8395cd3a85e1433eb3ae695a1dbcdeb128cd63c7c64512f8

SHA512
bebe0cee36c20bed374f6fa65f0c6c55155270d03872612861004eca1cbb3990c6d8f96b1f463fd9314812863a028977f1dc6e870257bb196f96ac9929faab83

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
8a6d19bcec7c9f92e06105c5250cc78e

SHA1
c8ecfd3ddbe102fec3114f796c2997c38da3d52f

SHA256
2c6ac9b6a92bdc1bee0fed032401d78315f4867e8d6b7bbcbbc13e194037a58a

SHA512
60b028e691d18415e142a3dd511b8d39b1a5dec4dcbc8f97be3ed870a6cc4ab9a7c1200425473a6a5157ab4014987ce5392535dc8adf9a01e708ef1b2f80e9fa

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
97ad8d129dab6fc5518620df13b8cd9e

SHA1
463d8796aaa95dc5dd3113760317ada2d990a7e8

SHA256
37bf7264e1b8322683327570125fb0de6975eb429d03eda5c065cd47d7ff60bd

SHA512
ae79d7296416d69195a4e32102c4a5dbda947a4cf5a24e16fd77d24a421d1b786821d74355bcd175b81335f8582b377af2a29adda8bb961b2988057c77856bd3

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
d6f5962c8b5dd8b01607f606c99a27bc

SHA1
c0c148d0ff0d01a7821848d6dce8ea19942ef9d1

SHA256
c178a71e0ab82c1ee2bb22ab52b50e8611e39b196a0847fba167214ad0024cdc

SHA512
852f60ab2fbead0eddf4af84b2b5ccee7851fe20d242be92e38c6c0f85e113359edee920ed6653bcd0b3586ec62a27860b60782b95e50ec508a83caf5df52d20

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
c082a401899c35a61b796ddabce8256a

SHA1
86d7dfbfaf42da0838070dbd391390655614ace9

SHA256
983aff0e582453e9a71fa2d287f35a1f53a7291bf90770905224d2d5bf09e602

SHA512
465c971b08f9ee0773340dd16845d8d39fd4811f584b3db11b3fa1f166601b73f9b9995166efbd3b81a51fbbfeaa03183c13f0170777faa90201eb3936990e65

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
b363702ebd751fdca13ecd39e53fa995

SHA1
5b3d1a089117fbdd233e88625af114da0c0a6239

SHA256
ec52a601b6b64dd1d96c817b3068a4b1f68b2cf04618e6f5db6fde8cb1c70feb

SHA512
9a4e717841e4f3e36366a70cf20642cdcbd40b5b739b0482955c40ecc4aa6196c2c00719beaf0a96c3c9b392cf2ada87c08f465780af1cd3117ba8af19875a7e

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
46691a1b30f95ca2d6deed169b02dd32

SHA1
0818fb43305a4b0236b630a4768ed22c3becc1fe

SHA256
e23b4f58f61186919c2c1394b8a9ff3a2e7c53a0fe6aa7f4d1541b28d69cbcea

SHA512
0197668c9ae5ff066962bf8bb809ba749b4b688f602bb8ae6267e505c5484ed34e32a46fec24d4c14fc0fc3d317e5371330fb85e034930de9080bb1060563a5e

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
b20a620cceba3fee0a173b25bba31cdb

SHA1
262340b695a29b7a328cc0d84426b20b44adcc35

SHA256
a7f7a2125433ef6d6593600d14d9be79162aa1d93439a88e1d67ddd8d6162bb3

SHA512
64134862414e01bb8163bfc2c91bc05e8dcba9556a83b3c96cd716dbefe159aa79cd35c2dc321c635ef7a71a99de86a47b25b1d6ef5299e3eb4ecb3e3f30c144

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
52769724b82ccf542dcef08d76faec0e

SHA1
64305d9c018ae8fcf9318b7aa11fadf07879111d

SHA256
de0a4c94be6be8c09eb17aa45c0527c52aa50b4ce4d3eb294d3b967d984613b9

SHA512
130376e72105fecc213a7f899035b182627dda9554dccc571548fc8df533090b97d626a03505ab71e39173dfe48b17dab6a939370e24476f763dc0a10ecaffb4

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
bf38c95808acc7d4a1496bde3ac48f68

SHA1
9173518f645b8763aa1cd81379d0abd60b70d023

SHA256
a8a7c1bb816a19a1854f0489a2e4dbcafc4d413204fa8db6645cd308b35b14fb

SHA512
75cd0d07bd88069a0ba625b1316e6a09314a9e41c0043ebc2310c92022c73f11a65492ad25704261170aceecdbfaa8085c395b8d5aeb1646b9a3ae5dd1cf708b

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
6412e01a683421dc249bfe227f8d7872

SHA1
3c502c49cd5911ff4c4ca90460cb4f333724c92b

SHA256
8057393d21a97bfce0e92f43898b97c982a953ae3dbf244bf3cfe89bbeca899a

SHA512
4043bcb8743ade180bd3ed92f123cc891c36b947d82d7195d2fb9d691cd304453d04824969ecd6f1268737c003f679ca1a7ac89029d9c7c8138403e3bb1f8fe5

Download Submit
memory/3668-56-0x0000000001110000-0x0000000001111000-memory.dmp

Filesize
4KB

Download
memory/3668-2897-0x0000000001090000-0x000000000109D000-memory.dmp

Filesize
52KB

Download
memory/3668-5166-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-2233-0x0000000000740000-0x0000000000752000-memory.dmp

Filesize
72KB

Download
memory/3668-2232-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-2231-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-61-0x0000000001130000-0x0000000001131000-memory.dmp

Filesize
4KB

Download
memory/3668-62-0x0000000000720000-0x0000000000721000-memory.dmp

Filesize
4KB

Download
memory/3668-63-0x0000000000730000-0x0000000000731000-memory.dmp

Filesize
4KB

Download
memory/3668-64-0x0000000001160000-0x0000000001161000-memory.dmp

Filesize
4KB

Download
memory/3668-65-0x0000000001140000-0x0000000001141000-memory.dmp

Filesize
4KB

Download
memory/3668-66-0x0000000001150000-0x0000000001151000-memory.dmp

Filesize
4KB

Download
memory/3668-0-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-53-0x0000000001090000-0x000000000109D000-memory.dmp

Filesize
52KB

Download
memory/3668-52-0x0000000001090000-0x000000000109D000-memory.dmp

Filesize
52KB

Download
memory/3668-1-0x0000000001120000-0x0000000001121000-memory.dmp

Filesize
4KB

Download
memory/3668-2-0x0000000001120000-0x0000000001121000-memory.dmp

Filesize
4KB

Download
memory/3668-3-0x0000000001120000-0x0000000001121000-memory.dmp

Filesize
4KB

Download
memory/3668-4-0x0000000001120000-0x0000000001121000-memory.dmp

Filesize
4KB

Download
memory/3668-5-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-6-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-7-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-8-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-9-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-11-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-13-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-14-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-15-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-16-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-17-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-18-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-19-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-20-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-21-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-22-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-23-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-25-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-26-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-27-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-28-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-29-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-30-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-31-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-32-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-33-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-34-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-35-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-36-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-37-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-38-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-39-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-40-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-41-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-42-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-43-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-44-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-45-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-46-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-47-0x0000000000740000-0x0000000000752000-memory.dmp

Filesize
72KB

Download
memory/3668-48-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-49-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-10041-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-11040-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-11167-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-50-0x0000000001170000-0x0000000001171000-memory.dmp

Filesize
4KB

Download
memory/3668-12-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-51-0x0000000000740000-0x0000000000752000-memory.dmp

Filesize
72KB

Download
memory/3668-24-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-11444-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-11445-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download
memory/3668-10-0x0000000001190000-0x0000000001191000-memory.dmp

Filesize
4KB

Download
memory/3668-11450-0x0000000000400000-0x0000000000479000-memory.dmp

Filesize
484KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads