Malware Analysis Report

2025-08-05 18:14

Sample ID 241117-skea4asera
Target dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34
SHA256 dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34
Tags
discovery evasion persistence privilege_escalation trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34

Threat Level: Likely malicious

The file dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence privilege_escalation trojan

Downloads MZ/PE file

Drops file in Drivers directory

Boot or Logon Autostart Execution: Active Setup

Modifies Windows Firewall

Event Triggered Execution: Image File Execution Options Injection

Modifies system executable filetype association

Checks computer location settings

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Enumerates connected drives

Blocklisted process makes network request

Checks whether UAC is enabled

Adds Run key to start application

Drops file in System32 directory

Launches sc.exe

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Unsigned PE

System Network Configuration Discovery: Internet Connection Discovery

Event Triggered Execution: Netsh Helper DLL

Suspicious use of WriteProcessMemory

Modifies Internet Explorer settings

Modifies system certificate store

Suspicious use of SetWindowsHookEx

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious behavior: EnumeratesProcesses

Modifies registry class

Checks processor information in registry

Uses Task Scheduler COM API

Modifies data under HKEY_USERS

Suspicious behavior: AddClipboardFormatListener

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-17 15:10

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-17 15:10

Reported

2024-11-17 15:13

Platform

win7-20240903-en

Max time kernel

149s

Max time network

129s

Command Line

"C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe"

Signatures

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Software\Microsoft\Active Setup\Installed Components C:\Windows\explorer.exe N/A

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\DRIVERS\dbx-stable.sys C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\SET5590.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\dbx-canary.sys C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\SET5580.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Windows\system32\DRIVERS\SET5580.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\SET5591.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Windows\system32\DRIVERS\SET5591.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Windows\system32\DRIVERS\SET5590.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\system32\DRIVERS\dbx-dev.sys C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DropboxUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\DbxSvc.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxCrashHandler.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxUpdateOnDemand.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A

Modifies system executable filetype association

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\DropboxExt C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\DropboxExt\ = "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}" C:\Windows\SysWOW64\regsvr32.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\DropboxExt C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\DropboxExt C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\DropboxExt\ = "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}" C:\Windows\system32\regsvr32.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Dropbox = "\"C:\\Program Files (x86)\\Dropbox\\Client\\Dropbox.exe\" /systemstartup" C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E573CDF4C6D731D56A665145182FD759_5A9FE11E8B6335FDA91281200971E038 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\system32\SET5592.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\system32\DbxSvc.exe C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D7C5C79D5EA2EAA218D5C63883951605 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D7C5C79D5EA2EAA218D5C63883951605 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E573CDF4C6D731D56A665145182FD759_5A9FE11E8B6335FDA91281200971E038 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File created C:\Windows\system32\SET5592.tmp C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\PackageAssets\Assets\logo.contrast-black_scale-200.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\gdiplus_native.pyd C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.targetsize-36_altform-unplated_contrast-white.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\fs_api_python.cp38-win_amd64.pyd C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\StoreLogo.scale-400.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\images\03_Tray_Icon\win\dark\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\QtQuick\Controls\Styles\Base\SpinBoxStyle.qml C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\msvcp140_2.dll C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\QtQuick\Controls\Styles\Base\images\slider-groove.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\locales\sr.pak C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\api-ms-win-core-timezone-l1-1-0.dll C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\dropboxstatus-x.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\QtQuick\Controls\Styles\Base\StatusIndicatorStyle.qml C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.scale-125.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\QtQuick\Controls\ApplicationWindow.qml C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\StoreLogo.contrast-white_scale-200.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\TileSmall.contrast-white_scale-100.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\api-ms-win-core-file-l2-1-0.dll C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\QtGraphicalEffects\LevelAdjust.qml C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.targetsize-24_contrast-white.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\TileSmall.contrast-black_scale-125.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\win32gui.pyd C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\winhttp_native.pyd C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-256.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\QtGraphicalEffects\FastBlur.qml C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\logo.targetsize-64_altform-unplated.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\QtQuick\Controls\Styles\Base\FocusFrameStyle.qml C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\win32ts.pyd C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\logo.scale-100.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-black_scale-125.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\images\03_Tray_Icon\win\dark\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\Qt5OpenGL.dll C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\TileSmall.contrast-black_scale-125.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\PackageAssets\Assets\logo.targetsize-60.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-16_contrast-black.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\Strings\language-sv-SE\Resources.resw C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\images\05_Splash_Screens\camera\electron\splashCameraOutOfSpace.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Strings\language-en-US\ C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\paper.targetsize-32.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\paper.targetsize-48.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-black_scale-150.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\winenumhandles_native.pyd C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\QtQuick\Controls\Private\FastGlow.qml C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\QtQuick\Controls\Styles\Base\ApplicationWindowStyle.qml C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\210.5.4894\apex.node C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\QtGraphicalEffects\ZoomBlur.qml C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Assets\web.targetsize-24.png C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.scale-200.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\dropboxstatus-idle.png C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
File created C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
File opened for modification C:\Windows\Installer\f76e0ae.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\f76e0b3.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\f76e0b1.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\INF\setupapi.app.log C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
File created C:\Windows\Installer\f76e0ae.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\f76e0b1.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIE497.tmp C:\Windows\system32\msiexec.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\System32\sc.exe N/A

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxCrashHandler.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxUpdateOnDemand.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\system32\runonce.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}\CLSID = "{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}\Policy = "3" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 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 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3WebMachine\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32\ = "C:\\Program Files (x86)\\Dropbox\\Client\\DropboxExt64.76.0.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\ = "DropboxExt9 Class" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.Passwords\DefaultIcon\ = "C:\\Program Files (x86)\\Dropbox\\Client\\Dropbox.exe,-9024" C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{76E258F0-DE86-4CEC-9D30-3F728A898741}\ProgID\ = "DropboxUpdate.OnDemandCOMClassSvc.1.0" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{78F1393A-63FD-494A-BA89-2C3ECA4E8EC8}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{58237066-0A7A-4C18-B132-D7BE280A6327} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C416C376-AEC5-4443-9D90-BEBA9434763B}\ProxyStubClsid32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.OnDemandCOMClassMachineFallback\ = "Dropbox Update Legacy On Demand" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B} C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3COMClassService\ = "Update3COMClass" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{B35122D2-0036-4536-AEEA-EEA68E54A460}\ = "IGoogleUpdate3WebSecurity" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32\ = "C:\\Program Files (x86)\\Dropbox\\Client\\DropboxExt64.76.0.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.OfficeAddIn\ = "Dropbox.OfficeAddIn Class" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3WebMachine.1.0 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32\ = "C:\\Program Files (x86)\\Dropbox\\Client\\DropboxExt.76.0.dll" C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\ = "DropboxExt5 Class" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\ = "DropboxExt1 Class" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Dropbox.Gdoc\shell\Open\Command C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.ProcessLauncher\CurVer\ = "DropboxUpdate.ProcessLauncher.1.0" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CredentialDialogMachine\CLSID\ = "{4AF89161-A408-4DFD-9DE2-3C3B7BDB14E2}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.Gdoc\shell C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{96D1EED3-701E-4FE5-B996-A543A8465897} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{3A337332-37E4-4063-B4F3-6416846C8A33}\AppID = "{76E258F0-DE86-4CEC-9D30-3F728A898741}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4AF89161-A408-4DFD-9DE2-3C3B7BDB14E2}\ProgID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\Programmable C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.Gdoc\shell\Open\Command C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{49423331-2B41-4EDE-838E-F8C8F3F6BF62} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CF142CA5-83C5-4E06-8FEA-310AA519A945}\ProgID C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4DE7C611-9E6D-468F-8AA2-26C08DB4A687}\ProxyStubClsid32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{831F99E1-2250-4065-8975-7408E726825F}\ProxyStubClsid32\ = "{4974C8E3-15C6-4ED7-AFEC-DD62FAB30313}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A496C5D9-84FE-4E84-9D20-7481589E1C23}\VersionIndependentProgID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Dropbox.AutoplayEventHandler.4\CLSID C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E54806CB-0046-4BCF-B389-3A6F732DC6E6}\Elevation\IconReference = "@C:\\Program Files (x86)\\Dropbox\\Update\\1.3.733.1\\goopdate.dll,-1004" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.Backup\shell\Open C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C52C4100-E8C6-438B-AEAC-43C99F7CCC26}\NumMethods C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C416C376-AEC5-4443-9D90-BEBA9434763B}\ProxyStubClsid32\ = "{4974C8E3-15C6-4ED7-AFEC-DD62FAB30313}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{831F99E1-2250-4065-8975-7408E726825F}\ProxyStubClsid32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{CECD4BFB-9F43-4540-B72C-706BE66B375E}\NumMethods\ = "10" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9E396485-96EB-4906-B2C5-3E0F1E7748C3}\VersionIndependentProgID\ = "DropboxUpdate.CoreMachineClass" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.Gsheet\shell\Open\Command C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.ExternalBackupLocation\DefaultIcon\ = "C:\\Program Files (x86)\\Dropbox\\Client\\Dropbox.exe,-3712" C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3DD80E78-80D7-4E12-90CA-CBF68A68B1B3}\TypeLib\Version = "1.0" C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Dropbox.Paper\DefaultIcon C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Dropbox.Binder\shell\Open\Command C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\5A812990327ACD34D85B163756A6E149\Complete C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A496C5D9-84FE-4E84-9D20-7481589E1C23} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9E396485-96EB-4906-B2C5-3E0F1E7748C3}\Elevation\Enabled = "1" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3DD80E78-80D7-4E12-90CA-CBF68A68B1B3}\TypeLib C:\Windows\SysWOW64\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\VersionIndependentProgID C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.binder\ = "Dropbox.Binder" C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Dropbox.Gdoc C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\DropboxExt C:\Windows\SysWOW64\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CF142CA5-83C5-4E06-8FEA-310AA519A945}\InprocServer32\ = "C:\\Program Files (x86)\\Dropbox\\Client\\210.5.4894\\DropboxOfficeAddin64.14.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7E38012B-D35D-4278-BBFD-E5AC871D3E60}\ = "ICredentialDialog" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D8474489-B2C1-4CE8-852D-FF8A916C91F0} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E54806CB-0046-4BCF-B389-3A6F732DC6E6} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3D412914-1C4F-447D-80D2-E7F9BB302B05}\NumMethods\ = "4" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Dropbox.Gdoc\DefaultIcon C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Software\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 04000000010000001000000087ce0b7b2a0e4900e158719b37a893720300000001000000140000000563b8630d62d75abbc8ab1e4bdfb5a899b24d431d00000001000000100000004f5f106930398d09107b40c3c7ca8f1c0b000000010000001200000044006900670069004300650072007400000014000000010000001400000045eba2aff492cb82312d518ba7a7219df36dc80f090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b060105050703080f00000001000000140000006dca5bd00dcf1c0f327059d374b29ca6e3c50aa62000000001000000bb030000308203b73082029fa00302010202100ce7e0e517d846fe8fe560fc1bf03039300d06092a864886f70d01010505003065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ad0e15cee443805cb187f3b760f97112a5aedc269488aaf4cef520392858600cf880daa9159532613cb5b128848a8adc9f0a0c83177a8f90ac8ae779535c31842af60f98323676ccdedd3ca8a2ef6afb21f25261df9f20d71fe2b1d9fe1864d2125b5ff9581835bc47cda136f96b7fd4b0383ec11bc38c33d9d82f18fe280fb3a783d6c36e44c061359616fe599c8b766dd7f1a24b0d2bff0b72da9e60d08e9035c678558720a1cfe56d0ac8497c3198336c22e987d0325aa2ba138211ed39179d993a72a1e6faa4d9d5173175ae857d22ae3f014686f62879c8b1dae45717c47e1c0eb0b492a656b3bdb297edaaa7f0b7c5a83f9516d0ffa196eb085f18774f0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041445eba2aff492cb82312d518ba7a7219df36dc80f301f0603551d2304183016801445eba2aff492cb82312d518ba7a7219df36dc80f300d06092a864886f70d01010505000382010100a20ebcdfe2edf0e372737a6494bff77266d832e4427562ae87ebf2d5d9de56b39fccce1428b90d97605c124c58e4d33d834945589735691aa847ea56c679ab12d8678184df7f093c94e6b8262c20bd3db32889f75fff22e297841fe965ef87e0dfc16749b35debb2092aeb26ed78be7d3f2bf3b726356d5f8901b6495b9f01059bab3d25c1ccb67fc2f16f86c6fa6468eb812d94eb42b7fa8c1edd62f1be5067b76cbdf3f11f6b0c3607167f377ca95b6d7af112466083d72704be4bce97bec3672a6811df80e70c3366bf130d146ef37f1f63101efa8d1b256d6c8fa5b76101b1d2a326a110719dade2c3f9c39951b72b0708ce2ee650b2a7fa0a452fa2f0f2 C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Software\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Software\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 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 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000\Software\Microsoft\SystemCertificates\CA\Certificates\1C58A3A8518E8759BF075B76B750D4F2DF264FCD\Blob = 4b0000000100000044000000420033003900380042003800300031003300340046003700320032003000390035003400370034003300390044004200320031004100420033003000380044005f0000001800000001000000100000000f3a0527d242de2dc98e5cfcb1e991ee140000000100000014000000b76ba2eaa8aa848c79eab4da0f98b2c59576b9f40f00000001000000200000003689022b62bd20e807ccc1f32720ab2a9eeb0712e84cc373464b29cc436def97040000000100000010000000e67b586f7046bfe0aa51f6660b119dd91900000001000000100000003b878212830eb36469856f1c683b836c0300000001000000140000001c58a3a8518e8759bf075b76b750d4f2df264fcd2000000001000000c2040000308204be308203a6a003020102021006d8d904d5584346f68a2fa754227ec4300d06092a864886f70d01010b05003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3231303431343030303030305a170d3331303431333233353935395a304f310b300906035504061302555331153013060355040a130c446967694365727420496e633129302706035504031320446967694365727420544c53205253412053484132353620323032302043413130820122300d06092a864886f70d01010105000382010f003082010a0282010100c14bb3654770bcdd4f58dbec9cedc366e51f311354ad4a66461f2c0aec6407e52edcdcb90a20eddfe3c4d09e9aa97a1d8288e51156db1e9f58c251e72c340d2ed292e156cbf1795fb3bb87ca25037b9a52416610604f571349f0e8376783dfe7d34b674c2251a6df0e9910ed57517426e27dc7ca622e131b7f238825536fc13458008b84fff8bea75849227b96ada2889b15bca07cdfe951a8d5b0ed37e236b4824b62b5499aecc767d6e33ef5e3d6125e44f1bf71427d58840380b18101faf9ca32bbb48e278727c52b74d4a8d697dec364f9cace53a256bc78178e490329aefb494fa415b9cef25c19576d6b79a72ba2272013b5d03d40d321300793ea99f50203010001a38201823082017e30120603551d130101ff040830060101ff020100301d0603551d0e04160414b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300e0603551d0f0101ff040403020186301d0603551d250416301406082b0601050507030106082b06010505070302307606082b06010505070101046a3068302406082b060105050730018618687474703a2f2f6f6373702e64696769636572742e636f6d304006082b060105050730028634687474703a2f2f636163657274732e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63727430420603551d1f043b30393037a035a0338631687474703a2f2f63726c332e64696769636572742e636f6d2f4469676943657274476c6f62616c526f6f7443412e63726c303d0603551d2004363034300b06096086480186fd6c02013007060567810c01013008060667810c0102013008060667810c0102023008060667810c010203300d06092a864886f70d01010b050003820101008032ce5e0bdd6e5a0d0aafe1d684cbc08efa8570edda5db30cf72b7540fe850afaf33178b7704b1a8958ba80bdf36b1de97ecf0bba589c59d490d3fd6cfdd0986db771825bcf6d0b5a09d07bdec443d82aa4de9e41265fbb8f99cbddaee1a86f9f87fe74b71f1b20abb14fc6f5675d5d9b3ce9ff69f7616cd6d9f3fd36c6ab038876d24b2e7586e3fcd8557d26c21177df3e02b67cf3ab7b7a86366fb8f7d89371cf86df7330fa7babed2a59c842843b11171a52f3c90e147da25b7267ba71ed574766c5b8024a65345e8bd02a3c209c51994ce7529ef76b112b0d927e1de88aeb36164387ea2a63bf753febdec403bb0a3cf730efebaf4cfc8b3610733ef3a4 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 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 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeTcbPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeSystemtimePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeAuditPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeUndockPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeManageVolumePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeImpersonatePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client\Dropbox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2432 wrote to memory of 2820 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2056 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2996 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2576 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2820 wrote to memory of 2888 N/A C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 2564 wrote to memory of 1492 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe
PID 1492 wrote to memory of 3052 N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe
PID 1492 wrote to memory of 3052 N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe
PID 1492 wrote to memory of 3052 N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe
PID 1492 wrote to memory of 3052 N/A C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe
PID 3052 wrote to memory of 1796 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1796 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1796 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1436 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1436 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1436 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1756 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1756 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 1756 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3052 wrote to memory of 2400 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\regsvr32.exe
PID 3052 wrote to memory of 2400 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\regsvr32.exe
PID 3052 wrote to memory of 2400 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\regsvr32.exe
PID 3052 wrote to memory of 2400 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\regsvr32.exe
PID 3052 wrote to memory of 2400 N/A C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe C:\Windows\system32\regsvr32.exe
PID 2400 wrote to memory of 2992 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2400 wrote to memory of 2992 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2400 wrote to memory of 2992 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe
PID 2400 wrote to memory of 2992 N/A C:\Windows\system32\regsvr32.exe C:\Windows\SysWOW64\regsvr32.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe

"C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe"

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe" /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEifQ"

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /regsvc

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /regserver

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ping 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-

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /handoff "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEifQ&nolaunch=0" /installsource taggedmi /sessionid "{6DE8360C-8FE9-4C43-8C30-572E17C15CD2}"

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /svc

C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe

"C:\Program Files (x86)\Dropbox\Update\Install\{F3A0A79C-6E4B-41E0-83FB-FBF7AEAA413C}\DropboxClient_210.5.4894.x64.exe" /S /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEiLCJvbWFoYS1pbnN0YWxsZXItaWQiOiJ7NjA1OUU1RUMtNEE2MC00NzcwLTg0MkItRUNDOTc4NUI3NjQ4fSIsInJlcXVlc3Rfc2VxdWVuY2UiOjB9 /InstallType:MACHINE

C:\Program Files (x86)\Dropbox\Client_210.5.4894\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\..\Client_210.5.4894\Dropbox.exe" /install /InstallType:MACHINE /InstallDir:"C:\Program Files (x86)\Dropbox\Client" /KillEveryone:YES /IsAutoUpdate:

C:\Windows\system32\netsh.exe

C:\Windows\system32\netsh.exe advfirewall firewall delete rule name=Dropbox

C:\Windows\system32\netsh.exe

C:\Windows\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any protocol=tcp localport=17500-17510

C:\Windows\system32\netsh.exe

C:\Windows\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any protocol=udp localport=17500

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt.76.0.dll"

C:\Windows\SysWOW64\regsvr32.exe

/S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt.76.0.dll"

C:\Windows\SysWOW64\regsvr32.exe

C:\Windows\SysWOW64\regsvr32.exe /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll"

C:\Windows\system32\regsvr32.exe

/S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll"

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /S "C:\Program Files (x86)\Dropbox\Client\210.5.4894\DropboxOfficeAddin.14.dll"

C:\Windows\SysWOW64\regsvr32.exe

/S "C:\Program Files (x86)\Dropbox\Client\210.5.4894\DropboxOfficeAddin.14.dll"

C:\Windows\SysWOW64\regsvr32.exe

C:\Windows\SysWOW64\regsvr32.exe /S "C:\Program Files (x86)\Dropbox\Client\210.5.4894\DropboxOfficeAddin64.14.dll"

C:\Windows\system32\regsvr32.exe

/S "C:\Program Files (x86)\Dropbox\Client\210.5.4894\DropboxOfficeAddin64.14.dll"

C:\Windows\system32\DbxSvc.exe

C:\Windows\system32\DbxSvc.exe

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\System32\sc.exe

C:\Windows\System32\sc.exe failure DbxSvc reset= 3600 actions= restart/5000/restart/30000//

C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxCrashHandler.exe

"C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxCrashHandler.exe" /crashhandler

C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxUpdateOnDemand.exe

"C:\Program Files (x86)\Dropbox\Update\1.3.733.1\DropboxUpdateOnDemand.exe" -Embedding

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ondemand

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /firstrun 1 /noappwasrunning /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEiLCJyZXF1ZXN0X3NlcXVlbmNlIjowfQ

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgZG93bmxvYWRfdGltZV9tcz0iNTE0ODAiIGRvd25sb2FkZWQ9IjIwMTYwMzU2OCIgdG90YWw9IjIwMTYwMzU2OCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:crashpad-handler --no-upload-gzip --no-rate-limit --capture-python --no-identify-client-via-url --database=C:\Users\Admin\AppData\Local\Dropbox\Crashpad --metrics-dir=0 --url=https://d.dropbox.com/report_crashpad_minidump --https-pin=0xfb,0xe3,0x1,0x80,0x31,0xf9,0x58,0x6b,0xcb,0xf4,0x17,0x27,0xe4,0x17,0xb7,0xd1,0xc4,0x5c,0x2f,0x47,0xf9,0x3b,0xe3,0x72,0xa1,0x7b,0x96,0xb5,0x7,0x57,0xd5,0xa2 --https-pin=0x7f,0x42,0x96,0xfc,0x5b,0x6a,0x4e,0x3b,0x35,0xd3,0xc3,0x69,0x62,0x3e,0x36,0x4a,0xb1,0xaf,0x38,0x1d,0x8f,0xa7,0x12,0x15,0x33,0xc9,0xd6,0xc6,0x33,0xea,0x24,0x61 --https-pin=0x36,0xab,0xc3,0x26,0x56,0xac,0xfc,0x64,0x5c,0x61,0xb7,0x16,0x13,0xc4,0xbf,0x21,0xc7,0x87,0xf5,0xca,0xbb,0xee,0x48,0x34,0x8d,0x58,0x59,0x78,0x3,0xd7,0xab,0xc9 --https-pin=0xf7,0xec,0xde,0xd5,0xc6,0x60,0x47,0xd2,0x8e,0xd6,0x46,0x6b,0x54,0x3c,0x40,0xe0,0x74,0x3a,0xbe,0x81,0xd1,0x9,0x25,0x4d,0xcf,0x84,0x5d,0x4c,0x2c,0x78,0x53,0xc5 --https-pin=0xbd,0xac,0xcb,0xf2,0xe8,0xb2,0x7c,0xc,0x2,0xa6,0x89,0xee,0x86,0x6c,0x9b,0x86,0xec,0x4,0x44,0x2a,0xfc,0xdd,0xdd,0x5d,0x4e,0xc3,0x6d,0xef,0x21,0xe7,0x61,0xdd --https-pin=0xaf,0xf9,0x88,0x90,0x6d,0xde,0x12,0x95,0x5d,0x9b,0xeb,0xbf,0x92,0x8f,0xdc,0xc3,0x1c,0xce,0x32,0x8d,0x5b,0x93,0x84,0xf2,0x1c,0x89,0x41,0xca,0x26,0xe2,0x3,0x91 --https-pin=0x8b,0xb5,0x93,0xa9,0x3b,0xe1,0xd0,0xe8,0xa8,0x22,0xbb,0x88,0x7c,0x54,0x78,0x90,0xc3,0xe7,0x6,0xaa,0xd2,0xda,0xb7,0x62,0x54,0xf9,0x7f,0xb3,0x6b,0x82,0xfc,0x26 --https-pin=0xb9,0x4c,0x19,0x83,0x0,0xce,0xc5,0xc0,0x57,0xad,0x7,0x27,0xb7,0xb,0xbe,0x91,0x81,0x69,0x92,0x25,0x64,0x39,0xa7,0xb3,0x2f,0x45,0x98,0x11,0x9d,0xda,0x9c,0x97 --https-pin=0x5a,0x88,0x96,0x47,0x22,0xe,0x54,0xd6,0xbd,0x8a,0x16,0x81,0x72,0x24,0x52,0xb,0xb5,0xc7,0x8e,0x58,0x98,0x4b,0xd5,0x70,0x50,0x63,0x88,0xb9,0xde,0xf,0x7,0x5f --https-pin=0xa4,0x95,0xc8,0xd1,0x10,0xe8,0xb9,0xe2,0x0,0xf3,0x70,0xae,0xda,0x3f,0xf9,0x2e,0xe4,0x3f,0x8e,0x3d,0x4e,0xc0,0xdb,0x1c,0xd,0xc5,0x8b,0xd7,0x62,0x88,0xb,0xa5 --https-pin=0xa0,0x2f,0xaf,0xa1,0x92,0xc8,0xcb,0x81,0xcb,0x13,0x41,0x55,0x4f,0x9c,0x5,0xb7,0x1c,0xca,0x2a,0x89,0xb,0xd,0x12,0x98,0xd6,0x83,0x64,0x7c,0x96,0x1e,0xfb,0xdf --https-pin=0x6a,0x97,0xb5,0x1c,0x82,0x19,0xe9,0x3e,0x5d,0xec,0x64,0xba,0xd5,0x80,0x6c,0xde,0xb0,0xf8,0x35,0x5b,0xe4,0x7e,0x75,0x70,0x10,0xb7,0x2,0x45,0x6e,0x1,0xaa,0xfd --https-pin=0x2b,0x7,0x1c,0x59,0xa0,0xa0,0xae,0x76,0xb0,0xea,0xdb,0x2b,0xad,0x23,0xba,0xd4,0x58,0xb,0x69,0xc3,0x60,0x1b,0x63,0xc,0x2e,0xaf,0x6,0x13,0xaf,0xa8,0x3f,0x92 --annotation=is_store_managed=false --annotation=machine_id=bf99bef1-312f-4726-8597-70228ef05e99 --annotation=platform=win --annotation=platform_version=7 --initial-client-data=0x174,0x178,0x17c,0x148,0x180,0x7fef67c4378,0x7fef67c4338,0x7fef67c4348

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" -type:exit-monitor -method:collectupload -session-token:f0e52894-26f8-43e0-9b01-47f52d3bc930 -target-handle:392 -target-shutdown-event:384 -target-restart-event:328 "-target-command-line:\"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe\" /firstrun 1 /noappwasrunning /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEiLCJyZXF1ZXN0X3NlcXVlbmNlIjowfQ" -python-version:3.8.17 -process-type:main -handler-pipe:\\.\pipe\crashpad_2672_TUNBXUXYXKYMHPGN

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /restartexplorer

C:\Windows\explorer.exe

explorer.exe

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x550

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=gpu-process --crashpad-handler-ipc-pipe-name="\\.\pipe\crashpad_2672_TUNBXUXYXKYMHPGN" --crashpad-annotations=product_name:desktop_client,buildid:main,buildno:Dropbox-win-210.5.4894,platform:win,platform_version:7 --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4432 --field-trial-handle=4520,i,6159738767913211203,8324707352553330562,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --standard-schemes=dbx-local --secure-schemes=dbx-local,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=dbx-local,sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes=dbx-local --mojo-platform-channel-handle=4716 --field-trial-handle=4520,i,6159738767913211203,8324707352553330562,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=0 --gpu-device-id=0 --gpu-sub-system-id=0 --gpu-revision=0 --crashpad-handler-ipc-pipe-name="\\.\pipe\crashpad_2672_TUNBXUXYXKYMHPGN" --crashpad-annotations=product_name:desktop_client,buildid:main,buildno:Dropbox-win-210.5.4894,platform:win,platform_version:7 --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5184 --field-trial-handle=4520,i,6159738767913211203,8324707352553330562,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --standard-schemes=dbx-local --secure-schemes=dbx-local,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=dbx-local,sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes=dbx-local --app-path="C:\Program Files (x86)\Dropbox\Client\210.5.4894\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=7372 --field-trial-handle=4520,i,6159738767913211203,8324707352553330562,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=gpu-process --crashpad-handler-ipc-pipe-name="\\.\pipe\crashpad_2672_TUNBXUXYXKYMHPGN" --crashpad-annotations=product_name:desktop_client,buildid:main,buildno:Dropbox-win-210.5.4894,platform:win,platform_version:7 --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=4620 --field-trial-handle=4520,i,6159738767913211203,8324707352553330562,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2

C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Dropbox" --standard-schemes=dbx-local --secure-schemes=dbx-local,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=dbx-local,sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes=dbx-local --app-path="C:\Program Files (x86)\Dropbox\Client\210.5.4894\resources\app.asar" --enable-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=9288 --field-trial-handle=4520,i,6159738767913211203,8324707352553330562,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 client.dropbox.com udp
GB 162.125.64.13:443 client.dropbox.com tcp
GB 162.125.64.13:443 client.dropbox.com tcp
US 8.8.8.8:53 edge.dropboxstatic.com udp
GB 162.125.64.22:443 edge.dropboxstatic.com tcp
GB 162.125.64.22:443 edge.dropboxstatic.com tcp
GB 162.125.64.22:443 edge.dropboxstatic.com tcp
US 8.8.8.8:53 crl.microsoft.com udp
GB 88.221.134.146:80 crl.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 23.192.22.93:80 www.microsoft.com tcp
US 8.8.8.8:53 d.dropbox.com udp
US 162.125.6.20:443 d.dropbox.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 162.125.6.20:443 d.dropbox.com tcp
US 8.8.8.8:53 client.dropbox.com udp
GB 162.125.64.13:443 client.dropbox.com tcp
US 8.8.8.8:53 api.dropbox.com udp
GB 162.125.64.19:443 api.dropbox.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 172.217.169.46:443 redirector.gvt1.com tcp
US 8.8.8.8:53 r3---sn-aigzrnld.gvt1.com udp
GB 74.125.97.72:443 r3---sn-aigzrnld.gvt1.com udp
GB 74.125.97.72:443 r3---sn-aigzrnld.gvt1.com tcp
US 8.8.8.8:53 client.dropbox.com udp
GB 162.125.64.13:443 client.dropbox.com tcp
GB 162.125.64.19:443 api.dropbox.com tcp
GB 162.125.64.13:443 client.dropbox.com tcp
US 162.125.6.20:443 d.dropbox.com tcp
US 162.125.6.20:443 d.dropbox.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp

Files

\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdate.exe

MD5 8ad76e0b347bb690697535ce95b1c656
SHA1 10d2622a3965d21215a953ed924d01788a9805ed
SHA256 7655221b493047c61285e1de78807d0584920b0d14d150e2487da9728b1926f3
SHA512 35fbda7f05865b3a50454dba5ba3738eb8a5fd6d2eea5e9415d8d517811d51c50cca6c7b47a5b19f1ff1f4101567137fe18805f4f740289456da1ff2af682504

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdate.dll

MD5 23dc331d16f53f24191903af7ce2ad2a
SHA1 cf9636790998ea276bc4e5fe7ff14260db577bbf
SHA256 62b9422b10030ad4c9b1956df37f6fc1c540474e18372eb37421091c300a0e2f
SHA512 24f514602478ae0b36420ce0ed089d25164734981f2671cc95072c3090ebabb75565dc3b53802a74b48c75c59e427d608d0c73e4b913a86679ed3f61606693ae

C:\Users\Admin\AppData\Local\Temp\CabD70F.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_en.dll

MD5 6f4f4e2770697d53c7080341133c67d3
SHA1 f1ec7ead8b8b3075f4cd61e8f7c616689ea68142
SHA256 0801e3483982bad6b5918c1493727f7a1347e201398614ce143f784ec040347e
SHA512 f1ce922db34c757966f3d7c8fce29c6d334c54f50e4026ebaa07c4d22bd334769b9af2f0011732f712bdb220c32fda65815af18fb5a641dfef776899321dc8c1

memory/2820-85-0x00000000001F0000-0x00000000001F1000-memory.dmp

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxCrashHandler.exe

MD5 5e52926d03a33b6eb79b3dae293f9d4a
SHA1 2dbe86020d4279884468e699171a4b46986f379b
SHA256 b376ae83b594e7c49903ca455198f48c98fc401e02ef0e1d38ab5b6b4b19da6d
SHA512 bd2949c957973f3365a56ac95d667565a9c0d822b8b26e1e91dba89590bfc24a3738b12531f152b909a9c3f4e77b7a453004a93994a77cad7589025c134e3f50

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_da.dll

MD5 7a3a1335d0020f9fd3dd878ffcaccc26
SHA1 64c999b2fd0a3d9bd0f3de7c93045772ee4585ed
SHA256 a88b7a8c4b54ec30370f4530a6c5ebc8b55cd2548af2534595c9268c49643762
SHA512 fb9af4c31073bcfa718ccd31232e30ef8486030b234b17d2741a6560b60b76fd1f6f727ca2c4c728672ca5df461c7015df9cd81c66e6f4a380a9ea947b832737

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_de.dll

MD5 e6704ebfe43ca5542b78265b630853d3
SHA1 bdbd2fd09720015500bc37837064b06b154f7636
SHA256 028427686e148993093517c4285195e08ec734d20d0664ac22bdf606346eebbb
SHA512 dd1b71419b035a2bb650f3c874aa47816c6963d2183c9e88a45de683e889af1edc1a672db44a1a4f87403c71909513c00f7bd16643f124cee40340a812b6e455

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_es.dll

MD5 5b36bce32bcc0db2efa71d12026e1234
SHA1 5359fb2cdcd22b2bb804065d29ae3200417622ec
SHA256 4eb60316a5d318cfb4958e22a67e90fcc4035195ac3326c3d6afaae1b823fc8c
SHA512 60a6cd40469bb63a9d4a33decf6aebac48c8c99610c0cc17a58c015af7e7815965779db4d18f3ebc4e03d12134e47ba56ca42da989d3966bbeea19fa4f2c724e

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_es-419.dll

MD5 1abbddf1ef6db10d85f2e8a002d40566
SHA1 7c09cee0b4c1bb95415855777b7aab5f9df48e37
SHA256 952a28928345c100443c559445e66e762791a1a7a9ec57541d39612ad9db7f5f
SHA512 f1bdc37005c03b26e79f87e44f901b2189955f72aa416dcae0466a88d113c98948c7da6f25baec1850ecb4c7b2d560488cddec6a6a7c8c408b33785a85ede50e

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_fr.dll

MD5 a74ab7391b9de5e5ff2a32b2439a585e
SHA1 2990fbb2a9753581fbf8aea4ab536d5efd9e898b
SHA256 ecb359617d6111f7d3b7e3ea0aa5c1c5400e7b21339534085e18a525ac4a6627
SHA512 dd679e46d422cc2b785c40b22fc8a4901495aa822563422c6046d1ee97c68c9f988262276ddc11323c93cb072b6d1f05c6199a657cbbb2460c574c2d56f98fa4

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_id.dll

MD5 60d1126ce0a685ffdbaa1e592d4218ca
SHA1 fec95dc9ef121a0202397314558618c106e96453
SHA256 82e2e4d3d62f0887f753e91965287c635f00128fffbba5d2d4933817b9de96a3
SHA512 ceb7f08b5e868c913df8f42446910809ecf4f5341d0047e08072edee4132fc679768401262f277952841b894e4f8209a4dbee06e3978153fb7ba420e9f476e0b

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_it.dll

MD5 599e89df5fb24d8cf294d8ad611f435f
SHA1 50a1e9c9571387c981b39d1130967253ca4b89c9
SHA256 baad7087c933b3e5178840fc5e0480a83169be10dba892be4e890379295cab7d
SHA512 071c54c8cb251322880c4a07da33517f579a2653c9665faf98d5c18ef71a01896907104962a7799a8b2b0faf9f02d650eec854d1c16796da6dbba367a8f7fec0

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_ja.dll

MD5 1755f0733a1a600a368db4b804856170
SHA1 499270b4fb9923d077ec5082bd0e78c6adc4e069
SHA256 aa1cabf5dc4f5770c2f8c6dfd3ab70365b1c3182b6981584982352407e06dd03
SHA512 9070a54ff4b3416dd0f5611aaf476c304897625834364fd492bd83364eb00cea0885b00f1605fd5fb2ac2ca7556140845cf193881b44958521223266e108c0fb

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_ko.dll

MD5 b3aa59966d665d13e53233cfc2728a06
SHA1 bd3052210392cd20c0d2e9e08ab75432c9239cc9
SHA256 4cf5fe6e9bb32c3baf7e3a1cfede4d5a9b1fbe643460b3e93eb424bde68d93f6
SHA512 bedcd96d1ac8b31ef42a28570e80177b77e2bc2daef007f82aa88c8a9226647d51c6890be60b3b99bed6556cea8f84239f7425f95248d539e03cd84d80b0a47a

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_ms.dll

MD5 e2a0bb25526445ac3c61c24bc5839070
SHA1 642d46a576255d2e0719096100278a4475223e72
SHA256 8b9679b7b2a5ad855609f8d56007d4754e5680ca53ce4ee4772cd518f269e853
SHA512 fec9f6bc2b8349ac4beee7143da57595dba18fb0280009f706b6c5308a4f3f61ef3159273feec2460f766e8ab979ff6cdde8dd67bd4adc91342690e297d213d3

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_nl.dll

MD5 50bdd5dac9c74cf3fdf3849ef7b30071
SHA1 900619b2730cabe0125be0eab6bb0e044a9c5143
SHA256 974bfcd208e0c27b055b3dc1157b38c67a69375fcaad039b7569870642eecd0b
SHA512 353f7d929f6a5887d485611c2ff57d35f4a5c3c5c49ac06343ebd61c773eb67419b82389f3291513cc7937f11de4c5c90b3cfa42d2b8c94600fe4273c1244449

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_no.dll

MD5 8a282b4a14e069565717c8e1ad3dd0db
SHA1 f5e982b2b45cb9317ff08a2d4e2fcae0567df439
SHA256 26b3a543bb488d78026904543bc9964e383353e78e6e6a453ecd60a61a1e6a69
SHA512 fb635543286af7fd79d65c1d41087658b74e28414af89277af64e0581223e0495348dc03282102166f4d2577c858c956e5c71efc83260e072ace387e82f5d060

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_pl.dll

MD5 738680185a4ad72eca861b07eb340f24
SHA1 663a8c80edb40e3dbf647ce087442402a6ed63e3
SHA256 283853c061efe6077520b87ee0c50d53ec9ae71b441a49d52177abb24319b5df
SHA512 e652a2fa20148aaa999d80ae55e6c4c7c1b7831a7b51c3f152097a4f5510bd9d4ab3230b03c2df9645ba7532ab455a9c3affd31dc5f9a363d162c1b8b332eeb8

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_pt-BR.dll

MD5 ff0664f29791cd10bd517306313910b2
SHA1 5258f102f2a1561236a5078828b7f3db0409fa4c
SHA256 d6ad58988444fa50f711eec8641a0988b2f80087e0735a8aeac518ff297c220c
SHA512 504e771036970276d4c770902b67adef798cf20767d4b219c7e71f4c76e3b739e109e210396d498665114bce956f87bae296095adc56fcd61928808fe9b8bd59

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_ru.dll

MD5 15a90bece279211eae19f4fbafb2e44a
SHA1 11efd42e4bd28c513d833b0b251cd12d07d74ec5
SHA256 3c06a9c3b932d839156ca796ca37d8f2f23a28768ef126ff1df37e082a3f288b
SHA512 b466f5dd9bebd2914a60356941f4fa3084bf38f99c02a3c8380681c9cc0ac88419ee68c819dac8703be2072997644398beb59054e395680d7a5c8213b18e8e43

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_sv.dll

MD5 b9337f4443b1280d9ffc263cdcea5619
SHA1 584fa85529cb89b6fa596243d75a145641c5e534
SHA256 6b021b6f2ab81e89a97eb7debfb6c0fd745ec2a3f635e932cbf8e6bf8c3b3609
SHA512 a74241e5affa5c49e2124c2774582703bb46cb3315d97ee5ceb1622c55c5159908a3cc5c826e816c5faaab529194900525cb940a2ac0007e8cabe95b2be892b2

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_th.dll

MD5 480c55865478bb97ed10470d3f116876
SHA1 3c49fe94b223ba1700a121c97234a424cd29b597
SHA256 56e24797b20fc890d9c6f3806515228dbaeff50e7fcd3362aded68915f3af152
SHA512 7a105dc96bf4bd7b1de78114f951904d9f10cda53866919106820d7d2fab44834597812785963ed25fc89241a5e5542ddb663b2392c253089cfab18dbc2ad2a7

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_uk.dll

MD5 9441222e5f39a4435648511aaebbd9ce
SHA1 4cba24a8d5554b2460d24fd6ecee8447f968d501
SHA256 881ca42c3e16adff5386fb48929e63ecfb4667e1be8328ced55964078e6d51e6
SHA512 828fc35e84d26c7a32a415d982f5c140bc3749d8b1b5ab3a11f77d7c7ad7a7b10f24ed79e9ad60dd4e8b3e6f87bff8d9a84829418aee49a9766664439256bff5

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_zh-CN.dll

MD5 27e625269b32350cf68d57a5147ebadb
SHA1 228370d3c07c051edb322e840bbe73bfacd38472
SHA256 7e5c095d4d3cdf6f177e99153acc3a08360df2a3b3e174eb1d048c4221249b35
SHA512 da5f7a84145da4ec7dcbd13da29293bf44fdee517cc51610426f508fce255567af25cb90fd0b0db672cbd604fa88f4f6d5fdf12cf30b8fe6197c2887f0bca628

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\goopdateres_zh-TW.dll

MD5 d8bcebe4f2bc38819c7eb0a2851c3336
SHA1 4be9d56c4b45b823d6a76e558554b6204e9245ac
SHA256 e022c9ae7753c3f4b32096feca00a7413e734750ec29f914e4f62e3296b708e0
SHA512 00a42ebe1ef47e8f814f4408a58e39e7f6ef15d3d34e948348681f4394e00dfa7567e705ba313080bf4008dd67f77cce0d94db674dd5b488ad0215f9faa2f4f3

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdateHelper.msi

MD5 8a1b9cd969b13a72ef69844ea378e530
SHA1 8f9e8b2c6e17be4a087daf58c09af8edc6d4058e
SHA256 25f1316ee75aa06cbe34ee23ab988c92e6a4201633ff886e757e23f9aa3c4fd1
SHA512 55c7f0dc9bc824b5768e18af3773737c7747d095fa3f725407c961085c5b0a3dcd036f706f9928f8a4f3d142e21e68dea08849b9d6b52c5258b6bf152fc3dcce

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\psuser.dll

MD5 6342700b3426bf4a7f8fcee293b4aa42
SHA1 85ddca922cca6c02556a63442ef3425311af9c76
SHA256 a629cc14d64db772781606d22167d04453b944a9ff103a6fa306d6b6e35cf064
SHA512 1ab3892a5950e53ff2f6aa4561401bd143fb89bfdadcc8fa70acd099d2d6ee09be6573abdbc82988e5ff3def5a528063e2b4f13cd8c5788dc0e8b6c092ad6768

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\psmachine.dll

MD5 835ba5ff6341819c0af96ddea468486b
SHA1 329907655619e02e43a7ed8d0b471199b48f30e7
SHA256 d895cb0ed7b046f00cb8b9945919918858bfce8e16fd9ed2d2297eb3de6637f9
SHA512 b45f2d0e2a4726e3676d46114f1e7320e0766f9a9eafeb391a1033860d446099341fe7256923b2cd5cc4089861569f89aae8fed31b7d70d1c5f695400df473f8

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\npDropboxUpdate3.dll

MD5 41d23a3219df000f9bbe4c99d0f28672
SHA1 732f26abe59c541f09547e7b38fe97a2a1766e4a
SHA256 eb50a9d1d9f6f7cc0ff47c2e6dd64acf4ff2190c24225f91adfef99d54422706
SHA512 11f1069b982d9eb010cefb95495dc4ea5e994d52032f2421e8a77a2f9036fa284ac4a5ffd0b23d6fc70483f8204dfc496e836bdc4913f52dd52d94c75d2c74f9

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdateBroker.exe

MD5 d8c11a823de853893bfd7c63e06bcb85
SHA1 fc50f184cca2692e170069a9e7ee83a05b8f231b
SHA256 c6727b41a23b2dc6f6f08b5ec55804239a7517424a5c46f4f1a8b124a8ed9aec
SHA512 f2c65a3e40402cebf087526bcb9e98f30ea8ebc198435245424991301220715ec76f097261e1f9d4cb19259d6e8eb4852ae66ea99abc5926c00255d7b65fdebd

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxUpdateOnDemand.exe

MD5 9b5c4a464acf6a9249ecb4c3a709a842
SHA1 36fd80f274874823d8cc08a98aa6a420246979cc
SHA256 43fba0f3a45549a369b4cf01ccc732bdbd28a2bf2a4c075b6853c7110427328f
SHA512 82bda88f8eaf36863357ff6b98b020234dc6cc590cb0f051538fa3c8ee88a13a5e8485f184891f1df457cac34dd4f208d5f985fd8e7a1e8870e18c8176d8c624

C:\Program Files (x86)\Dropbox\Temp\GUMD539.tmp\DropboxCleanup.exe

MD5 8fa7f9a62ea19f3691e8a24833a5bc25
SHA1 23f0825ce2f4731cc73e82ca814872b512d333dd
SHA256 0d9c6de8a57443bffe718d3256fdd467b8970124ba65d8accb6f47dc54d46d72
SHA512 3d8243c4a42f96d549b09797f39b0f2fbef54d643ee4048c24eb6a1b748ef07ecd6bfdc142fe4c13838b0c07957b5e558ebf98fb7bdcc841d49fcff0a06eccf4

C:\Users\Admin\AppData\Local\Temp\TarE1E7.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Config.Msi\f76e0b2.rbs

MD5 a7e5fc4aa676b9bd5cecfc5ceec6b9ce
SHA1 28e492d85ab627befd849353893e41b72e172a65
SHA256 6776214ed7db75751c83e7f829b58fcf7b409e98557fd416aa299a04cdf70189
SHA512 93224592579eee2ca0d674cb56a6b10a9617eda32184c04276c0170b297dec8f0738e5cfbf0f6d0b752f64dbd9f341ad8ff3b8b7e9b8c6daed6397810a69743f

C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job

MD5 c4978073e76b06cfc03c6130583d3aee
SHA1 6cb9a71422624ba35d10ff1471c4c5c13285e005
SHA256 81f5a78f7d1ed89f707a8223270c44835f7ef767c977fc9980e38a2be893c7cb
SHA512 1aa10b5f8b4a860d08a5e867508812728d53a0bf250caf2a5859f0ca08cafdc602084247b8e7534ffb268163238052f25182fe22fa5419f6a7b92807eb64ddf3

C:\Program Files (x86)\Dropbox\Client_210.5.4894\210.5.4894\Strings\language-es-ES\Resources.resw

MD5 fed758a433fae9f6bd6461b769845d55
SHA1 89f1efcb9a9d568af64b109b72ed6ab77803f15e
SHA256 75997383b6597a725ecdc87f688ef632e218bb627bb724c347416937deab768f
SHA512 a04a35ca6129feea3987e261d24fbd4b2419511119ebce5c7f3d34d369eee122ecd16cad395a73812f255498ede9782d8eaec4fa7e966e340353b35600ca0977

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\backup.png

MD5 1521c0a628944271f2bc1e19978913db
SHA1 62dcff433a57e17a24eae81638744df31068f693
SHA256 5bfc58e4b27a8405effcf108856d2650299afcf55eab83e95370c9b6066709b0
SHA512 39c0b9ab739bb777ff1e2c64d71e910d6859f50f0b0f243d34610f30f4b312185ae70f715880b4918b272f01e51e5be127f2b40c37cb3419ca3650c2248b66bc

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\binder.png

MD5 873fbb8d6c4031515ffe4fa2fca98f1c
SHA1 6647f17a25a2e11e8b43ea057c14d77d8b0485c8
SHA256 f582ca6fdf085b23240b35411040b0b5bff6c2ec1ed5b2c0f7add35c88c65914
SHA512 1c29ccf8be145285a85783b979294af651582564d62839766c549d9a76ead223c7db73abe2de65fd30fbc30a174c14677eea4f4258374cfeb519b5a2e75ceb09

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\external_drive.png

MD5 2c5ff4c40104d73684602b8822502e79
SHA1 bb8034e2603fbd74408239b733e47f2fff668d5f
SHA256 971d455f91faf6bf320ed366f0881fc613c3228daa9ed91e0d6c864ece1a735e
SHA512 b4270bcd6cf9badc7ba7343760863961da179ba1f87545e61c27f37b4d652cf0333c5451f7ffc52628ba0d24861d6a692d0eb9d3ee247511a735b6f7b5f10743

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\gdoc.png

MD5 380d7a105141884a3a4369618ec809ca
SHA1 c87753703e478f9b1194990e29c25315c0387db0
SHA256 4541fbe81bc51114ef18706d2b37a44c1c5ba14454fc26b8a058bb31bd8cfb79
SHA512 40c16d9281d74b47d197d103e7ba52ca2fca30811389bc2a699f4ae9fa30ada55e6327840c43cb3139231c3f7a7ad841d7154950e6258e806e628115794574bf

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\gsheet.png

MD5 8029ccc1e62854e19c74582fdc915634
SHA1 4dc6094aecb1bfdf87cdc0123a2f1f905bc83df2
SHA256 70f5bf52350b6aaf67ad1296a947ba2a87c12dbbef76d1c3f73fec723977a81b
SHA512 f37822df1dc52e955b990b138a88064edd92d134773c4dd0950e298ee7f8812e16cdfd64f6511c45f9618c99d8343ac2b973f67b5a852bda0e4c8f267caf6d1b

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\gslides.png

MD5 d698a0f00979142b5991ab54db41ad64
SHA1 ded38ecebbb506d1b8b719c57f5ac8614dded702
SHA256 c6ed27af06f6d5e565469d95bd7ac077418971bb1dc7f2fe068d07cf0f84284e
SHA512 cadb690d88987de1ce8ea1d1fa2f93e86e6ea093a9623f5bc48d2f8cbb6e29d05525d358595902a0179b516b043bede63e2c7df3313a2658c84d2dfda0af0536

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-black.png

MD5 b832b83311da4c4ed1ab6841faf9e095
SHA1 5ec25bd5ce1914ee348afa22ffa79163b59b644a
SHA256 f1169f6b53191be05946e9ced0dbb6676b61ac9902db3218e69eb5ed4252d67a
SHA512 f5895b26b61d31046c97de5ba04d2d18587941c3e39e85e2d9a2de3bce7bff608011849dbea1982e4a2401e1c4b0a02c566e9d63c2dcfe3a2b69ecf9a473bb31

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-black_scale-125.png

MD5 990a230b37c6ecd355eac8e6b47190f7
SHA1 c1be5515f7c2779a0bd7e837ed97b433d2d908b4
SHA256 08a92e353e5c573045edc67b2c58fe245d5ad40c3c3e63edcf4ebcb0f1efc5bf
SHA512 68e52f6ce78e91b01d06b06b51d9930ed413f258f53447d0b394dc5e2661be6e51bcfe25cb818f3a1c55385a3f9d8e695c4d759fb2d677b18822f89f8d4e607d

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-black_scale-150.png

MD5 fedd073d6396e035e8cca6e7d38bcdb0
SHA1 2c686dfb2916c094419481c2c1f70fd73b2ff944
SHA256 bacbe3c51cc9b59f42b3b5e246d9c2e3843a08369d7551bfe53e6542a847e9f6
SHA512 93e48632646b930a4984441cd29723e1272cbfd5b005e38459dba831f0da7d530b1a9da06da8d632e75cce62a8f3ee61fa36b0dfe0ba9a74641323145857ce2a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-black_scale-200.png

MD5 040cd2d93b51d1ba57d7b98cadfbc5dd
SHA1 cdc1c3bf0a2a916bcf474927604c2e4755f0c5a0
SHA256 742e2f2a19e3158f1df75cbac15400b9ff4f14e6f4cbea5c856d1a8e07d52cb0
SHA512 18678967c92ee3ea29c4169e8ce602795e9908fac2e6a113d87e7f67bf74779f92befe732f6be201aa3f70b0edae8b3ce845d1f857fc90e0c6a82022300cf3b8

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-black_scale-400.png

MD5 543d527e790ad5aadb487c3dfd251d13
SHA1 11dde867dba701cf21998165e0612d0c481f590c
SHA256 a722bae20339682d00edc12d01930b8ea9670d3a48f4e85e5d8c483a2f9f3f6f
SHA512 7402b45649d81e09e7b01a24f6cb73e0c10ff120715f57a803959d9cf3e994178f363fd722c604c7b6a942e54d860ba63dc1d7050a706b8f1595c0bf0eae08ac

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-white.png

MD5 5667327e1c37cac08cfb45f4fa04fa16
SHA1 d6ec47f3a5276a4081f24922b9510e691bef098f
SHA256 b483f895037bb12a7d9f4678382479abbfc67a898d5da76606011d133e119396
SHA512 319f81c5023197b1011f58f074ce7aae81210201db56f7af21d436c710489511c17a02e584416c6787b1cb31e06b67dcc232700b38994d2e1dd1db402f3f2095

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-white_scale-125.png

MD5 0c932b40eba76ff9015a1f55a1dd1776
SHA1 e25b4506a79eeb7a586c811f6b5e626df6537cc7
SHA256 e8449b860cf4eaf5b894a606ca19951e4ca9561e0dd2e8a82b142bcee256a846
SHA512 52f34233a3e64b4beba4c8d268a1449dab42fe68d3723651d8ac80d7a5d7a4935f5b742c49fada9a0ddef3996415f99953df5088a68f1483cfcae08e9b610428

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-white_scale-400.png

MD5 c28c3dfc76fe1dc78e1456b63755bc1b
SHA1 0d2602773d5acb84403bb611cb2a68f535b50c0f
SHA256 c8db5c7d9e4196500a6707a22af86038af867a16810d079dc0bd7ce9f2209997
SHA512 cee3a729b01fbd324dc60f1753b886ca65cd54abc3e10a9b93b50ed1df1532afa642deccced9ef98e4130e71b628aa9de7b0b65333ae6a078658c27d16dde3e2

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-white_scale-200.png

MD5 c065e50cfff6d79e0eb9f2c59d2e43fc
SHA1 2682657708ec6127fee9b07eda3db186fd50d76e
SHA256 72e9a9762f27b239382346341733aae6d3fd8cc87441dbeaa92459197f7c4b12
SHA512 9021af1b1fd24847c956621574108b57183d3277688431bde5a88d76a259f25796ba4b1a073863fc86c5f439fcd7efcc60fd649852565710dd97e4a8955b9c13

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.png

MD5 9d05fc2b1d201d34a32f9e0fc7fc6b28
SHA1 b74925f23d9ebbf9a170f0f6ee2307277c535be2
SHA256 5b4295cda56616386c8a51e9950c4b6bf881da8e38a3b06af45dbc383efe2a9a
SHA512 073a84635557810b0fb8cddc5b54c8afe6cdaf2af666aae5bf4ec89ab79f06367bc4e5717538314faa11ccc6ae619f7a3353a878f32cfeebabac99c545cc55b9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.contrast-white_scale-150.png

MD5 47045326a56d0055b8836a65fcba9fb3
SHA1 8d9cee61331c9a333cb205e80c0ddf521aa7c9db
SHA256 e59ab89cdb6a4e395e43abd6de2dc56a8a198c9250700505cdd7da8bc70e1814
SHA512 f16c95f2c664d45f5297bf465f16cea72bc89bc70faef01807255c2329280dc2d0709d5ab6e7fdf8b6a612aab6ba3d2cc0e65fbbc4e3195bcb1b7d5dede0ef2f

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.scale-125.png

MD5 2145838d099c7880f0573d14c04ec9f4
SHA1 337a3c7c9d1c7988948003578579816f118a9a23
SHA256 993a57d13e17efeea8a4d82a2c34e1366370d3ffb869e1f4bdfb7eeee7e95713
SHA512 d78f646c90dbe2b8f7bfb4f9d80d68437f1408974f4af10ad6e1fe265419c549b2b38021ae951d0cabc8e9948dc0f871bbbc2a4cc5a1cc3eabb574f66eaf12ea

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.scale-200.png

MD5 c2ca27b8c83cbe7530b7f2002e9b05d1
SHA1 5e9ab52d27a81ee5053c99b24a822be69373c10f
SHA256 2470fbedd07761a881bc3ba492eda9b7650fb6abc5fac62014cd6afd5837e60d
SHA512 36b50da360017745084f8d4b80c335589b39ea1d94f11b6b48a8c155ccddac1095ca8600d26af0babe4bab07db199b7f0dc92207ead76007628f5b6d240938ea

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-16.png

MD5 65314a1f7cdbaa7d2d54e55ebe01f6b2
SHA1 064dda6eb14cf6502ab501a31c61ecb2749dba3f
SHA256 480bd88e54f2f39583b7360b7412486067dc8f0acdfb9396ca4b2571349515b7
SHA512 ac0e7a59de1c595a107e2ff0c044e27627629c3c9f66cf40503a9e4d3252577f8db75b60fe777833f391165f1fd0926fadea2fef71810292e6a7365747bbbcae

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.scale-400.png

MD5 667d502039a4d46e9d612a9a7b35ef7e
SHA1 0c7dff244e11cc23ac1732ecc0b6d77841a6f348
SHA256 0e261e6c03acabdffe199b1f06358fb5aae4581503166e824ca51f641ac5c821
SHA512 d07cbac3c1859d1fc87791207d5115576d74c94e79adb25d566dadff3da6f3d5ede8b04097008b3558d6916dac2e68e92a84a9a663b0e5a5fb4b68a1f06036eb

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.scale-150.png

MD5 93f4aa125f52d7d5dd00087c94ccfb0b
SHA1 868dc5709f0d35e94f3e4cc94e92715fd912c0d8
SHA256 12e29e0f3c411aab7cac939243217ec2cc5d2e704d5e2e3046fef76b1f9ddc08
SHA512 f3ada2da513d25abcf786db93957a0f00725922ceec6e20176dc1f2f738176b850635bf2d98855815b019ed0e4567ad198383d1fa5efa340671fc68b45cb7362

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-16_altform-unplated_contrast-black.png

MD5 69425172b704c2ae99ce43d4c2ec3e77
SHA1 55b9ca414b419377c93d799385b1e5f17905a6fd
SHA256 768dedd2f167c28e0e628326fdb17f9d0a3b50d2776600968ad00682a6a84de4
SHA512 26cc0ae704ed6abf31eec3d99425b70577a136edeeee252b43f2922e871cf9427cbc4566d1dcd5018c0c5ef2e8f5ea2eceb732ac696b744cc0e1a880afff5ee6

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-16_altform-unplated_contrast-white.png

MD5 078e5ae7004ca5f443d3a92627caeb8f
SHA1 c03b04cb32d3e7f24aab7a4ce2bda96820edadb2
SHA256 7fcccb4c85dcc54849c88d74241db75e5174160e0e364558073d6e6c01ad107e
SHA512 691f3e8b09449c5663f0ca5b0f71f1d4cd10997c361f29e2e5be7b577253d744c2a4283a61cdcdf873718d36281c63e3dbf21703198c26d389037184419c54a5

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-20.png

MD5 08fff0895f5bd8d5a347b441e48ad41a
SHA1 b9331637e59137bb8d75251bf85677099a24ca27
SHA256 92ecfadf6d728ab3346f8498bab501014be35881bb605d585209033c0c8738cd
SHA512 64ee594903afcbf3848ad37c094be60815104ea0aa17f5e287600448e95902e07820ed0bb6b840ccc78a3b60d8b37e7dd4c23e322670e588b8df21a3e0cef56d

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-20_altform-unplated_contrast-black.png

MD5 f568f4b386b0e96165f0bea8f20a2f90
SHA1 0dbb7d102401e27e01bed8bdfca59103931eef4d
SHA256 fc27012a9f08d137a192e4651fe1170348fba0e755bc20dcd18a040761764028
SHA512 cfd190ef7b29d0dbf461517726e8e179b07bff0f6e5be0a1b40cdc4f89fcc1093b5d79ff319b2231c8924fbc017a9e2e98a510fb25923be2040dbd6d1a27d060

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-20_altform-unplated_contrast-white.png

MD5 8fa8d6175c2e3cd8b8c5a7174c872490
SHA1 3c40b505d69bc9a4d8115caa6995a49a8c652c6c
SHA256 9ba3a66c924c24287fff271985cd9cbc41d98ea3003ff079485ed16096b40af8
SHA512 88a89452f59e1089b19090d2cd7981288576f0929a0e5598ef6b60b828e1986160bd0ca1e4b1f73cb43ef9b5605ca4520c353f80135e0824c86103aa539132ac

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-24.png

MD5 17df27edb43d66bf07ee73f901bbc036
SHA1 fc2c1f284c008754d73284eb41ccb6bc13866366
SHA256 b1c4bb67f7d23a1f7c7a336ffd7b6c9eac64d166c62c71f01900057acf6ffc97
SHA512 a9996454106e500fa29db69b1fb234f23bf2b64906b316a53e675881b7c97f652f510ef8e86306eb6ee4fe868f55013a9d855b42ea5aa35400569203d49cd4d1

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-24_altform-unplated_contrast-black.png

MD5 89b16af41887fa5d59d6d4196736412a
SHA1 89837e2da2f33418f63095ebae076cd42d3e96c7
SHA256 962a367ddb4e1a3c1b4d15c5bccb26c8dacdf90874709b2049137c6611cedbce
SHA512 f45e803282ee568be2de32c2f82d3a0971d4bfb8b9c1e45ce010b01284c0db13f8da30a4029e7d32834df097b222b7899b559ccf25a202c91c9561a49a727989

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-24_altform-unplated_contrast-white.png

MD5 eb8547e09e4cc9c9bfe3d22a5bb030d6
SHA1 e971788950eec3ec33d42fd1884ef460beae7b4a
SHA256 fc2025e7019faf3c3e2f6bf953710aecd4d77eb3a270c301e14acb056a3f5e41
SHA512 0bb2029260147f4d1041e9cb4a7696248158992cbc0334ca09ef433c1fbeebbfb667edee18f1ed2518383883f575eee8e01f0948e3075166b34120f42b8ae2e9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-256.png

MD5 05178135c922f70c73c4bf161dcf30c4
SHA1 740e84bac96b585837a3680025f31bb41f5574cc
SHA256 017de63c54a90a3fd5355ccb74b1030d7ddbd3795d17d5531d8d3b4925d09e5f
SHA512 07bff7f3cf5e0cd6c57e4ecdd42d91d8243261a760592b971bfd51170a88572447cd43bd0a7676136a56f8dd8ef4e25e2da218b9334c93a6ed7dec3d62883aeb

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-256_altform-unplated_contrast-black.png

MD5 19717d9e418bc3f3bef1cdf2f5df2ceb
SHA1 dd703ce05d68c79f9245f85e30631f84a619a616
SHA256 db7844bdeb530f730adcd6e8133c0268bb4f623a126cc021d896f3bd3b5bbcc3
SHA512 bc81017ab7baa23d4776dc24e27823208b59406e374211b455220fb93a5817eaa18372cc00ba3b13899884f5463a0dd088d233c6f9effebda961f0dfc9c8dadf

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-256_altform-unplated_contrast-white.png

MD5 b001c9070f08bb5d0fd365b5e2cf20d6
SHA1 f7e19e04b4ba0d2ddf4bc1bfeb294549193900a1
SHA256 00c062d5b17bfecc284c1a2cae4ab3982475726be67fcdc031051a2a069079f2
SHA512 576d34bd5d81b19dde57105804b2bbdca0faede9275e8c1cfd9707edfcc00bc5ee9add3f08865e5827e9f143c798ccca8ed002f1995af8bf9473b237ccece2f9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-30.png

MD5 a8dfa7f601b7943c10d2629a64400874
SHA1 ca14836647c3ed3e23b8ccc1b14113cc949b8ac4
SHA256 0f1d81715883c6335a6cd9e7d5eef096ffe151844c0754e61ba5051a0d3fd6d9
SHA512 feca8e247dec925fb5a8a6daf207f81af8fd908905b2f4a5fcdb0243f55482dfb69526c547455ff70084ed5b5da3ebe691f35af1af7e7c9121fd6eed9bb755f5

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-30_altform-unplated_contrast-black.png

MD5 9b83d3e977e41230a9e9a094e412f7bd
SHA1 116051a28db47ef22845804aba210688779bffd9
SHA256 c7965f12e0d493c4282994e07dbc051b26dd5d95fe390527f6506a5877e068b1
SHA512 ce2b7754fb3e6c33a1dd9186829da3b981d784bc08fc6fa383bd172e4275e88f81dc4a3897c3036b471bde6db4ef33766d65716ed8ecc18acd53978b55b1fc00

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-30_altform-unplated_contrast-white.png

MD5 193dd3ed9285ebbf0fb79a93228decbc
SHA1 f2475b74c9171be2ca0f47555941554ca13a58ff
SHA256 96519fbbba9029fc6214df166334808e86df8751f7405a0b8af812c870a56c96
SHA512 30aac97523d7b8ffc86bf58392843d730bef9b96a8828ace6be9217eb06a35320facb902c039b7f5209d5c11105a5991c45eeca144902ef20cb3f930bb84def3

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-32.png

MD5 c1a26f91bd23a6a6c865b1bca72912a8
SHA1 9178bedf3666d30adb8af404a211cd9735a13f9c
SHA256 0532b07e9decf2e53c44a17207a7c93b57e2285e6f65f349750bde4a4e6f72f4
SHA512 92302b24d68e6b5b1d88e23454b3434d98bf967c4079ef5a928fbe5bb25aa9f38fcd6f95ad5d667fb800a33c62a55207f7da83318a40cefb694006f13716f2cb

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-32_altform-unplated_contrast-black.png

MD5 189f28a3247afbf1b17ae9a9cc788874
SHA1 721206a8ad829d646a0c73d90dedfdf475022d2c
SHA256 5e4bef37189b940b417efdc91f0abf569edb8e067d5bac1864a1eb47a68946be
SHA512 96ffd4627f8f207d5121551d338320a939db3c568e2489277fadb6b6aa09197cc6aae80b1474c00e1779f5900324eb25b27035abe8df7c4044295f67743eb74a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-32_altform-unplated_contrast-white.png

MD5 f08f237ba9df76e5344f6d1dde7d7072
SHA1 d0e3c52453402fb40e9813b92bf5bce556cb13f5
SHA256 5ff9fba41b80869407e9df6799aab8a9d3ab86b086b93a0173f66f8faafe4689
SHA512 8613437ff8b8be50a8ba117d37e3172d650f8e953fa088c35e0012a8f26813bff33a98e8bb1f8be5bbcfcbfa7789b995a895b02f44595526ec916297be99f147

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-36.png

MD5 a5394ee13baefd246c0bf6060d38ec6a
SHA1 d4ab4e8de5564b0e20525a9baa0f8e0b5cb2a05d
SHA256 7d70ccd21823c7918de26edddf6b3a35773512b074225bc3b24b028d1a0596af
SHA512 c5a91ff923ca3821844dd2ab04bb472c336e6bfcb881fb955825e3d0f001361d31178d56a25ae979978b0175b2a61ab67b864bcff910d8b9225329b532ba2ad8

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-36_altform-unplated_contrast-black.png

MD5 b051e689507b22feec226d43423065a7
SHA1 da364c9e89b13f9a9178dce90ea944c5e9d6d817
SHA256 89fd40e83ff38d64fe6427cb74cc3ac5ac09de46536a74a2df0208909094740d
SHA512 d9a453081e125fb0905d33520ca0e92e2c5499bce4744fbc82c6a5ff559a788ef50e0b0f08f7b532e582f0ebfcc67558fda50be3e230bec81e599387e2962e51

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-36_altform-unplated_contrast-white.png

MD5 919c6a3342aa9825a42dc1bd2b5ea9b3
SHA1 abf02acab448481a41cacaa6a8b151a0ffc33f6d
SHA256 82b4667bdb04975842375cdb2d3adea035166366e6dad08a3d5c5e4e884ef87b
SHA512 72239cfdd4d680be0ba4b91e48ec1e1c4b929212c462f6f3547d753753e55f4f82470cab5c490706e1feda50757bb2c02492834225d585faf0e960fa924337e8

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-40.png

MD5 68168f044f85ea9faf4ca6d3e570596e
SHA1 9d7fbb23beb1dd424f2ff5a5f60ca7f3361fecab
SHA256 ba53865cc9bf60d1b21daa381bd3ae27b75c26fd45d8ff4393f88686bfcec2d1
SHA512 2365d5f565bb68e27d6a4c8dd89a23752335db4c5c51506e202c1d785562e72651c71deecff903ed83b5bf7281480aa86da6f90338cab0567153aa23da6b8341

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-40_altform-unplated_contrast-black.png

MD5 82c51668274bf0785a9a546a6e257bc0
SHA1 3e49dc4194de95aa4b28c210289710620fedc3e3
SHA256 dbe1f856324c36cb597cae985f4f1d65e12d63a9435a43457207caa7712d9d2f
SHA512 61e49ed0dcaf8adb1e014047e499977cfcfd238b0b98cff9cf177afe30d6500b6070ebdec9eb485b25db9d08ce123f7efebb4bf405790ad665a898cf44bc85f9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-40_altform-unplated_contrast-white.png

MD5 856d9b6612bfe8459d498de81a7ecf6f
SHA1 f483bb191ad1672102be0907c54d3a168db81426
SHA256 b665198e59b16b6a095f65a01d1e2d6247b6c9694dadc3ec4c2a95986538aa9c
SHA512 fd28d57102e5a93151ee66a4226e8a69f365177d58417d8c39a6600a40181f5d547a5228521c9e5d25abdd57790a311b920fd9d8d3f7d366fa8c76ededde55b6

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-48.png

MD5 dfbfe6972b7e6bb875970fe4dbad66db
SHA1 f1594ed9bdbc5c2459a2af984275392d9077e7c5
SHA256 6fe5eb7d05d520584f2158e8669264977a437f7daf75b7994f13aedfd2381539
SHA512 dd8a9aacbb50380a4d9b9049c82500471601a9897e26e2e4cafa28f2ec556bdefd8e61bf976569b46da9368cd8c183d56a8d0b68ec7d20b02fca0d48d91b789f

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-48_altform-unplated_contrast-black.png

MD5 2d4e69bf887108188e1b6409d6cc6d28
SHA1 6031820b4c718bbc491bb45f10cf5d850b4192a4
SHA256 b91fdbc9c46552c90c0ca41ee8fcd543f383dd6f50bc15f04e6b25e8fa29f4b1
SHA512 1680597b3742037e868c1cbaa0840f808a20a84da324bf562b988eb1dcff1bfe0062aaba91f9415f39229850e849b08263916fec6700fe7f88e2018a8277e3e9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-48_altform-unplated_contrast-white.png

MD5 b5f8ede4d336a3c1e2d5e4eade79f7df
SHA1 ca95bfcfb47d1565912bc174c7958de0c1a31571
SHA256 abba9fbb0af323e7c41bcc85a771950101f4442706f1d1fd8f0c1c5c64d2fc11
SHA512 fb1eba806ab29ade63ee9eb1caa18e518364df4298377e7633c4a0dd5833238e6dcc6f1e4a72ae94f8a84420a3c4fd404b23154f901eba34b30a135ab25c263d

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-60.png

MD5 927bd7b732e69a2d7643613797504edc
SHA1 c1ce251e91479d27c6b63452e13aacd3a1af1e60
SHA256 bc4c7c205e546bce49c87f7c61791ddcca6ee4de5eb99ce50a578bdab146f138
SHA512 96b9f3d04206a5f6101ab9c41ec784463ce071d4639d5eddcae38a213feb0082df6356c6a1c433ac3bb237dc47e5a9efe7af01e60acc1034691799858a00f5d6

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-60_altform-unplated_contrast-white.png

MD5 de6e9dcc0f9602e11e72de142ce9301b
SHA1 6ef7b6ef1e515ec535ed7d103c7d1cefdc39e85e
SHA256 470869b40f07e488c5150036e97170c544013b27e7256bf80846f085da3a8ab6
SHA512 9e0201792791d92b1b1f6dd60c74dddaddbca74ecac4af8eb58a026f3347434c1a23d17d43d7a7ff2fcdd5cb63878ad224a3218de8719933394513b85161fad0

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-60_altform-unplated_contrast-black.png

MD5 c64c679151797c7cec14d20826941b23
SHA1 d514236b750eb2ab35200696c26e677c614331db
SHA256 85e92f78430d788acd376c9213a70aefc2ec15df1cd0b3188e28cb4f5f0979b6
SHA512 7625d4d96387daf4d9ca34b883c7e6b8bc5e69a091668799494850e5495a42bf26c4e84b4162cd98b1797ad3da617fff4b98dd93caee93986fdb026b998da750

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-64.png

MD5 24b4e008c6baad1294e1d8790d878d14
SHA1 5c07780175e1b6273dfd0b48c93700b4a7d9bf48
SHA256 c290188a41172f8158c0f975e744b7400592fdab11e119a4093539ad83270586
SHA512 ff6675989dbea879217b736407dc117232574a8ded2d350d57d9a01b81a75f0e46f876a55f252437faaa586313b50a345269dd7bd62263e037d67a8db2059547

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-64_altform-unplated_contrast-white.png

MD5 3d43b758d4dd1ce79fa92f4a698f746e
SHA1 809f9ac50b247b3e8f35eee63a2e24bfafeb81c0
SHA256 ed5a2cc70db8bb0b07f67565d2a2a4a33e5102102f39aaf6a0d3bab2621a9391
SHA512 0abb9cae2ec6c4f793ba1bd3307d4565650cfb5a86a7d06a9934a71d31df87d21e6335e742cd06555fcdc77afe420c0784e60e8dc61892330fd7e924415e614a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-64_altform-unplated_contrast-black.png

MD5 c00560d1004df880d2eb6bd21bbaa4f4
SHA1 f8127b702e4f68293ec28f9dbeb44ad0505a1d4a
SHA256 10e278df172c7444c8cc1c3b199d353e4fcaea2f03ea1807ae1ba20970d9e3f7
SHA512 4dcd94b21f7645a566e029a67c65a36430d44cce9d9fe91aeda9d865c8d45025afc523edcf3f609904f542b5f33b54ece0129230e9279998d7511fbb34ac9b3b

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-72.png

MD5 4b346abab3232c47018299359809e6d6
SHA1 fb5f589c86b9c972d5c9efbc04e0d872580b0a78
SHA256 239b121a9a36aa687205c73d3899b130e5ed12d75c2030fdc654765eb890faac
SHA512 265b64f380c4813a903842fb9424a5e16f9f27b84b9884701e748e378002677685288ee0c2900c8deb8049b7c4f6b1cfaceb07fe0d12953168d43c7b241a7053

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-72_altform-unplated_contrast-black.png

MD5 f15310347945945998a85b0fe5c9670a
SHA1 57e3f5379db970366d588bfc3069ccdfb38b3e4c
SHA256 e47eb78010e8a7a79781def9442f5addfc3b0fbede2a721084a4b7f2e8810e47
SHA512 bb4b42ac77ceffd16f0e6d55f2b4ecbed2b5eb32b18221d2d2e868e730b76a12f6baabbc59b206bd527b7ad8afe020f4524afd292913e29b2315548adc60012a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-72_altform-unplated_contrast-white.png

MD5 7647225793f5170319924bdc50183754
SHA1 d908065adf3c5a96d59990f46b65032d285ccb08
SHA256 4bb3259d2836a8f904f5703c42e3c7db4924ff3bedc8847b45d2828b43e5c8ed
SHA512 f71db03541fb579765a454af7bf71b5ddf138fd63e97eb99c1151cad66beb746bc4ec98e71d77fe346c76b754489cd7d7aa75ae6459505c2cd94b90c483e4afe

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-80.png

MD5 1b0c87801219f54d1c75d37af3b9ecca
SHA1 9336dc30097f1833fb152f79179ab9321bd42ee4
SHA256 a972691debb27d28217e363c2a02023907c4ee51fdd58fcf0c60d64b856e7e31
SHA512 1cd9377b2e63cc6836de1cc8e628a0ea6eb150adcde489446442c8c9e5347c9dd105eccfef3346a12ee6bd5a5b8ca44d0a0ad4a1a97c0e086909428aafcfb705

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-80_altform-unplated_contrast-black.png

MD5 ff0aa94fe7faaf13a53278adc2698c32
SHA1 8c61b01052f520362bff5fa648a60fadee65ff21
SHA256 6684bf37a8dc1b5424e756c33b3f90bb881181dfd85d57470eb3c18fcef5e656
SHA512 140a141485a0e143227802ea2b24dd3dfc03486e2539cc67e9315f0c761850abb525c6b2d7a41cbdd56063dd11afa06f6562deedd17d8d2b9cc729d91a4a82b7

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-80_altform-unplated_contrast-white.png

MD5 7db0293e6fcc87abc9a0945aff79dfe3
SHA1 49809dcf23a37c30787d261feadc8d73888d99ba
SHA256 cdc8afbdfc96aa91d1e3df6ee6223e23b041fab55429ca375d4c528ff23babf7
SHA512 741896be2d34887c913365534f0dfb5c0e0354a4d282c2ce1521524e305c4903711022f2595d4d3026901c85736431de9b50b07ff6268ec25b8e01635f25653d

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-96.png

MD5 47861a490c54e0a983b98f53dacac06a
SHA1 d904739cf33ff959362b771445bcf404c730a4ca
SHA256 122e0ada5316373920063713ec84087e6769b2280e75858af9ec6586daf72cd6
SHA512 6cb6f04a7310222a2fc9eb69bbaa1d67601628a684e69c14a5d20a859edfd5e17ffdaaa02bde09fe78c0557065d0b24fd7c555cef7a065f5dbeda83820a9e5fc

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-96_altform-unplated_contrast-black.png

MD5 9d782eafeb535514b02ff0ee296e8f1b
SHA1 86960bc19ca4c65302facd570799662a12fe2b12
SHA256 7c40b6cfcd8bcbb201a2edf811022a37ca47b73e85ec5785996477adcd0eaace
SHA512 af627d93fd037ff7262f6442c27208ac102cf36677edca6363dd56f9c2c554041600a55f3b877bf26be343d8ee980021a77682239715d7f6a9fcb2f97146a53a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\logo.targetsize-96_altform-unplated_contrast-white.png

MD5 ed52cd09bf929b70c0ae9fd2007b20bf
SHA1 faa7a71ee9b105e462688b56e0f2d226223400fd
SHA256 b644ea2d909241dbfdcc7caed90d4a8d9cae526939832ea5312161e60fc24bd5
SHA512 2d7b89d1930f1eb54fd2eae71314e414c24489b9bdbb89b0feba5bcf2d4b8068659d1b46914426d62f4165b956738154f5edc7aa6f3c9e98ec7feb2e6b4ea16c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\paper.png

MD5 835ee4c0ffcb4089f74af88812149261
SHA1 8fb1bdbb8fbee5ea46dc24621b1d199b416209d3
SHA256 3d11454bfbde59784ddd1ea185bd250d82ea02b31290e8ca7ffd3cf7467bb83b
SHA512 7786a362b1508ea34ee21bea8be3175cf4345bf41c1b5c053e28a37cdf46fd12dd21b48194ccb1c98d98d38fc9d98b215cabe75164417098f410d79a1e8a099f

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\papert.png

MD5 beee74c21e7e8e508609c7d0a1391970
SHA1 420d9a0442c61a773907ed4457a18d7a6070b769
SHA256 d14d32557b917bc18f36a96157b8530b5cbe03bb34430c61229acd20ced24274
SHA512 5ab71f5c69bb55a12dbfb9b85a09819654263f818bee0f37a058a8a0ed98b368693cc8011d874f16ea64addef1cf35179738ea919cd0fdf202ec02bbbb95f9f5

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\passwords.png

MD5 3f6bef094242aad215be2433c7529a63
SHA1 e5c08b505035752086e0bfd070bca097129816de
SHA256 bd15f021e8ba0f65ed8acb83b75c144318cd07908fb1821368ec2e43731e20f7
SHA512 870e5a196e05e8ccfc694603166999ad06c3d4ebcb5f3dfea257e0faf0f0d8d19f62b49e8ba2de228c342143d1b17af68ce188eefc1347291f35a691be18607f

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-black_scale-100.png

MD5 11c00e3a0c689ce15f91b956443b66be
SHA1 f7adcdff9f2351757b927a6342b030980d42ff5c
SHA256 10a723abb8c4fbfd13890abbb03ae29f6dee95af4897556f2e7a06381b10d088
SHA512 66b53271a8e30038016bcc53a3ec1c36a4dab12ca06602c4253f154e2ab07f7aebb56bfab7c917b8bbbbfca8e8dd1684ff5d72dff00d92adff6e03a6772e7e58

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-black_scale-150.png

MD5 3619f4bd103b2a423e47f67513fa135c
SHA1 a3fbdb994a9920b936f7dde9111eb298b6f650fc
SHA256 86bef6bac9539ac4b2251554266e7bcb9a81ab2b7c3950c4b159adfb52a2d468
SHA512 eb19c738d74e72adb98ac995bbe8fc2710fae5b1d0d6e381c71c057ea19b0eacd79b359f48e484547205026c7b2a811fcb93714828e09d69442af7f3e9d4606e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-black_scale-125.png

MD5 d68ad41c76cf57523b6d1d16dc14bd75
SHA1 538dcd5553f0cdaefc5eb42d45fdf95b369f5189
SHA256 34b48161fae3f477f775e9f3579c0fc55faf238a5936cf90c8d290b81a103001
SHA512 13ee8df4779aceb5e7b91bab190848d7796c5b9a550cdb34a347f829611f4e7a9c40dd42d7983c06a4d6dc25ca13055fe9d3e6eb1e9fb6a81aeae12a28549171

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-black_scale-200.png

MD5 1cc3e339a5f8576d819e83f1120452ea
SHA1 8bb1757e8a0794f1b02ef02ec7aae3b06847e17e
SHA256 83cce654db3fe11233cbffc3ff1db2baad2f7e53dc722a1a73283a875a012e4d
SHA512 747c852691cc2fb5d86361db291bd14310ef36f20496fd8339d2e575e7bfe04e99e5d0c1293a768c1fde50f558555a3765af675f9a986959c561879e6e63c25e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-black_scale-400.png

MD5 be84aabbaafd717c6faba2b31f25f088
SHA1 c6acdcde0a8b758165ba1a6a006ec0b920c70053
SHA256 9f071e3a27f710b72811405d974d95bceb0e93214f4163a18012a8e8a4c3bc75
SHA512 08fe1959827b02967a687777e7826d59d6e8c71b9cbb65c11a6db87f2bdf49fcf4cd9bb33da71acc19edd08a34c10c46b69420fd30622b480bb0c5274818ac20

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-white_scale-100.png

MD5 c00d891616eb8a11a03c51b4f4cf736a
SHA1 15c3590803e0ff99446d039be7f3b5698923b90f
SHA256 401dfffa0848dd6bc92699020b02c6757d3b9d4e54b9f7c85b12045ad832579b
SHA512 0701891f3b2ac273deada9878f0df5a14e651c04e9d13176006831a154d22e92b66cf41779a8335273e42a7bcf2c136724c432fc095b9887988bf926fa07e92c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-white_scale-125.png

MD5 e88ccce4b50e92561370518e5d8e477a
SHA1 d3e50b91b91600a189653a4396618e80c4e20ee5
SHA256 fce4249d823250d696cc2d31906277b99018245f20bdd0cd0f33c1d3d40cb82e
SHA512 e824eb1f0b5c8be5a8e406e71dbf0b832ff88342ce08e652ecef7bc9fb713428af65b6b1e9f158315087ffbd52892237e873f0aa61d12d3e3a9d1c815df91486

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-white_scale-150.png

MD5 1f9c97394d24353ef45b7ff48a548421
SHA1 b02b4f4e13ab9f18bcf1b5cecc278cdeadf96247
SHA256 a28c376ce00aa77d75c7ddc479be2cd73e3d624eaa302d045fde48fbea01f958
SHA512 e5278bb105228bd73352bd2b0767b489b84dc774472fc2f3a8f7474745f9539d311a20f7835d36b74da2275df0bd6c61287e6a848ae8be65571f01959800afc4

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-white_scale-200.png

MD5 5c387cd7a2a21fbed329ffbe087bc713
SHA1 09cad84a8379850d80ec04992f06dd5928186af5
SHA256 8a2c861f6cb067fe75b2628c44950457412cd8f717b00435c77043c068bfa9fd
SHA512 0319fe4f45f838803970e50f4c2f7fbba445b0b61079e4330c4b7026cc3e1b298919942756dbf2dade96ed15996523a24290c1ead20821397cd33cbeab229251

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.contrast-white_scale-400.png

MD5 dbfe08c004475ac98216f9d4dadc1597
SHA1 0ab80ba37bf50db37b954e4192f5fa1762a2b279
SHA256 91227bbe5b1379b65a611d3c3909f15090191601604a6e3b4f753d22562f4970
SHA512 df276313a4aebd44fb6df908bd7bf2044f3cccaa27a224b6b4d0bf0d6d1ae96df664f8ffdcbc4726a155af4e35319bd4b45b16aa75ef64b58d3b36e1a621058e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.scale-100.png

MD5 3da3506fcd8af2536c1bb3807c0d5566
SHA1 d382ffb999815e014282b8e175a0f201ddbe0b90
SHA256 49c9e1ed82c31479724ee6e9fded8be6f1d0af3ec21598433cc874b570e5be1a
SHA512 a0a233973fde4f714138e657a79cff62acfe41e440024dea806abc1ebe30702abc6c83a9722fe8f707030364fbb54362cd69c264d1d655a15d07de2378420dd9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.scale-125.png

MD5 5712ac86f757e4dd3fa9da856f3d80db
SHA1 cdfe9a08e5be63448b30b403b4a4a4a8fb74310b
SHA256 03cf02e09caf6da61ab2cc26baade70d945817064300305fb048714d35a7aa09
SHA512 dcbe9b3c0de2f92a3d6421e7f505dc0a87f8cfc47094d19340d3fd244a8c20dd46cafac63bec30898f1af4d4f0e50871c6ac7727f4bc402f9dfb88ebd058e6bc

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.scale-150.png

MD5 7efe760736c5105c52333bb3bd6a693a
SHA1 59fd31eed792e820822a1817d52d3b97fab5abf1
SHA256 65faadc3a38b925583f6938b178914ad9b54b62a8c5d75046386196365594295
SHA512 d82ae4a65156ae2af66d80eae6c839f798ca15abcf0a78e6cd84575e270690ca1ab2f581a3ebbea926549dd06a9bb00a72886e6aae43877f5ecb4e13b5e62b17

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.scale-200.png

MD5 c1aea8c3052efd4d1d51f26e7d0a3d9f
SHA1 817582e79117b3831625c6881d56958cab75e2b9
SHA256 ff8e81c6591dbe709022a947f590229c7a566bba9c8fcebf1fa1b03dea56c6fa
SHA512 ca1a854463968a25e53508599492976862aa657699b18793aa915c265c2636819822d5e29c37f2846b9f9eadaf04b4e4c1f37339858e565d1bc8fb1301a2ee4c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\StoreLogo.scale-400.png

MD5 c1795adc1689608e70601d628141e011
SHA1 f596a4003cd0aeddd1266dab4a5539dc52fd91de
SHA256 c8f8705fba32eaabe20f654d42ab1eb3439f8a674d53a85d596df4d7dbb82b49
SHA512 9c7d6e3d0b306a43188c2c14d379b09f4d399a435ab48d170e98196affb4ce5a69f63c355914290a44cd7c890c6a24db979693fd123ad60c3957c94f005969e9

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-black.png

MD5 72effbc784dac4b414b5ddb95973ce37
SHA1 56e0bf711a95146951043d8b11f4563644d75001
SHA256 b30e4d5cba1ea574459bdde0cc41dc04995e419b80e62d9384c2c5ae8d86ed44
SHA512 ce4151117dd25e52c87ee5e98d475a1c42ec1a7e0ff6fe10b5429b2f4ee664db59c5085e1b2e17bcd722d99851287a5aca898cea5c648ef6ead2a3dd71968505

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-black_scale-125.png

MD5 ae702fbb30de8caf575c3b556b4c4bb3
SHA1 20cdf6391cdef569f60a6ef8099b4e54d6a60369
SHA256 744bf505b69bb0de1cecb1054e06b436ca91b0f4296c4240e186f5c32ba9468f
SHA512 b8e05b737748e5e77dc9e314c5bbb62849186315d8ed02e2942e7d0e8b1d5c4d5e308e36679ae4d00a635536cc859451a5727ddce0ee4019958c5a9130c22480

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-black_scale-150.png

MD5 75897c2760966040bd1551612462035f
SHA1 5022c9412fdecf1f76b838791651f8e9d394327a
SHA256 316a375a222d28e5a371e193881e5fcbaa72ab58138dfb54b8a75f7fb8438454
SHA512 821c7bf9b850ca2c054310da76eb5d9be695beecde1f800da2e03ac0aaae0292b1704675370d78a71d01a1d94ad447f3fe455cc7dd556c2e9845b6ae0b8e7f4a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-black_scale-200.png

MD5 298fb847070161b2fe16f41d9f75df94
SHA1 f2a78544ee10ebe6254a2eb55eb0d22227886042
SHA256 7fa2beee1c84acecd66b0f34c4dc5c22284a376c5cca1b4bbcfa21955d34e0c3
SHA512 b87c8b851ddd039d4256d08dd278cdcf32b66bdd65db1681ddb045edc56880dd6298653d381077c6558c33e8df291df6a69c3681dd2259fdded9db1ad6a98eba

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-black_scale-400.png

MD5 3ddadea7b3a8a24ef953ca7a632ea48b
SHA1 d8dca786084e1c9efb6356572734a59bd437b580
SHA256 d966355f02930ea16084a6d9e750f3e4d6cc9c0960a3d8e3c00543a1c821e3d5
SHA512 7f37de3a7a6949b14f09a8e4ef3c8896a4e0a49219531b2cb114c6ededc5686cdff49bff51b032c5ebd8bbf5639833116244a7bfee83799adf1e0b3cd6fdffd4

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-white.png

MD5 15ea8f10342e747e88d35cd937938946
SHA1 bc4f183b55177f6dbabb446d9706f3115a510932
SHA256 8cf1735955eb588386eb404304efed2b13e193b294d8a851d343834c04cf580e
SHA512 75bbfa30edebb0f388c2e1456b9a9182087c3a51a35d5293dc3ab8da9368a30cc9d91f75a99e5e838bb09b251dbb762ad6d0c2820388aff2a87a1203ff16d0a5

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-white_scale-100.png

MD5 aa4acd95731cee7404a6b51b5fed0918
SHA1 71f5083178f57e5d7d154885b7fa14f314492420
SHA256 dfc2078b5f36adf8815e31918655f339b0024edd3defff09e2c084a0fff890e8
SHA512 d38631979da2d5d79d8aa1b427540efea857d6dec063a81b6e431b24a2f1ac902b2d21157dacb4aa866529c0bfb37fea7a3506fb31abfd21b29e0f592ccc5a15

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-white_scale-125.png

MD5 d86429ccacbc7580e6bceb32e285342d
SHA1 ed581db14a77394473f196e00387431b3da18898
SHA256 3ce16bef87a29a5bd597aa6e1910170f876633647859e0e95f3321554e581ca0
SHA512 42dbd41492b24d8f08e06e41db582a676e0a756d8f5906a417f10082b1cd887d5e5734bbac550e7f066e2577d5ff41970075d404b8a6ad20438fd86603db5331

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-white_scale-150.png

MD5 38c229191dd21806c83ebc86088216f8
SHA1 9c2afa9f9c5f0cc1b7658d1aee178cb09b4e3f2f
SHA256 a698442e659f4620b5834f8e2c5ad4223279452bbc2d91aee0c625c6a59da0f0
SHA512 2db9a21d62bfd77e02c6e05bf866179c849178e851f5c5daf455fe6ef22d1e059f74477e6dae6967fca67d618f79bc3be0dad8e61ec726d6f7c4882c69dd2d0c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-white_scale-200.png

MD5 aeb784af151273742ba589d39924f69f
SHA1 fde89b4f7008633606bc9ad27b9757e17b0aa491
SHA256 26e1fa2a2f0aca1b344b2b59abf5663d6cd4f7b69d0f5d8d8d9687e52593eca9
SHA512 0f938c6d7a101e10cef7905670a9710692ae9e6b0966e15b0bdad6175dceeaaaca7f0b0548a29fccb4295dfb21a9d57fb509c81f6c5c600c9410a7a0c12c3fca

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.contrast-white_scale-400.png

MD5 6a8d19d3e31c2fb21d4bdc1f2e77e60e
SHA1 50b6236844090095465f85f1341a323d7aa4a57c
SHA256 b294930c03b6d86f5765e650273c9d2a7b90bae3e4a7d63b6f766914f3bff5a4
SHA512 2ab9ff1fb16418598f9d5392e7707109fa922799abfa53a642040fc3622289ecd0b69e8d617ffbec1b4198841972e5ff6cf4f18e57abb24c2e340c0a610e389a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.png

MD5 645c36ad987a44815982891679635145
SHA1 9dc5396d7a569d009d32ac08ac343559fea113d5
SHA256 7b8d04dbc781bb2ef7c6697177f41ecca6d1abbb9b6264700d1b9da87a7c4e38
SHA512 e8444cb16d2584508a699fa0a0f9afbef9325a505ccd56df5571a59875f81edb4e7b7518f197e879be7bc86e8206aacfec8977f8ed73ee65294c586442f941a5

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.scale-125.png

MD5 1f34876e482c13ddd4aa5a49853d9027
SHA1 c6da51520748c60e6c1836ac37138f17dc289ac7
SHA256 46f36c5347b394635317ba6ff0b436c63c0bdf50868131f86721f98fe0dc834e
SHA512 3c1965817bfbd13972620b4a698d222edb0050ab7b6f1ec372fa76f745b1f6744f21eed4c42e8684e27793711fe4ced0ed5677f097df2a05ad215728b68cd3a4

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.scale-150.png

MD5 439f78de7a305444f35ca2d9194bd1d4
SHA1 53fd70a48980f927941da2814ad812b1c7c3c1d2
SHA256 4dc436394ff2b6f66c846a9e7499f5affb49807babb36b082b2a39ac4de4f431
SHA512 a9043fbb15d644b131f49ef89f76d1e83d5a835a0fa5b4b41696c5268fdb3b4b183e9c2353e9a5f814f312a11a5c4ab6bcbed6d8ecc2fb41b829a5d4077a3bd6

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.scale-200.png

MD5 fe976bb56a61312402a971553a5799cb
SHA1 d55c2ce161c84e66a799d7dc0d798921e2e22e2a
SHA256 d5b905ff6d4888479eb587a1cb0c4b291a7b063002cbe252e9dcf67886433e9b
SHA512 7030cc5a4b30fcecdfe495cadd5ce409a72e883e4a51910901abe3be12872fe96d8c5db17d0e1e9788d48ef679ebb33d3491f7c439c938b43b208bbdb5862fed

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TileSmall.scale-400.png

MD5 487353d36065ca5b61eb582b5f10c3a2
SHA1 95eb806e601663710081b75adfe1e9023bb4f8b9
SHA256 2c02fdef716808679b62e68774603b383ad8d18dded430577132e1188218891c
SHA512 753713dadbd952c1ed26032977098137027ab4b997dbb406377f634d433015e4ae1958375f024b7f71c5fba5ac2d4256d8a4a31a487f4125560014ca9cd27b38

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-black.png

MD5 1cc3e00ddedbfc96d1bc4fba575ef45b
SHA1 540257c36d64656febd7eac22ae2784da3af55e2
SHA256 39fad5cbb4e4cbcbf7ae6f319536f09850814690bb1dcbe319d1e733a4577e7f
SHA512 65b14e4613e69ed3d062bac0ab10f0d0990bd65fc10593d7319841a0898311f08a37c7f0bc2d83f970319b3e439eb052d14bd18b91d8e10147964b3f53a94cc5

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-black_scale-125.png

MD5 022dbac1c0f85005a3df0853bfdef162
SHA1 1e443e8108ed2702df2c95794f0d7dbd61cfc840
SHA256 a0caf8f293aba7045dd603514e8b0c4303259ba3e2ac3bce4711953ac531556b
SHA512 92af813512549c76c8491021821156f907a60f505a448cc5efca68ee7a9804b4f5319506fd0097c28dc13312108e8a6914fc3d80f9a818b160febc526f72cf31

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-black_scale-200.png

MD5 2f8686fb8b5ddbb37ba7aa0b7b8854a6
SHA1 4c3b21f8eb9f8ae111fc66df451889ed4afc8ae4
SHA256 9319fc5f163cbc9698c3c8618391341784ba450b847bf34cb50d9a6f18cdf8ca
SHA512 3cdb34802667be547dc7007fdce8608b49a687a3ec9d3071b023a4f1f3e19896d09bdc46e19b86af7f690a42246ec7fa46a54bcaaab062e40f4542ce70b44f80

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-black_scale-150.png

MD5 caa561fc6f09c008f8a8a7e25158a622
SHA1 c6d21cc72d247bcc736a5e20c8c5c04df394a93d
SHA256 fa59094e662ea019895bcc9691918feed1c5f4059fa2a993344cb4e2dc428aff
SHA512 f5ab6db96fbd155510275fa412f11700379229609e8f026c77866b741fa1a5c6aaad058f1ec0a2d4906f3e10266dd0f2196474b6b4c1d000641dc6ebcc14db54

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-white.png

MD5 6a3cd7d6943756adf70ccb12eaa0f913
SHA1 f0c2290ff6e7ce32c64e28a2cde832310f9dbd1d
SHA256 ae4a90f3837784aa05a9c93cdf1afc4bdfab944f26e924ef8d60093063fe3d1f
SHA512 4ec794914649cb9ae8e194d2254faa43334d898650733c03c1fde96d42cad2c898f00808980310c05dd24e0f7b6b791c1052c74fa0da2bc2229d432aa609822a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-black_scale-400.png

MD5 bc5b741c439190cc8716e10717ae2590
SHA1 d3dc7ed9a1cf94d5fd71efa91b0754f708ebbc4a
SHA256 ba6353451658887bb758b97687d5cef9e5f475cd1d997dbe43b591e80e1c32bd
SHA512 c39fdc9d854d7d51fa3e99728708bfee36b2336f5a420bac07fc451ef6515e587af8007839c3583de6138042f1d2775931a7a009f152b62e5bd0b6f4621d411e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-white_scale-125.png

MD5 ed607d0afe0c2c4664a4c96b26810a9d
SHA1 2dbde2f46c9638fbed3a1d8640a482a55d89d403
SHA256 34599c2249279d48d3da628ece3a080b81529768c33f9c35b4c9cac730b40270
SHA512 ea49fe368bf76f100178be6731fde8ef15d6a52c7aeaf0bc1a6b5e3e88e84d7deb5c68af18501db13606f3047d891947c61a8d37e54eee6df3b8eb5f86de5363

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-white_scale-150.png

MD5 c16f5664f04456e3be99b838cbdf237d
SHA1 279a4f8fe360ee74609d1bb069472dedfe484237
SHA256 266019879888a5c9d275a6e56c86b9281fa0232b4b5a5c8f7a72d34196e3c593
SHA512 c532b0adb11dc9f0d2e117b796483da746f8d23c95810d0818672122aec05fa51c608f45ee26703d374fabb5e98f4a8fe7329c531547e8255cd12a49d7524573

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-white_scale-200.png

MD5 3706f61b57fc7819c5ee10e2e9bc216c
SHA1 ed6a0fa9a5895ad04a8b6909cd89b3ee1322d38d
SHA256 356544638e33837d6e903f3c38e03d0b068e864cc2700a457aa42ebeeccdd06f
SHA512 d7857aeab0da8480911059e406bd85dbcfd356ba0aeea550fc44f592053fcf4cacc0faa1adaf8c83c4f91b5091270410f3eb3959527f5940085fa77149d69c11

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.contrast-white_scale-400.png

MD5 da0780e4d9ce3da8f11b424ab587eedb
SHA1 a8b49e160fffb594b613cc24ba6a8ad9ec254a71
SHA256 9195c995f3a72b88a0e7497ef1c6a2e10c6ba8a3b5c7e02a793e7f3bfb6bda2d
SHA512 53dca353287f8b496c9d72ff5d198a07bd6c24d59040bb2bc7ccef52566cf1ae3de4f29747b16f7766d500a2316b7b54912c622270d0cd950376a2237e93b02e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.png

MD5 185c0fed630b215f22a800d49bd1f449
SHA1 17380675ec0f35de43e5927ddfa86154f1574c67
SHA256 561ca42a1519c230756e7dc551329da441e6e7789f6156f7ac515be094b1ca83
SHA512 b034afc68d6b0846b5546e1b29847bbd9b4c041e15c2bb5ff61e0129c798c871a78241e1dd263bd0182a781fb192cb9b621d978fa4090c519e1683d6568998d4

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.scale-125.png

MD5 fa50b97bfd3a6755d3809dd27198f1ea
SHA1 bcb78947aaf227c4f291bee93e3c1a64a4410e1b
SHA256 b4d0fdb3e633ae44e5ef3a2cbd07133a769c739e71bb7eb6fdc52a93553fe689
SHA512 3bcb6fb9b9bd1635d9f1d74d07038c7a551e2c0e5c2515cda2f380f985aa7d930bb543e493423715557884a8f9a1e394b39b7d5dbf67538aa29bfcfe0b055d6a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.scale-150.png

MD5 1ba44cc71200f489ffed2e83918a3160
SHA1 b3d2b8d61223c91d803dbc72b4900f6dc0f38d70
SHA256 d4a16dba610e11cf827019dd79a32312e2da9d822b97b96200b52deaf7f899db
SHA512 721780009f0cf8743e00d03e86242c09927a93b99561bff98b841a88c4579abf1ad98d48e44d5bed74143792697a403ddf9e2d8749fc40414b0be1b971c74085

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.scale-200.png

MD5 7c7201689dc8ff0f095ce9aff764c3b3
SHA1 a9c6e6407b02597cd5691e3057ab0049d057709a
SHA256 e596602dbdf5ba148d9f3cac6f4943fc93d3141afe8d32ad1273537284ad5220
SHA512 87fd32cd0af8562d897c77fa92d96a64557f8e52e513a8ca2cb82543c8eca6533c48b6db2ee530936f0cc2af466fa6c3e9de1fecb035c2c48cfe947eedf8ac69

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\TinyTile.scale-400.png

MD5 fe4fb7aa9c08e6b531eca4c6b2b15828
SHA1 4e081d7c6345fb1de2995efefc67b90fcad70c76
SHA256 31417e5050802908b26c340730219731db5c359ae27f60261e750e4260ff5fbe
SHA512 37039e7a55f07d1f05033759ffe08c55344caea6d23ca9fd4612d5da45d300766d98520d31310a19fbc82ef052ae850358bd7b76a5b43f259399fdde58859208

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\vault.png

MD5 ab976468233536a3f1cf99fe221ae256
SHA1 4d665976e0e75061cff465bec1108c6bf24b06fe
SHA256 051675975d3c1d1c2f9405fd714d0ff632da85b6515cfde7efd4586b32885fa4
SHA512 c80cfef453def63d92fa480025c7c0bf883096ec4b5c31943a4e07b00d5804780877f96035b3eeb0132dfdedf899fa39e7cb5ef63c1674f5d69b4984e0111f69

C:\Program Files (x86)\Dropbox\Client\210.5.4894\Assets\web.png

MD5 e623b18c05cef08bb6e03156ce692873
SHA1 9cb00fb89329c12787b9a5592a8ce99494aed80c
SHA256 9871614ac39353ee111c07526131c473d10a556c5a91e9594f5a4c340078e1e4
SHA512 01d08c566dc34dc0a3642dc7a4363d8ea6cba02cd97d6ead502a7dcc9132770d42645fe1c5c427e8fcde6cef3cd6f2aff2d520931425bbf2b3cd9d5cfc585e4d

C:\Program Files (x86)\Dropbox\Client\210.5.4894\driver_amd64\dbx-canary.sys

MD5 13deed6a11f54fdb082fac9906b9866d
SHA1 3335bc66dded29afd8c7a688665833f23c856e69
SHA256 4269061949da67e35b2df4c13afdcc7bf7406366d199ac25d7a70393b2af9b5c
SHA512 0094dc055e332b758e5badeb7d568195189543c5e689e28c5a673e921cb0d662ab973215e3df24129c000d0b100130f12ca52b91d8791c748667332078d63dcf

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 17c471f2904275b0b1087db9ffca79c3
SHA1 4e0e2ca739b6834e43178cfdf6ff877b3fb20d18
SHA256 68c05fb5b39ba1068e39d153253a9ecd1b15ee0e0573725eecb76eecd5d30c95
SHA512 ad7aecceed872dd1f41b738bc014aec13d1865b32169c52d4dfbad8c69714f59b2bfce8ae1f784b81bab5e9299b48d1a5d3f08f8da459ba92a383085ee6f0b7a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 23c649977a5fee0ec876582bf89ae8dc
SHA1 e15abed432ab9b9687045f4d36bf3c63a66c150f
SHA256 7322a0ed70b4ee98b15da5c7ac30082580bffc0c6b4ebee9722f049f39c511ad
SHA512 10888038c5d85c112bf126a00f0dfd5254b4b21d4abf480194ec9770be816bc83607d2cda33bd5892df0624b21641ffd3c2935f34b636d55dc6666fcc3e6eb20

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 de1650d0067103210e0cfcef396265c5
SHA1 bfc60df6b11c260fe7f182642970c25c535fe8ef
SHA256 246541e42d74e337bf93492da61e244d15a724cb77e12d4ae6ac81c5e3b76827
SHA512 a4d3c5a53025bad607329f6c91f61ec8816872e581b2edffbeb71cf02a71f09f678ed145baa75bf2513cf72bbe6e35aaad08078ab171c2273068cdb6e4d8556f

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 d1984b5d3a0fc6ad3c2aee784ed800d5
SHA1 2b50e75319f33c1f8d38a6eec4516cac9d063832
SHA256 e21391160f1142cc12eba0cc667f2fbff2f0905b82855385ed9f0c79b3413ef6
SHA512 79181ad7d41d281575501c8ac02c3edd1fb1e6b2b0cb32747492c8b81c762174e1bfef02e8219ed0e43109b121a19f9590b7646aa66adb4d41ad6cad9da0768c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 6987d9f94f2dc1693540543e43f5b630
SHA1 9f114dda8eb2528c2a2269fb6e35771d44746261
SHA256 e5c20664f6c1c24477af32a1f69420c4f5b5ec96e4c3426ca232101d2bdf807c
SHA512 2e4b8aec4fc7eb5e6b6fdd5386844a4920cebb73f4ee0bbf39d5a0212c18d93f6873667d35926fe88ab4677093c47ef66646ad01f245c1f1f2cbf4300440d011

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 91ffaacb1fe0737e0e67141caeb3c8de
SHA1 c5d093cf65235c92eaed5160eb4f3c4ad3a362bb
SHA256 640148ecad930799f19273e6e703689a32be19dc900172f899f6831e551d605d
SHA512 f2f257a557bd6bfd46d6d8158c2b674b8611ce9f5e959fc9891e4f030869537e57d1aa0c01cf3b2250526247c7a37b9feed45e227b38825979aa76e92d05d494

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 739525d5dd75193d275ccb571e59f1fc
SHA1 2992ff963956e6af22b7576e43afc674d88537da
SHA256 8ea78c2b2f5f50640ee0cdbcbf32ff61c95d1cca383e2858419edb9482c2cb3e
SHA512 1959f6293f7347b4da5b43a85f3479c03f50cb0d5af4a331b4732cdb643d4cec70289cc5158621bfabff2915193266f214d47cfb51220e5dafd4d6427e77e318

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\dropboxstatus-idle.png

MD5 d35744dd6ad8ac0704116feeb84b2b0a
SHA1 95ff79936c2712d5f7b7713eb250b1aaca1708c3
SHA256 a098e050f067bd14de41d0c3773b348b43621130b17340249dc331f441fe385a
SHA512 ee50e2bb0ac2f83e665bcc70e19893dbbe76cd9bbd036a2c34c39f62151f6a33fbc89838d755e5fcfca6037033efce29d4d2cb6cc1ae10206479cf494452c646

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 8635f183667ba2bcd0ebbf588c72b834
SHA1 f7641a919452bda1079d6983ebace073d774139a
SHA256 828e270c7b2437e179f8ea7c89066610765b23423dd5b9bec748c59f0b90e53f
SHA512 adb6f5e25588aa0677cd245f94a8ed67e027a2b880c36b9ddf977098e321202597eac683cbf3508141f95c8d10b90a45828e346974a6f0329068214ba1e3e5e8

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 b5ae020290b8f1169a8d6fb49cc12a83
SHA1 81accb4af38449490088b986dedb645dfb2cde62
SHA256 ba29d0e510004171e69dc56faedbc3f2ccc6972d569835acca6c2c13e98c3471
SHA512 71b12695c25d156fa2bbec60d40b44bbe4ce6f6a7283f1447fbde3505e90ba16b3deb2bfed61a049b2cacc7721548b9c056f927d6706ad3587046e1af09c0c05

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 49aa3ec5664e06ca9c9b07ded38994f7
SHA1 5eb9dc15a4bde4cafb985b25423753e1b31e8b4e
SHA256 4c9b5626742949f90521ea0721c22f6f2778d8f4f0032baa1ca5fdbe538f1270
SHA512 36fe33e1ce36e80aaab02725a88bd9f83d1bbbb044ba4d9718550d814e3d2db301aeb222140d164d525963d1636cf066fd27789a5387dff5dcd47ce46dfdaf70

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 cb1f2b8dc7585eea88303031479c8534
SHA1 66c76b1bd2695e0faf04c8ee05c7c95047f95225
SHA256 f0c856cb962fda54d1b297c6999078d42bdf5d270d9da265a754146442b6e0d7
SHA512 36d16ab9519192a3c5168d61d34da0567e2fd8f11abe789c6300d01a8178d156347eba35b02e928f0654ffdac7cf79b73ab0c07c592f84f37c18244916afddc6

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\[email protected]

MD5 4acf8fd5345ff7924db87a909b1be28b
SHA1 0c265b057287ef5d2ac003ce8a3aa56dbb8f5c58
SHA256 215ac170ddc8d7ad810403656f55f3f2ceade5e81904308bb6db9580bb564b0a
SHA512 13d69917d431d611d1fbb4bcbe993b45b29b6fa0a31e2e4721f62adc3288de9fc70d643c370d4a22af1b8b0ebf52e86568422ed96d1c54edcb1edae12ce74565

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\dark\dropboxstatus-connecting.png

MD5 4e2beab0f331879bbb4d7a69d7491bf9
SHA1 b37041af8b5f508314d1f0c38ada1449ecac1d4e
SHA256 4879e1e5feb9c2aa2582bd6669d848209f04f9e4e86717fde6266f37782d4fd3
SHA512 d56517e54297143291248c3d31a140d0babe378fb4776996a253142bd7240fb6b3015090ca26139ba67813aa3a93adbe6908f7a28f53159a0ed416eabba8e44b

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 7a698b524a6c7c61ccef4bfbae8a6598
SHA1 273c3064ba228be38403d41b6f50a2c35546102d
SHA256 c9563283ec6dad1b3da15561e94ffb36e97700f9444d7a908a5ca5b7f81b0be0
SHA512 b2d6f0d7fe7f54e5f58405292f732a17164caca86c0f670f62e4b02908c2e5e3d4ba914b4f76666adca7332d80d61e1e00dff73c574af5b6b844f3f7444876ce

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\dropboxstatus-connecting.png

MD5 237563916d267784fa30c2d693e216c6
SHA1 6205f354fede747340353b71cf21a420c9684fbe
SHA256 89a854d6c3c9046621f002e68bf62191396c5d3ce868bb7226d6e2baf21d5524
SHA512 5f4eafa95d08c4fe97b6f59dc6a6d3284bfeb1ceb05b9f95c6b16c8eb1cd92e8e324eefb12905a1a25728e866daa414eaacf2d25eedb677a89872ab426d16c2e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 b15afc2846f85cfc705f488109426343
SHA1 56e76002eaab3cad00795d7c2bb2116fd12db4ee
SHA256 460264cf30e2e7cf6ef1e6fa5fc49af4ea2d5fc62e1abe718e2a208e26316b75
SHA512 c311ee5a9093e6412991d65537f96f5fd8d503558f8a9def1e2010a5c3066fc90f6a74e6646f3ef48916bc6ec9caf4eaa841a9a0db652a0f78b38e71b03f62bb

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 dcd193819b7f8012f88f5f77c0421ff6
SHA1 d6e6a26c238c8a6827057a63b8e89500e3d76190
SHA256 fa39b29d9edc9a32c3d9d54323cdeab6d95018d86404baeff00cc18b55640de5
SHA512 8c79812d9bf72fa4b390a75eb321ece9f7834764a707193c4511fa4b1f799a836dcb4d9629f14fd84b23a5ff85872d37d40dc798f8b46fb90e985a2afa7c6138

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 9dc56aa5282b6549dc5099a08c4ab435
SHA1 1c660f253fa8961ee61e363da46b6bc3f1ca1cdd
SHA256 363e40480a84ba4de25e01104f27d834acc0e5bd986a2d9a5e8f6e931eb960e4
SHA512 2f59ca252f90631733de6949274588f7889fbc2b41d4f7efcdacf2352d78dd0e875552815a2053b36b8d05314de9924a3e627fee10ec13dd575852f32e4a3d94

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 11a4c130fa6a509c89d59c1901beb498
SHA1 eab02b91c690fb49ded5a53eb8ca7ac1224288a2
SHA256 2aee831a42ce8f755a9108124b2893c2501f5dcb6c9d286b0065e100842a2681
SHA512 3e39bdbc5aab7b6ef9e21453f250e00e36047be72ee321aaed1712b618a27911cfd935094c94e898c6768e77327148dea34d4dd08f8e7cc194a75fe0bb5c9d2c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\dropboxstatus-idle.png

MD5 644eb1ac4b4b9d254c1a5d6ec82ffbc5
SHA1 25e1f939e72fc163457d636f653ae56b09f84303
SHA256 bbaeba414da07b9a42d7e16f581dffc4dc2b0553dde5d0a799271c0b4b41b67d
SHA512 50a15e01e94a82b43986ed5fd5a1825053c0820cd7dc3f66737f8746ebadeb388f33be111596f4464cdb540af4ff06b278966b283e40616ae8f65bae4d4b3351

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 4d59de08d6bbb92e704fceba9a0b27ae
SHA1 2c57d34839086d4e4fea47eccf0a9dc22765aefe
SHA256 a759f2b68a2bb7ad75c8460fd44cf27f77d9447b4efcd65c7a62cfd27f575a17
SHA512 fc0150da5dcecb96eee232d0400b131a655c9f4537e8caa4377883a9fb0b5d67fc3c9dc2fbfe4cf54ece6c3bcfb7dcb1caab8322da90ffa1a4ac84a498d1689c

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 c06606550868e1b089ca909fdfccc0c4
SHA1 05229956b56cab612455004b5f469ede8760e0b4
SHA256 777e430dac2785081a899329d2a76a64a174ef57683315ab4c80d3a13a3cd19e
SHA512 92cc1028de4c30f3662ae8b5d7e48869aeea77a492a439bfc29786926c54dee6921ca21f74600fd8f3018b2b166135f7bf074f65520b9244eea4219d420385b1

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 db1ede69b700d325fdb6a7e65338c8dc
SHA1 d1516db248b58773f77623be1de8b6206a7e9cbc
SHA256 87b95507e1395c363e814644723305aedb62bd989631e51a7dce03d36f820fc1
SHA512 77b3cf71bff9fd1636729c23a2a8098b18475e1cd9b0fba360580118e94054b7c268283c6f9f499a00cf7ff6cd788511f211061e0fca31d8a1abbab9079b89ab

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 1d75093fb52cda21b8610cd20d07789b
SHA1 6c929aafdce92f4bd3fde42be204c02028dcccde
SHA256 42760b6c8ad45cd02f3f7276e721e5a623d720fdb0af8c8ce330f5cc0d949de7
SHA512 773f27e96237265f20b670e99b35a4007425e3f2382f676ac348e44bf6dfed1f0567444e92db4447184482ac54e72d25a314520ef9ec437d4c6fd15270cb76fd

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\legacy\[email protected]

MD5 c821cf48689bcfe5cf1c4a6b37eb2ec2
SHA1 73d2261037078785d4fb5f3ad5b3d222b5a871bb
SHA256 88f5ad501b3eda190391e39852edfcaa62ccda155d97ac9906f5c24590b984a3
SHA512 1ae2b2643be148046759354d97004ae761e27231cece903179d583fcadcae865a76e040bcfe3e90dc7e9a2bc810ca06a0f2aae68aa2d26480a155527a42bc351

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 74095d179554376043bf47379f1159dc
SHA1 0a100f702f12f3422954cd461dca426b843df822
SHA256 7561f3ab28686e7aed1899b06fb49510c596597470d210b07a6d7c275e0f41b9
SHA512 30190867d0c1e1a1822c001ffedd2bf76d4506d7497886ada1cac5a8345211e0ad083301fa534e663c74df324a46120d065c009b6f56e5eb24d730e5b5a1c9f4

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\dropboxstatus-connecting.png

MD5 4de81f2c9583da55ce4879b8967a2205
SHA1 931159895034e7d52f24b904c765f3e02e557e34
SHA256 ef84388ed457a1ece5f3dadd768bee7149773be4db65e31906168f3d397244e7
SHA512 c9fe703b608952d2a109c3f89abd9ec75e47302845d1376a82affa5f1ac95301b0860fe86fa22e2e686290bcb607a0cf6cfd3fdd8bbb88fb7be656f45be4c500

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 59bca0e267bb6c1c9f83f6c99fac19d7
SHA1 dd74ad15ddca3198a18442955f33b16604d8b600
SHA256 6baa74141bf56a5322cd41415b9756686f6acea7b03b23addbdc4ba52678956b
SHA512 3b59c006ee83929066aacee3e6733d9e82d4bc1d5de30a03e67b2062534c4a7246c7546791a434574891bd3e9205a18f2ddf802661bf15977e26098cac529add

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 b81ea1fd711a1c73988eb77bc313c71a
SHA1 c88bd945cb725ff9343adbd28180ee6009b7b3f9
SHA256 0714ff4682d950b78e4f7135aa41eee4bf14e3be769f3ec71742474321654533
SHA512 e8fc5198cb01a6a00f5b70057cdd6252df7f92df02502fc1a5210666414e6d15fd09adb938c5a88bde753b3f86797eacf8ca1d69e393e7744555e68b03ccaf53

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 41b7ea9ae6461f316663b4ec1fab0e2b
SHA1 39a515a1b208b505c0d7291b700966dc878869a3
SHA256 4f2be4041a2866d83856af99185c920353a3e6bd7c3a4b19da52673d5cae515c
SHA512 6ad83746ae1ee43ae46f448f88b74793a781110e9b27a6019a5e5582d1e57d89b9a3b44108e2b0bf02b8a900413c56f6592ef983980c056b06e1d321b4320d4b

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 4c6de1dcf063b8dd65ddec5831e7877a
SHA1 a092a3aa8f802191cc9c9e04daff654ed748116c
SHA256 5236c151f310555761abab2296c2130cfc9d3af072c9e88917227350f69225c6
SHA512 e51f5d8fdfe799ed956454f3f52eacfe622eef8702cad0fa908754d43e60e0a83a1073dc7cc0755c259c4d2d24e75688519d8941c353e2fe2bea6b43ecdfbb72

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 1636354d176ce21aacace627b85a8e4c
SHA1 65607bbc297dacc2619bb60d2fd7fd08822dc155
SHA256 c64ddc1326f394a08eab8f98ab502dd648f0b269d9807ed7e64ff6ee4d9e201c
SHA512 b5fbc29861bd970c05c8c05ab30092d40355c314b4edb8f9df95f1a3c348127ca62a43759edcffc55a400617f790823cb51f10f6d87bd9ca8d47a5d2b87ea0dc

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 032f6ba2afb9f925e97f4e815d6b6b01
SHA1 278fc1fa6088200fd8711882d127f7f7cc10ecc0
SHA256 915f1777e60d5ad2b9546ad03f34157b70f3d8ad1607e5b87c111be4692b054c
SHA512 e77815dc3cef8e64bfed4577023599b683c9e9136d3ad1a2b7957698aad00e118fb5b0e98449068777f76e8ab8c60bc74fdfe103b555ed104437c805c83730c1

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 dad78ca19f19c2b578e3c700c0aacc04
SHA1 5a3817de31c7d7d88e5c63a6e22f675b1935f4d5
SHA256 8e37becbb06509835ae09ef704b6c62208ecd6e80f280d47d68799207e086e65
SHA512 1065218f5f6a1b1719b06a797b15ed8c84825fbf0d9f87294920d9c4affa3fb27236861d87e68859abfe698c140df78a2b11aa611cf914d9369e4300aceaeba8

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 aa353862800a3249f786c21e6369adaa
SHA1 df3ceac047e78c849a3ecfaacc680b389c3d9ff6
SHA256 fd5df7a65010498b37a02a14b9604410bafc98d546957cfdefa3e1b9a761882c
SHA512 7d478c5c587281ffd286b04a0b6b7ff39c552f5b429cd2ba4d332f497e3819ec49c01e03fd459af27f806c677b0e0005a4fe93c9d8bb295818dfdda772163f0a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\dropboxstatus-idle.png

MD5 90dc2f1449cc1d87313dc13f2bb7c7ff
SHA1 7820e2190dd088a2f100da14f465239f9ee2b7f7
SHA256 981b9ff92e28c83e9e3b43e45bf51b1a2f7dd2242837681f4a71784d9a60057d
SHA512 34f27affae4e48171b21ae373aa71c9bbfeb2b33006cba8d531ff845a8647a5f375cfd2c556e08dc8f87b87fb504da429a6686537237c5eb13f053fc8a9b291a

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 06c0530efe8f38df789cf9b8d86e1ed5
SHA1 9d6dd15f10be953bfc4d460686e16e2ec96ad466
SHA256 80b8c11dc30aef1b9c0b469af47fe8ff83f4b6b68e3874b2f18ec8716e1f8340
SHA512 56034c0e34a52f3512e98c971e6668d218c7d2d6c3c2b28e871203fa72df009c1a952d79a526a9a0844ad076eec48df73f6c3c4d53d5a90ff661b5559fb58bff

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 6551c66b0144452d9fad63fb519e021a
SHA1 e4d91ea4859e07a76f133e746c970afe7a9c1f2d
SHA256 d7593e7752ad786454809cad2a3cf0263a1f4946155026213af90a115807871f
SHA512 be36029528657be82560e1ec06ac816d2366a59f0435069afadc0749210e3e12f252b2a3c1ad9a073747ef1003705a3dc5713ac8c2acd6cf813421235bf4c06e

C:\Program Files (x86)\Dropbox\Client\210.5.4894\images\03_Tray_Icon\win\light\[email protected]

MD5 d556137fb2c3beb248e4917da166a034
SHA1 f76b2be4e7a134b67b3e42d839d3baa2b9d65a70
SHA256 017c764d5785aecd98943d90b1a60acc662424de66b19f0fb259551814a084b9
SHA512 a15a9aeba834973f8857f2bf7a0f01eb1fe2676147d7f92b0fe8c4b1079c4441db15ca091cc8631478ca664643cc20d190c4ff0c411acd8351e18b2b87db1c98

C:\Program Files (x86)\Dropbox\Client\PackageAssets\DropboxExt.76.0.dll

MD5 c1dcfd505e11b425a7c925baefc24da2
SHA1 6fb02b4d3fd9e97a80eb82e8af052321dcbd79d8
SHA256 ddf06bdb19cf7c863e25c78d461aef4c62a07657ed2c2c1f73efafea71a1f853
SHA512 263c4a37f4073b1ffd3f02526fb3f55b135453332672e3643b81f72a88fed1cd4c502c58a379e9ce515453cf67d7c1ab1ac3906dc71ee15cb3f0a4e7b7fded72

C:\Program Files (x86)\Dropbox\Client\PackageAssets\DropboxExt64.76.0.dll

MD5 7e50ee40b77cd4f540590b9262b0ce62
SHA1 a3431f3fe6e29b1dcdb19c6a730fbae0bb53d5df
SHA256 984dabe4f177bb07ed6e453c12089d5be28b58fe6f6894be5649c083af898b96
SHA512 f377772504d6e576c892b11edae0433817f5945825613aadfb288937f25a4aa696a01dc51358e52682c3049cd8d0b9eb3758e131eec790ef2ca9af9d274a17cd

C:\Program Files (x86)\Dropbox\Client\newDropbox.exe

MD5 9cfa0f2c25514b2afd49335749760de0
SHA1 a0a2d99c79313d6b6daa9207cba16b33f26b7a3a
SHA256 1754ce2e9e584bff8edde401ce5f63fb72dfd8e28dd668a14cae009100229546
SHA512 bf62fb891c7df82c6225c7335cdf725c4c7f3c95a1749cc82b37900348b796d0b4eebb8f32257eb3f1a4a5bc6e26b64ecaec3702f275d6727f9066d068fdb5da

C:\Program Files (x86)\Dropbox\Client\qt.conf

MD5 0d42d177c2f7543c8fbb20be34c6ce6e
SHA1 03086d78c2c0e78a2ea6ccb122b311b80b02f389
SHA256 d5d246d375cfc6e08265f80ca2b9428b3db92551153a599a7d7d767a01b6b862
SHA512 714b474a02a48ca3cc46a247c8bf37942fb3ab390c22e1c0b291acc13e0004ebb6fe51ab4c3ebfa7c51fe2cf8cc449160b73caca1b3de6d9f76536f7f4b5920f

C:\Program Files (x86)\Dropbox\Client\DropboxUninstaller.exe

MD5 5337ddad76f457ba04b179c57ced0ee9
SHA1 5cbf9824456ad09cd8883ed72c251fa7cadcbc52
SHA256 ac642d093337ad31373a7a3db2a77a2be4939920a2f801059bb3d62fe55ccd6c
SHA512 5a9f56779d665f1ec902429b878414fb07d33adecfba3fd4daabc736590c47dbcf88b3fb4f7d4a4a96372f2bc41a14e04c396c4f0fc13302c60952bacc4f9f18

C:\Program Files (x86)\Dropbox\Client\Dropbox.VisualElementsManifest.xml

MD5 0674e23307ee41c64e97de65cf41c147
SHA1 af41dc098ade684bd933da17c6b3141e77d42c53
SHA256 64cd2cebf9ba3875feaff60e28b47b5106c487205919d6257eeed7827f51dd18
SHA512 775dc41dcf1477359e57cb399f305c60b3fc7848c65fcd8ee9ed60b5e766fd29234471e161b54a10ba35c892eb09d1105b8b390a8ada0c89efaa7f487cad5a11

C:\Program Files (x86)\Dropbox\Client\resources.pri

MD5 269cf62b059e15f9309e9f7688f7c649
SHA1 384c585dc199fa4060519143f1cc47e3b16b7023
SHA256 a4caceeb39b876080dce6b4d8a49285e88e1b5a1eea03f892ac5228607c12a92
SHA512 f5831f3b14db919dcb49ec0fe8b0e44b2801606539956cc51b3a1adc35fe59ebdfb49a3ce7c61211b7d7b0e07c782b702dff05a6766d9d2e313729c0e1071674

C:\Program Files (x86)\Dropbox\Client\PackageAssets\resources.pri

MD5 f802edd6ea7429ac189696ebaf92b263
SHA1 dc5be7729862ddeea0bcad1340bdcf05f0ce334c
SHA256 df19a929dabd768d18c9b10570bb65371d13f0638ad3bc38ebc27d9188e49387
SHA512 88a7250e1d6086fb510a8d8168ad824d13a50881e9a99316d13899dbbb9bd46a08f8d2ff39f4bb14e39505286ac8d0fe47bd7e47f20b00f0276512e4b4700459

C:\Program Files (x86)\Dropbox\Client\PackageAssets\Dropbox.msix

MD5 a4edc8ef61b35c9c39b18184f319cf0a
SHA1 ea4a03ede655080e4213d6e73cace585f22ead2d
SHA256 15e8d8f44e737c7240db9ec47b07366dbd41268340ae5c41723d4e77a6214226
SHA512 66fb8739f638f0d163c02e672cd6a966a8b87aec4e1c77b8c32144e9e99bb1fca3a0c276287d7460e037d6dadf705135f1148a2196651636fa1b1ae75be9b61d

C:\Windows\System32\SET5592.tmp

MD5 8c0631bf0449c7bacb851fe696481911
SHA1 8792f100995b2e81f2612fc3faede772d2dfc1bb
SHA256 4c95bb59380e8037887f65f25042524f78b0f39ac1ce0876235f9c9259cef401
SHA512 c7bd044e41d7b42f1b43d403a7ca1c63648f70bf71180b476adec5e1f420d3c0b93bc64aefb1f2c540a05c941899d9f5f4ee4815cd1f493708c7d10b6eebf680

C:\Users\Admin\AppData\Local\Temp\nsoD6A2.tmp\System.dll

MD5 975c9c79b7ef2d21fb69f12bd0ef8ad9
SHA1 b08ddec2113f25b6db0657ae2fbd51063cbdf5ca
SHA256 b467c725ad6653e53c99048ff35ad02a0e8cf68acb8471ee87d1f73a88a98315
SHA512 52ca1f32e2944dc3ad5f01c2e0a2eb13e7300bd4f6e121b9c3d25437a3820d56ab26762ef05f1082cc155deaffd02ace09988a8f83a14d12794f80dfac43832b

memory/2672-5256-0x000007FEF8E30000-0x000007FEF906A000-memory.dmp

memory/2672-5258-0x0000000003710000-0x000000000371A000-memory.dmp

memory/2672-5257-0x0000000003710000-0x000000000371A000-memory.dmp

memory/2672-5262-0x0000000003710000-0x000000000371A000-memory.dmp

memory/2672-5261-0x0000000003710000-0x000000000371A000-memory.dmp

memory/3008-5295-0x0000000077310000-0x0000000077311000-memory.dmp

memory/3008-5265-0x0000000000060000-0x0000000000061000-memory.dmp

C:\Users\Admin\AppData\Roaming\Dropbox\Local Storage\leveldb\CURRENT~RFf78ae87.TMP

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Roaming\Dropbox\Session Storage\000002.dbtmp

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Roaming\Dropbox\Dictionaries\en-US-10-1.bdic

MD5 4604e676a0a7d18770853919e24ec465
SHA1 415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA256 a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
SHA512 3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774

C:\Users\Admin\AppData\Roaming\Dropbox\Partitions\welcomeflowview\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Roaming\Dropbox\Partitions\welcomeflowview\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Roaming\Dropbox\Partitions\welcomeflowview\GPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\Dropbox\Partitions\welcomeflowview\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

memory/2672-5487-0x0000000003710000-0x000000000371A000-memory.dmp

memory/2672-5488-0x0000000003710000-0x000000000371A000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-17 15:10

Reported

2024-11-17 15:13

Platform

win10v2004-20241007-en

Max time kernel

130s

Max time network

152s

Command Line

"C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe"

Signatures

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DropboxUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
N/A N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E573CDF4C6D731D56A665145182FD759_5A9FE11E8B6335FDA91281200971E038 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E573CDF4C6D731D56A665145182FD759_5A9FE11E8B6335FDA91281200971E038 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\PackageAssets\Assets\TinyTile.contrast-white_scale-150.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.targetsize-40.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\QtGraphicalEffects\Blend.qml C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Styles\Base\images\arrow-up.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\PackageAssets\Assets\logo.targetsize-24_contrast-black.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected] C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdateBroker.exe C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.scale-150.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\dropboxstatus-connecting.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\TableView.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\locales\en-US.pak C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtGraphicalEffects\RectangularGlow.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\Assets\gslides.targetsize-48.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\paper.targetsize-16.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white_scale-100.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Qt5OpenGL.dll C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Styles\Base\TreeViewStyle.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\locales\pt-PT.pak C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\api-ms-win-crt-convert-l1-1-0.dll C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-36_contrast-black.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\msvcp140_1.dll C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\dropbox_core.dll C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\QtGraphicalEffects\ColorOverlay.qml C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\PackageAssets\Assets\StoreLogo.contrast-white_scale-400.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-16_altform-unplated_contrast-black.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\locales\nb.pak C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Styles\Base\DialStyle.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\api-ms-win-core-heap-l1-1-0.dll C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\Assets\logo.targetsize-72_contrast-white.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\PackageAssets\Assets\TileSmall.scale-200.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\locales\sl.pak C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\Assets\logo.targetsize-40_contrast-black.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.targetsize-64_contrast-white.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\TileSmall.contrast-black_scale-400.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.scale-125.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.targetsize-96_contrast-black.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Private\TextInputWithHandles.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\images\03_Tray_Icon\win\light\dropboxstatus-longnotification.png C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-80_altform-unplated.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\Strings\language-nl-NL\Resources.resw C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\logo.targetsize-36.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\resources\resources_qml.rcc C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Private\StackViewSlideDelegate.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Styles\Base\images\button_down.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\TinyTile.contrast-white_scale-400.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Qt5Widgets.dll C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\QtQuick\Controls\Private\ScrollBar.qml C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\vulkan-1.dll C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\locales\hi.pak C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\StoreLogo.contrast-white_scale-150.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\PackageAssets\DropboxExt.77.0.dll C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\gdoc.targetsize-16.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\gslides.targetsize-32.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\PackageAssets\Assets\StoreLogo.scale-125.png C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\locales\th.pak C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File created C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\images\03_Tray_Icon\win\light\[email protected] C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
File opened for modification C:\Program Files (x86)\Dropbox\Client\212.4.5767\api-ms-win-core-processthreads-l1-1-0.dll C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Installer\e579a31.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
File created C:\Windows\Installer\e579a2d.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI9CFB.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{099218A5-A723-43DC-8DB5-6173656A1E94} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
File opened for modification C:\Windows\Installer\e579a2d.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\System32\sc.exe N/A

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}\CLSID = "{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}\Policy = "3" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\system32\dnsapi.dll,-103 = "Domain Name System (DNS) Server Trust" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124 = "Document Encryption" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FC2E189E-C306-4710-BBCC-A8968ACAEB2E}\ = "IAppBundleWeb" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A496C5D9-84FE-4E84-9D20-7481589E1C23}\LocalServer32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.OnDemandCOMClassSvc\CLSID\ = "{76E258F0-DE86-4CEC-9D30-3F728A898741}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96D1EED3-701E-4FE5-B996-A543A8465897}\ProgID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreMachineClass.1\ = "Dropbox Update Core Class" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3WebMachineFallback.1.0\CLSID\ = "{49423331-2B41-4EDE-838E-F8C8F3F6BF62}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96D1EED3-701E-4FE5-B996-A543A8465897} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreClass\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4DE7C611-9E6D-468F-8AA2-26C08DB4A687}\ = "IAppVersion" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60ACA18E-54E6-43F8-A1A4-C4176B6C994E}\ = "IOneClickProcessLauncher" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreMachineClass\CLSID\ = "{9E396485-96EB-4906-B2C5-3E0F1E7748C3}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{78F1393A-63FD-494A-BA89-2C3ECA4E8EC8}\InprocServer32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{05378308-2559-4C71-B758-7DACD5A359BA}\ProxyStubClsid32\ = "{4974C8E3-15C6-4ED7-AFEC-DD62FAB30313}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4DE7C611-9E6D-468F-8AA2-26C08DB4A687}\ProxyStubClsid32\ = "{4974C8E3-15C6-4ED7-AFEC-DD62FAB30313}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3A337332-37E4-4063-B4F3-6416846C8A33}\ProgID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CECD4BFB-9F43-4540-B72C-706BE66B375E} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreMachineClass\CurVer C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.OnDemandCOMClassMachineFallback\CurVer C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.OnDemandCOMClassSvc\CurVer C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5A812990327ACD34D85B163756A6E149\Language = "1033" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CECD4BFB-9F43-4540-B72C-706BE66B375E}\NumMethods C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CredentialDialogMachine.1.0\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28F751F5-74E3-4C46-8174-D8D8A6BAF83F}\LocalServer32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{96D1EED3-701E-4FE5-B996-A543A8465897}\ServiceParameters = "/comsvc" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DC422F86-7267-4AF2-8F4F-A20C060621DE}\NumMethods\ = "13" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.ProcessLauncher.1.0\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.ProcessLauncher.1.0\CLSID\ = "{3363994D-A786-4A32-A745-48B9B6EA709A}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3COMClassService.1.0\CLSID\ = "{96D1EED3-701E-4FE5-B996-A543A8465897}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{4DE7C611-9E6D-468F-8AA2-26C08DB4A687}\NumMethods C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{82821E4E-4B46-430D-8BB8-8B480FC9D8A5}\LocalServer32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{96D1EED3-701E-4FE5-B996-A543A8465897} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FDA8FC46-0F9A-4A8C-8764-3B80880A9AEB}\NumMethods C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.ProcessLauncher\CurVer\ = "DropboxUpdate.ProcessLauncher.1.0" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreMachineClass C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E58F67C2-BC84-4C7C-AC35-4FFBB25A47E6}\AppID = "{76E258F0-DE86-4CEC-9D30-3F728A898741}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5A812990327ACD34D85B163756A6E149\SourceList\Media\1 = ";" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60ACA18E-54E6-43F8-A1A4-C4176B6C994E}\ProxyStubClsid32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{90AC42F5-B136-4079-B7A1-0A61FC86685D}\NumMethods C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8A89190B-400F-47DB-960A-7D5A1325A2C8}\ = "ICurrentState" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.OnDemandCOMClassMachine C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96D1EED3-701E-4FE5-B996-A543A8465897}\VersionIndependentProgID\ = "DropboxUpdate.Update3COMClassService" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3D412914-1C4F-447D-80D2-E7F9BB302B05} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D8474489-B2C1-4CE8-852D-FF8A916C91F0}\NumMethods C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B35122D2-0036-4536-AEEA-EEA68E54A460}\ProxyStubClsid32\ = "{4974C8E3-15C6-4ED7-AFEC-DD62FAB30313}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EF028154-CA20-4F73-ACBB-82451B78F1E6}\ProxyStubClsid32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CredentialDialogMachine.1.0\ = "DropboxUpdate CredentialDialog" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3WebSvc.1.0\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C52C4100-E8C6-438B-AEAC-43C99F7CCC26} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C52C4100-E8C6-438B-AEAC-43C99F7CCC26}\ProxyStubClsid32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DC422F86-7267-4AF2-8F4F-A20C060621DE}\ = "IJobObserver" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.ProcessLauncher\CLSID\ = "{3363994D-A786-4A32-A745-48B9B6EA709A}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreClass.1 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoreClass.1\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28F751F5-74E3-4C46-8174-D8D8A6BAF83F}\Elevation\Enabled = "1" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CoCreateAsync.1.0\ = "CoCreateAsync" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A496C5D9-84FE-4E84-9D20-7481589E1C23}\LocalServer32\ = "\"C:\\Program Files (x86)\\Dropbox\\Update\\1.3.733.1\\DropboxUpdateBroker.exe\"" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9E396485-96EB-4906-B2C5-3E0F1E7748C3}\Elevation\Enabled = "1" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.CredentialDialogMachine C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.OnDemandCOMClassSvc.1.0\CLSID C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DropboxUpdate.Update3WebSvc\CLSID\ = "{E58F67C2-BC84-4C7C-AC35-4FFBB25A47E6}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E58F67C2-BC84-4C7C-AC35-4FFBB25A47E6} C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{04F3B937-6C9D-4DAC-9477-8C35E24B25D1}\LocalServer32 C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{96D1EED3-701E-4FE5-B996-A543A8465897}\AppID = "{96D1EED3-701E-4FE5-B996-A543A8465897}" C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeTcbPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeSystemtimePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeAuditPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeUndockPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeManageVolumePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeImpersonatePrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1404 wrote to memory of 3724 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe
PID 1404 wrote to memory of 3724 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe
PID 1404 wrote to memory of 3724 N/A C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe
PID 3724 wrote to memory of 2500 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 2500 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 2500 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 4852 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 4852 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 4852 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 1792 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 1792 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 1792 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 924 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 924 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 3724 wrote to memory of 924 N/A C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
PID 4400 wrote to memory of 2624 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe
PID 4400 wrote to memory of 2624 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe
PID 4400 wrote to memory of 2624 N/A C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe
PID 2624 wrote to memory of 3672 N/A C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe
PID 2624 wrote to memory of 3672 N/A C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe
PID 3672 wrote to memory of 4408 N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe C:\Windows\system32\netsh.exe
PID 3672 wrote to memory of 4408 N/A C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe C:\Windows\system32\netsh.exe

Processes

C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe

"C:\Users\Admin\AppData\Local\Temp\dda43221ffe326ed76859afba2c8534a5eda8ea0a241b133e036e1b26a609d34.exe"

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe" /installsource taggedmi /install "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEifQ"

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /regsvc

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /regserver

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /ping 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-

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /handoff "appguid={CC46080E-4C33-4981-859A-BBA2F780F31E}&appname=Dropbox&needsadmin=Prefers&dropbox_data=eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEifQ&nolaunch=0" /installsource taggedmi /sessionid "{AB230103-00A9-4ADA-AFF3-B0EAACDE97FB}"

C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /svc

C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe

"C:\Program Files (x86)\Dropbox\Update\Install\{A785D500-1FC3-42A6-9B3F-E4EECA9E5C8D}\DropboxClient_212.4.5767.x64.exe" /S /DBData:eyJUQUdTIjoiZUp5clZpcE9MUzdPek0tTHoweFJzbEl3TkRJeXNUUXdOVE0zTmJFd003VTBNak0zTTdRd3REUzJNRGEzTUxBd05UUXlNelUzc0RTdUJRQ3E4ZzNUQE1FVEEiLCJvbWFoYS1pbnN0YWxsZXItaWQiOiJ7MDBGQzE3ODQtM0YzOC00MzAyLThDNkEtREE4MkM0MDI4MzY1fSIsInJlcXVlc3Rfc2VxdWVuY2UiOjB9 /InstallType:MACHINE

C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe

"C:\Program Files (x86)\Dropbox\Client\..\Client_212.4.5767\Dropbox.exe" /install /InstallType:MACHINE /InstallDir:"C:\Program Files (x86)\Dropbox\Client" /KillEveryone:YES /IsAutoUpdate:

C:\Windows\system32\netsh.exe

C:\Windows\system32\netsh.exe advfirewall firewall delete rule name=Dropbox

C:\Windows\system32\netsh.exe

C:\Windows\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any protocol=tcp localport=17500-17510

C:\Windows\system32\netsh.exe

C:\Windows\system32\netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any protocol=udp localport=17500

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt.77.0.dll"

C:\Windows\SysWOW64\regsvr32.exe

/S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt.77.0.dll"

C:\Windows\SysWOW64\regsvr32.exe

C:\Windows\SysWOW64\regsvr32.exe /S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt64.77.0.dll"

C:\Windows\system32\regsvr32.exe

/S /n /i:\"hklm_reg\" "C:\Program Files (x86)\Dropbox\Client\DropboxExt64.77.0.dll"

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /S "C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxOfficeAddin.14.dll"

C:\Windows\SysWOW64\regsvr32.exe

/S "C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxOfficeAddin.14.dll"

C:\Windows\SysWOW64\regsvr32.exe

C:\Windows\SysWOW64\regsvr32.exe /S "C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxOfficeAddin64.14.dll"

C:\Windows\system32\regsvr32.exe

/S "C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxOfficeAddin64.14.dll"

C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxUpdateClient.exe

"C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxUpdateClient.exe" --install-elevation-service --appid={CC46080E-4C33-4981-859A-BBA2F780F31E} --enable-logging --vmodule=*/dropbox/update_client/*=2

C:\Windows\system32\DbxSvc.exe

C:\Windows\system32\DbxSvc.exe

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\System32\sc.exe

C:\Windows\System32\sc.exe failure DbxSvc reset= 3600 actions= restart/5000/restart/30000//

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

C:\Windows\System32\WindowsPowerShell\v1.0\powershell "Get-AppxPackage C27EB4BA.DropboxOEM | Remove-AppxPackage"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

C:\Windows\System32\WindowsPowerShell\v1.0\powershell "Get-AppxProvisionedPackage -Online | Where-Object DisplayName -In \"C27EB4BA.DropboxOEM\" | Remove-ProvisionedAppxPackage -Online"

C:\Users\Admin\AppData\Local\Temp\EBA6F91F-339D-4E71-87E8-4118C472119B\dismhost.exe

C:\Users\Admin\AppData\Local\Temp\EBA6F91F-339D-4E71-87E8-4118C472119B\dismhost.exe {05A33455-E8B3-461B-A865-F534B2EAE8AA}

Network

Country Destination Domain Proto
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 client.dropbox.com udp
GB 162.125.64.13:443 client.dropbox.com tcp
GB 162.125.64.13:443 client.dropbox.com tcp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 13.64.125.162.in-addr.arpa udp
US 8.8.8.8:53 edge.dropboxstatic.com udp
GB 162.125.64.22:443 edge.dropboxstatic.com tcp
US 8.8.8.8:53 22.64.125.162.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 180.129.81.91.in-addr.arpa udp
US 8.8.8.8:53 21.49.80.91.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 12.173.189.20.in-addr.arpa udp

Files

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\@PaxHeader

MD5 9cf3955cf0819df926719c5c9edbfa3b
SHA1 98328d29fdbafced185e58fde46502bc5b5daa01
SHA256 899fb67321d291c993e756526903e99151acacf24df88803ebaa70f115214c13
SHA512 64c1ce6e71fc198b808ba6e0dd9d355d02d0a3ffef05f8bde7a99a2b409680437490be3a9ff2407a1773393ec702e64882b3467650fa43e6c828132f67515c3a

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\@PaxHeader

MD5 49192e622b0e73abae943d56789dc0bb
SHA1 d01a9671211fda5a6fc923f617bc556259c19c5a
SHA256 8a975270fd35e58f02595cdb147f2ee749e47ab1bc931bc16366517f579725bc
SHA512 86bb030eefc66e8851f4f0034d7c5af8c81b61a0c8f69132117c6e8f1bed0ffe460a78a0f2544eaa64176440f949d0c059802d928559007f1c9785645b95ac29

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdate.exe

MD5 8ad76e0b347bb690697535ce95b1c656
SHA1 10d2622a3965d21215a953ed924d01788a9805ed
SHA256 7655221b493047c61285e1de78807d0584920b0d14d150e2487da9728b1926f3
SHA512 35fbda7f05865b3a50454dba5ba3738eb8a5fd6d2eea5e9415d8d517811d51c50cca6c7b47a5b19f1ff1f4101567137fe18805f4f740289456da1ff2af682504

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdate.dll

MD5 23dc331d16f53f24191903af7ce2ad2a
SHA1 cf9636790998ea276bc4e5fe7ff14260db577bbf
SHA256 62b9422b10030ad4c9b1956df37f6fc1c540474e18372eb37421091c300a0e2f
SHA512 24f514602478ae0b36420ce0ed089d25164734981f2671cc95072c3090ebabb75565dc3b53802a74b48c75c59e427d608d0c73e4b913a86679ed3f61606693ae

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_en.dll

MD5 6f4f4e2770697d53c7080341133c67d3
SHA1 f1ec7ead8b8b3075f4cd61e8f7c616689ea68142
SHA256 0801e3483982bad6b5918c1493727f7a1347e201398614ce143f784ec040347e
SHA512 f1ce922db34c757966f3d7c8fce29c6d334c54f50e4026ebaa07c4d22bd334769b9af2f0011732f712bdb220c32fda65815af18fb5a641dfef776899321dc8c1

memory/3724-67-0x00000000034B0000-0x00000000034B1000-memory.dmp

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxCrashHandler.exe

MD5 5e52926d03a33b6eb79b3dae293f9d4a
SHA1 2dbe86020d4279884468e699171a4b46986f379b
SHA256 b376ae83b594e7c49903ca455198f48c98fc401e02ef0e1d38ab5b6b4b19da6d
SHA512 bd2949c957973f3365a56ac95d667565a9c0d822b8b26e1e91dba89590bfc24a3738b12531f152b909a9c3f4e77b7a453004a93994a77cad7589025c134e3f50

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_da.dll

MD5 7a3a1335d0020f9fd3dd878ffcaccc26
SHA1 64c999b2fd0a3d9bd0f3de7c93045772ee4585ed
SHA256 a88b7a8c4b54ec30370f4530a6c5ebc8b55cd2548af2534595c9268c49643762
SHA512 fb9af4c31073bcfa718ccd31232e30ef8486030b234b17d2741a6560b60b76fd1f6f727ca2c4c728672ca5df461c7015df9cd81c66e6f4a380a9ea947b832737

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_de.dll

MD5 e6704ebfe43ca5542b78265b630853d3
SHA1 bdbd2fd09720015500bc37837064b06b154f7636
SHA256 028427686e148993093517c4285195e08ec734d20d0664ac22bdf606346eebbb
SHA512 dd1b71419b035a2bb650f3c874aa47816c6963d2183c9e88a45de683e889af1edc1a672db44a1a4f87403c71909513c00f7bd16643f124cee40340a812b6e455

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_es.dll

MD5 5b36bce32bcc0db2efa71d12026e1234
SHA1 5359fb2cdcd22b2bb804065d29ae3200417622ec
SHA256 4eb60316a5d318cfb4958e22a67e90fcc4035195ac3326c3d6afaae1b823fc8c
SHA512 60a6cd40469bb63a9d4a33decf6aebac48c8c99610c0cc17a58c015af7e7815965779db4d18f3ebc4e03d12134e47ba56ca42da989d3966bbeea19fa4f2c724e

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_es-419.dll

MD5 1abbddf1ef6db10d85f2e8a002d40566
SHA1 7c09cee0b4c1bb95415855777b7aab5f9df48e37
SHA256 952a28928345c100443c559445e66e762791a1a7a9ec57541d39612ad9db7f5f
SHA512 f1bdc37005c03b26e79f87e44f901b2189955f72aa416dcae0466a88d113c98948c7da6f25baec1850ecb4c7b2d560488cddec6a6a7c8c408b33785a85ede50e

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_fr.dll

MD5 a74ab7391b9de5e5ff2a32b2439a585e
SHA1 2990fbb2a9753581fbf8aea4ab536d5efd9e898b
SHA256 ecb359617d6111f7d3b7e3ea0aa5c1c5400e7b21339534085e18a525ac4a6627
SHA512 dd679e46d422cc2b785c40b22fc8a4901495aa822563422c6046d1ee97c68c9f988262276ddc11323c93cb072b6d1f05c6199a657cbbb2460c574c2d56f98fa4

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_id.dll

MD5 60d1126ce0a685ffdbaa1e592d4218ca
SHA1 fec95dc9ef121a0202397314558618c106e96453
SHA256 82e2e4d3d62f0887f753e91965287c635f00128fffbba5d2d4933817b9de96a3
SHA512 ceb7f08b5e868c913df8f42446910809ecf4f5341d0047e08072edee4132fc679768401262f277952841b894e4f8209a4dbee06e3978153fb7ba420e9f476e0b

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_it.dll

MD5 599e89df5fb24d8cf294d8ad611f435f
SHA1 50a1e9c9571387c981b39d1130967253ca4b89c9
SHA256 baad7087c933b3e5178840fc5e0480a83169be10dba892be4e890379295cab7d
SHA512 071c54c8cb251322880c4a07da33517f579a2653c9665faf98d5c18ef71a01896907104962a7799a8b2b0faf9f02d650eec854d1c16796da6dbba367a8f7fec0

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_ja.dll

MD5 1755f0733a1a600a368db4b804856170
SHA1 499270b4fb9923d077ec5082bd0e78c6adc4e069
SHA256 aa1cabf5dc4f5770c2f8c6dfd3ab70365b1c3182b6981584982352407e06dd03
SHA512 9070a54ff4b3416dd0f5611aaf476c304897625834364fd492bd83364eb00cea0885b00f1605fd5fb2ac2ca7556140845cf193881b44958521223266e108c0fb

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_ko.dll

MD5 b3aa59966d665d13e53233cfc2728a06
SHA1 bd3052210392cd20c0d2e9e08ab75432c9239cc9
SHA256 4cf5fe6e9bb32c3baf7e3a1cfede4d5a9b1fbe643460b3e93eb424bde68d93f6
SHA512 bedcd96d1ac8b31ef42a28570e80177b77e2bc2daef007f82aa88c8a9226647d51c6890be60b3b99bed6556cea8f84239f7425f95248d539e03cd84d80b0a47a

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_ms.dll

MD5 e2a0bb25526445ac3c61c24bc5839070
SHA1 642d46a576255d2e0719096100278a4475223e72
SHA256 8b9679b7b2a5ad855609f8d56007d4754e5680ca53ce4ee4772cd518f269e853
SHA512 fec9f6bc2b8349ac4beee7143da57595dba18fb0280009f706b6c5308a4f3f61ef3159273feec2460f766e8ab979ff6cdde8dd67bd4adc91342690e297d213d3

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_nl.dll

MD5 50bdd5dac9c74cf3fdf3849ef7b30071
SHA1 900619b2730cabe0125be0eab6bb0e044a9c5143
SHA256 974bfcd208e0c27b055b3dc1157b38c67a69375fcaad039b7569870642eecd0b
SHA512 353f7d929f6a5887d485611c2ff57d35f4a5c3c5c49ac06343ebd61c773eb67419b82389f3291513cc7937f11de4c5c90b3cfa42d2b8c94600fe4273c1244449

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_no.dll

MD5 8a282b4a14e069565717c8e1ad3dd0db
SHA1 f5e982b2b45cb9317ff08a2d4e2fcae0567df439
SHA256 26b3a543bb488d78026904543bc9964e383353e78e6e6a453ecd60a61a1e6a69
SHA512 fb635543286af7fd79d65c1d41087658b74e28414af89277af64e0581223e0495348dc03282102166f4d2577c858c956e5c71efc83260e072ace387e82f5d060

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_pl.dll

MD5 738680185a4ad72eca861b07eb340f24
SHA1 663a8c80edb40e3dbf647ce087442402a6ed63e3
SHA256 283853c061efe6077520b87ee0c50d53ec9ae71b441a49d52177abb24319b5df
SHA512 e652a2fa20148aaa999d80ae55e6c4c7c1b7831a7b51c3f152097a4f5510bd9d4ab3230b03c2df9645ba7532ab455a9c3affd31dc5f9a363d162c1b8b332eeb8

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_pt-BR.dll

MD5 ff0664f29791cd10bd517306313910b2
SHA1 5258f102f2a1561236a5078828b7f3db0409fa4c
SHA256 d6ad58988444fa50f711eec8641a0988b2f80087e0735a8aeac518ff297c220c
SHA512 504e771036970276d4c770902b67adef798cf20767d4b219c7e71f4c76e3b739e109e210396d498665114bce956f87bae296095adc56fcd61928808fe9b8bd59

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_ru.dll

MD5 15a90bece279211eae19f4fbafb2e44a
SHA1 11efd42e4bd28c513d833b0b251cd12d07d74ec5
SHA256 3c06a9c3b932d839156ca796ca37d8f2f23a28768ef126ff1df37e082a3f288b
SHA512 b466f5dd9bebd2914a60356941f4fa3084bf38f99c02a3c8380681c9cc0ac88419ee68c819dac8703be2072997644398beb59054e395680d7a5c8213b18e8e43

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_sv.dll

MD5 b9337f4443b1280d9ffc263cdcea5619
SHA1 584fa85529cb89b6fa596243d75a145641c5e534
SHA256 6b021b6f2ab81e89a97eb7debfb6c0fd745ec2a3f635e932cbf8e6bf8c3b3609
SHA512 a74241e5affa5c49e2124c2774582703bb46cb3315d97ee5ceb1622c55c5159908a3cc5c826e816c5faaab529194900525cb940a2ac0007e8cabe95b2be892b2

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_th.dll

MD5 480c55865478bb97ed10470d3f116876
SHA1 3c49fe94b223ba1700a121c97234a424cd29b597
SHA256 56e24797b20fc890d9c6f3806515228dbaeff50e7fcd3362aded68915f3af152
SHA512 7a105dc96bf4bd7b1de78114f951904d9f10cda53866919106820d7d2fab44834597812785963ed25fc89241a5e5542ddb663b2392c253089cfab18dbc2ad2a7

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_uk.dll

MD5 9441222e5f39a4435648511aaebbd9ce
SHA1 4cba24a8d5554b2460d24fd6ecee8447f968d501
SHA256 881ca42c3e16adff5386fb48929e63ecfb4667e1be8328ced55964078e6d51e6
SHA512 828fc35e84d26c7a32a415d982f5c140bc3749d8b1b5ab3a11f77d7c7ad7a7b10f24ed79e9ad60dd4e8b3e6f87bff8d9a84829418aee49a9766664439256bff5

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_zh-CN.dll

MD5 27e625269b32350cf68d57a5147ebadb
SHA1 228370d3c07c051edb322e840bbe73bfacd38472
SHA256 7e5c095d4d3cdf6f177e99153acc3a08360df2a3b3e174eb1d048c4221249b35
SHA512 da5f7a84145da4ec7dcbd13da29293bf44fdee517cc51610426f508fce255567af25cb90fd0b0db672cbd604fa88f4f6d5fdf12cf30b8fe6197c2887f0bca628

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\goopdateres_zh-TW.dll

MD5 d8bcebe4f2bc38819c7eb0a2851c3336
SHA1 4be9d56c4b45b823d6a76e558554b6204e9245ac
SHA256 e022c9ae7753c3f4b32096feca00a7413e734750ec29f914e4f62e3296b708e0
SHA512 00a42ebe1ef47e8f814f4408a58e39e7f6ef15d3d34e948348681f4394e00dfa7567e705ba313080bf4008dd67f77cce0d94db674dd5b488ad0215f9faa2f4f3

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdateHelper.msi

MD5 8a1b9cd969b13a72ef69844ea378e530
SHA1 8f9e8b2c6e17be4a087daf58c09af8edc6d4058e
SHA256 25f1316ee75aa06cbe34ee23ab988c92e6a4201633ff886e757e23f9aa3c4fd1
SHA512 55c7f0dc9bc824b5768e18af3773737c7747d095fa3f725407c961085c5b0a3dcd036f706f9928f8a4f3d142e21e68dea08849b9d6b52c5258b6bf152fc3dcce

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\psuser.dll

MD5 6342700b3426bf4a7f8fcee293b4aa42
SHA1 85ddca922cca6c02556a63442ef3425311af9c76
SHA256 a629cc14d64db772781606d22167d04453b944a9ff103a6fa306d6b6e35cf064
SHA512 1ab3892a5950e53ff2f6aa4561401bd143fb89bfdadcc8fa70acd099d2d6ee09be6573abdbc82988e5ff3def5a528063e2b4f13cd8c5788dc0e8b6c092ad6768

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\psmachine.dll

MD5 835ba5ff6341819c0af96ddea468486b
SHA1 329907655619e02e43a7ed8d0b471199b48f30e7
SHA256 d895cb0ed7b046f00cb8b9945919918858bfce8e16fd9ed2d2297eb3de6637f9
SHA512 b45f2d0e2a4726e3676d46114f1e7320e0766f9a9eafeb391a1033860d446099341fe7256923b2cd5cc4089861569f89aae8fed31b7d70d1c5f695400df473f8

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\npDropboxUpdate3.dll

MD5 41d23a3219df000f9bbe4c99d0f28672
SHA1 732f26abe59c541f09547e7b38fe97a2a1766e4a
SHA256 eb50a9d1d9f6f7cc0ff47c2e6dd64acf4ff2190c24225f91adfef99d54422706
SHA512 11f1069b982d9eb010cefb95495dc4ea5e994d52032f2421e8a77a2f9036fa284ac4a5ffd0b23d6fc70483f8204dfc496e836bdc4913f52dd52d94c75d2c74f9

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdateBroker.exe

MD5 d8c11a823de853893bfd7c63e06bcb85
SHA1 fc50f184cca2692e170069a9e7ee83a05b8f231b
SHA256 c6727b41a23b2dc6f6f08b5ec55804239a7517424a5c46f4f1a8b124a8ed9aec
SHA512 f2c65a3e40402cebf087526bcb9e98f30ea8ebc198435245424991301220715ec76f097261e1f9d4cb19259d6e8eb4852ae66ea99abc5926c00255d7b65fdebd

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxUpdateOnDemand.exe

MD5 9b5c4a464acf6a9249ecb4c3a709a842
SHA1 36fd80f274874823d8cc08a98aa6a420246979cc
SHA256 43fba0f3a45549a369b4cf01ccc732bdbd28a2bf2a4c075b6853c7110427328f
SHA512 82bda88f8eaf36863357ff6b98b020234dc6cc590cb0f051538fa3c8ee88a13a5e8485f184891f1df457cac34dd4f208d5f985fd8e7a1e8870e18c8176d8c624

C:\Program Files (x86)\Dropbox\Temp\GUM88E7.tmp\DropboxCleanup.exe

MD5 8fa7f9a62ea19f3691e8a24833a5bc25
SHA1 23f0825ce2f4731cc73e82ca814872b512d333dd
SHA256 0d9c6de8a57443bffe718d3256fdd467b8970124ba65d8accb6f47dc54d46d72
SHA512 3d8243c4a42f96d549b09797f39b0f2fbef54d643ee4048c24eb6a1b748ef07ecd6bfdc142fe4c13838b0c07957b5e558ebf98fb7bdcc841d49fcff0a06eccf4

C:\Config.Msi\e579a30.rbs

MD5 8099291540138aab97daafc9d46669f4
SHA1 7064668501eb1204b5ead3fab85c1a08d64d4ae5
SHA256 569d2d47ee7c0d56572f0b82ea7fa07e818db22da07c054f5614c9414ece4ebe
SHA512 fd4c9fa2b2ea1ac1f9ad847af25cf80d1322bf4b666a4ea594d6d66fcf3abcd3e53c72f4423e37b9bed0c3812116055ffbc28c75eb5fae06d8d41636191e5ded

C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job

MD5 c93e92f0ee02dded076b590b76eac7b2
SHA1 1719cd9ac88f80bd9effbdb64d52ead8f664146a
SHA256 a2e29687a4e18837c312ac71a65ce98f23ad7bec7763cef4c37fb8ba9a854657
SHA512 c81c163035dba309725cac97380febe0485c73c12fb380829c26c6648bdb876b8017b00e0deae7e21666e36838434c30110b6af5a6be71c347731dd830e1ae31

C:\Users\Admin\AppData\Local\Temp\nsn7F8D.tmp\System.dll

MD5 975c9c79b7ef2d21fb69f12bd0ef8ad9
SHA1 b08ddec2113f25b6db0657ae2fbd51063cbdf5ca
SHA256 b467c725ad6653e53c99048ff35ad02a0e8cf68acb8471ee87d1f73a88a98315
SHA512 52ca1f32e2944dc3ad5f01c2e0a2eb13e7300bd4f6e121b9c3d25437a3820d56ab26762ef05f1082cc155deaffd02ace09988a8f83a14d12794f80dfac43832b

C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\Strings\language-es-ES\Resources.resw

MD5 fed758a433fae9f6bd6461b769845d55
SHA1 89f1efcb9a9d568af64b109b72ed6ab77803f15e
SHA256 75997383b6597a725ecdc87f688ef632e218bb627bb724c347416937deab768f
SHA512 a04a35ca6129feea3987e261d24fbd4b2419511119ebce5c7f3d34d369eee122ecd16cad395a73812f255498ede9782d8eaec4fa7e966e340353b35600ca0977

C:\Program Files (x86)\Dropbox\Client_212.4.5767\Dropbox.exe

MD5 74e2423a1fdc3140bfc5b5ed109a8cf2
SHA1 302efbce48ff62443fb1da3cf3ee4cc51fdc5e71
SHA256 a69400ca263a710d4e352664676b11a36f2c9671a95a96104ab10d625103ffa3
SHA512 69abc2150ec50cb911c7751c1e46e1cefa700888d3e6c3d0115660a1fef7691cb1acdf8ffd9fe57e1c5f75aa1a5029e13d9de89800fd6b1bfb2f216e23b25494

C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\python38.dll

MD5 766d6ed5e24c66f969b2af655d07f44b
SHA1 c28b5e2844a73dba4a9241c6296568579864734f
SHA256 f2666c1c2a2c2a0cdc824022b378279a7e7fcd45515c47252d2a5c40609c6cb8
SHA512 9f9908328a76094e0c4bdff54df0676a31be05f43a5a936f23e699b37e5df00c856ae5720490c205e4390a421fc7ed74b49ba0f90bdc60be80eabd1dd2c8e1a0

C:\Program Files (x86)\Dropbox\Client_212.4.5767\212.4.5767\VCRUNTIME140.dll

MD5 a4cf5c1f71c540c69371c861abe57726
SHA1 f272b34182db8a78ffc71755b46a57a253fcd384
SHA256 c179d8914ba8e57b2f8f4d6c101c2c550c7c6712a7f0f9920a97db340f9d9574
SHA512 f2b53f28a6369f76b22e99fddfb86730f3d33e87c68dae7aa3d05808223693bb86ade263cccb99d5462cf98eeeaa6a6f1cfe5ea3aa1739f8ad6eb624caff1045

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\backup.png

MD5 1521c0a628944271f2bc1e19978913db
SHA1 62dcff433a57e17a24eae81638744df31068f693
SHA256 5bfc58e4b27a8405effcf108856d2650299afcf55eab83e95370c9b6066709b0
SHA512 39c0b9ab739bb777ff1e2c64d71e910d6859f50f0b0f243d34610f30f4b312185ae70f715880b4918b272f01e51e5be127f2b40c37cb3419ca3650c2248b66bc

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\binder.png

MD5 873fbb8d6c4031515ffe4fa2fca98f1c
SHA1 6647f17a25a2e11e8b43ea057c14d77d8b0485c8
SHA256 f582ca6fdf085b23240b35411040b0b5bff6c2ec1ed5b2c0f7add35c88c65914
SHA512 1c29ccf8be145285a85783b979294af651582564d62839766c549d9a76ead223c7db73abe2de65fd30fbc30a174c14677eea4f4258374cfeb519b5a2e75ceb09

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\external_drive.png

MD5 2c5ff4c40104d73684602b8822502e79
SHA1 bb8034e2603fbd74408239b733e47f2fff668d5f
SHA256 971d455f91faf6bf320ed366f0881fc613c3228daa9ed91e0d6c864ece1a735e
SHA512 b4270bcd6cf9badc7ba7343760863961da179ba1f87545e61c27f37b4d652cf0333c5451f7ffc52628ba0d24861d6a692d0eb9d3ee247511a735b6f7b5f10743

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\gdoc.png

MD5 380d7a105141884a3a4369618ec809ca
SHA1 c87753703e478f9b1194990e29c25315c0387db0
SHA256 4541fbe81bc51114ef18706d2b37a44c1c5ba14454fc26b8a058bb31bd8cfb79
SHA512 40c16d9281d74b47d197d103e7ba52ca2fca30811389bc2a699f4ae9fa30ada55e6327840c43cb3139231c3f7a7ad841d7154950e6258e806e628115794574bf

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\gsheet.png

MD5 8029ccc1e62854e19c74582fdc915634
SHA1 4dc6094aecb1bfdf87cdc0123a2f1f905bc83df2
SHA256 70f5bf52350b6aaf67ad1296a947ba2a87c12dbbef76d1c3f73fec723977a81b
SHA512 f37822df1dc52e955b990b138a88064edd92d134773c4dd0950e298ee7f8812e16cdfd64f6511c45f9618c99d8343ac2b973f67b5a852bda0e4c8f267caf6d1b

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\gslides.png

MD5 d698a0f00979142b5991ab54db41ad64
SHA1 ded38ecebbb506d1b8b719c57f5ac8614dded702
SHA256 c6ed27af06f6d5e565469d95bd7ac077418971bb1dc7f2fe068d07cf0f84284e
SHA512 cadb690d88987de1ce8ea1d1fa2f93e86e6ea093a9623f5bc48d2f8cbb6e29d05525d358595902a0179b516b043bede63e2c7df3313a2658c84d2dfda0af0536

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-black.png

MD5 b832b83311da4c4ed1ab6841faf9e095
SHA1 5ec25bd5ce1914ee348afa22ffa79163b59b644a
SHA256 f1169f6b53191be05946e9ced0dbb6676b61ac9902db3218e69eb5ed4252d67a
SHA512 f5895b26b61d31046c97de5ba04d2d18587941c3e39e85e2d9a2de3bce7bff608011849dbea1982e4a2401e1c4b0a02c566e9d63c2dcfe3a2b69ecf9a473bb31

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-black_scale-200.png

MD5 040cd2d93b51d1ba57d7b98cadfbc5dd
SHA1 cdc1c3bf0a2a916bcf474927604c2e4755f0c5a0
SHA256 742e2f2a19e3158f1df75cbac15400b9ff4f14e6f4cbea5c856d1a8e07d52cb0
SHA512 18678967c92ee3ea29c4169e8ce602795e9908fac2e6a113d87e7f67bf74779f92befe732f6be201aa3f70b0edae8b3ce845d1f857fc90e0c6a82022300cf3b8

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-black_scale-150.png

MD5 fedd073d6396e035e8cca6e7d38bcdb0
SHA1 2c686dfb2916c094419481c2c1f70fd73b2ff944
SHA256 bacbe3c51cc9b59f42b3b5e246d9c2e3843a08369d7551bfe53e6542a847e9f6
SHA512 93e48632646b930a4984441cd29723e1272cbfd5b005e38459dba831f0da7d530b1a9da06da8d632e75cce62a8f3ee61fa36b0dfe0ba9a74641323145857ce2a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-black_scale-125.png

MD5 990a230b37c6ecd355eac8e6b47190f7
SHA1 c1be5515f7c2779a0bd7e837ed97b433d2d908b4
SHA256 08a92e353e5c573045edc67b2c58fe245d5ad40c3c3e63edcf4ebcb0f1efc5bf
SHA512 68e52f6ce78e91b01d06b06b51d9930ed413f258f53447d0b394dc5e2661be6e51bcfe25cb818f3a1c55385a3f9d8e695c4d759fb2d677b18822f89f8d4e607d

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-black_scale-400.png

MD5 543d527e790ad5aadb487c3dfd251d13
SHA1 11dde867dba701cf21998165e0612d0c481f590c
SHA256 a722bae20339682d00edc12d01930b8ea9670d3a48f4e85e5d8c483a2f9f3f6f
SHA512 7402b45649d81e09e7b01a24f6cb73e0c10ff120715f57a803959d9cf3e994178f363fd722c604c7b6a942e54d860ba63dc1d7050a706b8f1595c0bf0eae08ac

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-white.png

MD5 5667327e1c37cac08cfb45f4fa04fa16
SHA1 d6ec47f3a5276a4081f24922b9510e691bef098f
SHA256 b483f895037bb12a7d9f4678382479abbfc67a898d5da76606011d133e119396
SHA512 319f81c5023197b1011f58f074ce7aae81210201db56f7af21d436c710489511c17a02e584416c6787b1cb31e06b67dcc232700b38994d2e1dd1db402f3f2095

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-white_scale-150.png

MD5 47045326a56d0055b8836a65fcba9fb3
SHA1 8d9cee61331c9a333cb205e80c0ddf521aa7c9db
SHA256 e59ab89cdb6a4e395e43abd6de2dc56a8a198c9250700505cdd7da8bc70e1814
SHA512 f16c95f2c664d45f5297bf465f16cea72bc89bc70faef01807255c2329280dc2d0709d5ab6e7fdf8b6a612aab6ba3d2cc0e65fbbc4e3195bcb1b7d5dede0ef2f

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-white_scale-400.png

MD5 c28c3dfc76fe1dc78e1456b63755bc1b
SHA1 0d2602773d5acb84403bb611cb2a68f535b50c0f
SHA256 c8db5c7d9e4196500a6707a22af86038af867a16810d079dc0bd7ce9f2209997
SHA512 cee3a729b01fbd324dc60f1753b886ca65cd54abc3e10a9b93b50ed1df1532afa642deccced9ef98e4130e71b628aa9de7b0b65333ae6a078658c27d16dde3e2

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-white_scale-200.png

MD5 c065e50cfff6d79e0eb9f2c59d2e43fc
SHA1 2682657708ec6127fee9b07eda3db186fd50d76e
SHA256 72e9a9762f27b239382346341733aae6d3fd8cc87441dbeaa92459197f7c4b12
SHA512 9021af1b1fd24847c956621574108b57183d3277688431bde5a88d76a259f25796ba4b1a073863fc86c5f439fcd7efcc60fd649852565710dd97e4a8955b9c13

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.contrast-white_scale-125.png

MD5 0c932b40eba76ff9015a1f55a1dd1776
SHA1 e25b4506a79eeb7a586c811f6b5e626df6537cc7
SHA256 e8449b860cf4eaf5b894a606ca19951e4ca9561e0dd2e8a82b142bcee256a846
SHA512 52f34233a3e64b4beba4c8d268a1449dab42fe68d3723651d8ac80d7a5d7a4935f5b742c49fada9a0ddef3996415f99953df5088a68f1483cfcae08e9b610428

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.png

MD5 9d05fc2b1d201d34a32f9e0fc7fc6b28
SHA1 b74925f23d9ebbf9a170f0f6ee2307277c535be2
SHA256 5b4295cda56616386c8a51e9950c4b6bf881da8e38a3b06af45dbc383efe2a9a
SHA512 073a84635557810b0fb8cddc5b54c8afe6cdaf2af666aae5bf4ec89ab79f06367bc4e5717538314faa11ccc6ae619f7a3353a878f32cfeebabac99c545cc55b9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.scale-125.png

MD5 2145838d099c7880f0573d14c04ec9f4
SHA1 337a3c7c9d1c7988948003578579816f118a9a23
SHA256 993a57d13e17efeea8a4d82a2c34e1366370d3ffb869e1f4bdfb7eeee7e95713
SHA512 d78f646c90dbe2b8f7bfb4f9d80d68437f1408974f4af10ad6e1fe265419c549b2b38021ae951d0cabc8e9948dc0f871bbbc2a4cc5a1cc3eabb574f66eaf12ea

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.scale-150.png

MD5 93f4aa125f52d7d5dd00087c94ccfb0b
SHA1 868dc5709f0d35e94f3e4cc94e92715fd912c0d8
SHA256 12e29e0f3c411aab7cac939243217ec2cc5d2e704d5e2e3046fef76b1f9ddc08
SHA512 f3ada2da513d25abcf786db93957a0f00725922ceec6e20176dc1f2f738176b850635bf2d98855815b019ed0e4567ad198383d1fa5efa340671fc68b45cb7362

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.scale-200.png

MD5 c2ca27b8c83cbe7530b7f2002e9b05d1
SHA1 5e9ab52d27a81ee5053c99b24a822be69373c10f
SHA256 2470fbedd07761a881bc3ba492eda9b7650fb6abc5fac62014cd6afd5837e60d
SHA512 36b50da360017745084f8d4b80c335589b39ea1d94f11b6b48a8c155ccddac1095ca8600d26af0babe4bab07db199b7f0dc92207ead76007628f5b6d240938ea

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.scale-400.png

MD5 667d502039a4d46e9d612a9a7b35ef7e
SHA1 0c7dff244e11cc23ac1732ecc0b6d77841a6f348
SHA256 0e261e6c03acabdffe199b1f06358fb5aae4581503166e824ca51f641ac5c821
SHA512 d07cbac3c1859d1fc87791207d5115576d74c94e79adb25d566dadff3da6f3d5ede8b04097008b3558d6916dac2e68e92a84a9a663b0e5a5fb4b68a1f06036eb

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-16.png

MD5 65314a1f7cdbaa7d2d54e55ebe01f6b2
SHA1 064dda6eb14cf6502ab501a31c61ecb2749dba3f
SHA256 480bd88e54f2f39583b7360b7412486067dc8f0acdfb9396ca4b2571349515b7
SHA512 ac0e7a59de1c595a107e2ff0c044e27627629c3c9f66cf40503a9e4d3252577f8db75b60fe777833f391165f1fd0926fadea2fef71810292e6a7365747bbbcae

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-16_altform-unplated_contrast-black.png

MD5 69425172b704c2ae99ce43d4c2ec3e77
SHA1 55b9ca414b419377c93d799385b1e5f17905a6fd
SHA256 768dedd2f167c28e0e628326fdb17f9d0a3b50d2776600968ad00682a6a84de4
SHA512 26cc0ae704ed6abf31eec3d99425b70577a136edeeee252b43f2922e871cf9427cbc4566d1dcd5018c0c5ef2e8f5ea2eceb732ac696b744cc0e1a880afff5ee6

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-16_altform-unplated_contrast-white.png

MD5 078e5ae7004ca5f443d3a92627caeb8f
SHA1 c03b04cb32d3e7f24aab7a4ce2bda96820edadb2
SHA256 7fcccb4c85dcc54849c88d74241db75e5174160e0e364558073d6e6c01ad107e
SHA512 691f3e8b09449c5663f0ca5b0f71f1d4cd10997c361f29e2e5be7b577253d744c2a4283a61cdcdf873718d36281c63e3dbf21703198c26d389037184419c54a5

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-20.png

MD5 08fff0895f5bd8d5a347b441e48ad41a
SHA1 b9331637e59137bb8d75251bf85677099a24ca27
SHA256 92ecfadf6d728ab3346f8498bab501014be35881bb605d585209033c0c8738cd
SHA512 64ee594903afcbf3848ad37c094be60815104ea0aa17f5e287600448e95902e07820ed0bb6b840ccc78a3b60d8b37e7dd4c23e322670e588b8df21a3e0cef56d

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-20_altform-unplated_contrast-white.png

MD5 8fa8d6175c2e3cd8b8c5a7174c872490
SHA1 3c40b505d69bc9a4d8115caa6995a49a8c652c6c
SHA256 9ba3a66c924c24287fff271985cd9cbc41d98ea3003ff079485ed16096b40af8
SHA512 88a89452f59e1089b19090d2cd7981288576f0929a0e5598ef6b60b828e1986160bd0ca1e4b1f73cb43ef9b5605ca4520c353f80135e0824c86103aa539132ac

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-24.png

MD5 17df27edb43d66bf07ee73f901bbc036
SHA1 fc2c1f284c008754d73284eb41ccb6bc13866366
SHA256 b1c4bb67f7d23a1f7c7a336ffd7b6c9eac64d166c62c71f01900057acf6ffc97
SHA512 a9996454106e500fa29db69b1fb234f23bf2b64906b316a53e675881b7c97f652f510ef8e86306eb6ee4fe868f55013a9d855b42ea5aa35400569203d49cd4d1

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-20_altform-unplated_contrast-black.png

MD5 f568f4b386b0e96165f0bea8f20a2f90
SHA1 0dbb7d102401e27e01bed8bdfca59103931eef4d
SHA256 fc27012a9f08d137a192e4651fe1170348fba0e755bc20dcd18a040761764028
SHA512 cfd190ef7b29d0dbf461517726e8e179b07bff0f6e5be0a1b40cdc4f89fcc1093b5d79ff319b2231c8924fbc017a9e2e98a510fb25923be2040dbd6d1a27d060

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-24_altform-unplated_contrast-black.png

MD5 89b16af41887fa5d59d6d4196736412a
SHA1 89837e2da2f33418f63095ebae076cd42d3e96c7
SHA256 962a367ddb4e1a3c1b4d15c5bccb26c8dacdf90874709b2049137c6611cedbce
SHA512 f45e803282ee568be2de32c2f82d3a0971d4bfb8b9c1e45ce010b01284c0db13f8da30a4029e7d32834df097b222b7899b559ccf25a202c91c9561a49a727989

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-24_altform-unplated_contrast-white.png

MD5 eb8547e09e4cc9c9bfe3d22a5bb030d6
SHA1 e971788950eec3ec33d42fd1884ef460beae7b4a
SHA256 fc2025e7019faf3c3e2f6bf953710aecd4d77eb3a270c301e14acb056a3f5e41
SHA512 0bb2029260147f4d1041e9cb4a7696248158992cbc0334ca09ef433c1fbeebbfb667edee18f1ed2518383883f575eee8e01f0948e3075166b34120f42b8ae2e9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-256.png

MD5 05178135c922f70c73c4bf161dcf30c4
SHA1 740e84bac96b585837a3680025f31bb41f5574cc
SHA256 017de63c54a90a3fd5355ccb74b1030d7ddbd3795d17d5531d8d3b4925d09e5f
SHA512 07bff7f3cf5e0cd6c57e4ecdd42d91d8243261a760592b971bfd51170a88572447cd43bd0a7676136a56f8dd8ef4e25e2da218b9334c93a6ed7dec3d62883aeb

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-256_altform-unplated_contrast-black.png

MD5 19717d9e418bc3f3bef1cdf2f5df2ceb
SHA1 dd703ce05d68c79f9245f85e30631f84a619a616
SHA256 db7844bdeb530f730adcd6e8133c0268bb4f623a126cc021d896f3bd3b5bbcc3
SHA512 bc81017ab7baa23d4776dc24e27823208b59406e374211b455220fb93a5817eaa18372cc00ba3b13899884f5463a0dd088d233c6f9effebda961f0dfc9c8dadf

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-256_altform-unplated_contrast-white.png

MD5 b001c9070f08bb5d0fd365b5e2cf20d6
SHA1 f7e19e04b4ba0d2ddf4bc1bfeb294549193900a1
SHA256 00c062d5b17bfecc284c1a2cae4ab3982475726be67fcdc031051a2a069079f2
SHA512 576d34bd5d81b19dde57105804b2bbdca0faede9275e8c1cfd9707edfcc00bc5ee9add3f08865e5827e9f143c798ccca8ed002f1995af8bf9473b237ccece2f9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-30.png

MD5 a8dfa7f601b7943c10d2629a64400874
SHA1 ca14836647c3ed3e23b8ccc1b14113cc949b8ac4
SHA256 0f1d81715883c6335a6cd9e7d5eef096ffe151844c0754e61ba5051a0d3fd6d9
SHA512 feca8e247dec925fb5a8a6daf207f81af8fd908905b2f4a5fcdb0243f55482dfb69526c547455ff70084ed5b5da3ebe691f35af1af7e7c9121fd6eed9bb755f5

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-30_altform-unplated_contrast-black.png

MD5 9b83d3e977e41230a9e9a094e412f7bd
SHA1 116051a28db47ef22845804aba210688779bffd9
SHA256 c7965f12e0d493c4282994e07dbc051b26dd5d95fe390527f6506a5877e068b1
SHA512 ce2b7754fb3e6c33a1dd9186829da3b981d784bc08fc6fa383bd172e4275e88f81dc4a3897c3036b471bde6db4ef33766d65716ed8ecc18acd53978b55b1fc00

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-32.png

MD5 c1a26f91bd23a6a6c865b1bca72912a8
SHA1 9178bedf3666d30adb8af404a211cd9735a13f9c
SHA256 0532b07e9decf2e53c44a17207a7c93b57e2285e6f65f349750bde4a4e6f72f4
SHA512 92302b24d68e6b5b1d88e23454b3434d98bf967c4079ef5a928fbe5bb25aa9f38fcd6f95ad5d667fb800a33c62a55207f7da83318a40cefb694006f13716f2cb

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-30_altform-unplated_contrast-white.png

MD5 193dd3ed9285ebbf0fb79a93228decbc
SHA1 f2475b74c9171be2ca0f47555941554ca13a58ff
SHA256 96519fbbba9029fc6214df166334808e86df8751f7405a0b8af812c870a56c96
SHA512 30aac97523d7b8ffc86bf58392843d730bef9b96a8828ace6be9217eb06a35320facb902c039b7f5209d5c11105a5991c45eeca144902ef20cb3f930bb84def3

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-32_altform-unplated_contrast-white.png

MD5 f08f237ba9df76e5344f6d1dde7d7072
SHA1 d0e3c52453402fb40e9813b92bf5bce556cb13f5
SHA256 5ff9fba41b80869407e9df6799aab8a9d3ab86b086b93a0173f66f8faafe4689
SHA512 8613437ff8b8be50a8ba117d37e3172d650f8e953fa088c35e0012a8f26813bff33a98e8bb1f8be5bbcfcbfa7789b995a895b02f44595526ec916297be99f147

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-36.png

MD5 a5394ee13baefd246c0bf6060d38ec6a
SHA1 d4ab4e8de5564b0e20525a9baa0f8e0b5cb2a05d
SHA256 7d70ccd21823c7918de26edddf6b3a35773512b074225bc3b24b028d1a0596af
SHA512 c5a91ff923ca3821844dd2ab04bb472c336e6bfcb881fb955825e3d0f001361d31178d56a25ae979978b0175b2a61ab67b864bcff910d8b9225329b532ba2ad8

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-36_altform-unplated_contrast-white.png

MD5 919c6a3342aa9825a42dc1bd2b5ea9b3
SHA1 abf02acab448481a41cacaa6a8b151a0ffc33f6d
SHA256 82b4667bdb04975842375cdb2d3adea035166366e6dad08a3d5c5e4e884ef87b
SHA512 72239cfdd4d680be0ba4b91e48ec1e1c4b929212c462f6f3547d753753e55f4f82470cab5c490706e1feda50757bb2c02492834225d585faf0e960fa924337e8

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-36_altform-unplated_contrast-black.png

MD5 b051e689507b22feec226d43423065a7
SHA1 da364c9e89b13f9a9178dce90ea944c5e9d6d817
SHA256 89fd40e83ff38d64fe6427cb74cc3ac5ac09de46536a74a2df0208909094740d
SHA512 d9a453081e125fb0905d33520ca0e92e2c5499bce4744fbc82c6a5ff559a788ef50e0b0f08f7b532e582f0ebfcc67558fda50be3e230bec81e599387e2962e51

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-32_altform-unplated_contrast-black.png

MD5 189f28a3247afbf1b17ae9a9cc788874
SHA1 721206a8ad829d646a0c73d90dedfdf475022d2c
SHA256 5e4bef37189b940b417efdc91f0abf569edb8e067d5bac1864a1eb47a68946be
SHA512 96ffd4627f8f207d5121551d338320a939db3c568e2489277fadb6b6aa09197cc6aae80b1474c00e1779f5900324eb25b27035abe8df7c4044295f67743eb74a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-40.png

MD5 68168f044f85ea9faf4ca6d3e570596e
SHA1 9d7fbb23beb1dd424f2ff5a5f60ca7f3361fecab
SHA256 ba53865cc9bf60d1b21daa381bd3ae27b75c26fd45d8ff4393f88686bfcec2d1
SHA512 2365d5f565bb68e27d6a4c8dd89a23752335db4c5c51506e202c1d785562e72651c71deecff903ed83b5bf7281480aa86da6f90338cab0567153aa23da6b8341

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-40_altform-unplated_contrast-white.png

MD5 856d9b6612bfe8459d498de81a7ecf6f
SHA1 f483bb191ad1672102be0907c54d3a168db81426
SHA256 b665198e59b16b6a095f65a01d1e2d6247b6c9694dadc3ec4c2a95986538aa9c
SHA512 fd28d57102e5a93151ee66a4226e8a69f365177d58417d8c39a6600a40181f5d547a5228521c9e5d25abdd57790a311b920fd9d8d3f7d366fa8c76ededde55b6

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-40_altform-unplated_contrast-black.png

MD5 82c51668274bf0785a9a546a6e257bc0
SHA1 3e49dc4194de95aa4b28c210289710620fedc3e3
SHA256 dbe1f856324c36cb597cae985f4f1d65e12d63a9435a43457207caa7712d9d2f
SHA512 61e49ed0dcaf8adb1e014047e499977cfcfd238b0b98cff9cf177afe30d6500b6070ebdec9eb485b25db9d08ce123f7efebb4bf405790ad665a898cf44bc85f9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-48.png

MD5 dfbfe6972b7e6bb875970fe4dbad66db
SHA1 f1594ed9bdbc5c2459a2af984275392d9077e7c5
SHA256 6fe5eb7d05d520584f2158e8669264977a437f7daf75b7994f13aedfd2381539
SHA512 dd8a9aacbb50380a4d9b9049c82500471601a9897e26e2e4cafa28f2ec556bdefd8e61bf976569b46da9368cd8c183d56a8d0b68ec7d20b02fca0d48d91b789f

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-48_altform-unplated_contrast-black.png

MD5 2d4e69bf887108188e1b6409d6cc6d28
SHA1 6031820b4c718bbc491bb45f10cf5d850b4192a4
SHA256 b91fdbc9c46552c90c0ca41ee8fcd543f383dd6f50bc15f04e6b25e8fa29f4b1
SHA512 1680597b3742037e868c1cbaa0840f808a20a84da324bf562b988eb1dcff1bfe0062aaba91f9415f39229850e849b08263916fec6700fe7f88e2018a8277e3e9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-60.png

MD5 927bd7b732e69a2d7643613797504edc
SHA1 c1ce251e91479d27c6b63452e13aacd3a1af1e60
SHA256 bc4c7c205e546bce49c87f7c61791ddcca6ee4de5eb99ce50a578bdab146f138
SHA512 96b9f3d04206a5f6101ab9c41ec784463ce071d4639d5eddcae38a213feb0082df6356c6a1c433ac3bb237dc47e5a9efe7af01e60acc1034691799858a00f5d6

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-60_altform-unplated_contrast-white.png

MD5 de6e9dcc0f9602e11e72de142ce9301b
SHA1 6ef7b6ef1e515ec535ed7d103c7d1cefdc39e85e
SHA256 470869b40f07e488c5150036e97170c544013b27e7256bf80846f085da3a8ab6
SHA512 9e0201792791d92b1b1f6dd60c74dddaddbca74ecac4af8eb58a026f3347434c1a23d17d43d7a7ff2fcdd5cb63878ad224a3218de8719933394513b85161fad0

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-60_altform-unplated_contrast-black.png

MD5 c64c679151797c7cec14d20826941b23
SHA1 d514236b750eb2ab35200696c26e677c614331db
SHA256 85e92f78430d788acd376c9213a70aefc2ec15df1cd0b3188e28cb4f5f0979b6
SHA512 7625d4d96387daf4d9ca34b883c7e6b8bc5e69a091668799494850e5495a42bf26c4e84b4162cd98b1797ad3da617fff4b98dd93caee93986fdb026b998da750

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-48_altform-unplated_contrast-white.png

MD5 b5f8ede4d336a3c1e2d5e4eade79f7df
SHA1 ca95bfcfb47d1565912bc174c7958de0c1a31571
SHA256 abba9fbb0af323e7c41bcc85a771950101f4442706f1d1fd8f0c1c5c64d2fc11
SHA512 fb1eba806ab29ade63ee9eb1caa18e518364df4298377e7633c4a0dd5833238e6dcc6f1e4a72ae94f8a84420a3c4fd404b23154f901eba34b30a135ab25c263d

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-64_altform-unplated_contrast-black.png

MD5 c00560d1004df880d2eb6bd21bbaa4f4
SHA1 f8127b702e4f68293ec28f9dbeb44ad0505a1d4a
SHA256 10e278df172c7444c8cc1c3b199d353e4fcaea2f03ea1807ae1ba20970d9e3f7
SHA512 4dcd94b21f7645a566e029a67c65a36430d44cce9d9fe91aeda9d865c8d45025afc523edcf3f609904f542b5f33b54ece0129230e9279998d7511fbb34ac9b3b

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-64.png

MD5 24b4e008c6baad1294e1d8790d878d14
SHA1 5c07780175e1b6273dfd0b48c93700b4a7d9bf48
SHA256 c290188a41172f8158c0f975e744b7400592fdab11e119a4093539ad83270586
SHA512 ff6675989dbea879217b736407dc117232574a8ded2d350d57d9a01b81a75f0e46f876a55f252437faaa586313b50a345269dd7bd62263e037d67a8db2059547

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-64_altform-unplated_contrast-white.png

MD5 3d43b758d4dd1ce79fa92f4a698f746e
SHA1 809f9ac50b247b3e8f35eee63a2e24bfafeb81c0
SHA256 ed5a2cc70db8bb0b07f67565d2a2a4a33e5102102f39aaf6a0d3bab2621a9391
SHA512 0abb9cae2ec6c4f793ba1bd3307d4565650cfb5a86a7d06a9934a71d31df87d21e6335e742cd06555fcdc77afe420c0784e60e8dc61892330fd7e924415e614a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-72.png

MD5 4b346abab3232c47018299359809e6d6
SHA1 fb5f589c86b9c972d5c9efbc04e0d872580b0a78
SHA256 239b121a9a36aa687205c73d3899b130e5ed12d75c2030fdc654765eb890faac
SHA512 265b64f380c4813a903842fb9424a5e16f9f27b84b9884701e748e378002677685288ee0c2900c8deb8049b7c4f6b1cfaceb07fe0d12953168d43c7b241a7053

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-72_altform-unplated_contrast-white.png

MD5 7647225793f5170319924bdc50183754
SHA1 d908065adf3c5a96d59990f46b65032d285ccb08
SHA256 4bb3259d2836a8f904f5703c42e3c7db4924ff3bedc8847b45d2828b43e5c8ed
SHA512 f71db03541fb579765a454af7bf71b5ddf138fd63e97eb99c1151cad66beb746bc4ec98e71d77fe346c76b754489cd7d7aa75ae6459505c2cd94b90c483e4afe

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-72_altform-unplated_contrast-black.png

MD5 f15310347945945998a85b0fe5c9670a
SHA1 57e3f5379db970366d588bfc3069ccdfb38b3e4c
SHA256 e47eb78010e8a7a79781def9442f5addfc3b0fbede2a721084a4b7f2e8810e47
SHA512 bb4b42ac77ceffd16f0e6d55f2b4ecbed2b5eb32b18221d2d2e868e730b76a12f6baabbc59b206bd527b7ad8afe020f4524afd292913e29b2315548adc60012a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-80_altform-unplated_contrast-black.png

MD5 ff0aa94fe7faaf13a53278adc2698c32
SHA1 8c61b01052f520362bff5fa648a60fadee65ff21
SHA256 6684bf37a8dc1b5424e756c33b3f90bb881181dfd85d57470eb3c18fcef5e656
SHA512 140a141485a0e143227802ea2b24dd3dfc03486e2539cc67e9315f0c761850abb525c6b2d7a41cbdd56063dd11afa06f6562deedd17d8d2b9cc729d91a4a82b7

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-80.png

MD5 1b0c87801219f54d1c75d37af3b9ecca
SHA1 9336dc30097f1833fb152f79179ab9321bd42ee4
SHA256 a972691debb27d28217e363c2a02023907c4ee51fdd58fcf0c60d64b856e7e31
SHA512 1cd9377b2e63cc6836de1cc8e628a0ea6eb150adcde489446442c8c9e5347c9dd105eccfef3346a12ee6bd5a5b8ca44d0a0ad4a1a97c0e086909428aafcfb705

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-80_altform-unplated_contrast-white.png

MD5 7db0293e6fcc87abc9a0945aff79dfe3
SHA1 49809dcf23a37c30787d261feadc8d73888d99ba
SHA256 cdc8afbdfc96aa91d1e3df6ee6223e23b041fab55429ca375d4c528ff23babf7
SHA512 741896be2d34887c913365534f0dfb5c0e0354a4d282c2ce1521524e305c4903711022f2595d4d3026901c85736431de9b50b07ff6268ec25b8e01635f25653d

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-96.png

MD5 47861a490c54e0a983b98f53dacac06a
SHA1 d904739cf33ff959362b771445bcf404c730a4ca
SHA256 122e0ada5316373920063713ec84087e6769b2280e75858af9ec6586daf72cd6
SHA512 6cb6f04a7310222a2fc9eb69bbaa1d67601628a684e69c14a5d20a859edfd5e17ffdaaa02bde09fe78c0557065d0b24fd7c555cef7a065f5dbeda83820a9e5fc

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-96_altform-unplated_contrast-white.png

MD5 ed52cd09bf929b70c0ae9fd2007b20bf
SHA1 faa7a71ee9b105e462688b56e0f2d226223400fd
SHA256 b644ea2d909241dbfdcc7caed90d4a8d9cae526939832ea5312161e60fc24bd5
SHA512 2d7b89d1930f1eb54fd2eae71314e414c24489b9bdbb89b0feba5bcf2d4b8068659d1b46914426d62f4165b956738154f5edc7aa6f3c9e98ec7feb2e6b4ea16c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\logo.targetsize-96_altform-unplated_contrast-black.png

MD5 9d782eafeb535514b02ff0ee296e8f1b
SHA1 86960bc19ca4c65302facd570799662a12fe2b12
SHA256 7c40b6cfcd8bcbb201a2edf811022a37ca47b73e85ec5785996477adcd0eaace
SHA512 af627d93fd037ff7262f6442c27208ac102cf36677edca6363dd56f9c2c554041600a55f3b877bf26be343d8ee980021a77682239715d7f6a9fcb2f97146a53a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\paper.png

MD5 835ee4c0ffcb4089f74af88812149261
SHA1 8fb1bdbb8fbee5ea46dc24621b1d199b416209d3
SHA256 3d11454bfbde59784ddd1ea185bd250d82ea02b31290e8ca7ffd3cf7467bb83b
SHA512 7786a362b1508ea34ee21bea8be3175cf4345bf41c1b5c053e28a37cdf46fd12dd21b48194ccb1c98d98d38fc9d98b215cabe75164417098f410d79a1e8a099f

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\papert.png

MD5 beee74c21e7e8e508609c7d0a1391970
SHA1 420d9a0442c61a773907ed4457a18d7a6070b769
SHA256 d14d32557b917bc18f36a96157b8530b5cbe03bb34430c61229acd20ced24274
SHA512 5ab71f5c69bb55a12dbfb9b85a09819654263f818bee0f37a058a8a0ed98b368693cc8011d874f16ea64addef1cf35179738ea919cd0fdf202ec02bbbb95f9f5

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\passwords.png

MD5 3f6bef094242aad215be2433c7529a63
SHA1 e5c08b505035752086e0bfd070bca097129816de
SHA256 bd15f021e8ba0f65ed8acb83b75c144318cd07908fb1821368ec2e43731e20f7
SHA512 870e5a196e05e8ccfc694603166999ad06c3d4ebcb5f3dfea257e0faf0f0d8d19f62b49e8ba2de228c342143d1b17af68ce188eefc1347291f35a691be18607f

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-black_scale-100.png

MD5 11c00e3a0c689ce15f91b956443b66be
SHA1 f7adcdff9f2351757b927a6342b030980d42ff5c
SHA256 10a723abb8c4fbfd13890abbb03ae29f6dee95af4897556f2e7a06381b10d088
SHA512 66b53271a8e30038016bcc53a3ec1c36a4dab12ca06602c4253f154e2ab07f7aebb56bfab7c917b8bbbbfca8e8dd1684ff5d72dff00d92adff6e03a6772e7e58

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-black_scale-125.png

MD5 d68ad41c76cf57523b6d1d16dc14bd75
SHA1 538dcd5553f0cdaefc5eb42d45fdf95b369f5189
SHA256 34b48161fae3f477f775e9f3579c0fc55faf238a5936cf90c8d290b81a103001
SHA512 13ee8df4779aceb5e7b91bab190848d7796c5b9a550cdb34a347f829611f4e7a9c40dd42d7983c06a4d6dc25ca13055fe9d3e6eb1e9fb6a81aeae12a28549171

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-black_scale-150.png

MD5 3619f4bd103b2a423e47f67513fa135c
SHA1 a3fbdb994a9920b936f7dde9111eb298b6f650fc
SHA256 86bef6bac9539ac4b2251554266e7bcb9a81ab2b7c3950c4b159adfb52a2d468
SHA512 eb19c738d74e72adb98ac995bbe8fc2710fae5b1d0d6e381c71c057ea19b0eacd79b359f48e484547205026c7b2a811fcb93714828e09d69442af7f3e9d4606e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-black_scale-200.png

MD5 1cc3e339a5f8576d819e83f1120452ea
SHA1 8bb1757e8a0794f1b02ef02ec7aae3b06847e17e
SHA256 83cce654db3fe11233cbffc3ff1db2baad2f7e53dc722a1a73283a875a012e4d
SHA512 747c852691cc2fb5d86361db291bd14310ef36f20496fd8339d2e575e7bfe04e99e5d0c1293a768c1fde50f558555a3765af675f9a986959c561879e6e63c25e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-black_scale-400.png

MD5 be84aabbaafd717c6faba2b31f25f088
SHA1 c6acdcde0a8b758165ba1a6a006ec0b920c70053
SHA256 9f071e3a27f710b72811405d974d95bceb0e93214f4163a18012a8e8a4c3bc75
SHA512 08fe1959827b02967a687777e7826d59d6e8c71b9cbb65c11a6db87f2bdf49fcf4cd9bb33da71acc19edd08a34c10c46b69420fd30622b480bb0c5274818ac20

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-white_scale-100.png

MD5 c00d891616eb8a11a03c51b4f4cf736a
SHA1 15c3590803e0ff99446d039be7f3b5698923b90f
SHA256 401dfffa0848dd6bc92699020b02c6757d3b9d4e54b9f7c85b12045ad832579b
SHA512 0701891f3b2ac273deada9878f0df5a14e651c04e9d13176006831a154d22e92b66cf41779a8335273e42a7bcf2c136724c432fc095b9887988bf926fa07e92c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-white_scale-125.png

MD5 e88ccce4b50e92561370518e5d8e477a
SHA1 d3e50b91b91600a189653a4396618e80c4e20ee5
SHA256 fce4249d823250d696cc2d31906277b99018245f20bdd0cd0f33c1d3d40cb82e
SHA512 e824eb1f0b5c8be5a8e406e71dbf0b832ff88342ce08e652ecef7bc9fb713428af65b6b1e9f158315087ffbd52892237e873f0aa61d12d3e3a9d1c815df91486

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-white_scale-200.png

MD5 5c387cd7a2a21fbed329ffbe087bc713
SHA1 09cad84a8379850d80ec04992f06dd5928186af5
SHA256 8a2c861f6cb067fe75b2628c44950457412cd8f717b00435c77043c068bfa9fd
SHA512 0319fe4f45f838803970e50f4c2f7fbba445b0b61079e4330c4b7026cc3e1b298919942756dbf2dade96ed15996523a24290c1ead20821397cd33cbeab229251

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.scale-100.png

MD5 3da3506fcd8af2536c1bb3807c0d5566
SHA1 d382ffb999815e014282b8e175a0f201ddbe0b90
SHA256 49c9e1ed82c31479724ee6e9fded8be6f1d0af3ec21598433cc874b570e5be1a
SHA512 a0a233973fde4f714138e657a79cff62acfe41e440024dea806abc1ebe30702abc6c83a9722fe8f707030364fbb54362cd69c264d1d655a15d07de2378420dd9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.scale-125.png

MD5 5712ac86f757e4dd3fa9da856f3d80db
SHA1 cdfe9a08e5be63448b30b403b4a4a4a8fb74310b
SHA256 03cf02e09caf6da61ab2cc26baade70d945817064300305fb048714d35a7aa09
SHA512 dcbe9b3c0de2f92a3d6421e7f505dc0a87f8cfc47094d19340d3fd244a8c20dd46cafac63bec30898f1af4d4f0e50871c6ac7727f4bc402f9dfb88ebd058e6bc

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-black.png

MD5 72effbc784dac4b414b5ddb95973ce37
SHA1 56e0bf711a95146951043d8b11f4563644d75001
SHA256 b30e4d5cba1ea574459bdde0cc41dc04995e419b80e62d9384c2c5ae8d86ed44
SHA512 ce4151117dd25e52c87ee5e98d475a1c42ec1a7e0ff6fe10b5429b2f4ee664db59c5085e1b2e17bcd722d99851287a5aca898cea5c648ef6ead2a3dd71968505

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.scale-400.png

MD5 c1795adc1689608e70601d628141e011
SHA1 f596a4003cd0aeddd1266dab4a5539dc52fd91de
SHA256 c8f8705fba32eaabe20f654d42ab1eb3439f8a674d53a85d596df4d7dbb82b49
SHA512 9c7d6e3d0b306a43188c2c14d379b09f4d399a435ab48d170e98196affb4ce5a69f63c355914290a44cd7c890c6a24db979693fd123ad60c3957c94f005969e9

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-black_scale-400.png

MD5 3ddadea7b3a8a24ef953ca7a632ea48b
SHA1 d8dca786084e1c9efb6356572734a59bd437b580
SHA256 d966355f02930ea16084a6d9e750f3e4d6cc9c0960a3d8e3c00543a1c821e3d5
SHA512 7f37de3a7a6949b14f09a8e4ef3c8896a4e0a49219531b2cb114c6ededc5686cdff49bff51b032c5ebd8bbf5639833116244a7bfee83799adf1e0b3cd6fdffd4

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-black_scale-200.png

MD5 298fb847070161b2fe16f41d9f75df94
SHA1 f2a78544ee10ebe6254a2eb55eb0d22227886042
SHA256 7fa2beee1c84acecd66b0f34c4dc5c22284a376c5cca1b4bbcfa21955d34e0c3
SHA512 b87c8b851ddd039d4256d08dd278cdcf32b66bdd65db1681ddb045edc56880dd6298653d381077c6558c33e8df291df6a69c3681dd2259fdded9db1ad6a98eba

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-black_scale-150.png

MD5 75897c2760966040bd1551612462035f
SHA1 5022c9412fdecf1f76b838791651f8e9d394327a
SHA256 316a375a222d28e5a371e193881e5fcbaa72ab58138dfb54b8a75f7fb8438454
SHA512 821c7bf9b850ca2c054310da76eb5d9be695beecde1f800da2e03ac0aaae0292b1704675370d78a71d01a1d94ad447f3fe455cc7dd556c2e9845b6ae0b8e7f4a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-black_scale-125.png

MD5 ae702fbb30de8caf575c3b556b4c4bb3
SHA1 20cdf6391cdef569f60a6ef8099b4e54d6a60369
SHA256 744bf505b69bb0de1cecb1054e06b436ca91b0f4296c4240e186f5c32ba9468f
SHA512 b8e05b737748e5e77dc9e314c5bbb62849186315d8ed02e2942e7d0e8b1d5c4d5e308e36679ae4d00a635536cc859451a5727ddce0ee4019958c5a9130c22480

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.scale-200.png

MD5 c1aea8c3052efd4d1d51f26e7d0a3d9f
SHA1 817582e79117b3831625c6881d56958cab75e2b9
SHA256 ff8e81c6591dbe709022a947f590229c7a566bba9c8fcebf1fa1b03dea56c6fa
SHA512 ca1a854463968a25e53508599492976862aa657699b18793aa915c265c2636819822d5e29c37f2846b9f9eadaf04b4e4c1f37339858e565d1bc8fb1301a2ee4c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.scale-150.png

MD5 7efe760736c5105c52333bb3bd6a693a
SHA1 59fd31eed792e820822a1817d52d3b97fab5abf1
SHA256 65faadc3a38b925583f6938b178914ad9b54b62a8c5d75046386196365594295
SHA512 d82ae4a65156ae2af66d80eae6c839f798ca15abcf0a78e6cd84575e270690ca1ab2f581a3ebbea926549dd06a9bb00a72886e6aae43877f5ecb4e13b5e62b17

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white.png

MD5 15ea8f10342e747e88d35cd937938946
SHA1 bc4f183b55177f6dbabb446d9706f3115a510932
SHA256 8cf1735955eb588386eb404304efed2b13e193b294d8a851d343834c04cf580e
SHA512 75bbfa30edebb0f388c2e1456b9a9182087c3a51a35d5293dc3ab8da9368a30cc9d91f75a99e5e838bb09b251dbb762ad6d0c2820388aff2a87a1203ff16d0a5

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-white_scale-400.png

MD5 dbfe08c004475ac98216f9d4dadc1597
SHA1 0ab80ba37bf50db37b954e4192f5fa1762a2b279
SHA256 91227bbe5b1379b65a611d3c3909f15090191601604a6e3b4f753d22562f4970
SHA512 df276313a4aebd44fb6df908bd7bf2044f3cccaa27a224b6b4d0bf0d6d1ae96df664f8ffdcbc4726a155af4e35319bd4b45b16aa75ef64b58d3b36e1a621058e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\StoreLogo.contrast-white_scale-150.png

MD5 1f9c97394d24353ef45b7ff48a548421
SHA1 b02b4f4e13ab9f18bcf1b5cecc278cdeadf96247
SHA256 a28c376ce00aa77d75c7ddc479be2cd73e3d624eaa302d045fde48fbea01f958
SHA512 e5278bb105228bd73352bd2b0767b489b84dc774472fc2f3a8f7474745f9539d311a20f7835d36b74da2275df0bd6c61287e6a848ae8be65571f01959800afc4

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white_scale-100.png

MD5 aa4acd95731cee7404a6b51b5fed0918
SHA1 71f5083178f57e5d7d154885b7fa14f314492420
SHA256 dfc2078b5f36adf8815e31918655f339b0024edd3defff09e2c084a0fff890e8
SHA512 d38631979da2d5d79d8aa1b427540efea857d6dec063a81b6e431b24a2f1ac902b2d21157dacb4aa866529c0bfb37fea7a3506fb31abfd21b29e0f592ccc5a15

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white_scale-125.png

MD5 d86429ccacbc7580e6bceb32e285342d
SHA1 ed581db14a77394473f196e00387431b3da18898
SHA256 3ce16bef87a29a5bd597aa6e1910170f876633647859e0e95f3321554e581ca0
SHA512 42dbd41492b24d8f08e06e41db582a676e0a756d8f5906a417f10082b1cd887d5e5734bbac550e7f066e2577d5ff41970075d404b8a6ad20438fd86603db5331

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white_scale-200.png

MD5 aeb784af151273742ba589d39924f69f
SHA1 fde89b4f7008633606bc9ad27b9757e17b0aa491
SHA256 26e1fa2a2f0aca1b344b2b59abf5663d6cd4f7b69d0f5d8d8d9687e52593eca9
SHA512 0f938c6d7a101e10cef7905670a9710692ae9e6b0966e15b0bdad6175dceeaaaca7f0b0548a29fccb4295dfb21a9d57fb509c81f6c5c600c9410a7a0c12c3fca

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.png

MD5 645c36ad987a44815982891679635145
SHA1 9dc5396d7a569d009d32ac08ac343559fea113d5
SHA256 7b8d04dbc781bb2ef7c6697177f41ecca6d1abbb9b6264700d1b9da87a7c4e38
SHA512 e8444cb16d2584508a699fa0a0f9afbef9325a505ccd56df5571a59875f81edb4e7b7518f197e879be7bc86e8206aacfec8977f8ed73ee65294c586442f941a5

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white_scale-400.png

MD5 6a8d19d3e31c2fb21d4bdc1f2e77e60e
SHA1 50b6236844090095465f85f1341a323d7aa4a57c
SHA256 b294930c03b6d86f5765e650273c9d2a7b90bae3e4a7d63b6f766914f3bff5a4
SHA512 2ab9ff1fb16418598f9d5392e7707109fa922799abfa53a642040fc3622289ecd0b69e8d617ffbec1b4198841972e5ff6cf4f18e57abb24c2e340c0a610e389a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.scale-125.png

MD5 1f34876e482c13ddd4aa5a49853d9027
SHA1 c6da51520748c60e6c1836ac37138f17dc289ac7
SHA256 46f36c5347b394635317ba6ff0b436c63c0bdf50868131f86721f98fe0dc834e
SHA512 3c1965817bfbd13972620b4a698d222edb0050ab7b6f1ec372fa76f745b1f6744f21eed4c42e8684e27793711fe4ced0ed5677f097df2a05ad215728b68cd3a4

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.contrast-white_scale-150.png

MD5 38c229191dd21806c83ebc86088216f8
SHA1 9c2afa9f9c5f0cc1b7658d1aee178cb09b4e3f2f
SHA256 a698442e659f4620b5834f8e2c5ad4223279452bbc2d91aee0c625c6a59da0f0
SHA512 2db9a21d62bfd77e02c6e05bf866179c849178e851f5c5daf455fe6ef22d1e059f74477e6dae6967fca67d618f79bc3be0dad8e61ec726d6f7c4882c69dd2d0c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.scale-150.png

MD5 439f78de7a305444f35ca2d9194bd1d4
SHA1 53fd70a48980f927941da2814ad812b1c7c3c1d2
SHA256 4dc436394ff2b6f66c846a9e7499f5affb49807babb36b082b2a39ac4de4f431
SHA512 a9043fbb15d644b131f49ef89f76d1e83d5a835a0fa5b4b41696c5268fdb3b4b183e9c2353e9a5f814f312a11a5c4ab6bcbed6d8ecc2fb41b829a5d4077a3bd6

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.scale-400.png

MD5 487353d36065ca5b61eb582b5f10c3a2
SHA1 95eb806e601663710081b75adfe1e9023bb4f8b9
SHA256 2c02fdef716808679b62e68774603b383ad8d18dded430577132e1188218891c
SHA512 753713dadbd952c1ed26032977098137027ab4b997dbb406377f634d433015e4ae1958375f024b7f71c5fba5ac2d4256d8a4a31a487f4125560014ca9cd27b38

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-black.png

MD5 1cc3e00ddedbfc96d1bc4fba575ef45b
SHA1 540257c36d64656febd7eac22ae2784da3af55e2
SHA256 39fad5cbb4e4cbcbf7ae6f319536f09850814690bb1dcbe319d1e733a4577e7f
SHA512 65b14e4613e69ed3d062bac0ab10f0d0990bd65fc10593d7319841a0898311f08a37c7f0bc2d83f970319b3e439eb052d14bd18b91d8e10147964b3f53a94cc5

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TileSmall.scale-200.png

MD5 fe976bb56a61312402a971553a5799cb
SHA1 d55c2ce161c84e66a799d7dc0d798921e2e22e2a
SHA256 d5b905ff6d4888479eb587a1cb0c4b291a7b063002cbe252e9dcf67886433e9b
SHA512 7030cc5a4b30fcecdfe495cadd5ce409a72e883e4a51910901abe3be12872fe96d8c5db17d0e1e9788d48ef679ebb33d3491f7c439c938b43b208bbdb5862fed

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-black_scale-150.png

MD5 caa561fc6f09c008f8a8a7e25158a622
SHA1 c6d21cc72d247bcc736a5e20c8c5c04df394a93d
SHA256 fa59094e662ea019895bcc9691918feed1c5f4059fa2a993344cb4e2dc428aff
SHA512 f5ab6db96fbd155510275fa412f11700379229609e8f026c77866b741fa1a5c6aaad058f1ec0a2d4906f3e10266dd0f2196474b6b4c1d000641dc6ebcc14db54

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-black_scale-125.png

MD5 022dbac1c0f85005a3df0853bfdef162
SHA1 1e443e8108ed2702df2c95794f0d7dbd61cfc840
SHA256 a0caf8f293aba7045dd603514e8b0c4303259ba3e2ac3bce4711953ac531556b
SHA512 92af813512549c76c8491021821156f907a60f505a448cc5efca68ee7a9804b4f5319506fd0097c28dc13312108e8a6914fc3d80f9a818b160febc526f72cf31

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-white.png

MD5 6a3cd7d6943756adf70ccb12eaa0f913
SHA1 f0c2290ff6e7ce32c64e28a2cde832310f9dbd1d
SHA256 ae4a90f3837784aa05a9c93cdf1afc4bdfab944f26e924ef8d60093063fe3d1f
SHA512 4ec794914649cb9ae8e194d2254faa43334d898650733c03c1fde96d42cad2c898f00808980310c05dd24e0f7b6b791c1052c74fa0da2bc2229d432aa609822a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-white_scale-200.png

MD5 3706f61b57fc7819c5ee10e2e9bc216c
SHA1 ed6a0fa9a5895ad04a8b6909cd89b3ee1322d38d
SHA256 356544638e33837d6e903f3c38e03d0b068e864cc2700a457aa42ebeeccdd06f
SHA512 d7857aeab0da8480911059e406bd85dbcfd356ba0aeea550fc44f592053fcf4cacc0faa1adaf8c83c4f91b5091270410f3eb3959527f5940085fa77149d69c11

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-white_scale-400.png

MD5 da0780e4d9ce3da8f11b424ab587eedb
SHA1 a8b49e160fffb594b613cc24ba6a8ad9ec254a71
SHA256 9195c995f3a72b88a0e7497ef1c6a2e10c6ba8a3b5c7e02a793e7f3bfb6bda2d
SHA512 53dca353287f8b496c9d72ff5d198a07bd6c24d59040bb2bc7ccef52566cf1ae3de4f29747b16f7766d500a2316b7b54912c622270d0cd950376a2237e93b02e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.scale-150.png

MD5 1ba44cc71200f489ffed2e83918a3160
SHA1 b3d2b8d61223c91d803dbc72b4900f6dc0f38d70
SHA256 d4a16dba610e11cf827019dd79a32312e2da9d822b97b96200b52deaf7f899db
SHA512 721780009f0cf8743e00d03e86242c09927a93b99561bff98b841a88c4579abf1ad98d48e44d5bed74143792697a403ddf9e2d8749fc40414b0be1b971c74085

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.scale-400.png

MD5 fe4fb7aa9c08e6b531eca4c6b2b15828
SHA1 4e081d7c6345fb1de2995efefc67b90fcad70c76
SHA256 31417e5050802908b26c340730219731db5c359ae27f60261e750e4260ff5fbe
SHA512 37039e7a55f07d1f05033759ffe08c55344caea6d23ca9fd4612d5da45d300766d98520d31310a19fbc82ef052ae850358bd7b76a5b43f259399fdde58859208

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.scale-200.png

MD5 7c7201689dc8ff0f095ce9aff764c3b3
SHA1 a9c6e6407b02597cd5691e3057ab0049d057709a
SHA256 e596602dbdf5ba148d9f3cac6f4943fc93d3141afe8d32ad1273537284ad5220
SHA512 87fd32cd0af8562d897c77fa92d96a64557f8e52e513a8ca2cb82543c8eca6533c48b6db2ee530936f0cc2af466fa6c3e9de1fecb035c2c48cfe947eedf8ac69

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\vault.png

MD5 ab976468233536a3f1cf99fe221ae256
SHA1 4d665976e0e75061cff465bec1108c6bf24b06fe
SHA256 051675975d3c1d1c2f9405fd714d0ff632da85b6515cfde7efd4586b32885fa4
SHA512 c80cfef453def63d92fa480025c7c0bf883096ec4b5c31943a4e07b00d5804780877f96035b3eeb0132dfdedf899fa39e7cb5ef63c1674f5d69b4984e0111f69

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.scale-125.png

MD5 fa50b97bfd3a6755d3809dd27198f1ea
SHA1 bcb78947aaf227c4f291bee93e3c1a64a4410e1b
SHA256 b4d0fdb3e633ae44e5ef3a2cbd07133a769c739e71bb7eb6fdc52a93553fe689
SHA512 3bcb6fb9b9bd1635d9f1d74d07038c7a551e2c0e5c2515cda2f380f985aa7d930bb543e493423715557884a8f9a1e394b39b7d5dbf67538aa29bfcfe0b055d6a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.png

MD5 185c0fed630b215f22a800d49bd1f449
SHA1 17380675ec0f35de43e5927ddfa86154f1574c67
SHA256 561ca42a1519c230756e7dc551329da441e6e7789f6156f7ac515be094b1ca83
SHA512 b034afc68d6b0846b5546e1b29847bbd9b4c041e15c2bb5ff61e0129c798c871a78241e1dd263bd0182a781fb192cb9b621d978fa4090c519e1683d6568998d4

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-white_scale-150.png

MD5 c16f5664f04456e3be99b838cbdf237d
SHA1 279a4f8fe360ee74609d1bb069472dedfe484237
SHA256 266019879888a5c9d275a6e56c86b9281fa0232b4b5a5c8f7a72d34196e3c593
SHA512 c532b0adb11dc9f0d2e117b796483da746f8d23c95810d0818672122aec05fa51c608f45ee26703d374fabb5e98f4a8fe7329c531547e8255cd12a49d7524573

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-white_scale-125.png

MD5 ed607d0afe0c2c4664a4c96b26810a9d
SHA1 2dbde2f46c9638fbed3a1d8640a482a55d89d403
SHA256 34599c2249279d48d3da628ece3a080b81529768c33f9c35b4c9cac730b40270
SHA512 ea49fe368bf76f100178be6731fde8ef15d6a52c7aeaf0bc1a6b5e3e88e84d7deb5c68af18501db13606f3047d891947c61a8d37e54eee6df3b8eb5f86de5363

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-black_scale-400.png

MD5 bc5b741c439190cc8716e10717ae2590
SHA1 d3dc7ed9a1cf94d5fd71efa91b0754f708ebbc4a
SHA256 ba6353451658887bb758b97687d5cef9e5f475cd1d997dbe43b591e80e1c32bd
SHA512 c39fdc9d854d7d51fa3e99728708bfee36b2336f5a420bac07fc451ef6515e587af8007839c3583de6138042f1d2775931a7a009f152b62e5bd0b6f4621d411e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\TinyTile.contrast-black_scale-200.png

MD5 2f8686fb8b5ddbb37ba7aa0b7b8854a6
SHA1 4c3b21f8eb9f8ae111fc66df451889ed4afc8ae4
SHA256 9319fc5f163cbc9698c3c8618391341784ba450b847bf34cb50d9a6f18cdf8ca
SHA512 3cdb34802667be547dc7007fdce8608b49a687a3ec9d3071b023a4f1f3e19896d09bdc46e19b86af7f690a42246ec7fa46a54bcaaab062e40f4542ce70b44f80

C:\Program Files (x86)\Dropbox\Client\212.4.5767\Assets\web.png

MD5 e623b18c05cef08bb6e03156ce692873
SHA1 9cb00fb89329c12787b9a5592a8ce99494aed80c
SHA256 9871614ac39353ee111c07526131c473d10a556c5a91e9594f5a4c340078e1e4
SHA512 01d08c566dc34dc0a3642dc7a4363d8ea6cba02cd97d6ead502a7dcc9132770d42645fe1c5c427e8fcde6cef3cd6f2aff2d520931425bbf2b3cd9d5cfc585e4d

C:\Program Files (x86)\Dropbox\Client\212.4.5767\driver_amd64\dbx-canary.sys

MD5 13deed6a11f54fdb082fac9906b9866d
SHA1 3335bc66dded29afd8c7a688665833f23c856e69
SHA256 4269061949da67e35b2df4c13afdcc7bf7406366d199ac25d7a70393b2af9b5c
SHA512 0094dc055e332b758e5badeb7d568195189543c5e689e28c5a673e921cb0d662ab973215e3df24129c000d0b100130f12ca52b91d8791c748667332078d63dcf

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 4acf8fd5345ff7924db87a909b1be28b
SHA1 0c265b057287ef5d2ac003ce8a3aa56dbb8f5c58
SHA256 215ac170ddc8d7ad810403656f55f3f2ceade5e81904308bb6db9580bb564b0a
SHA512 13d69917d431d611d1fbb4bcbe993b45b29b6fa0a31e2e4721f62adc3288de9fc70d643c370d4a22af1b8b0ebf52e86568422ed96d1c54edcb1edae12ce74565

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\dropboxstatus-connecting.png

MD5 4e2beab0f331879bbb4d7a69d7491bf9
SHA1 b37041af8b5f508314d1f0c38ada1449ecac1d4e
SHA256 4879e1e5feb9c2aa2582bd6669d848209f04f9e4e86717fde6266f37782d4fd3
SHA512 d56517e54297143291248c3d31a140d0babe378fb4776996a253142bd7240fb6b3015090ca26139ba67813aa3a93adbe6908f7a28f53159a0ed416eabba8e44b

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 17c471f2904275b0b1087db9ffca79c3
SHA1 4e0e2ca739b6834e43178cfdf6ff877b3fb20d18
SHA256 68c05fb5b39ba1068e39d153253a9ecd1b15ee0e0573725eecb76eecd5d30c95
SHA512 ad7aecceed872dd1f41b738bc014aec13d1865b32169c52d4dfbad8c69714f59b2bfce8ae1f784b81bab5e9299b48d1a5d3f08f8da459ba92a383085ee6f0b7a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 b5ae020290b8f1169a8d6fb49cc12a83
SHA1 81accb4af38449490088b986dedb645dfb2cde62
SHA256 ba29d0e510004171e69dc56faedbc3f2ccc6972d569835acca6c2c13e98c3471
SHA512 71b12695c25d156fa2bbec60d40b44bbe4ce6f6a7283f1447fbde3505e90ba16b3deb2bfed61a049b2cacc7721548b9c056f927d6706ad3587046e1af09c0c05

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 6987d9f94f2dc1693540543e43f5b630
SHA1 9f114dda8eb2528c2a2269fb6e35771d44746261
SHA256 e5c20664f6c1c24477af32a1f69420c4f5b5ec96e4c3426ca232101d2bdf807c
SHA512 2e4b8aec4fc7eb5e6b6fdd5386844a4920cebb73f4ee0bbf39d5a0212c18d93f6873667d35926fe88ab4677093c47ef66646ad01f245c1f1f2cbf4300440d011

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 23c649977a5fee0ec876582bf89ae8dc
SHA1 e15abed432ab9b9687045f4d36bf3c63a66c150f
SHA256 7322a0ed70b4ee98b15da5c7ac30082580bffc0c6b4ebee9722f049f39c511ad
SHA512 10888038c5d85c112bf126a00f0dfd5254b4b21d4abf480194ec9770be816bc83607d2cda33bd5892df0624b21641ffd3c2935f34b636d55dc6666fcc3e6eb20

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 de1650d0067103210e0cfcef396265c5
SHA1 bfc60df6b11c260fe7f182642970c25c535fe8ef
SHA256 246541e42d74e337bf93492da61e244d15a724cb77e12d4ae6ac81c5e3b76827
SHA512 a4d3c5a53025bad607329f6c91f61ec8816872e581b2edffbeb71cf02a71f09f678ed145baa75bf2513cf72bbe6e35aaad08078ab171c2273068cdb6e4d8556f

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 d1984b5d3a0fc6ad3c2aee784ed800d5
SHA1 2b50e75319f33c1f8d38a6eec4516cac9d063832
SHA256 e21391160f1142cc12eba0cc667f2fbff2f0905b82855385ed9f0c79b3413ef6
SHA512 79181ad7d41d281575501c8ac02c3edd1fb1e6b2b0cb32747492c8b81c762174e1bfef02e8219ed0e43109b121a19f9590b7646aa66adb4d41ad6cad9da0768c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 91ffaacb1fe0737e0e67141caeb3c8de
SHA1 c5d093cf65235c92eaed5160eb4f3c4ad3a362bb
SHA256 640148ecad930799f19273e6e703689a32be19dc900172f899f6831e551d605d
SHA512 f2f257a557bd6bfd46d6d8158c2b674b8611ce9f5e959fc9891e4f030869537e57d1aa0c01cf3b2250526247c7a37b9feed45e227b38825979aa76e92d05d494

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 739525d5dd75193d275ccb571e59f1fc
SHA1 2992ff963956e6af22b7576e43afc674d88537da
SHA256 8ea78c2b2f5f50640ee0cdbcbf32ff61c95d1cca383e2858419edb9482c2cb3e
SHA512 1959f6293f7347b4da5b43a85f3479c03f50cb0d5af4a331b4732cdb643d4cec70289cc5158621bfabff2915193266f214d47cfb51220e5dafd4d6427e77e318

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\dropboxstatus-idle.png

MD5 d35744dd6ad8ac0704116feeb84b2b0a
SHA1 95ff79936c2712d5f7b7713eb250b1aaca1708c3
SHA256 a098e050f067bd14de41d0c3773b348b43621130b17340249dc331f441fe385a
SHA512 ee50e2bb0ac2f83e665bcc70e19893dbbe76cd9bbd036a2c34c39f62151f6a33fbc89838d755e5fcfca6037033efce29d4d2cb6cc1ae10206479cf494452c646

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 8635f183667ba2bcd0ebbf588c72b834
SHA1 f7641a919452bda1079d6983ebace073d774139a
SHA256 828e270c7b2437e179f8ea7c89066610765b23423dd5b9bec748c59f0b90e53f
SHA512 adb6f5e25588aa0677cd245f94a8ed67e027a2b880c36b9ddf977098e321202597eac683cbf3508141f95c8d10b90a45828e346974a6f0329068214ba1e3e5e8

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 49aa3ec5664e06ca9c9b07ded38994f7
SHA1 5eb9dc15a4bde4cafb985b25423753e1b31e8b4e
SHA256 4c9b5626742949f90521ea0721c22f6f2778d8f4f0032baa1ca5fdbe538f1270
SHA512 36fe33e1ce36e80aaab02725a88bd9f83d1bbbb044ba4d9718550d814e3d2db301aeb222140d164d525963d1636cf066fd27789a5387dff5dcd47ce46dfdaf70

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\dark\[email protected]

MD5 cb1f2b8dc7585eea88303031479c8534
SHA1 66c76b1bd2695e0faf04c8ee05c7c95047f95225
SHA256 f0c856cb962fda54d1b297c6999078d42bdf5d270d9da265a754146442b6e0d7
SHA512 36d16ab9519192a3c5168d61d34da0567e2fd8f11abe789c6300d01a8178d156347eba35b02e928f0654ffdac7cf79b73ab0c07c592f84f37c18244916afddc6

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\dropboxstatus-connecting.png

MD5 237563916d267784fa30c2d693e216c6
SHA1 6205f354fede747340353b71cf21a420c9684fbe
SHA256 89a854d6c3c9046621f002e68bf62191396c5d3ce868bb7226d6e2baf21d5524
SHA512 5f4eafa95d08c4fe97b6f59dc6a6d3284bfeb1ceb05b9f95c6b16c8eb1cd92e8e324eefb12905a1a25728e866daa414eaacf2d25eedb677a89872ab426d16c2e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 11a4c130fa6a509c89d59c1901beb498
SHA1 eab02b91c690fb49ded5a53eb8ca7ac1224288a2
SHA256 2aee831a42ce8f755a9108124b2893c2501f5dcb6c9d286b0065e100842a2681
SHA512 3e39bdbc5aab7b6ef9e21453f250e00e36047be72ee321aaed1712b618a27911cfd935094c94e898c6768e77327148dea34d4dd08f8e7cc194a75fe0bb5c9d2c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 c06606550868e1b089ca909fdfccc0c4
SHA1 05229956b56cab612455004b5f469ede8760e0b4
SHA256 777e430dac2785081a899329d2a76a64a174ef57683315ab4c80d3a13a3cd19e
SHA512 92cc1028de4c30f3662ae8b5d7e48869aeea77a492a439bfc29786926c54dee6921ca21f74600fd8f3018b2b166135f7bf074f65520b9244eea4219d420385b1

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 1d75093fb52cda21b8610cd20d07789b
SHA1 6c929aafdce92f4bd3fde42be204c02028dcccde
SHA256 42760b6c8ad45cd02f3f7276e721e5a623d720fdb0af8c8ce330f5cc0d949de7
SHA512 773f27e96237265f20b670e99b35a4007425e3f2382f676ac348e44bf6dfed1f0567444e92db4447184482ac54e72d25a314520ef9ec437d4c6fd15270cb76fd

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 c821cf48689bcfe5cf1c4a6b37eb2ec2
SHA1 73d2261037078785d4fb5f3ad5b3d222b5a871bb
SHA256 88f5ad501b3eda190391e39852edfcaa62ccda155d97ac9906f5c24590b984a3
SHA512 1ae2b2643be148046759354d97004ae761e27231cece903179d583fcadcae865a76e040bcfe3e90dc7e9a2bc810ca06a0f2aae68aa2d26480a155527a42bc351

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 db1ede69b700d325fdb6a7e65338c8dc
SHA1 d1516db248b58773f77623be1de8b6206a7e9cbc
SHA256 87b95507e1395c363e814644723305aedb62bd989631e51a7dce03d36f820fc1
SHA512 77b3cf71bff9fd1636729c23a2a8098b18475e1cd9b0fba360580118e94054b7c268283c6f9f499a00cf7ff6cd788511f211061e0fca31d8a1abbab9079b89ab

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\dropboxstatus-idle.png

MD5 644eb1ac4b4b9d254c1a5d6ec82ffbc5
SHA1 25e1f939e72fc163457d636f653ae56b09f84303
SHA256 bbaeba414da07b9a42d7e16f581dffc4dc2b0553dde5d0a799271c0b4b41b67d
SHA512 50a15e01e94a82b43986ed5fd5a1825053c0820cd7dc3f66737f8746ebadeb388f33be111596f4464cdb540af4ff06b278966b283e40616ae8f65bae4d4b3351

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 9dc56aa5282b6549dc5099a08c4ab435
SHA1 1c660f253fa8961ee61e363da46b6bc3f1ca1cdd
SHA256 363e40480a84ba4de25e01104f27d834acc0e5bd986a2d9a5e8f6e931eb960e4
SHA512 2f59ca252f90631733de6949274588f7889fbc2b41d4f7efcdacf2352d78dd0e875552815a2053b36b8d05314de9924a3e627fee10ec13dd575852f32e4a3d94

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 dcd193819b7f8012f88f5f77c0421ff6
SHA1 d6e6a26c238c8a6827057a63b8e89500e3d76190
SHA256 fa39b29d9edc9a32c3d9d54323cdeab6d95018d86404baeff00cc18b55640de5
SHA512 8c79812d9bf72fa4b390a75eb321ece9f7834764a707193c4511fa4b1f799a836dcb4d9629f14fd84b23a5ff85872d37d40dc798f8b46fb90e985a2afa7c6138

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 b15afc2846f85cfc705f488109426343
SHA1 56e76002eaab3cad00795d7c2bb2116fd12db4ee
SHA256 460264cf30e2e7cf6ef1e6fa5fc49af4ea2d5fc62e1abe718e2a208e26316b75
SHA512 c311ee5a9093e6412991d65537f96f5fd8d503558f8a9def1e2010a5c3066fc90f6a74e6646f3ef48916bc6ec9caf4eaa841a9a0db652a0f78b38e71b03f62bb

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 4d59de08d6bbb92e704fceba9a0b27ae
SHA1 2c57d34839086d4e4fea47eccf0a9dc22765aefe
SHA256 a759f2b68a2bb7ad75c8460fd44cf27f77d9447b4efcd65c7a62cfd27f575a17
SHA512 fc0150da5dcecb96eee232d0400b131a655c9f4537e8caa4377883a9fb0b5d67fc3c9dc2fbfe4cf54ece6c3bcfb7dcb1caab8322da90ffa1a4ac84a498d1689c

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\legacy\[email protected]

MD5 7a698b524a6c7c61ccef4bfbae8a6598
SHA1 273c3064ba228be38403d41b6f50a2c35546102d
SHA256 c9563283ec6dad1b3da15561e94ffb36e97700f9444d7a908a5ca5b7f81b0be0
SHA512 b2d6f0d7fe7f54e5f58405292f732a17164caca86c0f670f62e4b02908c2e5e3d4ba914b4f76666adca7332d80d61e1e00dff73c574af5b6b844f3f7444876ce

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\dropboxstatus-connecting.png

MD5 4de81f2c9583da55ce4879b8967a2205
SHA1 931159895034e7d52f24b904c765f3e02e557e34
SHA256 ef84388ed457a1ece5f3dadd768bee7149773be4db65e31906168f3d397244e7
SHA512 c9fe703b608952d2a109c3f89abd9ec75e47302845d1376a82affa5f1ac95301b0860fe86fa22e2e686290bcb607a0cf6cfd3fdd8bbb88fb7be656f45be4c500

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 06c0530efe8f38df789cf9b8d86e1ed5
SHA1 9d6dd15f10be953bfc4d460686e16e2ec96ad466
SHA256 80b8c11dc30aef1b9c0b469af47fe8ff83f4b6b68e3874b2f18ec8716e1f8340
SHA512 56034c0e34a52f3512e98c971e6668d218c7d2d6c3c2b28e871203fa72df009c1a952d79a526a9a0844ad076eec48df73f6c3c4d53d5a90ff661b5559fb58bff

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 dad78ca19f19c2b578e3c700c0aacc04
SHA1 5a3817de31c7d7d88e5c63a6e22f675b1935f4d5
SHA256 8e37becbb06509835ae09ef704b6c62208ecd6e80f280d47d68799207e086e65
SHA512 1065218f5f6a1b1719b06a797b15ed8c84825fbf0d9f87294920d9c4affa3fb27236861d87e68859abfe698c140df78a2b11aa611cf914d9369e4300aceaeba8

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 032f6ba2afb9f925e97f4e815d6b6b01
SHA1 278fc1fa6088200fd8711882d127f7f7cc10ecc0
SHA256 915f1777e60d5ad2b9546ad03f34157b70f3d8ad1607e5b87c111be4692b054c
SHA512 e77815dc3cef8e64bfed4577023599b683c9e9136d3ad1a2b7957698aad00e118fb5b0e98449068777f76e8ab8c60bc74fdfe103b555ed104437c805c83730c1

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 41b7ea9ae6461f316663b4ec1fab0e2b
SHA1 39a515a1b208b505c0d7291b700966dc878869a3
SHA256 4f2be4041a2866d83856af99185c920353a3e6bd7c3a4b19da52673d5cae515c
SHA512 6ad83746ae1ee43ae46f448f88b74793a781110e9b27a6019a5e5582d1e57d89b9a3b44108e2b0bf02b8a900413c56f6592ef983980c056b06e1d321b4320d4b

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 4c6de1dcf063b8dd65ddec5831e7877a
SHA1 a092a3aa8f802191cc9c9e04daff654ed748116c
SHA256 5236c151f310555761abab2296c2130cfc9d3af072c9e88917227350f69225c6
SHA512 e51f5d8fdfe799ed956454f3f52eacfe622eef8702cad0fa908754d43e60e0a83a1073dc7cc0755c259c4d2d24e75688519d8941c353e2fe2bea6b43ecdfbb72

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 1636354d176ce21aacace627b85a8e4c
SHA1 65607bbc297dacc2619bb60d2fd7fd08822dc155
SHA256 c64ddc1326f394a08eab8f98ab502dd648f0b269d9807ed7e64ff6ee4d9e201c
SHA512 b5fbc29861bd970c05c8c05ab30092d40355c314b4edb8f9df95f1a3c348127ca62a43759edcffc55a400617f790823cb51f10f6d87bd9ca8d47a5d2b87ea0dc

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\dropboxstatus-idle.png

MD5 90dc2f1449cc1d87313dc13f2bb7c7ff
SHA1 7820e2190dd088a2f100da14f465239f9ee2b7f7
SHA256 981b9ff92e28c83e9e3b43e45bf51b1a2f7dd2242837681f4a71784d9a60057d
SHA512 34f27affae4e48171b21ae373aa71c9bbfeb2b33006cba8d531ff845a8647a5f375cfd2c556e08dc8f87b87fb504da429a6686537237c5eb13f053fc8a9b291a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 aa353862800a3249f786c21e6369adaa
SHA1 df3ceac047e78c849a3ecfaacc680b389c3d9ff6
SHA256 fd5df7a65010498b37a02a14b9604410bafc98d546957cfdefa3e1b9a761882c
SHA512 7d478c5c587281ffd286b04a0b6b7ff39c552f5b429cd2ba4d332f497e3819ec49c01e03fd459af27f806c677b0e0005a4fe93c9d8bb295818dfdda772163f0a

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 6551c66b0144452d9fad63fb519e021a
SHA1 e4d91ea4859e07a76f133e746c970afe7a9c1f2d
SHA256 d7593e7752ad786454809cad2a3cf0263a1f4946155026213af90a115807871f
SHA512 be36029528657be82560e1ec06ac816d2366a59f0435069afadc0749210e3e12f252b2a3c1ad9a073747ef1003705a3dc5713ac8c2acd6cf813421235bf4c06e

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 d556137fb2c3beb248e4917da166a034
SHA1 f76b2be4e7a134b67b3e42d839d3baa2b9d65a70
SHA256 017c764d5785aecd98943d90b1a60acc662424de66b19f0fb259551814a084b9
SHA512 a15a9aeba834973f8857f2bf7a0f01eb1fe2676147d7f92b0fe8c4b1079c4441db15ca091cc8631478ca664643cc20d190c4ff0c411acd8351e18b2b87db1c98

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 b81ea1fd711a1c73988eb77bc313c71a
SHA1 c88bd945cb725ff9343adbd28180ee6009b7b3f9
SHA256 0714ff4682d950b78e4f7135aa41eee4bf14e3be769f3ec71742474321654533
SHA512 e8fc5198cb01a6a00f5b70057cdd6252df7f92df02502fc1a5210666414e6d15fd09adb938c5a88bde753b3f86797eacf8ca1d69e393e7744555e68b03ccaf53

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 59bca0e267bb6c1c9f83f6c99fac19d7
SHA1 dd74ad15ddca3198a18442955f33b16604d8b600
SHA256 6baa74141bf56a5322cd41415b9756686f6acea7b03b23addbdc4ba52678956b
SHA512 3b59c006ee83929066aacee3e6733d9e82d4bc1d5de30a03e67b2062534c4a7246c7546791a434574891bd3e9205a18f2ddf802661bf15977e26098cac529add

C:\Program Files (x86)\Dropbox\Client\212.4.5767\images\03_Tray_Icon\win\light\[email protected]

MD5 74095d179554376043bf47379f1159dc
SHA1 0a100f702f12f3422954cd461dca426b843df822
SHA256 7561f3ab28686e7aed1899b06fb49510c596597470d210b07a6d7c275e0f41b9
SHA512 30190867d0c1e1a1822c001ffedd2bf76d4506d7497886ada1cac5a8345211e0ad083301fa534e663c74df324a46120d065c009b6f56e5eb24d730e5b5a1c9f4

C:\Program Files (x86)\Dropbox\Client\PackageAssets\DropboxExt.77.0.dll

MD5 60a0acf276188236ebfd5df02c0583d7
SHA1 73240240c867e175130d743dff8890c39536d3e3
SHA256 5bc71c0f45c3d7ff5ded2bffcfdf0f8dce41db537b63172b7b07208adc966690
SHA512 0817fb3b9dc5855fb0c3d51c9c7cf144b50cf567024e17a78a2e8f21f33d8aab91ae7ee141a474ce5531386e93dac35ce10d78a73ebff71596a815c4c27512b9

C:\Program Files (x86)\Dropbox\Client\PackageAssets\DropboxExt64.77.0.dll

MD5 1292065aa87e0e7bd243e0604dba3f3e
SHA1 985705d84c3f1dd4f1fc3fba41a1de9ab05c1ab8
SHA256 3fbb2319af46ac9a52389ac235506bf7903cf2c2b10c6275133317ede9ec7769
SHA512 21bc20f0928d61fcbbd6a3d602049c8ca764ed4645c4978b3c8f0b2c13b4a11d4baec9c368d664c3b2a06804a7ee5807f1215bf6ad927a6434d23b20fac3bc97

C:\Program Files (x86)\Dropbox\Client\qt.conf

MD5 acb46fe25d71bd4da1d562919d051b3a
SHA1 23e3e2a7e1a23dbaa18b3da3c887a75b12eb54ef
SHA256 3a9adba0aa24dc18d377832961b013dace71c4c3895a5118ed7efb64ad730615
SHA512 b57c71ba91b3a1fa77d3fa8791b3df1e2a595f2bee3b4d3beb53210b5a612dd43f6da13074fba8fc8191cf78119e5c9c5aad271d1194c1987cad4a21333e9248

C:\Program Files (x86)\Dropbox\Client\DropboxUninstaller.exe

MD5 724cb47a5be212cb143be661fa14d037
SHA1 3af0ebc13846a955b9644fae499f77a157274f08
SHA256 c73cfffb8747ae56afe7e34adb16a20890a31773bb485d99210e7822f2fae1c8
SHA512 74182f84a03aeaa3c5bbdb88fd28a2a48aca82ccecacf183c4b16399a969b59f8c4c5622ac4d47a3c8f7f26fd8e8a73bed72d0ccd1b2aee551467edb5b2b194f

C:\Program Files (x86)\Dropbox\Client\Dropbox.VisualElementsManifest.xml

MD5 5d83708ad851b5df47465920ee05b4c4
SHA1 7e06d4f52e7472a7c0390999e2b5444e3d47db6a
SHA256 334ce9a1c38bbefb6c0283c2b2d5e1760a18fc5915605089be720c59fcc7e7f5
SHA512 e0bc634d24ca0162e547eab330c4b6d7939a1dff54e7e11a05fbfff6f57dc43780a2dec56ab9f2036332e471e542106d15b80ce36965d0ab6dc679a2867b204d

C:\Program Files (x86)\Dropbox\Client\resources.pri

MD5 0db39f94c2a1b96c0a9094898b7a9918
SHA1 25ecac8e81a255de21c24ada44acd6641bb26746
SHA256 3b00e65d9224fed0303b28b022cf4cbc1b6b6c638f58a65f2886d0f3147ce8e7
SHA512 d54d87a5ac7af76ad43deac397b7300035db3ddd29e9909ce0d3abc07e43ae3af61a51589770fd1b7c039a561310be8f64921c392d5a80df34409b1931f30cff

C:\Program Files (x86)\Dropbox\Client\PackageAssets\resources.pri

MD5 c1d85042aa4ada41f5c350ef2b97fccd
SHA1 f7439f0a13802ff42c37b41a545f5038a495ab27
SHA256 44d17a201fc1c3745a8bc8337a4008b68edbec069af6074db22195fc6c346517
SHA512 7ead14960d3430be10f60841e4c0d35cecb16ad26326fadc43f8995f0731ebf093d2f23926ddbfd8802ce79a8008c7a27e915d5634e836c3cc189d7d107acb1a

C:\Program Files (x86)\Dropbox\Client\PackageAssets\Dropbox.msix

MD5 df36d2012668d08142bf35bb9b24aafa
SHA1 caf72063ed9ecd282318082dbe8125e2f7888a68
SHA256 0beb44dc3d91d4b88be413872b3bfc84f044dbca0a0f87487feeab251e392619
SHA512 a0bb0a9883bb44e38e8753a3e60c5de9100bb3df3c3a0b26f65336793b7f169694706c38f9c4550dc3dcaecd5be685cb7313c11afbeac0757cad790a56667da6

C:\Program Files (x86)\Dropbox\Client\212.4.5767\DropboxUpdateClient.exe

MD5 4ebc04464c9f962709b9e87ecfb977f3
SHA1 a7e45128e0abceba0efb5652032e1594bfbcce18
SHA256 352b6474dd6573f564e1ab9a20ad147ff950a3543ff8ef858493a13a70f27c02
SHA512 988cd44a85ec5131a99e745ac149f12f047c46ce254b2ed1067fe78a9fd28cd09c58bf506912ed1375a760f41a52d93498b5c31487cd61533aace7b0a8c9efa9

C:\Windows\System32\SET994B.tmp

MD5 8c0631bf0449c7bacb851fe696481911
SHA1 8792f100995b2e81f2612fc3faede772d2dfc1bb
SHA256 4c95bb59380e8037887f65f25042524f78b0f39ac1ce0876235f9c9259cef401
SHA512 c7bd044e41d7b42f1b43d403a7ca1c63648f70bf71180b476adec5e1f420d3c0b93bc64aefb1f2c540a05c941899d9f5f4ee4815cd1f493708c7d10b6eebf680

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk~RFe59adab.TMP

MD5 31bebe4c2c4b2d8787132efc4d785178
SHA1 ffa7fc18a29a0c9c5730ea06ba00c6cb012590ee
SHA256 054f1adde80644fb88bd691030b08f28eb160a0c02fee14ba8304c1f0b69c892
SHA512 7facf30b4191ac649105d40d519c3375b31af78081a99a26482f38324b7b2b27ec56cb9486f5e78b6ca8c1cbf1b86c8c3f25162148d8f358ac271fae47e713b6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk

MD5 b417ccf8c8d17269f0b72d7a1f337191
SHA1 97ee8e96ea5a14ed2f19903ca85fa1bb26f03b42
SHA256 7c32c7ec71e3181b865abaa2a175c8a7292a5be3c6b9ae745393e6341326553f
SHA512 29f5ca953fdfa990dcb4fac17123f85bbbb2337098e49a368c7dc19d2a4f751606fd95a910fb6efe780cd39af8d0b83ccfd6324e6255c145c8108c87d6603c56

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_l0hg2rjr.5mw.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/316-5159-0x00000267C9680000-0x00000267C96A2000-memory.dmp

memory/316-5164-0x00000267C97F0000-0x00000267C9806000-memory.dmp

memory/316-5165-0x00000267C97E0000-0x00000267C97EA000-memory.dmp

memory/316-5166-0x00000267C9880000-0x00000267C98A6000-memory.dmp

memory/4712-5178-0x0000029AE64B0000-0x0000029AE64D4000-memory.dmp

C:\Windows\Logs\DISM\dism.log

MD5 db4b4620768a592c9fb605ad197be00a
SHA1 2fbcf0ff4743d2e6f74b2aa5afc7c811532a1191
SHA256 13eb9501a5b785c6df15e2dc10430b9a677228c8307575b30f80a78f5ce4132c
SHA512 1e7a0cff6cadc105279ffff35c40e0e5f288f80babc434f49e2af9156205e2259e31afb40a4be4b9ccc799228aebe993ff3ecced9151e5190428ed271507c72c